last executing test programs: 17.536470475s ago: executing program 1 (id=756): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000c2ddb9d909002161f6b974268543450d2a301a79fb5594ba3bb043347159a93cd68984ee8b5a479d671f0f598c65f67f330e18c6f3dadb56872410d840f8cdda0c1c01913394a0c59c7b99546460300ed3f653430c73c8d39b0bded9b16b58d9a20d164f9fdca7d5f63d29c4d37168bc4b93af0512"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) syz_usb_ep_write(r0, 0x6, 0xec, &(0x7f00000004c0)="77d9487c678c599211ed37f856b8c500ed6f92f7acd6a48da0b578b363e282a54ecee83363b4b491f2c2b10a2e9be0b697faf89954bb89528f5abc5ea0cab2762bcb8de836b5b64757677609c713888396e5dfb851d52fca85ed629833fee79cd6d9f8d268e9756ca0c457dae435bbf49b8b4f1b00e268d3c1a0fd3d21a5c7cee68c9364977d9df279059c31be4c876bdf90780124097b3ec0e280e59510157e2c173b52beadd1944b47c0caaafbb41fcebaf804571c2b0da11bf6d37164cb6445d692ae74a84c29b777e55b5e17071822f6657010aa0336fd9dabe38c9fb47e70dad1f894816e7e482b8007") r2 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0xa1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)=""/4096, 0x1000}], &(0x7f0000000340)=[0xffff, 0x6, 0x8f7, 0x9, 0x1, 0xd83a, 0x92ee858, 0xc, 0x1], 0x1}, 0x20) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0x980929, 0x800}) listen(r3, 0x8) r6 = accept4(r3, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) listen(r6, 0x4) close(r6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000300)='./cgroup\x00', 0x0, 0x10}, 0x18) 14.510700456s ago: executing program 1 (id=807): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480), 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000022c0)=ANY=[], 0x480}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000080)={0xeeee0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000012c0)={0x0, "14b31b080b67c3d321c2973ec239c613"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240440c4}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.547601047s ago: executing program 1 (id=814): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048c4}, 0x0) 13.345409119s ago: executing program 1 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) mbind(&(0x7f0000275000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x2) 13.345074804s ago: executing program 1 (id=816): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) (async) dup3(r0, r0, 0x80000) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.260568784s ago: executing program 1 (id=817): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x4, 0x500, 0x20363159, 0x1, 0xb, [{}, {0x0, 0xffffffff}, {0x4}, {0x2}, {}, {}, {0xefe}, {0x55b}], 0x4, 0x0, 0x0, 0x0, 0x6}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000100000/0x3000)=nil, 0x3000, 0x1000006, 0x28011, r4, 0x0) write$tun(r4, &(0x7f0000000340)={@val={0x0, 0xd}, @void, @mpls={[{0x40000, 0x0, 0x1}, {0x2}, {0x3, 0x0, 0x1}], @ipv6=@dccp_packet={0xc, 0x6, "92d6ab", 0x166, 0x21, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x33, 0xe, 0x2, 0x7f, 0x0, [@private1, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x1ff}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], {{0x4e24, 0x47, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, "f66c2e", 0x2, "4b4488"}, "ba54f080d05d2049c16e607527f08947cf99e634662965be9a09a8613336f5a8e04773bece5b20c9140b391c84b7ce389123113c0a1295b2cec29c86ff55d086584d580416a0d6341ec32622a4eb6cd172011b4687f5dd4800596e495961dc8bc0ccb6302b5c0d2592bb26ad6deed38211809ba47dae1f891fadb27f22970b587304d89ce812b93c972a24c33cdeb73fc6bb316576b817c9eb619e051eb5b2a160b6544f46d77d495b3de9555e834dae8543e7e63eac94c1740ffb365525cfe42566fe657941"}}}}}, 0x19e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_procfs(r0, &(0x7f0000000040)='attr/fscreate\x00') r5 = syz_open_procfs(0x0, 0x0) writev(r5, &(0x7f00000000c0), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0xa802, 0x0) pivot_root(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) 4.590072097s ago: executing program 2 (id=909): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x121102, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)={0x2, 0x0, [{0xeeef0000, 0x6a, &(0x7f0000000000)=""/106}, {0x8080000, 0x4a, &(0x7f0000000080)=""/74}]}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x700, 0x80, 0x10, 0x9, {{0xb, 0x4, 0x0, 0x4, 0x2c, 0x66, 0x0, 0xf9, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@timestamp_addr={0x44, 0xc, 0x1c, 0x1, 0x5, [{@remote, 0x9}]}, @timestamp_prespec={0x44, 0xc, 0x64, 0x3, 0x0, [{@loopback, 0xfffffff4}]}]}}}}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x516, 0x1ff, 0x0, 'queue1\x00'}) ioperm(0x0, 0x3, 0x4) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000000440)={0x0, 0x1100}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000080)={0x0, 0x86, 0x7f, {0xfffffff8, 0x800}, 0x7, 0x5c3}) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000340)="ecf4c7a9dcc4cf0dbcbd3bc37f898c140f37f9fd6a3e6b62541fd5aacc5c0e5e76a7b159f252da20963350487b29ca9df007e5f4daa1409848fb8625430d8635901ad9cc718c526bac1944e1af8fe86b1b044c8c6e767a672634bc7f6da193976299c6302fa4fe5fc15de2e0ac47610f55e4d8d2dfe08db6da1e85b1715fb87df0cd5191e5f4de3f7170ea0a4468e1266e7463af4cc60808041a221f", 0x9c}, {&(0x7f0000000400)="fd251ca0a329e4ece4fd65e72cbe90cefcd90a23496d6a319dc8684b2c8529386bd2eee1bc51370d4dd638e62684e0c701a2ff2a6aaaca1e015c2161f19d2eaa9aa03cbb037fb09fd3263d4d056bc755de2a209cafa25ea7f0c96f803260ff3ebbd8c52ff139c3e14c2e22b1338dc88793d30e797bfc8291d5964f5b507f2dcbeb727a2806e74dec8a5513b61c514b6f4b43a34abefef2e4f0998ab2ae5f8b5bdb397a2a36189cf9699a9869858056822297e848eabbc134f7f6832e22558c9e834f67c05a05ed97bdae42e87341c2c2655d3b7abcc9006de583b65618448e9a7855bfac2c3c4f4f57b20e481ab5c64dcb74723fc1243e8f2899dac578", 0xfd}, {&(0x7f0000000500)="5646d060a34f45c6441d92991751da1173447e96ff50cd0cf43da6de85e04c5d1ee18323567793a71e3cbdd574406070284222568f635dedc091d9ef4465093fa1d8325467fb1b3b9370b32a448036c0d87bee5017d5d1a459cd0c788a6d13e7d7b73dff78e647aa592e900bb2a50213946199a7ad255068a304e32eda167a92a9240c6623e6b6821a008edda69d9a9153f3", 0x92}, {&(0x7f00000005c0)="3dbd98b4702cf56c99a94e765ffdfa1ce96441e69226c36cd4d06eb345c02bbd72a89c1396361fd5b260f36e175e9125af8bcef1b43147adabe2a0adba48642a98714febdc84ecb5cf4f21380c0e956d0ea3200319d3ffd2420f2b8b7f3ab387ce7ce8975239348b283bfcdde54e3fb04e77a93c41ddbb74073fdbae5a925dce19c9aded78da1206b9e571740d0baec6a34f2cce5220868bcd425bb203b95602370549823cc16f47d3f9dd61f593b33b84419d5f317be434ad4630ad163ce2a02e042340ae92d2173a7d33e6f41b9179fbc1b5a1bfb439371b3b0f", 0xdb}], 0x4, &(0x7f0000000c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x73, [@multicast1, @multicast2, @empty]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x164, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0xf, 0xc5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010100]}, @rr={0x7, 0x23, 0x95, [@multicast2, @broadcast, @rand_addr=0x64010100, @broadcast, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x10}, @multicast2]}, @end, @cipso={0x86, 0x1f, 0x3, [{0x1, 0xa, "f709db45f9fb94e2"}, {0x1, 0xf, "c0fe831350bf3173d60813ce2a"}]}, @cipso={0x86, 0x62, 0x3, [{0x0, 0x9, "e39fdec1f8cfae"}, {0x0, 0x7, "3224aafd01"}, {0x6, 0x3, "9e"}, {0x2, 0x11, "7de17de47c14ccb059c28a40d1f612"}, {0x5, 0x5, "98acfc"}, {0x5, 0xe, "2f3718080a5229d4e6b717de"}, {0x5, 0x6, "a3c6fc09"}, {0x5, 0xd, "9d5a70f61b49699ad02c2a"}, {0x2, 0x12, "f62687ef464dad303a3b7642a01627d4"}]}, @lsrr={0x83, 0x13, 0x3a, [@dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, @loopback, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xec, 0x3, 0x1, [{@multicast1, 0xfffffff8}, {@remote, 0x7}, {@local, 0xcc}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @generic={0x83, 0xd, "aebe9ec4d9da0e5825bdc3"}, @timestamp_addr={0x44, 0x3c, 0x5d, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010101, 0x5adf2e96}, {@rand_addr=0x64010100, 0x8}, {@local, 0xfffffffb}, {@local, 0xffffffa7}, {@remote, 0x4}, {@private=0xa010101, 0x5be1}]}, @ssrr={0x89, 0xf, 0x59, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010102, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2c}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xfe, [@dev={0xac, 0x14, 0x14, 0xb}, @local, @private=0xa010101]}, @end, @rr={0x7, 0x13, 0x8d, [@empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @end, @rr={0x7, 0xb, 0xfa, [@loopback, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x12, "4fb5fa62d674b5f8a1da27e15238562f"}, @timestamp_prespec={0x44, 0x24, 0xc, 0x3, 0xb, [{@rand_addr=0x64010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4}, {@empty, 0x80}, {@multicast2, 0xf5e6}]}]}}}], 0x2a8}, 0x800) 4.437184833s ago: executing program 2 (id=915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) getdents64(r1, &(0x7f00000001c0)=""/153, 0x99) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x61ceab2634353353}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc03064ca, &(0x7f0000000280)={&(0x7f00000001c0)=[r7, r7], &(0x7f0000000240)=[0x7], 0x2, 0x2, 0xb}) socket(0x28, 0x5, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRES16=r11, @ANYBLOB="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", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00002abd7000ffdbdf25120000000a000900000000000000000008003a0000c500000500300001000000"], 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x20000000) 4.322613706s ago: executing program 2 (id=917): openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = accept4$netrom(r0, 0x0, &(0x7f0000000040), 0x800) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x80000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) fcntl$lock(r1, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0x100000000, 0x1, r4}) (async) fcntl$lock(r1, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0x100000000, 0x1, r4}) close_range(r1, r1, 0x2) (async) close_range(r1, r1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000200)="59ae9c0ce02ecf4d060d181a2ee9038812e5bd39c64baf1fba315e636c52ad3305015446809e6b3b380cab89fe06266f386312d4d2e3ded66481d14bc504f9fd6fd2", 0x42, r2}, 0x68) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000300)) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) (async) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000440)=0x2) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x24}}, @GTPA_FAMILY={0x5, 0xd, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008094) write$binfmt_aout(r0, &(0x7f0000000580)={{0x108, 0x2, 0x1, 0x13b, 0x21a, 0x1, 0x35b, 0x5}, "a69a8ee91498b87782d5e27bca72f4928e5e88e786e73b52ee96214d3c8f304bdd6882f17c7d6679f4b4cee41d7ebfe8a3f546809ff5b505af88ad9495ccbfe4000235f5"}, 0x64) (async) write$binfmt_aout(r0, &(0x7f0000000580)={{0x108, 0x2, 0x1, 0x13b, 0x21a, 0x1, 0x35b, 0x5}, "a69a8ee91498b87782d5e27bca72f4928e5e88e786e73b52ee96214d3c8f304bdd6882f17c7d6679f4b4cee41d7ebfe8a3f546809ff5b505af88ad9495ccbfe4000235f5"}, 0x64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x408803, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0xa) r7 = openat$cgroup(r0, &(0x7f0000000640)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x814) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0x4004080) write$P9_RSETATTR(r0, &(0x7f0000000880)={0x7, 0x1b, 0x1}, 0x7) (async) write$P9_RSETATTR(r0, &(0x7f0000000880)={0x7, 0x1b, 0x1}, 0x7) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f00000008c0)) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000900)={0x2b, 0x3, 0x9, 0x4, "9d53dfe5eb4e316e8bd5e627ebc0670051d9f7"}) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000900)={0x2b, 0x3, 0x9, 0x4, "9d53dfe5eb4e316e8bd5e627ebc0670051d9f7"}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000940)={r1}) syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r0) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x8c, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000b80)=0x30) 4.23195084s ago: executing program 2 (id=919): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000380)=0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) mq_open(0x0, 0x42, 0x1f0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000340)=""/57, 0x39, 0x22, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000010000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000000000000008009f0007000000080026006c09"], 0x38}, 0x1, 0x0, 0x0, 0xc814}, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r7, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001500)="173d7c118a841da740cc2162b0fddc2e01ca4f340a562bbba1d105b130fdd5de11a856ced4c53ce9dcba0a8f2b58166e5adad9e70048b888d1450598829a807096aa448f2111753fd644b1cd39ee97bb9a31705b5f367e98551ff478c522793d46a3e0dfdc2ee9cc050375c27ae830a1e29bd9376015ebf2f68e705d9e897f0583bbf332195c9309e1539d5ca250ec085cc8c3abb5b6eabf2189ad0f931f75190a24d7e9953c94a6d090fee63644d6f240698df31c95c0f63177080cb74ea9fa7a6883796e8d18745c3a290005b19feafba32d86c528ffb37199a5fbac38140000", 0xe1}], 0x10000000000000b8, 0x0, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) r9 = dup2(r8, r3) sendfile(r8, r9, &(0x7f0000000440)=0x9, 0x1) syz_clone3(&(0x7f00000002c0)={0x82000000, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x2d}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000000240)=""/29, &(0x7f0000000280)=[0xffffffffffffffff, 0x0], 0x2, {r8}}, 0x58) fcntl$lock(r8, 0x5, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x4c, r10}) 4.023719286s ago: executing program 2 (id=921): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8001, 0x400251}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x1, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = eventfd(0x9) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000140)=r6, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x8, 0x4007, @fd=r1, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) close(r7) ioctl$RTC_UIE_ON(r0, 0x7003) 3.67082487s ago: executing program 2 (id=923): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000007c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x10003, 0x1, 0x3}, 0x20) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) setsockopt$inet6_int(r2, 0x29, 0x57, &(0x7f00000008c0)=0x73, 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004a00004c0064000080019078ac1e0001ac1414404412000000000091e04eebb853bafaf916e90000053490781200183f250000000000fffd0d01080000000000000000000800aa0000000000"], 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000f00)="76e60ae3a18cef8e17fc7d8b221800050000000094b1c8d19f1d641d6a272dbe45974e75c7725a036578a81eaa2bf85cf7005814b8df90f4101f5b7c3ebafafc25da08d753d2cf42da45b535e5b0d7426ba11315c854f14d7aa85cdb321c79b82772d8067f900f259498ea5e31f148212068b9792b5b8a56571aafa0f6dbb55edfcc85743a1cbd33b830717e88aaa53a11f743eb6ccb8f1f944d719dea66ae99e3175e48863257bdd7fc56a71f2bf991ea885695e404ba657396b27b1aafd23e6123885f39f4de6134708a116e1106dd47ff45415aaafefbd43cc9f5841c00"/235, 0xeb) io_setup(0x99, &(0x7f0000000000)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x181001, 0x101) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(r1, 0x0, &(0x7f00000009c0), 0x80000) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r4) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000b40)={0x8c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x900}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24004840}, 0x11) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f00000000c0), 0x0, 0x4, 0x0, 0x3}]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioprio_set$uid(0x3, 0x0, 0x0) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000a00)={'syz', 0x1}, &(0x7f0000000180)="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", 0x5b1, r10) 3.604549015s ago: executing program 32 (id=923): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000007c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x10003, 0x1, 0x3}, 0x20) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) setsockopt$inet6_int(r2, 0x29, 0x57, &(0x7f00000008c0)=0x73, 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004a00004c0064000080019078ac1e0001ac1414404412000000000091e04eebb853bafaf916e90000053490781200183f250000000000fffd0d01080000000000000000000800aa0000000000"], 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000f00)="76e60ae3a18cef8e17fc7d8b221800050000000094b1c8d19f1d641d6a272dbe45974e75c7725a036578a81eaa2bf85cf7005814b8df90f4101f5b7c3ebafafc25da08d753d2cf42da45b535e5b0d7426ba11315c854f14d7aa85cdb321c79b82772d8067f900f259498ea5e31f148212068b9792b5b8a56571aafa0f6dbb55edfcc85743a1cbd33b830717e88aaa53a11f743eb6ccb8f1f944d719dea66ae99e3175e48863257bdd7fc56a71f2bf991ea885695e404ba657396b27b1aafd23e6123885f39f4de6134708a116e1106dd47ff45415aaafefbd43cc9f5841c00"/235, 0xeb) io_setup(0x99, &(0x7f0000000000)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x181001, 0x101) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(r1, 0x0, &(0x7f00000009c0), 0x80000) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r4) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000b40)={0x8c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x900}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24004840}, 0x11) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f00000000c0), 0x0, 0x4, 0x0, 0x3}]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioprio_set$uid(0x3, 0x0, 0x0) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000a00)={'syz', 0x1}, &(0x7f0000000180)="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", 0x5b1, r10) 2.363130357s ago: executing program 0 (id=932): mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYBLOB=',debug=0x0000007,version=9p20\\++},%{!(6,afid=0x000000003f5689cf,nodevmap,fscache,afid=0x0000000000000f9c,msize=0x0', @ANYRESDEC]) r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) creat(&(0x7f0000000000)='./file0\x00', 0x164) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000240)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 2.160015818s ago: executing program 0 (id=935): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0x6, 0x106, 0x8, @buffer={0x0, 0x8d, &(0x7f0000000500)=""/141}, &(0x7f00000005c0)="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", 0x0, 0x2, 0x2, 0x4, 0x0}) (async, rerun: 64) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 2.159470384s ago: executing program 0 (id=936): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x803}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}]}], {0x14}}, 0x60}}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000100)=0x60) read$dsp(r5, &(0x7f00000001c0)=""/95, 0x2) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r6}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r9, r8, 0x80000) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)=r9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x50}, 0x9c) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001180)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fddbdf258c00000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x93ddb44c57957314}, 0x810) 2.159077546s ago: executing program 3 (id=937): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c0000000000000000b6c0e249bd400f0000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000"], 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0xf0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="a6ff03076804268c989e0000a0dc", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x30, 0xffffffffffffffff, 0xd85fe000) r7 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000300)="1aafc38b", &(0x7f0000000340)=""/129, &(0x7f0000000400)="91f0da059f0e7a9f47ee733cdc8485c7ca4eb3f9a2322e2533fca06542fb832bc95c7824f0bc173cb97a1946fa96b18ddac30f46b41090c2162dedeb4039203648ae21f721a2c5024433536b0df9dfa7b8a35c3199ef6cab0fa59e946fa9e2a50db57acfb652f18b3c2a96f470e08bf3f322", &(0x7f0000000580)="8464b9662d295fdf9d1e922acce4ab448b0efd44c216b3609606179e77df49a7a8b0844f2bff3fa45f508b84e3e5d7801cf7f3", 0x4, r3}, 0x38) mmap(&(0x7f0000646000/0x2000)=nil, 0x2000, 0xb635773f07ebbeee, 0x12, r7, 0x0) mkdir(&(0x7f0000000b40)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3']) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) 2.067451941s ago: executing program 3 (id=938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="18bcde86b473ca2ac2f26e4475f493e1ec7f13a06d657c34a8a1c220dd", 0x1d}, {&(0x7f0000000140)="78ffe565d0028b73c131f2ec2ec6c810a3d0fedd1db0d0b465673180c629e1b7bdcceefeb8b6d3d2d6cc0aa08fb9b966eccd4db0621f27b5a8666fc21944303c0379f2a46518cc71d87f9ee360121b3cc864f313749cd23ca613cf07e157dd6687447b1e5385b97b84c6cad2b7a391dcb20c9b9a98e3ea88324cb7070a1534c3e57a8fc6561775709449ddb22cac083e93256f3131deb6d24fac7a956ce6e3ec87a2cf111404b0cf2e27ced065fbba133613d6fe81a423a6d40903cc3bc8b4ffbdb52816d10ce81a4f9c9fb43b946578622b6788915da803", 0xd8}, {&(0x7f0000000300)="01612f3a52a0d2448c1e9d322d6625d474a0b71bebe2887025d9b9c7836e27fad9c71bb0bb189c7ad279d604302485287912a6cb812ee8ed56e56e87543d082e091fb16ffde35e0f888a625f0b4405945ce27ae5374c72894965856af50647079e7fda18d72d3c", 0x67}, {&(0x7f0000000040)="b7ceb30e7e48956dc00cfa7f2e1ab565aac203dbd0cc64d28e87d1718d67e38cf9926929", 0x24}], 0x4, 0x3, 0x4, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x1}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4020800) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000440)=0xfd, 0x4) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, &(0x7f0000000080)=""/160, &(0x7f0000000140)=0xa0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90e46}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x4000090) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ed"}) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r10, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0xfffffe65}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f00000003c0)=0x43) lseek(r9, 0x851, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) (async) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000380)={{r10}, 0xde56, 0x1, 0x7}) (async) r12 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r12, 0xc020660b, 0x0) (async) close_range(r11, 0xffffffffffffffff, 0x0) 1.98422565s ago: executing program 0 (id=939): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0x12) (async) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0x12) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0xf0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) r4 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) (async) r7 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b", 0x21}, {&(0x7f00000002c0)="d95e4e76ae94227cd4806e68a70961121fdbd5c951274027bdb27c8365bc317dc9930c7428fd71bab480e8273f68620ae24ec475b5db3d02f2e54c", 0x3b}, {&(0x7f0000000740)="87ef4187965fe8a64a837749533bf0be0fd00f4e940b9e0d597e59b9f3e48c6e9f6d36f2", 0x24}], 0x3}}], 0x1, 0x20048851) (async) sendmmsg(r7, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b", 0x21}, {&(0x7f00000002c0)="d95e4e76ae94227cd4806e68a70961121fdbd5c951274027bdb27c8365bc317dc9930c7428fd71bab480e8273f68620ae24ec475b5db3d02f2e54c", 0x3b}, {&(0x7f0000000740)="87ef4187965fe8a64a837749533bf0be0fd00f4e940b9e0d597e59b9f3e48c6e9f6d36f2", 0x24}], 0x3}}], 0x1, 0x20048851) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r9 = accept$alg(r8, 0x0, 0x0) readv(r9, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000380)=""/246, 0xf6}], 0x2) sendmmsg$alg(r9, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="9c98d425afe56f214f063263de94ff93031f06039ddcb1d9cf89e039a97c89ebd9", 0x21}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x0) recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) (async) recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') (async) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r10, 0xfffffffffffffffe, 0x0) r11 = semget$private(0x0, 0x4, 0x100) semctl$GETVAL(r11, 0x3, 0xc, 0x0) (async) semctl$GETVAL(r11, 0x3, 0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000fdffff9400000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.842444195s ago: executing program 3 (id=940): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r3 = dup(r2) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x9}}, 0x4000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000240)={0xa20000, 0xd67e, 0x2, r4, 0x0, &(0x7f0000000200)={0xa10001, 0x9, '\x00', @p_u32=&(0x7f00000001c0)=0x8001}}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.8418827s ago: executing program 0 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000300)={0x0, 0xffffffffffffffc4, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x88, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x554}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xc0, 0xfffffff0, 0x1, 0x3]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xec}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x492c, 0x7, 0x6, 0x60, 0x37]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40014}, 0x8000) 396.041254ms ago: executing program 0 (id=942): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xaf33, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3, 0x1}, 0x10) connect$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x3}}, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000140)={0xffff, r0, 0x2}) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = dup(r4) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000580)={0x0, 0x0, 0xd, 0x12, 0x12a, &(0x7f0000000180)="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"}) ftruncate(r2, 0x80000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000005c0)={'wg1\x00'}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600), 0x40, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000640), &(0x7f0000000680)=0x8) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000006c0)=0xcc, 0x1) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18) ppoll(&(0x7f0000000780)=[{r1, 0x400}, {r7, 0x300}, {r2, 0x1080}, {r5}, {r7, 0x8100}, {r2, 0x8}], 0x6, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={[0x7]}, 0x8) read$FUSE(r1, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000500, r8, &(0x7f0000002880)) syz_open_dev$sndpcmp(&(0x7f00000028c0), 0x1, 0x482040) dup(r2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x8010, r4, 0x9de99000) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000002900), 0x4) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000002940)=0x8) fsetxattr(r7, &(0x7f0000002980)=@known='user.syz\x00', &(0x7f00000029c0)='/dev/dlm-monitor\x00', 0x11, 0x2) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a00), 0x480200, 0x0) getpeername$unix(r9, &(0x7f0000002a40)=@abs, &(0x7f0000002ac0)=0x6e) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000002b00)) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000002b40)) setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, &(0x7f0000002b80)=0xffffffff, 0x4) 395.674118ms ago: executing program 3 (id=943): r0 = semget(0x3, 0x2, 0x4a1) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f0000000340)=""/163) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9909bcfa797ed7bbe8ff000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000100)={'trans=virtio,', {[{@dfltuid}]}}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) semget(0x3, 0x2, 0x4a1) (async) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f0000000340)=""/163) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9909bcfa797ed7bbe8ff000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000100)={'trans=virtio,', {[{@dfltuid}]}}) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) (async) 303.297865ms ago: executing program 3 (id=944): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@deltaction={0x150, 0x31, 0x400, 0x70bd2c, 0x25dfdbf4, {}, [@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x419, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x3a, 0x1, 'skbedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe42}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x96}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0xbdd94000) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000780), 0x12) bind$x25(r3, &(0x7f0000000080), 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 0s ago: executing program 3 (id=945): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r5, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [{0x8, 0x4, r6}], {0x10, 0x2}}, 0x2c, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r10, 0x0, &(0x7f0000001b40)) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x3e, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): 4][ T40] audit: type=1400 audit(1759929526.344:62): avc: denied { name_bind } for pid=5922 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.171835][ T40] audit: type=1400 audit(1759929526.364:63): avc: denied { write } for pid=5923 comm="sh" path="pipe:[7238]" dev="pipefs" ino=7238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 54.190636][ T40] audit: type=1400 audit(1759929526.384:64): avc: denied { execute } for pid=5923 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.198405][ T40] audit: type=1400 audit(1759929526.384:65): avc: denied { execute_no_trans } for pid=5923 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 56.312324][ T40] audit: type=1400 audit(1759929528.504:66): avc: denied { mounton } for pid=5923 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.323371][ T5923] cgroup: Unknown subsys name 'net' [ 56.427186][ T5923] cgroup: Unknown subsys name 'cpuset' [ 56.432817][ T5923] cgroup: Unknown subsys name 'rlimit' [ 56.622048][ T5928] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 57.363039][ T5923] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.657676][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 60.657689][ T40] audit: type=1400 audit(1759929532.854:80): avc: denied { execmem } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 60.916186][ T40] audit: type=1400 audit(1759929533.114:81): avc: denied { create } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.924144][ T40] audit: type=1400 audit(1759929533.114:82): avc: denied { read write } for pid=5934 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 60.931898][ T40] audit: type=1400 audit(1759929533.114:83): avc: denied { open } for pid=5934 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 60.941343][ T40] audit: type=1400 audit(1759929533.124:84): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="socket:[7261]" dev="sockfs" ino=7261 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.960950][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.964518][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.967653][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.970177][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.972650][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.975176][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.977987][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.984549][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.989739][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.992084][ T40] audit: type=1400 audit(1759929533.184:85): avc: denied { read } for pid=5935 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.994946][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.996473][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.997680][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.999532][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.999712][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.000076][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.000504][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.000754][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.002850][ T40] audit: type=1400 audit(1759929533.184:86): avc: denied { open } for pid=5935 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.004083][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.011282][ T40] audit: type=1400 audit(1759929533.184:87): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.013167][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.038178][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.279128][ T40] audit: type=1400 audit(1759929533.474:88): avc: denied { module_request } for pid=5944 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.346837][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 61.381795][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 61.416489][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 61.669298][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 61.677064][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.679288][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.682593][ T5944] bridge_slave_0: entered allmulticast mode [ 61.685506][ T5944] bridge_slave_0: entered promiscuous mode [ 61.726798][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.729897][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.732883][ T5948] bridge_slave_0: entered allmulticast mode [ 61.735639][ T5948] bridge_slave_0: entered promiscuous mode [ 61.765749][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.768446][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.771219][ T5944] bridge_slave_1: entered allmulticast mode [ 61.774246][ T5944] bridge_slave_1: entered promiscuous mode [ 61.778155][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.780699][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.783378][ T5935] bridge_slave_0: entered allmulticast mode [ 61.786826][ T5935] bridge_slave_0: entered promiscuous mode [ 61.790363][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.794654][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.797022][ T5948] bridge_slave_1: entered allmulticast mode [ 61.799935][ T5948] bridge_slave_1: entered promiscuous mode [ 61.856461][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.858800][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.861082][ T5935] bridge_slave_1: entered allmulticast mode [ 61.864488][ T5935] bridge_slave_1: entered promiscuous mode [ 61.886106][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.924141][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.950826][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.956789][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.017020][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.023233][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.028552][ T5948] team0: Port device team_slave_0 added [ 62.030751][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.035109][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.038263][ T5934] bridge_slave_0: entered allmulticast mode [ 62.042318][ T5934] bridge_slave_0: entered promiscuous mode [ 62.115678][ T5948] team0: Port device team_slave_1 added [ 62.146122][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.149011][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.151746][ T5934] bridge_slave_1: entered allmulticast mode [ 62.155228][ T5934] bridge_slave_1: entered promiscuous mode [ 62.180047][ T5935] team0: Port device team_slave_0 added [ 62.237645][ T5944] team0: Port device team_slave_0 added [ 62.241724][ T5935] team0: Port device team_slave_1 added [ 62.246579][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.249722][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.260772][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.268951][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.272349][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.282885][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.309430][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.315585][ T5944] team0: Port device team_slave_1 added [ 62.364728][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.404592][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.406732][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.415368][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.470659][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.473827][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.481678][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.486823][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.489695][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.497736][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.501650][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.504021][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.513145][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.569043][ T5934] team0: Port device team_slave_0 added [ 62.587884][ T5934] team0: Port device team_slave_1 added [ 62.593624][ T5948] hsr_slave_0: entered promiscuous mode [ 62.596706][ T5948] hsr_slave_1: entered promiscuous mode [ 62.749410][ T5935] hsr_slave_0: entered promiscuous mode [ 62.751702][ T5935] hsr_slave_1: entered promiscuous mode [ 62.753923][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 62.755739][ T5935] Cannot create hsr debugfs directory [ 62.760432][ T5944] hsr_slave_0: entered promiscuous mode [ 62.764158][ T5944] hsr_slave_1: entered promiscuous mode [ 62.766373][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 62.768383][ T5944] Cannot create hsr debugfs directory [ 62.770532][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.772847][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.780876][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.808871][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.811237][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.819550][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.003657][ T5934] hsr_slave_0: entered promiscuous mode [ 63.006604][ T5934] hsr_slave_1: entered promiscuous mode [ 63.008759][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 63.010578][ T5934] Cannot create hsr debugfs directory [ 63.012784][ T5943] Bluetooth: hci1: command tx timeout [ 63.082398][ T5943] Bluetooth: hci2: command tx timeout [ 63.092209][ T5943] Bluetooth: hci0: command tx timeout [ 63.092219][ T66] Bluetooth: hci3: command tx timeout [ 63.225632][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.232348][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.244791][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.261824][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.306960][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.314252][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.321528][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.331497][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.378393][ T5935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.384210][ T5935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.388651][ T5935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.394346][ T5935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.477853][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.485026][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.491605][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.503685][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.545121][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.580202][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.599493][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.608699][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.621954][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.625797][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.639378][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.641896][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.658933][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.661766][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.666219][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.668711][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.676689][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.716029][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.730986][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.733375][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.745113][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.748135][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.759699][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.792868][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.798549][ T40] audit: type=1400 audit(1759929535.994:89): avc: denied { sys_module } for pid=5948 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.810847][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.814265][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.829971][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.832499][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.917753][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.928015][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.970440][ T5948] veth0_vlan: entered promiscuous mode [ 63.983768][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.987468][ T5948] veth1_vlan: entered promiscuous mode [ 64.005995][ T5944] veth0_vlan: entered promiscuous mode [ 64.024683][ T5944] veth1_vlan: entered promiscuous mode [ 64.046782][ T5948] veth0_macvtap: entered promiscuous mode [ 64.055472][ T5948] veth1_macvtap: entered promiscuous mode [ 64.064795][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.082652][ T5935] veth0_vlan: entered promiscuous mode [ 64.094614][ T5944] veth0_macvtap: entered promiscuous mode [ 64.100458][ T5944] veth1_macvtap: entered promiscuous mode [ 64.111306][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.114845][ T5935] veth1_vlan: entered promiscuous mode [ 64.128460][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.143187][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.163080][ T1147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.168192][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.178021][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.182937][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.198853][ T1147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.232832][ T82] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.237115][ T82] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.241762][ T82] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.246740][ T5935] veth0_macvtap: entered promiscuous mode [ 64.257749][ T5934] veth0_vlan: entered promiscuous mode [ 64.260558][ T82] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.266037][ T5935] veth1_macvtap: entered promiscuous mode [ 64.299795][ T5934] veth1_vlan: entered promiscuous mode [ 64.305356][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.319833][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.341791][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.345086][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.357297][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.367074][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.371120][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.378292][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.386766][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.407619][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.412116][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.415379][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.423591][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.426857][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.439295][ T5934] veth0_macvtap: entered promiscuous mode [ 64.448972][ T5934] veth1_macvtap: entered promiscuous mode [ 64.479524][ T5948] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.486229][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.490727][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.500750][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.536483][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.541957][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.545735][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.555661][ T6026] 9pnet_fd: p9_fd_create_unix (6026): problem connecting socket: éq‰Y’3aK: -91 [ 64.562787][ T82] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.577529][ T82] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.581126][ T82] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.601128][ T82] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.661715][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.665296][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.694019][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.696609][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.856876][ T6048] sock: sock_set_timeout: `syz.3.10' (pid 6048) tries to set negative timeout [ 64.860490][ T6048] Zero length message leads to an empty skb [ 64.930276][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14'. [ 64.969854][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.976390][ T6000] IPVS: starting estimator thread 0... [ 65.015151][ T6068] overlayfs: failed to resolve './file1/file0': -2 [ 65.072349][ T6064] IPVS: using max 35 ests per chain, 84000 per kthread [ 65.092418][ T5943] Bluetooth: hci1: command tx timeout [ 65.144041][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 65.162279][ T5943] Bluetooth: hci0: command tx timeout [ 65.162989][ T66] Bluetooth: hci2: command tx timeout [ 65.163004][ T5946] Bluetooth: hci3: command tx timeout [ 65.189070][ T6090] capability: warning: `syz.0.25' uses 32-bit capabilities (legacy support in use) [ 65.257441][ T6093] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 65.275886][ T6093] kvm: pic: level sensitive irq not supported [ 65.276379][ T6093] kvm: pic: non byte read [ 65.281724][ T6093] kvm: pic: level sensitive irq not supported [ 65.282931][ T6093] kvm: pic: non byte read [ 65.288169][ T6093] kvm: pic: level sensitive irq not supported [ 65.288681][ T6093] kvm: pic: non byte read [ 65.358393][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 65.361566][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 65.399928][ T6115] netlink: 68 bytes leftover after parsing attributes in process `syz.0.33'. [ 65.403314][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 65.404049][ T6018] IPVS: starting estimator thread 0... [ 65.451402][ T6119] syz_tun: entered allmulticast mode [ 65.510590][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'. [ 65.512993][ T6116] IPVS: using max 33 ests per chain, 79200 per kthread [ 65.519277][ T6125] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.522387][ T6125] overlayfs: failed to set xattr on upper [ 65.524400][ T6125] overlayfs: ...falling back to redirect_dir=nofollow. [ 65.526672][ T6125] overlayfs: ...falling back to index=off. [ 65.528559][ T6125] overlayfs: ...falling back to uuid=null. [ 65.530313][ T6125] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 65.573357][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 65.577101][ T6130] netlink: 'syz.2.38': attribute type 10 has an invalid length. [ 65.588159][ T6126] syz_tun (unregistering): left allmulticast mode [ 65.603389][ T6130] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 65.646471][ T6131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6131 comm=syz.0.36 [ 65.650817][ T6131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6131 comm=syz.0.36 [ 65.655676][ T6131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=6131 comm=syz.0.36 [ 65.659850][ T6131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6131 comm=syz.0.36 [ 65.718412][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 65.718427][ T40] audit: type=1400 audit(1759929537.914:208): avc: denied { create } for pid=6132 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.726964][ T40] audit: type=1400 audit(1759929537.924:209): avc: denied { ioctl } for pid=6132 comm="syz.2.39" path="socket:[8772]" dev="sockfs" ino=8772 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.735483][ T40] audit: type=1400 audit(1759929537.924:210): avc: denied { read write } for pid=6132 comm="syz.2.39" dev="sockfs" ino=8772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.805546][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 65.843899][ T40] audit: type=1400 audit(1759929538.044:211): avc: denied { read } for pid=6138 comm="syz.2.42" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 65.853308][ T40] audit: type=1400 audit(1759929538.044:212): avc: denied { open } for pid=6138 comm="syz.2.42" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 65.862986][ T40] audit: type=1400 audit(1759929538.044:213): avc: denied { bind } for pid=6138 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.870907][ T40] audit: type=1400 audit(1759929538.044:214): avc: denied { read } for pid=6138 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.897276][ T40] audit: type=1400 audit(1759929538.094:215): avc: denied { setopt } for pid=6138 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.912938][ T40] audit: type=1400 audit(1759929538.114:216): avc: denied { execmod } for pid=6143 comm="syz.1.43" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 65.923947][ T40] audit: type=1400 audit(1759929538.114:217): avc: denied { execute } for pid=6143 comm="syz.1.43" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 65.953079][ T5946] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 65.954309][ T6146] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 65.960532][ T6146] netlink: 'syz.2.44': attribute type 4 has an invalid length. [ 65.978969][ T6148] process 'syz.1.45' launched '/dev/fd/8' with NULL argv: empty string added [ 66.140737][ T6165] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.162848][ T5946] Bluetooth: hci1: command tx timeout [ 67.242084][ T5946] Bluetooth: hci2: command tx timeout [ 67.242675][ T5943] Bluetooth: hci3: command tx timeout [ 67.243883][ T5946] Bluetooth: hci0: command tx timeout [ 67.399028][ T6227] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.450528][ T6233] loop7: detected capacity change from 0 to 7 [ 67.629420][ T6254] efs: cannot read volume header [ 67.693591][ T6258] netlink: 'syz.1.79': attribute type 15 has an invalid length. [ 67.991302][ T6285] 9p: Unknown uid 00000000004294967295 [ 68.154608][ T6292] syz.2.90 uses obsolete (PF_INET,SOCK_PACKET) [ 68.222128][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.359743][ T6300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6300 comm=syz.0.93 [ 68.396629][ T6302] xt_l2tp: v2 tid > 0xffff: 16462212 [ 68.407517][ T9] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 68.411201][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.415191][ T9] usb 8-1: Product: syz [ 68.416919][ T9] usb 8-1: Manufacturer: syz [ 68.418876][ T9] usb 8-1: SerialNumber: syz [ 68.445857][ T9] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 68.468920][ T6020] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 68.680293][ T29] usb 8-1: USB disconnect, device number 2 [ 68.707707][ T6320] netlink: 'syz.0.99': attribute type 10 has an invalid length. [ 68.711861][ T6320] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 68.717459][ T6320] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 68.723159][ T6320] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 69.000668][ T6352] evm: overlay not supported [ 69.009545][ T6352] overlayfs: failed lookup in lower (newroot/32, name='file1', err=-40): overlapping layers [ 69.047657][ T6357] [U]  [ 69.241151][ T6366] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.245488][ T5943] Bluetooth: hci1: command tx timeout [ 69.265433][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.269721][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.273722][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.281564][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.308543][ T6370] Bluetooth: MGMT ver 1.23 [ 69.323781][ T5943] Bluetooth: hci0: command tx timeout [ 69.324189][ T66] Bluetooth: hci3: command tx timeout [ 69.573006][ T6020] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 69.576070][ T6020] ath9k_htc: Failed to initialize the device [ 69.583185][ T29] usb 8-1: ath9k_htc: USB layer deinitialized [ 69.606735][ T6410] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 69.610656][ T6410] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.619096][ T6410] vhci_hcd vhci_hcd.0: Device attached [ 69.626166][ T6414] netlink: 'syz.2.131': attribute type 39 has an invalid length. [ 69.638094][ T6411] vhci_hcd: connection closed [ 69.641795][ T12] vhci_hcd: stop threads [ 69.647437][ T12] vhci_hcd: release socket [ 69.651168][ T12] vhci_hcd: disconnect device [ 69.668096][ T6428] ip_vti0: entered allmulticast mode [ 69.670590][ T6428] bridge_slave_1: left allmulticast mode [ 69.672648][ T6428] bridge_slave_1: left promiscuous mode [ 69.675352][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.681490][ T6428] bridge_slave_0: left allmulticast mode [ 69.684888][ T6428] bridge_slave_0: left promiscuous mode [ 69.687474][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.197138][ T6449] input: syz0 as /devices/virtual/input/input5 [ 70.222960][ T6450] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.230979][ T6450] block device autoloading is deprecated and will be removed. [ 70.295702][ T6450] nbd: must specify a size in bytes for the device [ 70.307189][ T6458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6458 comm=syz.3.142 [ 70.314440][ T6458] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 70.316996][ T6452] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 70.338338][ T6460] Unsupported ieee802154 address type: 0 [ 70.345855][ T6460] veth1_to_batadv: entered promiscuous mode [ 70.495670][ T6469] ptrace attach of "/syz-executor exec"[5934] was attempted by "/syz-executor exec"[6469] [ 70.659149][ T6477] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 70.737224][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 70.737243][ T40] audit: type=1400 audit(1759929542.934:314): avc: denied { create } for pid=6485 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.755128][ T40] audit: type=1400 audit(1759929542.954:315): avc: denied { read } for pid=6485 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.881188][ T6499] __nla_validate_parse: 15 callbacks suppressed [ 70.881203][ T6499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.155'. [ 70.917076][ T6506] trusted_key: encrypted_key: hex blob is missing [ 70.934249][ T40] audit: type=1400 audit(1759929543.134:316): avc: denied { remount } for pid=6501 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.954100][ T40] audit: type=1400 audit(1759929543.154:317): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.116476][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 71.123003][ T40] audit: type=1400 audit(1759929543.324:318): avc: denied { connect } for pid=6511 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.183108][ T40] audit: type=1400 audit(1759929543.384:319): avc: denied { sqpoll } for pid=6524 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.292605][ T40] audit: type=1400 audit(1759929543.494:320): avc: denied { getopt } for pid=6538 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.310041][ T6542] netlink: 'syz.2.170': attribute type 9 has an invalid length. [ 71.326319][ T6542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6542 comm=syz.2.170 [ 71.380089][ T6546] 9pnet_virtio: no channels available for device ./file0 [ 71.402430][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 71.505625][ T6561] qnx4: no qnx4 filesystem (no root dir). [ 71.565293][ T6564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.178'. [ 71.566033][ T6567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.178'. [ 71.600015][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 71.603455][ T6571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=6571 comm=syz.2.180 [ 71.607793][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 71.610708][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 71.613666][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 71.618250][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 71.622907][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 71.668267][ T6573] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.677250][ T6575] xt_hashlimit: max too large, truncated to 1048576 [ 71.686070][ T6575] netlink: 'syz.3.182': attribute type 3 has an invalid length. [ 71.688874][ T6575] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 71.691427][ T6575] NCSI netlink: No device for ifindex 33022 [ 71.734992][ T6580] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 71.755187][ T40] audit: type=1400 audit(1759929543.954:321): avc: denied { append } for pid=6581 comm="syz.2.184" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.763238][ T40] audit: type=1400 audit(1759929543.954:322): avc: denied { read write } for pid=6581 comm="syz.2.184" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.771245][ T40] audit: type=1400 audit(1759929543.954:323): avc: denied { open } for pid=6581 comm="syz.2.184" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.790010][ T6582] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 71.790016][ T6583] Illegal XDP return value 3599045467 on prog (id 40) dev N/A, expect packet loss! [ 72.044297][ T5946] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 72.048037][ T5946] Bluetooth: hci2: Injecting HCI hardware error event [ 72.053308][ T5946] Bluetooth: hci2: hardware error 0x00 [ 72.313953][ T6611] block nbd0: server does not support multiple connections per device. [ 72.318107][ T6611] block nbd0: shutting down sockets [ 72.327680][ T6625] fuse: Unknown parameter 'E©' [ 72.435494][ T6630] afs: Unknown parameter 'fd' [ 72.646228][ T6647] netlink: 'syz.1.203': attribute type 11 has an invalid length. [ 72.648908][ T6647] netlink: 'syz.1.203': attribute type 13 has an invalid length. [ 72.700700][ T6646] 9pnet_fd: Insufficient options for proto=fd [ 72.736026][ T6653] tls_set_device_offload: netdev not found [ 72.927243][ T6664] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 73.051745][ T6683] syzkaller0: entered promiscuous mode [ 73.054896][ T6683] syzkaller0: entered allmulticast mode [ 74.123107][ T5946] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 74.463675][ T5971] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 74.643931][ T5971] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.647826][ T5971] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.651807][ T5971] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.655171][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.865729][ T5971] usb 6-1: usb_control_msg returned -32 [ 74.868169][ T5971] usbtmc 6-1:16.0: can't read capabilities [ 74.879549][ T6736] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 74.921664][ T6736] comedi comedi3: comedi_config --init_data is deprecated [ 74.979203][ T6741] xt_recent: Unsupported userspace flags (000000b2) [ 75.142147][ T6749] fuse: Bad value for 'fd' [ 75.282738][ T6770] netlink: 'syz.2.236': attribute type 30 has an invalid length. [ 75.292282][ T6419] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.301098][ T6419] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.304416][ T6419] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.304797][ T6770] SELinux: Context system_u:object_r:random_device_t:s0 is not valid (left unmapped). [ 75.307999][ T6419] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.316489][ T6770] tmpfs: Bad value for 'mpol' [ 75.428621][ T29] usb 6-1: USB disconnect, device number 2 [ 75.642142][ T2296] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.802500][ T2296] usb 5-1: Using ep0 maxpacket: 8 [ 75.813744][ T2296] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 75.817250][ T2296] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.821792][ T2296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.826207][ T2296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.830344][ T2296] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.836242][ T2296] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.841175][ T2296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.993088][ T6792] __nla_validate_parse: 40 callbacks suppressed [ 75.993099][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 76.052812][ T2296] usb 5-1: usb_control_msg returned -32 [ 76.059166][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 76.059182][ T40] audit: type=1400 audit(1759929548.254:368): avc: denied { connect } for pid=6774 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.071429][ T2296] usbtmc 5-1:16.0: can't read capabilities [ 76.446367][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.450162][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.569646][ T40] audit: type=1400 audit(1759929548.764:369): avc: denied { watch } for pid=6805 comm="syz.2.249" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 76.634388][ T6808] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 76.732454][ T6818] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 76.784597][ T6828] netlink: 'syz.1.248': attribute type 4 has an invalid length. [ 76.787612][ T6828] netlink: 17 bytes leftover after parsing attributes in process `syz.1.248'. [ 76.818471][ T6835] nfs4: Unknown parameter 'ountinfo' [ 76.836640][ T40] audit: type=1400 audit(1759929549.034:370): avc: denied { create } for pid=6836 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.845634][ T40] audit: type=1400 audit(1759929549.034:371): avc: denied { create } for pid=6836 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.852991][ T40] audit: type=1400 audit(1759929549.034:372): avc: denied { bind } for pid=6836 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.049083][ T40] audit: type=1400 audit(1759929549.244:373): avc: denied { ioctl } for pid=6848 comm="syz.2.260" path="socket:[12866]" dev="sockfs" ino=12866 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.203435][ T6850] delete_channel: no stack [ 77.254500][ T6859] program syz.2.262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.306454][ T40] audit: type=1400 audit(1759929549.504:374): avc: denied { write } for pid=6865 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.360310][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'. [ 77.453969][ T40] audit: type=1400 audit(1759929549.654:375): avc: denied { ioctl } for pid=6872 comm="syz.3.265" path="socket:[14719]" dev="sockfs" ino=14719 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.490629][ T6875] policy can only be matched on NF_INET_PRE_ROUTING [ 77.490652][ T6875] unable to load match [ 77.498569][ T40] audit: type=1400 audit(1759929549.694:376): avc: denied { audit_write } for pid=6874 comm="syz.2.266" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.616456][ T40] audit: type=1400 audit(1759929549.814:377): avc: denied { append } for pid=6880 comm="syz.3.268" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.618941][ T6881] loop6: detected capacity change from 0 to 2640 [ 77.627734][ T6881] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.632522][ T6881] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.635309][ T6881] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.637999][ T6881] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.640602][ T6881] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.643769][ T6881] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.646495][ T6881] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.649327][ T6881] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.651361][ T6883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.269'. [ 77.653162][ T6881] ldm_validate_partition_table(): Disk read failed. [ 77.659481][ T6881] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.663823][ T6881] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.667425][ T6881] Dev loop6: unable to read RDB block 0 [ 77.670930][ T6881] loop6: unable to read partition table [ 77.673342][ T6881] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 77.951318][ T6897] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 77.955467][ T1461] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 78.070131][ T6899] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 78.102188][ T1461] usb 8-1: Using ep0 maxpacket: 8 [ 78.104931][ T6903] efs: device does not support 512 byte blocks [ 78.107790][ T1461] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 78.108118][ T6903] device does not support 512 byte blocks [ 78.108118][ T6903] [ 78.112563][ T1461] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 78.112586][ T1461] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.112600][ T1461] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.112625][ T1461] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.112638][ T1461] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.214502][ T6909] 8021q: VLANs not supported on ip_vti0 [ 78.257620][ T6915] netlink: 80 bytes leftover after parsing attributes in process `syz.1.280'. [ 78.327194][ T1461] usb 8-1: GET_CAPABILITIES returned 0 [ 78.328917][ T1461] usbtmc 8-1:16.0: can't read capabilities [ 78.345204][ T6018] usb 8-1: USB disconnect, device number 3 [ 78.425942][ T1461] usb 5-1: USB disconnect, device number 2 [ 78.552202][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 78.571053][ T6943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.288'. [ 78.656437][ T6953] netlink: 'syz.2.291': attribute type 9 has an invalid length. [ 78.732630][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 78.736021][ T29] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 78.739460][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 78.743425][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.745581][ T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 78.748497][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.755460][ T29] usb 6-1: config 0 descriptor?? [ 79.165775][ T29] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 79.366417][ T6919] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.375043][ T6977] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.379011][ T6977] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 79.384102][ T6977] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.388544][ T6977] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 79.428939][ T29] usb 6-1: USB disconnect, device number 3 [ 79.529624][ T6984] netlink: 'syz.2.300': attribute type 4 has an invalid length. [ 79.541496][ T6984] netlink: 'syz.2.300': attribute type 4 has an invalid length. [ 79.578185][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 79.635237][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 79.640091][ T6996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.646301][ T6996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.893137][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 80.022354][ T10] usb 7-1: device descriptor read/64, error -71 [ 80.229919][ T7046] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.235328][ T7046] overlayfs: failed to set xattr on upper [ 80.238042][ T7046] overlayfs: ...falling back to redirect_dir=nofollow. [ 80.241244][ T7046] overlayfs: ...falling back to index=off. [ 80.243936][ T7046] overlayfs: ...falling back to uuid=null. [ 80.247154][ T7046] overlayfs: ...falling back to xino=off. [ 80.262152][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 80.402114][ T10] usb 7-1: device descriptor read/64, error -71 [ 80.468154][ T7061] overlayfs: failed to clone upperpath [ 80.513592][ T10] usb usb7-port1: attempt power cycle [ 80.670431][ T7075] tipc: Failed to obtain node identity [ 80.673455][ T7075] tipc: Enabling of bearer rejected, failed to enable media [ 80.723089][ T7081] capability: warning: `syz.0.329' uses deprecated v2 capabilities in a way that may be insecure [ 80.854100][ T7089] netlink: 160 bytes leftover after parsing attributes in process `syz.0.333'. [ 80.863037][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 80.893513][ T10] usb 7-1: device descriptor read/8, error -71 [ 81.048223][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'. [ 81.055915][ T7113] netlink: 'syz.0.341': attribute type 2 has an invalid length. [ 81.060156][ T7113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.341'. [ 81.064289][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 81.064302][ T40] audit: type=1326 audit(1759929553.264:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2798eec9 code=0x7ffc0000 [ 81.064334][ T40] audit: type=1326 audit(1759929553.264:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.340" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdc2798eec9 code=0x7ffc0000 [ 81.064359][ T40] audit: type=1326 audit(1759929553.264:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2798eec9 code=0x7ffc0000 [ 81.064626][ T40] audit: type=1326 audit(1759929553.264:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.340" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc2798eec9 code=0x7ffc0000 [ 81.065070][ T7111] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 81.065105][ T7111] overlayfs: missing 'lowerdir' [ 81.102606][ T40] audit: type=1326 audit(1759929553.264:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2798eec9 code=0x7ffc0000 [ 81.110642][ T40] audit: type=1326 audit(1759929553.264:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.340" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdc2798eec9 code=0x7ffc0000 [ 81.118052][ T40] audit: type=1326 audit(1759929553.304:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2798eec9 code=0x7ffc0000 [ 81.126608][ T40] audit: type=1326 audit(1759929553.304:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.340" exe="/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fdc2798eec9 code=0x7ffc0000 [ 81.134140][ T40] audit: type=1326 audit(1759929553.304:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2798eec9 code=0x7ffc0000 [ 81.139605][ T7116] afs: Unknown parameter 'dynF' [ 81.141747][ T40] audit: type=1326 audit(1759929553.304:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.3.340" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2798eec9 code=0x7ffc0000 [ 81.142632][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 81.165815][ T10] usb 7-1: device descriptor read/8, error -71 [ 81.246158][ T7127] kvm: pic: non byte read [ 81.248591][ T7127] kvm: pic: non byte read [ 81.250643][ T7127] kvm: pic: non byte read [ 81.253562][ T7127] kvm: pic: non byte read [ 81.255643][ T7127] kvm: pic: non byte read [ 81.257792][ T7127] kvm: pic: non byte read [ 81.259883][ T7127] kvm: pic: non byte read [ 81.262148][ T7127] kvm: pic: non byte read [ 81.263866][ T7127] kvm: pic: non byte read [ 81.266269][ T7127] kvm: pic: non byte read [ 81.273020][ T10] usb usb7-port1: unable to enumerate USB device [ 81.364713][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.348'. [ 81.368457][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.348'. [ 81.386094][ T7135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.345'. [ 81.454840][ T7147] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 81.523400][ T7157] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 81.740332][ T7171] xt_CT: No such helper "syz1" [ 81.743998][ T7171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.358'. [ 81.756563][ T7174] bond1: entered allmulticast mode [ 81.760341][ T7171] mmap: syz.3.358 (7171) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.091467][ T7193] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 82.178054][ T7201] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 82.205382][ T7201] bond2: entered promiscuous mode [ 82.208762][ T7201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.332113][ T2296] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 82.493747][ T2296] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.499541][ T2296] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.505963][ T2296] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.509836][ T2296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.718920][ T2296] usb 8-1: usb_control_msg returned -32 [ 82.724819][ T2296] usbtmc 8-1:16.0: can't read capabilities [ 83.086967][ T7236] befs: (nbd3): unable to read superblock [ 83.625596][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 84.594106][ T7258] delete_channel: no stack [ 84.812835][ T7270] bond3: entered allmulticast mode [ 85.151195][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.396'. [ 85.155155][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.396'. [ 85.164457][ T53] usb 8-1: USB disconnect, device number 4 [ 85.366165][ T7304] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.582272][ T1461] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 85.722141][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 85.755128][ T1461] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.759494][ T1461] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.764136][ T1461] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 85.769483][ T1461] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 85.773594][ T1461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.781372][ T7302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.791352][ T1461] hub 7-1:1.0: bad descriptor, ignoring hub [ 85.794485][ T1461] hub 7-1:1.0: probe with driver hub failed with error -5 [ 85.798685][ T1461] cdc_wdm 7-1:1.0: skipping garbage [ 85.800926][ T1461] cdc_wdm 7-1:1.0: skipping garbage [ 85.805828][ T1461] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 85.808758][ T1461] cdc_wdm 7-1:1.0: Unknown control protocol [ 85.876117][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 85.881215][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.885096][ T10] usb 6-1: Product: syz [ 85.886973][ T10] usb 6-1: Manufacturer: syz [ 85.889086][ T10] usb 6-1: SerialNumber: syz [ 85.897573][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 85.914293][ T6020] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.186234][ T7327] binder: 7326:7327 unknown command 0 [ 86.188602][ T7327] binder: 7326:7327 ioctl c0306201 200000000080 returned -22 [ 86.197905][ T7327] binder: 7326:7327 ioctl c0306201 2000000003c0 returned -14 [ 86.317856][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.322357][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.330908][ T6018] usb 6-1: USB disconnect, device number 4 [ 86.387271][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.412'. [ 86.406799][ T7302] usb 7-1: reset full-speed USB device number 6 using dummy_hcd [ 86.576736][ T7320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 86.584988][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.587983][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.591651][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.594540][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.597565][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.600650][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.603944][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.606811][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.609812][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.612586][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.615538][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.619190][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.622450][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.625129][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.628017][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.630748][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.633626][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.636404][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.639365][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.642219][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.660351][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 86.660368][ T40] audit: type=1400 audit(1759929558.854:431): avc: denied { ioctl } for pid=7345 comm="syz.0.415" path="socket:[16740]" dev="sockfs" ino=16740 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.686998][ T55] cfg80211: failed to load regulatory.db [ 86.705666][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 86.777759][ T7350] macvlan2: entered promiscuous mode [ 86.779824][ T7350] macvlan2: entered allmulticast mode [ 86.783220][ T7350] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 86.810465][ T7302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.814754][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.886558][ T40] audit: type=1400 audit(1759929559.084:432): avc: denied { read } for pid=7355 comm="syz.1.418" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.890288][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 86.902978][ T40] audit: type=1400 audit(1759929559.084:433): avc: denied { open } for pid=7355 comm="syz.1.418" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.916529][ T40] audit: type=1400 audit(1759929559.084:434): avc: denied { write } for pid=7355 comm="syz.1.418" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.939622][ T7359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7359 comm=syz.0.419 [ 86.942621][ T34] usb 7-1: USB disconnect, device number 6 [ 87.002826][ T6020] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 87.004477][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 87.005459][ T6020] ath9k_htc: Failed to initialize the device [ 87.015701][ T6018] usb 6-1: ath9k_htc: USB layer deinitialized [ 87.257359][ T7374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.423'. [ 87.352280][ T6018] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.493013][ T6018] usb 6-1: device descriptor read/64, error -71 [ 87.568348][ T7379] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 87.613775][ T7382] comedi comedi3: comedi_config --init_data is deprecated [ 87.718606][ T40] audit: type=1400 audit(1759929559.914:435): avc: denied { getopt } for pid=7386 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.753189][ T6018] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 87.812458][ T7387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7387 comm=syz.2.428 [ 87.882260][ T6018] usb 6-1: device descriptor read/64, error -71 [ 88.002365][ T6018] usb usb6-port1: attempt power cycle [ 88.062131][ T55] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 88.202274][ T55] usb 7-1: device descriptor read/64, error -71 [ 88.342191][ T6018] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 88.373104][ T6018] usb 6-1: device descriptor read/8, error -71 [ 88.442127][ T55] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 88.448593][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 88.453178][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.434'. [ 88.498812][ T7410] tmpfs: Bad value for 'mpol' [ 88.572462][ T55] usb 7-1: device descriptor read/64, error -71 [ 88.633004][ T6018] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 88.652848][ T6018] usb 6-1: device descriptor read/8, error -71 [ 88.682527][ T55] usb usb7-port1: attempt power cycle [ 88.746893][ T7428] ipt_rpfilter: unknown options [ 88.762942][ T6018] usb usb6-port1: unable to enumerate USB device [ 88.807935][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 88.810830][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 88.813788][ T7437] netlink: 'syz.0.444': attribute type 11 has an invalid length. [ 88.816965][ T7437] netlink: 'syz.0.444': attribute type 13 has an invalid length. [ 88.852339][ T40] audit: type=1400 audit(1759929561.044:436): avc: denied { mount } for pid=7438 comm="syz.0.445" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.853747][ T7440] overlay: filesystem on ./bus is read-only [ 88.860958][ T40] audit: type=1400 audit(1759929561.054:437): avc: denied { mounton } for pid=7438 comm="syz.0.445" path="/bus" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 88.936446][ T7439] could not allocate digest TFM handle cryptd(blake2b-160) [ 89.032131][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 89.032967][ T40] audit: type=1400 audit(1759929561.234:438): avc: denied { setopt } for pid=7450 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.035392][ T55] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 89.062832][ T55] usb 7-1: device descriptor read/8, error -71 [ 89.090064][ T5946] Bluetooth: Unexpected start frame (len 98) [ 89.097766][ T7453] bridge0: entered promiscuous mode [ 89.100718][ T7453] macsec2: entered promiscuous mode [ 89.105238][ T7453] bridge0: port 3(macsec2) entered blocking state [ 89.108069][ T7453] bridge0: port 3(macsec2) entered disabled state [ 89.110919][ T7453] macsec2: entered allmulticast mode [ 89.114307][ T7453] bridge0: entered allmulticast mode [ 89.120032][ T7453] macsec2: left allmulticast mode [ 89.123012][ T7453] bridge0: left allmulticast mode [ 89.126385][ T7453] bridge0: left promiscuous mode [ 89.204617][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.208604][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.212401][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.216398][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.219241][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.222302][ T40] audit: type=1326 audit(1759929561.424:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.0.449" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e0c18eec9 code=0x0 [ 89.224320][ T34] usb 8-1: config 0 descriptor?? [ 89.313334][ T55] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 89.332682][ T55] usb 7-1: device descriptor read/8, error -71 [ 89.452386][ T55] usb usb7-port1: unable to enumerate USB device [ 89.649923][ T34] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 89.916606][ T40] audit: type=1400 audit(1759929562.114:440): avc: granted { setsecparam } for pid=7458 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 90.226503][ T7471] team0 (unregistering): Port device team_slave_0 removed [ 90.237062][ T7471] team0 (unregistering): Port device team_slave_1 removed [ 90.423069][ T7490] exFAT-fs (nullb0): invalid boot record signature [ 90.426643][ T7490] exFAT-fs (nullb0): failed to read boot sector [ 90.429695][ T7490] exFAT-fs (nullb0): failed to recognize exfat type [ 90.708679][ T7499] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.464'. [ 90.823059][ T7503] kvm: kvm [7502]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 90.826572][ T7503] kvm: kvm [7502]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 90.991574][ T7508] netlink: 'syz.2.467': attribute type 20 has an invalid length. [ 91.043218][ T7508] netlink: 'syz.2.467': attribute type 20 has an invalid length. [ 91.566780][ T7525] EXT4-fs (nbd3): unable to read superblock [ 91.677993][ T7532] bond2 (unregistering): Released all slaves [ 91.708534][ T7533] bond2 (unregistering): Released all slaves [ 91.754793][ T2296] usb 8-1: USB disconnect, device number 5 [ 91.824032][ T7540] nfs4: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 91.922548][ T7542] __nla_validate_parse: 6 callbacks suppressed [ 91.922560][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.477'. [ 91.940647][ T7542] bond2: entered promiscuous mode [ 91.942614][ T7542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.280692][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 92.501886][ T7573] warning: `syz.1.485' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.541175][ T7575] ======================================================= [ 92.541175][ T7575] WARNING: The mand mount option has been deprecated and [ 92.541175][ T7575] and is ignored by this kernel. Remove the mand [ 92.541175][ T7575] option from the mount to silence this warning. [ 92.541175][ T7575] ======================================================= [ 92.555699][ T7575] cgroup: noprefix used incorrectly [ 92.608614][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 92.608626][ T40] audit: type=1400 audit(1759929564.804:454): avc: denied { checkpoint_restore } for pid=7576 comm="syz.1.487" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.681253][ T7582] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7582 comm=syz.1.489 [ 92.734992][ T7587] MINIX-fs: blocksize too small for device [ 92.742666][ T7587] MINIX-fs: blocksize too small for device [ 92.751051][ T7587] MINIX-fs: blocksize too small for device [ 92.760651][ T7587] MINIX-fs: blocksize too small for device [ 92.764367][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 92.768481][ T7588] batman_adv: batadv0: Adding interface: ipvlan3 [ 92.773034][ T7588] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.775685][ T7587] MINIX-fs: blocksize too small for device [ 92.781712][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.789369][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.789743][ T7587] MINIX-fs: blocksize too small for device [ 92.792632][ T7588] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 92.798983][ T7587] MINIX-fs: blocksize too small for device [ 92.809293][ T7587] MINIX-fs: blocksize too small for device [ 92.818106][ T7587] MINIX-fs: blocksize too small for device [ 92.837985][ T7587] MINIX-fs: blocksize too small for device [ 92.847547][ T7587] MINIX-fs: blocksize too small for device [ 92.853827][ T7587] MINIX-fs: blocksize too small for device [ 92.859932][ T7587] MINIX-fs: blocksize too small for device [ 92.868044][ T7587] MINIX-fs: blocksize too small for device [ 92.875074][ T7587] MINIX-fs: blocksize too small for device [ 92.883141][ T7587] MINIX-fs: blocksize too small for device [ 92.890052][ T7587] MINIX-fs: blocksize too small for device [ 92.897187][ T7587] MINIX-fs: blocksize too small for device [ 92.907293][ T7587] MINIX-fs: blocksize too small for device [ 92.914795][ T7587] MINIX-fs: blocksize too small for device [ 92.921784][ T7587] MINIX-fs: blocksize too small for device [ 92.929636][ T7587] MINIX-fs: blocksize too small for device [ 92.936572][ T7587] MINIX-fs: blocksize too small for device [ 92.944052][ T7591] netlink: 64 bytes leftover after parsing attributes in process `syz.2.493'. [ 92.945678][ T7587] MINIX-fs: blocksize too small for device [ 92.951095][ T7594] netlink: 64 bytes leftover after parsing attributes in process `syz.2.493'. [ 92.979268][ T7587] MINIX-fs: blocksize too small for device [ 93.011531][ T7587] MINIX-fs: blocksize too small for device [ 93.017906][ T40] audit: type=1400 audit(1759929565.214:455): avc: denied { ioctl } for pid=7598 comm="syz.2.495" path="cgroup:[4026532879]" dev="nsfs" ino=4026532879 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.023955][ T7587] MINIX-fs: blocksize too small for device [ 93.044422][ T7587] MINIX-fs: blocksize too small for device [ 93.053736][ T7587] MINIX-fs: blocksize too small for device [ 93.060602][ T7587] MINIX-fs: blocksize too small for device [ 93.069308][ T7587] MINIX-fs: blocksize too small for device [ 93.076435][ T7587] MINIX-fs: blocksize too small for device [ 93.086509][ T7587] MINIX-fs: blocksize too small for device [ 93.104848][ T7602] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 93.111618][ T40] audit: type=1400 audit(1759929565.304:456): avc: denied { relabelto } for pid=7600 comm="syz.2.496" name="cpu.stat" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 93.121256][ T7601] Malformed UNC in devname [ 93.121256][ T7601] [ 93.125522][ T40] audit: type=1400 audit(1759929565.304:457): avc: denied { associate } for pid=7600 comm="syz.2.496" name="cpu.stat" dev="tmpfs" ino=564 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 93.128906][ T7601] CIFS: VFS: Malformed UNC in devname [ 93.140544][ T40] audit: type=1400 audit(1759929565.304:458): avc: denied { append } for pid=7600 comm="syz.2.496" path="/105/cpu.stat" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 93.156214][ T40] audit: type=1400 audit(1759929565.304:459): avc: denied { create } for pid=7600 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.168040][ T40] audit: type=1400 audit(1759929565.304:460): avc: denied { ioctl } for pid=7600 comm="syz.2.496" path="socket:[18631]" dev="sockfs" ino=18631 ioctlcmd=0x8942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.176557][ T40] audit: type=1400 audit(1759929565.354:461): avc: denied { unlink } for pid=5935 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 93.242862][ T7610] netlink: 'syz.2.498': attribute type 4 has an invalid length. [ 93.275346][ T40] audit: type=1400 audit(1759929565.474:462): avc: denied { map } for pid=7608 comm="syz.3.499" path="socket:[18640]" dev="sockfs" ino=18640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 93.592114][ T6018] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 93.592126][ T2296] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 93.733350][ T6018] usb 6-1: device descriptor read/64, error -71 [ 93.743829][ T2296] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 93.749278][ T2296] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 93.753308][ T2296] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 93.759483][ T2296] usb 8-1: string descriptor 0 read error: -22 [ 93.761796][ T2296] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.764853][ T2296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.769273][ T7615] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.972277][ T6018] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 93.976673][ T2296] cdc_ncm 8-1:1.0: bind() failure [ 93.981507][ T2296] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 93.984331][ T2296] cdc_ncm 8-1:1.1: bind() failure [ 93.988848][ T2296] usb 8-1: USB disconnect, device number 6 [ 94.112132][ T6018] usb 6-1: device descriptor read/64, error -71 [ 94.140430][ T7650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'. [ 94.148194][ T7650] overlay: Unknown parameter 'fsname' [ 94.151617][ T7650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.513'. [ 94.156110][ T40] audit: type=1400 audit(1759929566.354:463): avc: denied { append } for pid=7649 comm="syz.2.513" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.224822][ T6018] usb usb6-port1: attempt power cycle [ 94.562240][ T6018] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 94.582671][ T6018] usb 6-1: device descriptor read/8, error -71 [ 94.617731][ T7677] netlink: 'syz.2.518': attribute type 21 has an invalid length. [ 94.621542][ T7677] netlink: 128 bytes leftover after parsing attributes in process `syz.2.518'. [ 94.625948][ T7677] netlink: 'syz.2.518': attribute type 4 has an invalid length. [ 94.629405][ T7677] netlink: 'syz.2.518': attribute type 5 has an invalid length. [ 94.633597][ T7677] netlink: 3 bytes leftover after parsing attributes in process `syz.2.518'. [ 94.822645][ T6018] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 94.843328][ T6018] usb 6-1: device descriptor read/8, error -71 [ 94.882154][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 94.952807][ T6018] usb usb6-port1: unable to enumerate USB device [ 95.032112][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 95.036121][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.040914][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.045850][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.050009][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.052302][ T6020] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 95.055446][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.063252][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.146546][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 95.202189][ T6020] usb 7-1: Using ep0 maxpacket: 8 [ 95.206763][ T6020] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.210881][ T6020] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.220095][ T6020] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.224420][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.228861][ T6020] usb 7-1: Product: à°Œ [ 95.230486][ T6020] usb 7-1: Manufacturer: å¯ç¹ß›à¨‘䲡貗＊縼íä›à»ãš•é¶â¼¸å‹ˆæ¥Šé¼«é¶¡ã¸•ç¡¯ä¯Žé†Šë¼¢é–¹áˆMヽ䥩㈸섭笺탻çŒã€…쾼ݒîƒïŸºÉ®äšœî²ê¨™ë´‰ç™¿çœïœ§îƒã«¼é³ Ý‡ëœ­ä¥½ì„氪൬텪ê‘釀泥Ṿ茦┨巙㰰é–⊹ኢ藪霥巢蓮뽵쒲鎣蓱Śꦅᵒ銊檧곗鿵ì¼è‘ˆéŒ»æƒï•®ã›ˆçœœà­™á›¹æ‘¹à¯¦åŒä©•ç»–隫騚å¯á‘™à¸“ῧ諺빭㑜â¾áš³á°²ê’Ÿá˜ªâ¥á©«×„쥯ꗰѷ쇩 [ 95.245404][ T6020] usb 7-1: SerialNumber: Ð [ 95.360925][ T7709] IPVS: set_ctl: invalid protocol: 26992 114.101.103.49:0 [ 95.410280][ T29] usb 8-1: GET_CAPABILITIES returned 0 [ 95.413394][ T29] usbtmc 8-1:16.0: can't read capabilities [ 95.465744][ T6020] usb 7-1: 0:2 : does not exist [ 95.480319][ T6020] usb 7-1: USB disconnect, device number 11 [ 95.506683][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.646889][ T10] usb 8-1: USB disconnect, device number 7 [ 96.011826][ T7727] netlink: 'syz.0.535': attribute type 6 has an invalid length. [ 96.229243][ T7742] netlink: 'syz.3.539': attribute type 29 has an invalid length. [ 96.567348][ T7792] Invalid ELF header type: 0 != 1 [ 96.784187][ T7801] gretap1: entered promiscuous mode [ 96.959981][ T7811] __nla_validate_parse: 6 callbacks suppressed [ 96.959998][ T7811] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.563'. [ 96.968507][ T7811] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 97.004336][ T7815] x_tables: duplicate underflow at hook 2 [ 97.127022][ T7824] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.568'. [ 97.164374][ T7826] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.402212][ T6018] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 97.502128][ T6020] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 97.563604][ T6018] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.568411][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.573104][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 97.577067][ T6018] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.582939][ T6018] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.587782][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.593429][ T6018] usb 7-1: config 0 descriptor?? [ 97.664037][ T6020] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.668286][ T6020] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 97.671498][ T6020] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.675651][ T6020] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.678501][ T6020] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.688524][ T6020] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 98.049578][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 98.049599][ T40] audit: type=1400 audit(1759929570.244:483): avc: denied { read } for pid=7837 comm="syz.0.574" path="socket:[19873]" dev="sockfs" ino=19873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.209927][ T6018] usbhid 7-1:0.0: can't add hid device: -71 [ 98.216413][ T6018] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 98.226823][ T6018] usb 7-1: USB disconnect, device number 12 [ 98.502648][ T7853] netlink: 'syz.0.578': attribute type 9 has an invalid length. [ 98.587404][ T7861] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 98.590257][ T7861] netlink: 'syz.0.580': attribute type 4 has an invalid length. [ 98.594157][ T7861] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.580'. [ 98.638869][ T7865] sctp: [Deprecated]: syz.0.581 (pid 7865) Use of int in max_burst socket option deprecated. [ 98.638869][ T7865] Use struct sctp_assoc_value instead [ 98.703160][ T7867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7867 comm=syz.0.582 [ 98.743836][ T40] audit: type=1400 audit(1759929570.944:484): avc: denied { bind } for pid=7871 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.757235][ T40] audit: type=1400 audit(1759929570.944:485): avc: denied { name_bind } for pid=7871 comm="syz.2.583" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 98.767237][ T40] audit: type=1400 audit(1759929570.944:486): avc: denied { node_bind } for pid=7871 comm="syz.2.583" saddr=fc00:: src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 98.785346][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 98.838141][ T40] audit: type=1400 audit(1759929571.034:487): avc: denied { connect } for pid=7879 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.908514][ T7883] batadv_slave_0: entered promiscuous mode [ 98.911680][ T7883] batadv_slave_0: left promiscuous mode [ 99.045937][ T7889] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 99.108886][ T40] audit: type=1400 audit(1759929571.304:488): avc: denied { create } for pid=7888 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 99.162989][ T40] audit: type=1400 audit(1759929571.364:489): avc: denied { module_request } for pid=7892 comm="syz.0.591" kmod="crypto-ecb(arc4)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 99.214416][ T7895] "syz.0.591" (7895) uses obsolete ecb(arc4) skcipher [ 99.501937][ T40] audit: type=1400 audit(1759929571.694:490): avc: denied { read } for pid=7899 comm="syz.1.592" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.509190][ T40] audit: type=1400 audit(1759929571.704:491): avc: denied { open } for pid=7899 comm="syz.1.592" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.573961][ T7900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.577497][ T7900] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.588601][ T7900] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.595877][ T7900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.600317][ T7900] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.605568][ T7900] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.611629][ T7900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.616303][ T7900] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.622684][ T7900] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.659509][ T40] audit: type=1400 audit(1759929571.854:492): avc: denied { connect } for pid=7899 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 99.887124][ T7916] xt_ecn: cannot match TCP bits for non-tcp packets [ 99.891924][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 100.167069][ T34] usb 8-1: USB disconnect, device number 8 [ 100.200582][ T7959] netlink: 'syz.3.613': attribute type 21 has an invalid length. [ 100.293546][ T7974] overlayfs: failed to clone upperpath [ 100.297520][ T7974] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 100.419993][ T7983] netlink: 64 bytes leftover after parsing attributes in process `syz.1.619'. [ 100.482676][ T7978] kvm: kvm [7977]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 100.667119][ T7996] netlink: 'syz.3.625': attribute type 2 has an invalid length. [ 100.670622][ T7996] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.625'. [ 100.676231][ T7996] nbd: must specify a device to reconfigure [ 100.912980][ T8007] [U]  [ 100.959444][ T8011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.631'. [ 100.965096][ T8011] netlink: 'syz.2.631': attribute type 5 has an invalid length. [ 101.262320][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 101.401834][ T8032] netlink: 52 bytes leftover after parsing attributes in process `syz.2.639'. [ 101.405178][ T8032] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.413463][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 101.417880][ T10] usb 8-1: config 0 has no interfaces? [ 101.423090][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.426911][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.428812][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 101.430558][ T10] usb 8-1: Product: syz [ 101.436554][ T10] usb 8-1: Manufacturer: syz [ 101.439225][ T10] usb 8-1: SerialNumber: syz [ 101.445478][ T10] usb 8-1: config 0 descriptor?? [ 101.522687][ T8048] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 101.528427][ T8048] SET target dimension over the limit! [ 101.642798][ T5946] Bluetooth: hci3: command 0x0405 tx timeout [ 101.643392][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.643615][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.667980][ T55] usb 8-1: USB disconnect, device number 9 [ 101.790224][ T8072] netlink: 'syz.0.651': attribute type 2 has an invalid length. [ 101.796370][ T8072] netlink: 'syz.0.651': attribute type 2 has an invalid length. [ 101.800395][ T8072] netlink: 'syz.0.651': attribute type 2 has an invalid length. [ 101.804065][ T8072] netlink: 'syz.0.651': attribute type 2 has an invalid length. [ 101.809028][ T8072] netlink: 'syz.0.651': attribute type 2 has an invalid length. [ 101.812558][ T8072] netlink: 'syz.0.651': attribute type 2 has an invalid length. [ 102.032129][ T5971] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 102.092154][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 102.204549][ T5971] usb 6-1: Using ep0 maxpacket: 32 [ 102.207870][ T5971] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.211449][ T5971] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.214911][ T5971] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.220911][ T5971] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 102.224387][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 102.227061][ T5971] usb 6-1: Product: syz [ 102.228530][ T5971] usb 6-1: Manufacturer: syz [ 102.230063][ T5971] usb 6-1: SerialNumber: syz [ 102.240166][ T5971] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input8 [ 102.263215][ T34] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 102.265835][ T34] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.269651][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 102.274042][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 102.277714][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.282381][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.286121][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.299548][ T34] usb 7-1: config 0 descriptor?? [ 102.302666][ T8080] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 102.452165][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.462153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 102.463897][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.467188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 102.473822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 102.478040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.482222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 102.484798][ T8093] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 102.490551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.500804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.557976][ T5971] usb 6-1: USB disconnect, device number 13 [ 102.575056][ T5971] appletouch 6-1:1.0: input: appletouch disconnected [ 102.715992][ T34] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 102.722708][ T34] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 102.975568][ T8080] __nla_validate_parse: 2 callbacks suppressed [ 102.975589][ T8080] netlink: 100 bytes leftover after parsing attributes in process `syz.2.654'. [ 102.985428][ T2296] usb 7-1: USB disconnect, device number 13 [ 103.113786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.342382][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 103.342394][ T40] audit: type=1400 audit(2000000000.899:511): avc: denied { mounton } for pid=8104 comm="syz.1.662" path="/proc/352/task" dev="proc" ino=20300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 103.353850][ T40] audit: type=1400 audit(2000000000.899:512): avc: denied { map } for pid=8104 comm="syz.1.662" path="socket:[18363]" dev="sockfs" ino=18363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.361614][ T40] audit: type=1400 audit(2000000000.899:513): avc: denied { accept } for pid=8104 comm="syz.1.662" path="socket:[18363]" dev="sockfs" ino=18363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.388106][ T40] audit: type=1400 audit(2000000000.939:514): avc: granted { setsecparam } for pid=8119 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 103.604766][ T8140] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 103.607575][ T8140] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.611264][ T8140] vhci_hcd vhci_hcd.0: Device attached [ 103.617682][ T40] audit: type=1800 audit(2000000001.169:515): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.672" name="/" dev="9p" ino=2 res=0 errno=0 [ 103.627551][ T8140] vhci_hcd vhci_hcd.0: port 0 already used [ 103.627885][ T8141] netlink: 152 bytes leftover after parsing attributes in process `syz.1.672'. [ 103.631156][ T8142] vhci_hcd: connection closed [ 103.638074][ T6419] vhci_hcd: stop threads [ 103.643551][ T6419] vhci_hcd: release socket [ 103.645553][ T6419] vhci_hcd: disconnect device [ 103.655174][ T8141] comedi comedi3: comedi_config --init_data is deprecated [ 103.667033][ T40] audit: type=1400 audit(2000000001.219:516): avc: denied { create } for pid=8148 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 103.722307][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 103.722433][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.732360][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.857127][ T40] audit: type=1400 audit(2000000001.409:517): avc: denied { read write } for pid=8163 comm="syz.1.679" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.858722][ T8164] UHID_CREATE from different security context by process 366 (syz.1.679), this is not allowed. [ 103.864765][ T40] audit: type=1400 audit(2000000001.409:518): avc: denied { open } for pid=8163 comm="syz.1.679" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.029851][ T40] audit: type=1400 audit(2000000001.579:519): avc: denied { read write } for pid=8168 comm="syz.1.680" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 104.030795][ T8169] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 104.038852][ T40] audit: type=1400 audit(2000000001.579:520): avc: denied { open } for pid=8168 comm="syz.1.680" path="/129/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 104.071521][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 104.118592][ T5946] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 104.161367][ T8189] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 104.197669][ T8195] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 104.223590][ T8196] tipc: Started in network mode [ 104.226350][ T8196] tipc: Node identity ac14142f, cluster identity 4711 [ 104.230277][ T8196] tipc: New replicast peer: 0.0.0.0 [ 104.234336][ T8196] tipc: Enabled bearer , priority 10 [ 104.238453][ T8196] tipc: New replicast peer: 255.255.255.255 [ 104.248701][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.689'. [ 104.253507][ T8198] netlink: 108 bytes leftover after parsing attributes in process `syz.1.689'. [ 104.258258][ T8198] netlink: 108 bytes leftover after parsing attributes in process `syz.1.689'. [ 104.262815][ T8198] netlink: 84 bytes leftover after parsing attributes in process `syz.1.689'. [ 104.263676][ T8203] 9pnet_fd: Insufficient options for proto=fd [ 104.447497][ T8228] netlink: 48 bytes leftover after parsing attributes in process `syz.3.695'. [ 104.455767][ T8226] usb usb3: usbfs: process 8226 (syz.2.696) did not claim interface 2 before use [ 104.470259][ T8228] bond4 (unregistering): Released all slaves [ 104.502783][ T8233] netlink: 40 bytes leftover after parsing attributes in process `syz.3.695'. [ 104.550364][ T8240] netlink: 220 bytes leftover after parsing attributes in process `syz.2.699'. [ 104.726301][ T8247] fuse: Bad value for 'group_id' [ 104.728870][ T8247] fuse: Bad value for 'group_id' [ 104.839107][ T8252] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 104.842829][ T8252] overlayfs: missing 'lowerdir' [ 104.874908][ T8252] macvlan2: entered allmulticast mode [ 104.877268][ T8252] veth1_vlan: entered allmulticast mode [ 104.892112][ T6018] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 104.911547][ T8255] program syz.2.704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.037413][ T8268] SELinux: security policydb version 17 (MLS) not backwards compatible [ 105.040989][ T8268] SELinux: failed to load policy [ 105.044029][ T8268] nfs: Unknown parameter 'dont_measure' [ 105.046835][ T6018] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.050638][ T6018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.056661][ T6018] usb 8-1: Product: syz [ 105.059165][ T6018] usb 8-1: Manufacturer: syz [ 105.061282][ T6018] usb 8-1: SerialNumber: syz [ 105.066446][ T6018] usb 8-1: config 0 descriptor?? [ 105.342193][ T5971] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 105.355759][ T10] tipc: Node number set to 2886997039 [ 105.502365][ T5971] usb 7-1: Using ep0 maxpacket: 16 [ 105.505671][ T5971] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 105.510174][ T5971] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 105.514476][ T5971] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 105.517481][ T5971] usb 7-1: config 0 interface 0 has no altsetting 0 [ 105.521494][ T5971] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 105.525144][ T5971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.527871][ T5971] usb 7-1: Product: syz [ 105.529203][ T5971] usb 7-1: Manufacturer: syz [ 105.530673][ T5971] usb 7-1: SerialNumber: syz [ 105.534097][ T5971] usb 7-1: config 0 descriptor?? [ 105.741046][ T5971] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input10 [ 105.745691][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 105.754249][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 105.758894][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 105.766449][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 105.779710][ T6101] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 105.791173][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 105.798557][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 105.802299][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.803448][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 105.807317][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.807545][ T5325] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 106.142330][ T8278] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 107.672135][ T55] usb 8-1: USB disconnect, device number 10 [ 108.124461][ T54] usb 7-1: USB disconnect, device number 14 [ 123.866967][ T8305] __nla_validate_parse: 4 callbacks suppressed [ 123.866985][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 123.927814][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 123.927830][ T40] audit: type=1400 audit(2000000021.479:536): avc: denied { append } for pid=8314 comm="syz.1.725" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 124.047256][ T8316] fuse: Unknown parameter 'Gooup_id}00000000000000000000' [ 124.051259][ T8328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.728'. [ 124.056228][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.059725][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.139641][ T40] audit: type=1400 audit(2000000021.689:537): avc: denied { read } for pid=8335 comm="syz.2.731" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.148197][ T8341] binder: Bad value for 'max' [ 124.149320][ T40] audit: type=1400 audit(2000000021.699:538): avc: denied { open } for pid=8335 comm="syz.2.731" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.160717][ T40] audit: type=1400 audit(2000000021.699:539): avc: denied { mounton } for pid=8339 comm="syz.3.732" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.163108][ T8341] usb usb9: usbfs: process 8341 (syz.3.732) did not claim interface 1 before use [ 124.253667][ T40] audit: type=1400 audit(2000000021.809:540): avc: denied { ioctl } for pid=8335 comm="syz.2.731" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.488033][ T40] audit: type=1400 audit(2000000022.039:541): avc: denied { create } for pid=8360 comm="syz.2.738" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.508338][ T40] audit: type=1400 audit(2000000022.059:542): avc: denied { write } for pid=8360 comm="syz.2.738" name="file0" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.527505][ T40] audit: type=1400 audit(2000000022.059:543): avc: denied { open } for pid=8360 comm="syz.2.738" path="/160/file0" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.542197][ T40] audit: type=1400 audit(2000000022.059:544): avc: denied { read } for pid=8360 comm="syz.2.738" name="file0" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.549927][ T40] audit: type=1400 audit(2000000022.059:545): avc: denied { map } for pid=8360 comm="syz.2.738" path="/160/file0" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.606903][ T8372] tipc: Enabling of bearer rejected, failed to enable media [ 124.610277][ T8373] tipc: Enabling of bearer rejected, failed to enable media [ 124.715961][ T8393] syz.1.749 (8393): /proc/8391/oom_adj is deprecated, please use /proc/8391/oom_score_adj instead. [ 124.788027][ T8402] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 124.799716][ T8402] CIFS mount error: No usable UNC path provided in device string! [ 124.799716][ T8402] [ 124.804758][ T8402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 125.093565][ T5971] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 125.242292][ T5971] usb 6-1: Using ep0 maxpacket: 8 [ 125.245503][ T5971] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 125.248113][ T5971] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.251021][ T5971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.255778][ T5971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.259139][ T5971] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.264131][ T5971] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.268460][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.480548][ T5971] usb 6-1: usb_control_msg returned -32 [ 125.482803][ T5971] usbtmc 6-1:16.0: can't read capabilities [ 125.888007][ T8459] netlink: 64 bytes leftover after parsing attributes in process `syz.2.773'. [ 126.060565][ T8474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.776'. [ 126.065009][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 126.217797][ T8469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.230948][ T8469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.461790][ T6423] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.466682][ T6423] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.470282][ T6423] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.474379][ T6423] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.478036][ T6423] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.481912][ T6423] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.486820][ T6423] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.490578][ T6423] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.927971][ T8510] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 126.932079][ T8511] validate_nla: 63 callbacks suppressed [ 126.932090][ T8511] netlink: 'syz.2.786': attribute type 10 has an invalid length. [ 126.943048][ T8511] hsr_slave_0: left promiscuous mode [ 126.945763][ T8511] hsr_slave_1: left promiscuous mode [ 127.359845][ T8515] VFS: Mount too revealing [ 127.398604][ T8520] overlayfs: failed to clone lowerpath [ 127.557643][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.794'. [ 127.678420][ T8556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.800'. [ 127.832148][ T8566] fuse: Bad value for 'user_id' [ 127.834329][ T8564] dlm: no locking on control device [ 127.834368][ T8566] fuse: Bad value for 'user_id' [ 127.882308][ T8568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.889486][ T8568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.942312][ T54] usb 6-1: USB disconnect, device number 14 [ 128.837533][ T24] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 128.936165][ T8594] fuse: Bad value for 'user_id' [ 128.938054][ T8594] fuse: Bad value for 'user_id' [ 128.986529][ T24] usb 8-1: device descriptor read/64, error -71 [ 128.994047][ T8597] bond1 (unregistering): Released all slaves [ 129.192611][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 129.192627][ T40] audit: type=1400 audit(2000000026.580:561): avc: denied { setattr } for pid=5944 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.242982][ T24] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 129.394963][ T24] usb 8-1: device descriptor read/64, error -71 [ 129.511315][ T24] usb usb8-port1: attempt power cycle [ 129.678145][ T8625] netlink: 152 bytes leftover after parsing attributes in process `syz.0.822'. [ 129.815814][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 129.895103][ T24] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 129.916928][ T24] usb 8-1: device descriptor read/8, error -71 [ 129.965151][ T40] audit: type=1400 audit(2000000027.300:562): avc: denied { write } for pid=8636 comm="syz.2.826" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 130.183701][ T24] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 130.221430][ T24] usb 8-1: device descriptor read/8, error -71 [ 130.249453][ T8641] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 130.252319][ T8641] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.256027][ T8641] vhci_hcd vhci_hcd.0: Device attached [ 130.262280][ T40] audit: type=1400 audit(2000000027.581:563): avc: denied { create } for pid=8640 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.270633][ T40] audit: type=1400 audit(2000000027.581:564): avc: denied { listen } for pid=8640 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.279768][ T40] audit: type=1400 audit(2000000027.581:565): avc: denied { accept } for pid=8640 comm="syz.2.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.319231][ T8642] vhci_hcd: cannot find the pending unlink 16 [ 130.355164][ T24] usb usb8-port1: unable to enumerate USB device [ 130.515938][ T54] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 131.138071][ T8642] vhci_hcd: connection reset by peer [ 131.141164][ T61] vhci_hcd: stop threads [ 131.142704][ T61] vhci_hcd: release socket [ 131.145290][ T61] vhci_hcd: disconnect device [ 131.976118][ T40] audit: type=1400 audit(2000000029.180:566): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 132.017686][ T40] audit: type=1400 audit(2000000029.218:567): avc: denied { ioctl } for pid=8662 comm="syz.3.833" path="socket:[21281]" dev="sockfs" ino=21281 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.056787][ T40] audit: type=1400 audit(2000000029.255:568): avc: denied { append } for pid=8666 comm="syz.3.835" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.283911][ T40] audit: type=1400 audit(2000000029.470:569): avc: denied { setopt } for pid=8666 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.610524][ T40] audit: type=1400 audit(2000000029.770:570): avc: denied { accept } for pid=8679 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.256700][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 133.738116][ T8731] vlan2: entered allmulticast mode [ 133.740269][ T8731] bond0: entered allmulticast mode [ 133.742349][ T8731] bond_slave_0: entered allmulticast mode [ 133.745787][ T8731] bond_slave_1: entered allmulticast mode [ 133.750492][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 133.757267][ T8731] vlan3: entered promiscuous mode [ 133.759646][ T8731] gretap0: entered promiscuous mode [ 134.028833][ T8737] netlink: 328 bytes leftover after parsing attributes in process `syz.3.851'. [ 134.266466][ T8751] overlayfs: failed to clone lowerpath [ 134.269855][ T8751] overlayfs: failed to clone lowerpath [ 134.304956][ T8756] overlayfs: failed to resolve './file0': -2 [ 134.355942][ T8760] /dev/sg0: Can't lookup blockdev [ 134.357132][ T8761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8761 comm=syz.2.861 [ 134.362199][ T8761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8761 comm=syz.2.861 [ 134.421257][ T8769] kAFS: unparsable volume name [ 134.455919][ T8771] netlink: 52 bytes leftover after parsing attributes in process `syz.2.864'. [ 134.461180][ T8771] netlink: 52 bytes leftover after parsing attributes in process `syz.2.864'. [ 134.578400][ T8776] 9pnet_fd: Insufficient options for proto=fd [ 134.663422][ T53] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 134.801229][ T8780] bond0: mtu less than device minimum [ 134.834201][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 134.842660][ T53] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 134.846322][ T53] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.850523][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.854608][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.859747][ T53] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.865685][ T53] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.870388][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.092342][ T53] usb 8-1: GET_CAPABILITIES returned 0 [ 135.094486][ T53] usbtmc 8-1:16.0: can't read capabilities [ 135.223299][ T55] usb 8-1: USB disconnect, device number 15 [ 135.253777][ T8793] nfs: Unknown parameter '.' [ 135.342366][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 135.342384][ T40] audit: type=1400 audit(2000000032.323:579): avc: denied { write } for pid=8798 comm="syz.3.869" path="socket:[22376]" dev="sockfs" ino=22376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.492710][ T40] audit: type=1400 audit(2000000032.463:580): avc: denied { write } for pid=8804 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 135.532425][ T8810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47617 sclass=netlink_route_socket pid=8810 comm=syz.3.873 [ 135.593903][ T8815] overlayfs: failed to resolve './bus/file0': -2 [ 135.964580][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.880'. [ 136.010787][ T54] vhci_hcd: vhci_device speed not set [ 136.266410][ T8841] SELinux: security policydb version 17 (MLS) not backwards compatible [ 136.269995][ T8841] SELinux: failed to load policy [ 136.643268][ T8856] netlink: 'syz.2.887': attribute type 7 has an invalid length. [ 136.649055][ T8856] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 136.654446][ T8856] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 136.740336][ T8858] netlink: 'syz.2.888': attribute type 21 has an invalid length. [ 136.808522][ T40] audit: type=1400 audit(2000000033.698:581): avc: denied { write } for pid=8859 comm="syz.2.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 136.809976][ T8860] netlink: 596 bytes leftover after parsing attributes in process `syz.2.889'. [ 137.007081][ T40] audit: type=1400 audit(2000000033.885:582): avc: denied { getopt } for pid=8874 comm="syz.3.893" lport=46093 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 137.299932][ T40] audit: type=1400 audit(2000000034.157:583): avc: denied { read } for pid=8894 comm="syz.2.899" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 137.309549][ T40] audit: type=1400 audit(2000000034.157:584): avc: denied { open } for pid=8894 comm="syz.2.899" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 137.438750][ T8898] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 137.440350][ T8899] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 137.501836][ T40] audit: type=1400 audit(2000000034.344:585): avc: denied { listen } for pid=8900 comm="syz.2.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.594928][ T8908] xt_SECMARK: invalid mode: 2 [ 137.597827][ T8908] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 137.615565][ T8908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.856672][ T8922] netlink: 'syz.3.907': attribute type 10 has an invalid length. [ 137.864635][ T8922] netlink: 2 bytes leftover after parsing attributes in process `syz.3.907'. [ 137.881006][ T8922] team0: entered promiscuous mode [ 137.883498][ T8922] team_slave_0: entered promiscuous mode [ 137.886224][ T8922] team_slave_1: entered promiscuous mode [ 137.964277][ T40] audit: type=1400 audit(2000000034.774:586): avc: denied { watch watch_reads } for pid=8933 comm="syz.0.911" path="/321/file0" dev="tmpfs" ino=1727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.055247][ T40] audit: type=1400 audit(2000000034.867:587): avc: denied { ioctl } for pid=8946 comm="syz.0.913" path="socket:[21502]" dev="sockfs" ino=21502 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.083409][ T40] audit: type=1800 audit(2000000034.886:588): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.915" name="file1" dev="overlay" ino=1184 res=0 errno=0 [ 138.090614][ T8948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=8948 comm=syz.2.915 [ 138.350639][ T8972] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 138.352527][ T8965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.664236][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.666499][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.027697][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.033889][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.038613][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.042976][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.046994][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.061344][ T6422] bond0: (slave netdevsim0): Releasing backup interface [ 139.129556][ T8986] nftables ruleset with unbound set [ 139.199257][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.925'. [ 139.288851][ T6422] bridge_slave_1: left allmulticast mode [ 139.291757][ T6422] bridge_slave_1: left promiscuous mode [ 139.296666][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.302392][ T6422] bridge_slave_0: left allmulticast mode [ 139.305837][ T6422] bridge_slave_0: left promiscuous mode [ 139.308694][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.927065][ T6422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.932825][ T6422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.938503][ T6422] bond0 (unregistering): Released all slaves [ 139.950528][ T6422] bond1 (unregistering): Released all slaves [ 140.038332][ T6422] bond2 (unregistering): Released all slaves [ 140.054351][ T8997] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 140.073546][ T8983] chnl_net:caif_netlink_parms(): no params data found [ 140.174511][ T9012] 9pnet: Unknown protocol version 9p20\++} [ 140.202574][ T6422] IPVS: stopping master sync thread 8195 ... [ 140.287546][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.290003][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.293396][ T8983] bridge_slave_0: entered allmulticast mode [ 140.306369][ T8983] bridge_slave_0: entered promiscuous mode [ 140.313412][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.317938][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.322707][ T8983] bridge_slave_1: entered allmulticast mode [ 140.325956][ T8983] bridge_slave_1: entered promiscuous mode [ 140.397273][ T8983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.406089][ T8983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.410934][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 140.466307][ T8983] team0: Port device team_slave_0 added [ 140.473120][ T8983] team0: Port device team_slave_1 added [ 140.548668][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.552002][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.554971][ T6422] batman_adv: batadv0: Removing interface: ipvlan3 [ 141.229246][ T5943] Bluetooth: hci1: command tx timeout [ 141.365630][ T6422] team0 (unregistering): Port device team_slave_1 removed [ 141.444422][ T6422] team0 (unregistering): Port device team_slave_0 removed [ 142.016776][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.019959][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.032289][ T8983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.054317][ T9047] bridge1: entered promiscuous mode [ 142.110959][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.113961][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.126715][ T8983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.161315][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 142.161333][ T40] audit: type=1400 audit(2000000038.712:595): avc: denied { map } for pid=9049 comm="syz.0.942" path="socket:[24777]" dev="sockfs" ino=24777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.221697][ T8983] hsr_slave_0: entered promiscuous mode [ 142.225334][ T8983] hsr_slave_1: entered promiscuous mode [ 142.228338][ T8983] debugfs: 'hsr0' already exists in 'hsr' [ 142.230710][ T8983] Cannot create hsr debugfs directory [ 142.405376][ T40] audit: type=1400 audit(2000000038.936:596): avc: denied { create } for pid=9057 comm="syz.3.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.414131][ T40] audit: type=1400 audit(2000000038.936:597): avc: denied { bind } for pid=9057 comm="syz.3.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.463807][ T8983] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.482266][ T8983] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.490939][ T8983] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.493893][ T6422] IPVS: stop unused estimator thread 0... [ 142.496224][ T9060] netlink: 'syz.3.945': attribute type 2 has an invalid length. [ 142.506550][ T9060] netlink: 10 bytes leftover after parsing attributes in process `syz.3.945'. [ 142.513496][ T8983] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.572538][ T6422] ------------[ cut here ]------------ [ 142.575292][ T6422] WARNING: CPU: 0 PID: 6422 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x289/0x310 SYZFAIL: failed to recv rpc [ 142.579347][ T6422] Modules linked in: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 142.581571][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: kworker/u32:16 Not tainted syzkaller #0 PREEMPT(full) [ 142.588466][ T6422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.592917][ T6422] Workqueue: netns cleanup_net [ 142.594692][ T6422] RIP: 0010:xfrm_state_fini+0x289/0x310 [ 142.596992][ T6422] Code: bb f7 90 0f 0b 90 e9 e7 fe ff ff e8 31 bb bb f7 90 0f 0b 90 e9 39 ff ff ff e8 23 bb bb f7 90 0f 0b 90 eb 8a e8 18 bb bb f7 90 <0f> 0b 90 e9 d5 fd ff ff e8 2a 2f 24 f8 e9 f8 fd ff ff e8 50 2f 24 [ 142.606308][ T6422] RSP: 0018:ffffc90006f2fa90 EFLAGS: 00010293 [ 142.609732][ T6422] RAX: 0000000000000000 RBX: ffff888037518000 RCX: fffff52000de5f23 [ 142.612979][ T6422] RDX: ffff88803312c900 RSI: ffffffff8a00b998 RDI: ffff88803312cd84 [ 142.616192][ T6422] RBP: ffff8880375194c0 R08: 0000000000000001 R09: 0000000000000000 [ 142.618988][ T8983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.619742][ T6422] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90006f2fbd8 [ 142.626072][ T6422] R13: dffffc0000000000 R14: fffffbfff2057bc0 R15: ffffffff902bdde0 [ 142.629875][ T6422] FS: 0000000000000000(0000) GS:ffff8880d69df000(0000) knlGS:0000000000000000 [ 142.633516][ T6422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.636611][ T6422] CR2: 000055558fd52808 CR3: 0000000051fb6000 CR4: 0000000000352ef0 [ 142.640024][ T6422] DR0: 000000000000000b DR1: 0000000000000000 DR2: 0000000000000000 [ 142.643747][ T6422] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 142.647064][ T6422] Call Trace: [ 142.648468][ T6422] [ 142.650008][ T6422] ? __pfx_xfrm_net_exit+0x10/0x10 [ 142.652544][ T6422] xfrm_net_exit+0x2d/0x70 [ 142.655217][ T6422] ops_undo_list+0x2eb/0xab0 [ 142.657229][ T6422] ? __pfx_ops_undo_list+0x10/0x10 [ 142.659459][ T6422] ? cleanup_net+0x347/0x8b0 [ 142.661691][ T6422] ? idr_destroy+0x62/0x2e0 [ 142.663898][ T6422] cleanup_net+0x41b/0x8b0 [ 142.666423][ T6422] ? __pfx_cleanup_net+0x10/0x10 [ 142.668769][ T6422] ? rcu_is_watching+0x12/0xc0 [ 142.670424][ T6422] process_one_work+0x9cf/0x1b70 [ 142.672048][ T6422] ? __pfx_process_one_work+0x10/0x10 [ 142.674141][ T6422] ? assign_work+0x1a0/0x250 [ 142.675738][ T6422] worker_thread+0x6c8/0xf10 [ 142.678172][ T6422] ? __pfx_worker_thread+0x10/0x10 [ 142.680731][ T6422] kthread+0x3c2/0x780 [ 142.683119][ T6422] ? __pfx_kthread+0x10/0x10 [ 142.685165][ T6422] ? rcu_is_watching+0x12/0xc0 [ 142.687111][ T6422] ? __pfx_kthread+0x10/0x10 [ 142.688971][ T6422] ret_from_fork+0x672/0x7d0 [ 142.690846][ T6422] ? __pfx_kthread+0x10/0x10 [ 142.693114][ T6422] ret_from_fork_asm+0x1a/0x30 [ 142.695118][ T6422] [ 142.696478][ T6422] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.700082][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: kworker/u32:16 Not tainted syzkaller #0 PREEMPT(full) [ 142.705232][ T6422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.709696][ T6422] Workqueue: netns cleanup_net [ 142.711772][ T6422] Call Trace: [ 142.713143][ T6422] [ 142.714368][ T6422] dump_stack_lvl+0x3d/0x1f0 [ 142.716552][ T6422] vpanic+0x640/0x6f0 [ 142.718397][ T6422] ? xfrm_state_fini+0x289/0x310 [ 142.720575][ T6422] panic+0xca/0xd0 [ 142.722053][ T6422] ? __pfx_panic+0x10/0x10 [ 142.724160][ T6422] ? check_panic_on_warn+0x1f/0xb0 [ 142.726516][ T6422] check_panic_on_warn+0xab/0xb0 [ 142.728923][ T6422] __warn+0xf6/0x3c0 [ 142.730908][ T6422] ? xfrm_state_fini+0x289/0x310 [ 142.733275][ T6422] report_bug+0x3c3/0x580 [ 142.734999][ T6422] ? xfrm_state_fini+0x289/0x310 [ 142.736750][ T6422] handle_bug+0x184/0x210 [ 142.738515][ T6422] exc_invalid_op+0x17/0x50 [ 142.740545][ T6422] asm_exc_invalid_op+0x1a/0x20 [ 142.742131][ T6422] RIP: 0010:xfrm_state_fini+0x289/0x310 [ 142.744493][ T6422] Code: bb f7 90 0f 0b 90 e9 e7 fe ff ff e8 31 bb bb f7 90 0f 0b 90 e9 39 ff ff ff e8 23 bb bb f7 90 0f 0b 90 eb 8a e8 18 bb bb f7 90 <0f> 0b 90 e9 d5 fd ff ff e8 2a 2f 24 f8 e9 f8 fd ff ff e8 50 2f 24 [ 142.753089][ T6422] RSP: 0018:ffffc90006f2fa90 EFLAGS: 00010293 [ 142.755757][ T6422] RAX: 0000000000000000 RBX: ffff888037518000 RCX: fffff52000de5f23 [ 142.759012][ T6422] RDX: ffff88803312c900 RSI: ffffffff8a00b998 RDI: ffff88803312cd84 [ 142.761735][ T6422] RBP: ffff8880375194c0 R08: 0000000000000001 R09: 0000000000000000 [ 142.764856][ T6422] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90006f2fbd8 [ 142.768310][ T6422] R13: dffffc0000000000 R14: fffffbfff2057bc0 R15: ffffffff902bdde0 [ 142.771518][ T6422] ? xfrm_state_fini+0x288/0x310 [ 142.773895][ T6422] ? __pfx_xfrm_net_exit+0x10/0x10 [ 142.776202][ T6422] xfrm_net_exit+0x2d/0x70 [ 142.778160][ T6422] ops_undo_list+0x2eb/0xab0 [ 142.779740][ T6422] ? __pfx_ops_undo_list+0x10/0x10 [ 142.781342][ T6422] ? cleanup_net+0x347/0x8b0 [ 142.783188][ T6422] ? idr_destroy+0x62/0x2e0 [ 142.784823][ T6422] cleanup_net+0x41b/0x8b0 [ 142.786761][ T6422] ? __pfx_cleanup_net+0x10/0x10 [ 142.789125][ T6422] ? rcu_is_watching+0x12/0xc0 [ 142.792076][ T6422] process_one_work+0x9cf/0x1b70 [ 142.794704][ T6422] ? __pfx_process_one_work+0x10/0x10 [ 142.797058][ T6422] ? assign_work+0x1a0/0x250 [ 142.799047][ T6422] worker_thread+0x6c8/0xf10 [ 142.801018][ T6422] ? __pfx_worker_thread+0x10/0x10 [ 142.803150][ T6422] kthread+0x3c2/0x780 [ 142.804888][ T6422] ? __pfx_kthread+0x10/0x10 [ 142.806861][ T6422] ? rcu_is_watching+0x12/0xc0 [ 142.809210][ T6422] ? __pfx_kthread+0x10/0x10 [ 142.811379][ T6422] ret_from_fork+0x672/0x7d0 [ 142.813707][ T6422] ? __pfx_kthread+0x10/0x10 [ 142.816711][ T6422] ret_from_fork_asm+0x1a/0x30 [ 142.819155][ T6422] [ 142.821372][ T6422] Kernel Offset: disabled [ 142.823195][ T6422] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:20:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852f8a55 RDI=ffffffff9ae017e0 RBP=ffffffff9ae017a0 RSP=ffffc90006f2f400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9ae017a0 R15=ffffffff852f89f0 RIP=ffffffff852f8a7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558fd52808 CR3=0000000051fb6000 CR4=00352ef0 DR0=000000000000000b DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb3b46c40 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc27a12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc27a12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc27a12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc27a12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc27a1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc27a1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000e0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000e0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffed100770a059 RBX=ffffed100770a05a RCX=ffffffff823f151d RDX=0000000000000001 RSI=0000000000000004 RDI=ffff88803b8502c8 RBP=ffffed100770a059 RSP=ffffc9000366fd48 R8 =0000000000000001 R9 =ffffed100770a059 R10=ffff88803b8502cb R11=0000000000000000 R12=ffff88801f6b2028 R13=ffff88803b8500c0 R14=ffff88803b8500e8 R15=ffff88803b8502e0 RIP=ffffffff8224e17f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558329e500 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c37f55a CR3=000000004aac7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008208080 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedc19dd10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fea12f93 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fea12f8b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fea12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fea12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fea12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fea12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fea1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7fea1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6874657600656764 6972625f6f745f31 6874657600656764 6972625f6f745f30 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6874657600316874 6576003068746576 00306e6170737265 0030657267367069 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff82097eab RDX=ffff88802541c900 RSI=ffffffff82097ec3 RDI=0000000000000007 RBP=0000000000000005 RSP=ffffc9000413f818 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00007f5b16ffb000 R13=ffff8880521c0fd8 R14=dffffc0000000000 R15=ffffea0000e5c908 RIP=ffffffff81bc74c7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5b1e317d60 CR3=0000000025a19000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b1d7b76c3 00007f5b1d7b76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc353b1860 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555890dfe57 00005555890df6d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555890d8f96 00005555890d8b20 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666e69746e756f6d 01ffffffffffffff ffeb080780030480 0408100000040280 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010180c0100001d2 8004010000060806 060151c000020007 0780040008000401 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 75e000020007006f 666e69746e756f6d 01ffffffffffffff ffeb080780030480 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0408100000040280 040180040a0142ae 0002000700020004 d00358020004ce03 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000ca40004aa037a 020004a803646975 746c666401ffffff fffffffffff10804 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=00000000000000ba RCX=ffffffff84609c74 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff888026ea7e40 RBP=dffffc0000000000 RSP=ffffc90003faf710 R8 =0000000000000003 R9 =0000000000000100 R10=00000000000000ba R11=0000000000000000 R12=ffffc90003faf808 R13=ffff888026ea7e30 R14=00000000000000ba R15=0000000000000000 RIP=ffffffff8224e110 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555570824500 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffdb3b45f00 CR3=000000004f869000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde2883230 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1cf8a12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1cf8a12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1cf8a12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1cf8a12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1cf8a1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1cf8a1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000