last executing test programs: 59.559669437s ago: executing program 1 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x6000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x2, 0x2, 0x1, 0x0, 0x98, 0x10000}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 59.558540495s ago: executing program 1 (id=368): r0 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffc, 0x80402) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000094fc440000000000000000090000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000000000000850000008d0000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x1}, 0x94) (async) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x1dcc00) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x1, "96e67ad2d329458afe83c910c40800000000000000000000000000f000"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3, 0xcccccccc}) (async, rerun: 64) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) (async, rerun: 64) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64) connect(r5, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010101}}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r3], &(0x7f0000000200), &(0x7f00000000c0)=[r4], &(0x7f0000000040), 0x0, 0x300}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendfile(r5, r6, &(0x7f0000000640)=0x8, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x4, 0x3, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000540)={r8, 0x8, &(0x7f0000000480)=[0x3, 0x0, 0x7, 0x6, 0x92, 0x10bd, 0x200, 0x90], &(0x7f00000004c0)=[0x4e, 0x6fd4, 0x0, 0xc, 0x4, 0xa50f, 0x4, 0x363], &(0x7f0000000500)=[0x7f, 0x200]}) r9 = syz_open_dev$dri(&(0x7f0000000580), 0x3ff, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) (async) close_range(r10, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01864ba, &(0x7f00000005c0)={0x100, 0x0, r8, 0xe0e0e0e0}) (rerun: 32) 59.489424959s ago: executing program 1 (id=371): r0 = syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5c14d826, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r7, 0x7f37}, 0x8) shutdown(r4, 0x1) syz_open_dev$mouse(&(0x7f0000000100), 0x1daee3d8, 0x16882) 59.429259836s ago: executing program 1 (id=373): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x88) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB='quota,huge=never,grpquota_inode_hardlimit=-8,huge=advise,appraise_type=imasig,smackfsroot=\x00,appraise_type=imasig,o+{,ha{h,\x00'/135]) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_io_uring_complete(0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000700)="e93abf644bed684a15a2c755d6b300f3708b9cc1035610ecc92d7ecfa1863193ceafd26e052954632f944f784aa4a2f896f95fd2aa6d775a13e3a7e0268bf8d31942f0ba24e013314ab500c99f24f592d530bb9b32e2dc30c2149e59723a4393bd21fd13ed4d9700780c5feb5f85ca4701411cc5c267558981417efd3633f68bc441af3e60d4cd05040fe510f7cb58dec39919a8e860f05d7007f0634dea2499f612b338c7597023ab8ded26360a0d763f91d4d80a5fe6ce2420fd8e14e694e5e2c5998f6917f678c07c5616141ecf6cb8d1a108470e75", 0xd7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0x0, 0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000200)={0x7, &(0x7f0000000180)=[{0xad, 0x8, 0x9, 0x3}, {0x7, 0x0, 0xb, 0x100}, {0x80, 0x9, 0xf2, 0x9}, {0x1, 0x7, 0x5, 0x800}, {0x9e9, 0xc, 0xed, 0x401}, {0x4, 0xc, 0x1, 0x7}, {0x3, 0x1, 0x6, 0xfff}]}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) r3 = socket(0x15, 0x5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40120}, 0x20008041) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES64=r3], 0x20) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000240), &(0x7f0000000280)=0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x138, 0x18, 0x200, 0xfffffffe, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@loopback, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2e}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x1, 0xfffffffc}, 0x80, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 59.107928122s ago: executing program 1 (id=377): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086603, &(0x7f0000000040)) (async) ioctl$KDDELIO(r0, 0x4b35, 0x3) 58.758945295s ago: executing program 1 (id=386): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000000440)=""/182, 0xb6}], 0x2}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x11002, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) close(r0) 58.734653356s ago: executing program 32 (id=386): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000000440)=""/182, 0xb6}], 0x2}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x11002, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) close(r0) 12.380725235s ago: executing program 4 (id=985): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4040011) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x100848d0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$dri(&(0x7f0000000040), 0xa715, 0x40840) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) recvmsg(r3, &(0x7f0000000740)={&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f0000000540)=""/125, 0x7d}, {&(0x7f00000005c0)=""/28, 0x1c}, {&(0x7f00000006c0)=""/98, 0x62}], 0x6}, 0x4000) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) splice(r6, 0x0, r7, &(0x7f00000002c0)=0xe, 0xffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x200000}]}, 0x10) write$selinux_context(0xffffffffffffffff, &(0x7f0000000880)='system_u:object_r:sendmail_exec_t:s0\x00', 0x25) 12.279173724s ago: executing program 4 (id=986): iopl(0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="cb9d2f3b1672e06590ada2fc593b4c000000", @ANYRES16=r2, @ANYBLOB="030a7216371fff69346932f300000000fedbdf259e00000030002f800c001200000001000100080001000300000005000200000000000800f04cbbb4fa000000000000000000000065ced66697472f6c0cd06f7c1134d171f55f54c921c653deeca1bdeff532f38539b44a33be93f7aff58e4531e12e1c82c7", @ANYRES32=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r6 = dup(r0) read$FUSE(r6, 0x0, 0x2) write$FUSE_INIT(r6, &(0x7f0000002100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40812008, 0xffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x515244b379a1e22c, 0x7}}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x40}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0xff) r10 = dup2(r9, r9) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000280)={0x4, 0x10, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0]}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$SIOCRSGCAUSE(r10, 0x89e0, &(0x7f0000000000)) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000001c0)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001800010000000000000000000200000002000009002200000600150002000000200016801c0002"], 0x44}, 0x1, 0x0, 0x0, 0x10001}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x4090, 0x0) syz_io_uring_setup(0x35ea, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000200)={0x100, 0x2, 0x2, 0x9, 0x15, "b5cfa74781a806d2e7eb2fc9347cbda432119d"}) 12.146912432s ago: executing program 4 (id=987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xe1, 0x0, 0x1, [@generic="9e1b73d1fa90f57f0c5dfbe64c0cbb59b43d4d13905a9670479f21c67da9eb32a7ac03bf90d9c3f733a58daf7f832f6db521e0f6ba90beb3973c2e335ecb2b37b1f82b2e06"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000000c0)="f3470f2207c4e2198c1c5966b8f7000f00d866b881008ec066b88c008ee0c4a2b196e066b8d7008ec00f01df0f20c035200000000f22c0df878f4a0000", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x7ff, 0x800000000000008, 0x9, 0x7fffffff, 0x6, 0x5, 0x1, 0xb608, 0x6, 0x2, 0xfffffffffffffe01, 0x7fffffffffffffff, 0xc6b, 0x3, 0x42, 0x101], 0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xe1, 0x0, 0x1, [@generic="9e1b73d1fa90f57f0c5dfbe64c0cbb59b43d4d13905a9670479f21c67da9eb32a7ac03bf90d9c3f733a58daf7f832f6db521e0f6ba90beb3973c2e335ecb2b37b1f82b2e06"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000000c0)="f3470f2207c4e2198c1c5966b8f7000f00d866b881008ec066b88c008ee0c4a2b196e066b8d7008ec00f01df0f20c035200000000f22c0df878f4a0000", 0x3d}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x7ff, 0x800000000000008, 0x9, 0x7fffffff, 0x6, 0x5, 0x1, 0xb608, 0x6, 0x2, 0xfffffffffffffe01, 0x7fffffffffffffff, 0xc6b, 0x3, 0x42, 0x101], 0x0, 0x1000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11.974311071s ago: executing program 4 (id=988): r0 = memfd_create(&(0x7f0000000300)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r0, 0x400000) finit_module(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000005c0)={{r0}, "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"}) 11.91282175s ago: executing program 4 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000000180)) r1 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x8001af85, &(0x7f0000000080)={0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x6, 0x0, 0xa, @rand_addr=' \x01\x00', @private2, 0x8, 0x20, 0x8, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="1808ff00000000000000000000851000000600000818000000", @ANYRES32, @ANYBLOB="00000000000000006408000000000000180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000000180)) (async) socket$unix(0x1, 0x1, 0x0) (async) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r2, 0x8001af85, &(0x7f0000000080)={0x1}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x6, 0x0, 0xa, @rand_addr=' \x01\x00', @private2, 0x8, 0x20, 0x8, 0x3}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="1808ff00000000000000000000851000000600000818000000", @ANYRES32, @ANYBLOB="00000000000000006408000000000000180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) 11.912120431s ago: executing program 4 (id=990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {}, [], {{0x5, 0x1, 0xb, 0x0}, {}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000a80)='GPL\x00'}, 0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1ff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r0, 0x7}, 0x8) 1.999902191s ago: executing program 2 (id=1064): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x80000001, 0x4, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=0x0], 0x14}}, 0x40080) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000000c0)={@id={0x2, 0x0, @c}}) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000000c0)={@id={0x2, 0x0, @c}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=@newtfilter={0xf5c, 0x2c, 0xd27, 0x30ad29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0x0, 0x9}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xf28, 0x2, [@TCA_MATCHALL_ACT={0xf24, 0x2, [@m_ctinfo={0x50, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x511, 0x8, 0x1, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xed0, 0x1b, 0x0, 0x0, {{0xa}, {0xe88, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0xf52d, 0xfffffffffffffffd, 0x5, 0x6}, 0x7, 0x2, [{0x10000, 0x2c1, 0x0, 0xfffffff9, 0x3, 0xe}]}, [{0x9, 0x2, 0x8001, 0x2, 0x1}, {0xffffff80, 0x7, 0x7, 0x1a7c00, 0x7, 0x6}, {0x7, 0x80000000, 0x5, 0x9, 0x4, 0x1}, {0x20000000, 0x7fffffff, 0x200, 0x1, 0x7, 0x4e}, {0x7, 0x400, 0x1, 0x1, 0xdf8}, {0xe, 0x3, 0x8, 0x8, 0x4, 0x269c0a43}, {0x8, 0x3, 0x2, 0xd32d, 0x86, 0x7}, {0x4, 0x0, 0x314, 0x2181d1db, 0x7fff, 0x3ff}, {0x0, 0x2, 0x3, 0x800, 0x3, 0x7}, {0x9, 0xdd, 0x0, 0x4, 0xda96, 0x2}, {0x5, 0x1e, 0x200, 0xaf, 0x400, 0x1}, {0xb65, 0x7, 0x1, 0x9, 0xd, 0xd}, {0x8, 0x1ff, 0x2, 0x39d9, 0x8, 0x10000}, {0x600, 0x9, 0xf, 0x1, 0x200, 0x5}, {0x1, 0x1, 0x7, 0x3, 0x400, 0xffffffff}, {0x6, 0x553edb52, 0x7, 0x2, 0xff, 0x7fff}, {0x6, 0x43, 0x1, 0x62625eab, 0xe7, 0x6}, {0x2, 0x0, 0x400, 0x4, 0xf, 0x4}, {0x8, 0x6, 0x5, 0x8000, 0x5a7a, 0x6}, {0x2, 0x7, 0xe5, 0x5, 0x9, 0x3}, {0x4, 0x81, 0x7, 0x7, 0x2}, {0x7d228d50, 0x7ff, 0x2, 0x5, 0x5, 0x9}, {0x6, 0x2, 0xf4, 0x0, 0x1000, 0xc59}, {0x9a2, 0x800, 0x7, 0x0, 0x1, 0xe}, {0x1, 0x6, 0x100, 0x1, 0x7, 0x7}, {0x2, 0x2, 0x3, 0x9, 0x3f1, 0x1}, {0x1000, 0x5, 0x7, 0x81, 0x80000000, 0x1}, {0xe, 0x3, 0x3, 0x2, 0x0, 0x3}, {0x99e, 0x6, 0x4, 0x10000, 0x70d}, {0x8, 0xcc198f8, 0x0, 0xa00000, 0x1, 0x8}, {0xd759, 0x200, 0x276e, 0x0, 0x8001, 0x8}, {0x6, 0x1, 0x52fe5e81, 0x9, 0x80000001, 0x7}, {0x7fff, 0x97, 0x5f, 0x2, 0x5, 0x1000}, {0x40, 0x800, 0x9, 0x9, 0x100, 0x8653}, {0x1, 0x84, 0x58b6e9ed, 0x7, 0x400, 0x36d61d2d}, {0x7ff, 0x0, 0x3, 0x90b, 0x3, 0x1}, {0x4, 0x1, 0x80000001, 0xd, 0xfff, 0x6}, {0x1, 0x38f1, 0x4, 0xcd66, 0x6a81, 0x9}, {0x1, 0x3f21, 0x80000000, 0x1, 0x435}, {0x8, 0x3, 0x2, 0x7ee3, 0x2, 0x9}, {0x8e7e, 0xfffffff3, 0x2, 0x1, 0x3, 0x200}, {0x40, 0xffff, 0xcfd4, 0x3, 0x0, 0x8c}, {0x0, 0x101, 0x8, 0x1, 0x5, 0x9}, {0x7899, 0x46a, 0x7, 0x7, 0x2, 0x3}, {0x3, 0x61, 0x207, 0x1000, 0x35404df7, 0x101}, {0x1, 0x9, 0x6, 0x0, 0x8, 0xfffffffd}, {0x11, 0x1, 0x3, 0x9, 0x6, 0x1c0000}, {0xe2d7, 0x2, 0x3, 0x0, 0x7fffffff, 0xd}, {0xe, 0x8, 0x7, 0x3, 0xffff, 0x1000}, {0x101, 0x8, 0x5f, 0x0, 0x7ff, 0x7}, {0x6, 0x23, 0x0, 0x1, 0x721f, 0xe}, {0x4, 0x5, 0x6, 0x65d, 0x798, 0x4}, {0x2, 0x8, 0x8, 0x0, 0x9, 0x4}, {0x8000, 0x3, 0x8, 0x100, 0x2, 0x7}, {0x3, 0x1, 0x7, 0x401, 0x7fff, 0x6}, {0x97, 0x3, 0x4, 0xfffffe01, 0x40, 0x6}, {0x812, 0x5, 0x1000, 0x1, 0x7fff, 0x6}, {0x10001, 0x2, 0x2, 0xf36c, 0xffffffff, 0x8}, {0x253, 0x6, 0xd, 0x4, 0x887, 0x1}, {0x8, 0x3, 0x1, 0x6, 0xfffffff7, 0x4}, {0x40, 0x0, 0x2, 0x5, 0x1, 0x77ed}, {0x9, 0x2, 0x64223350, 0x1000, 0x0, 0x9}, {0xd7, 0xb, 0x3, 0x4, 0x9}, {0x3, 0x5, 0x1000, 0x3ff, 0xff800000, 0x54}, {0x5, 0x1, 0x9, 0x400, 0xfffffffb, 0x6}, {0x7, 0xfffff801, 0x72, 0x4e097190, 0xd6}, {0x3ff, 0x5, 0x4, 0x8, 0x80, 0xfc}, {0xfffffed7, 0x2, 0x7, 0x1, 0x8, 0x8001}, {0xffff, 0x8, 0x5, 0x6, 0xfffffffb, 0x4}, {0x6, 0xaaa6, 0xffffff50, 0x1000, 0x5, 0x1}, {0xf, 0x7fffffff, 0x11d, 0xda, 0x5, 0x80000001}, {0x240, 0x8, 0x9, 0x7b6, 0xf, 0xffffff35}, {0x4, 0x67060adb, 0x9, 0x4bde, 0xa, 0xac6}, {0x1e000000, 0x7, 0x9, 0x72fc, 0x8, 0x4}, {0x1, 0x1ff, 0x400, 0x600000, 0x100, 0x4}, {0x2, 0xfffff000, 0x81, 0xe, 0x9, 0x7}, {0x8, 0xc099, 0x1, 0x3, 0x7, 0xa41f}, {0x7, 0x400, 0x5, 0x0, 0x442f, 0x380000}, {0x6, 0x80, 0x2, 0x2, 0x10, 0x1}, {0x19d1a5f6, 0x17, 0xfff, 0x7fffffff, 0x6, 0x3}, {0x0, 0x6, 0x1, 0x0, 0xc4, 0x2}, {0x7, 0xe5, 0xa, 0x13e, 0x14371351, 0x2}, {0x100, 0x7, 0x80, 0x2, 0x7f, 0x2}, {0x7f, 0x2, 0x7e24, 0x39e, 0x19f, 0x10}, {0x1, 0xbe0e, 0x8, 0x0, 0x8001, 0x8000}, {0x1, 0xfff, 0x8000, 0xffffffff, 0x6, 0x4c97}, {0x800, 0x2, 0x4, 0xf, 0x79c}, {0xd58, 0x8, 0xffffffff, 0x1, 0x5, 0x7ff}, {0xfffff3d3, 0x10040, 0xa1, 0xf, 0x1, 0x7fff}, {0x2, 0x7, 0xffffffff, 0x2, 0x9, 0x8000}, {0x401, 0x282b, 0x10000, 0x301, 0x1ff, 0x5}, {0x1000, 0x1, 0x7, 0x6, 0x7d0, 0xfffffff8}, {0x360, 0x8001, 0x5, 0x10000, 0x51ae8048, 0x9}, {0x40, 0x310380c4, 0x6, 0x7, 0x8dcf, 0xc912}, {0x2, 0xfffffff8, 0xf9fa, 0x6, 0x2, 0xff}, {0x2, 0xe208, 0x5, 0x400, 0x1, 0x9}, {0x5, 0x9, 0x5, 0x1, 0x7fffffff, 0x43f1}, {0xfffffff8, 0x200, 0x8, 0x7, 0x9, 0xfffffffb}, {0x8cf, 0x6, 0xa, 0xa34, 0xf, 0x8}, {0x0, 0x100, 0x99e, 0x1, 0x401, 0x6}, {0x40, 0x3, 0x7fffffff, 0x1, 0x1ff}, {0x10001, 0x5e83, 0x3, 0x2591, 0xfbd, 0xf8b3}, {0xffff, 0xa57a71d, 0x1ff, 0x2, 0x7, 0x6}, {0x15b, 0x9, 0x200, 0xef, 0x0, 0x6}, {0x5, 0x7, 0x3, 0x71b0, 0x2, 0x2}, {0xa, 0x5, 0x3f, 0x8001, 0x0, 0x6}, {0x3, 0x1ff, 0x8, 0x0, 0x7, 0x7}, {0x1, 0x1, 0x804a, 0xfffff180, 0x7fff, 0x1}, {0x8, 0x6, 0x2, 0x9, 0x4, 0x8001}, {0x8, 0x10, 0x1, 0xac, 0x1000, 0x3}, {0x2, 0x92, 0x9, 0x2, 0x40, 0x12}, {0x7, 0xd, 0x6, 0xffff8e9f, 0x5224, 0x8}, {0x2, 0x83b5, 0x6, 0x7, 0x8, 0x3}, {0x7, 0xffffffff, 0x6, 0xc, 0x9, 0x7}, {0x6, 0x522880, 0x9e6, 0x5, 0x1, 0x6}, {0x7, 0x4, 0x9, 0x9, 0x6, 0x3}, {0x100, 0x10, 0x0, 0x1, 0xd, 0x71}, {0x7, 0x3, 0x7, 0x737, 0x8001, 0x2}, {0xcde1, 0x3, 0x1722, 0x4, 0xc2, 0x2}, {0xd8, 0x67800, 0x4, 0x2, 0x6, 0x1dd}, {0x8, 0x37c28f4c, 0x5, 0x1, 0x5fd, 0x7}, {0x9, 0x7, 0xfffffff7, 0x3, 0x8, 0x4}, {0x40, 0xa, 0x1, 0x8, 0x4, 0x100000}, {0xffffff01, 0x81, 0x0, 0x9, 0x6, 0x9}, {0x3, 0x5, 0xcd7, 0x1, 0x8, 0x1000}, {0x4, 0x8, 0x4a, 0x5, 0x4, 0xc}, {0x7fff, 0x2, 0x2, 0xff, 0xcdf, 0x1}, {0x0, 0x1, 0x426bce66, 0xb, 0x8, 0x4}], [{0x2, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x5}, {}, {}, {0x3}, {}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x5}, {0x0, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x0, 0x2}, {0x3}, {0x2}, {0x1}, {0x7, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2, 0x7293617dcf791b21}, {0x6, 0x1}, {}, {0x1}, {0x0, 0xd5d5379d1836225c}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {}, {0x2}, {0x1}, {0x2}, {0x5}, {0x2}, {0x4}, {0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x3}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x8a7153df052c71a7}, {0x2}, {0x0, 0x1}, {}, {}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x7, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}], 0x10}}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x1e, 0x6, "8f16e58eae7316a2d0717dc2de7f71fe6f34be52b263985807fe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xf5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000240)="b805000000b9007000000f01c1b9800000c00f3235000400000f300fc7980b00000066b8a9000f00d80f08260f20dbc74424000e6b0000c744240200700000c7442406000000000f011c2466baf80cb8e5d0ff8fef66bafc0cecb9050300000f32260f01ca", 0x65}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000240)="b805000000b9007000000f01c1b9800000c00f3235000400000f300fc7980b00000066b8a9000f00d80f08260f20dbc74424000e6b0000c744240200700000c7442406000000000f011c2466baf80cb8e5d0ff8fef66bafc0cecb9050300000f32260f01ca", 0x65}], 0x1, 0x4, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES16=r4, @ANYRES8=r6], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fanotify_mark(0xffffffffffffffff, 0x20, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r7}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0900000004000000011000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000799f37af0000000000a277ed47594dba86615bf27b000000000000202ef95ff304134a8546511b6200c085e6eb8009cb303e910ffbc8fd6b6dfe58e6edced8a03edcb0641fa9afa46ec6f083617cdd64b108b54308840cff2320b220a544afde776ead06b13cf69f3a16c963f68aa2404bc99477e3177728b2f694da00000000000000000000b695d1d07022d3c2603d4dfc66902c5c7d47079050bda1ffeb65ac4f5bdf0663cfcd21b2009fa1d8ade3d456e84a26ba9a4c20a6a8f24c6997bddc2c32aca52851e734ac480912e1fce66d3facebfe18ad0214c9ca792cbdbe", @ANYRES32=0x0, @ANYRESOCT=r8, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r12}, 0x10) close(r9) close(r13) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r14 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r14, 0x0, 0x0) (async) bind$l2tp6(r14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.83041038s ago: executing program 2 (id=1065): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.829761903s ago: executing program 2 (id=1066): ioprio_set$pid(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r0, r0, 0x0, 0x7f03) accept(r0, &(0x7f0000000180), &(0x7f0000000040)=0x80) 1.770782379s ago: executing program 2 (id=1067): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) r2 = syz_open_procfs(r0, &(0x7f00000001c0)='numa_maps\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.400556932s ago: executing program 3 (id=1075): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000080)='0', 0x1) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) (async) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038100000086dd62a341d000081101fc020000000000000000000000000000fe80000000000000000000000000002e4e204e2300089078cfc6d3e9899df0524c503eea539e3fffa01710354e"], 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='coredump_filter\x00') read$FUSE(r4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r5, &(0x7f0000000180)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) (async) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x5, 0xa000, 0x8, 0xe, 0x5, 0x10, 0x0, 0x0, 0x100, 0x904}}, 0x50) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f0000000300)) (async) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000080)={0x942, 0x4, 0xf36, 0x7, 0xfa6, 0xffff}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000000008c5d673ef776aaaaaaaaaabb88a84d00810026000800452300440065000040069078e0000001ac1414bb000000000000000000004e2300004e230000000200000000000000000000000000000000000000000000000000000000f34277025dfc73bb1b9bb6"], 0x5e) 1.399800617s ago: executing program 3 (id=1076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$cgroup_int(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000150a000000000000000600000000000a0900010073797a31000000002e51bf5ae28ebe9d6512396d65e7c2122b5ead000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000014c0)="ba4200edbaf80c66b8143de18866efbafc0c66b80080000066ef2e36640f2b11660f3880a871bdbaf80c66b8788be58666efbafc0c66edba420066edbaa10066ed0f01d7baf80c66b806aae58f66efbafc0cb0b7ee670f01c8", 0x59}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x40000000002, 0x1, 0x0, 0x0, 0x800000020bd, 0x4, 0x67, 0x225561e6, 0x4d, 0x3, 0x27fc, 0x14db, 0x80000001, 0x1, 0x251, 0x20], 0x4, 0x4302}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_dev$video(&(0x7f00000001c0), 0x8, 0x523900) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000fef000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x9f7c) 1.219716532s ago: executing program 3 (id=1077): r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x8) (async) r1 = socket$kcm(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000001240)=[{{&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x56, &(0x7f0000000040)=[{&(0x7f00000000c0)="ea436d7a966329cd3d2473296c23b532ac0eba1cd0f6bd8ad842b2dc07175b611d1ef25d833fffad4b8341edb8bf5c942bae05f0c31a1498977d117c9f56a1126db8089844d476715dfe2acbe6ccfa4cf8045c946af9c5cfdcd8bd3706cac585e1349b6774e6df16845f16b35edb8746a75fe977f9eb5c0013674116a5d3f4616c758e7481b85f340b340336369e850c3380e283030a819735681e4284361f445427ec0ccbfb79de604862714e17066f56b45edaf5014d99c6dc7ad1231018a1cdecfca9d5022dcd36949c00007c9015dfee786b7ab495fd33ccd4ac370784dc647b7b5debb4da970bb25d09e18d", 0xfb}], 0x1}}, {{&(0x7f0000000980)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000bc0)="9b74", 0x2}], 0x1}}], 0x2, 0x4000080) 599.341603ms ago: executing program 2 (id=1086): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) r1 = accept4(r0, &(0x7f0000000100)=@caif=@rfm, &(0x7f0000000040)=0x80, 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000), 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 500.618149ms ago: executing program 2 (id=1088): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000008c0), 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000900)={r1, 0x2, 0x9, 0x843}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000000c0)='\xe3^zQ3y^K\xf6\xa4\x02']}, &(0x7f0000000a40)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x7}) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000480)={{0x401, 0xf08d}, 0x100, './file0\x00'}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) recvmsg$can_raw(r3, &(0x7f0000000840)={&(0x7f00000005c0), 0x80, &(0x7f0000000100)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000640)=""/227, 0xe3}], 0x2, &(0x7f0000000740)=""/237, 0xed}, 0x40000101) (async) fstatfs(r1, &(0x7f0000001a80)=""/99) 359.042093ms ago: executing program 3 (id=1089): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f0000000140)={0x3000000, 0x1000, 0x1}}) (async) syz_open_dev$usbfs(0x0, 0x205, 0x8401) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000300)={'\x00', 0x2c8, 0xc, 0x9, 0x0, 0x100, 0x5000, 0x10001, '\x00', 0x1}) close(0x3) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async, rerun: 64) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (rerun: 64) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000005c0)={0xfb, "bc940239a444a0fecbf6b94c61dbba913c9b8deb531aaef66a5760211c58b67507cdf77d2fd5830e375d8cd05f87797c057861c7e0df04e187edf30f26011c2048098d1894b0425d171edd0b7b755b38bdfcd241bac27843adb0f8ca699aca02c34ef5239fdb359c2a5e50958ce5ae9e4a79d3c5bfe2729d4df7e5de3cc74d6af1dabb5f9b2e20cb4a7cfdf1f28385748cd1df74deafb22d7ce26c019af059eecd275c20d0207199c106c3d680ab7d4e518c298b3e60b0e69a74b6c8403d2fe02d4ecb8f07a334e15bf43edcf157ba27a305ced441bfa3779a824c076c91b9047779dc45b61d96a9acf07d17fc71f984b7ae304c12118a8ea5d639"}) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180), 0x4) (rerun: 64) 358.40188ms ago: executing program 3 (id=1091): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = accept(r1, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000180)=@ethtool_per_queue_op={0x4b, 0xf, [0x0, 0x7, 0x9, 0x7, 0x8, 0x4800000, 0x2, 0x4, 0x10000, 0x2bc, 0x7, 0x7, 0x1000, 0x5, 0x69, 0x7, 0x1, 0x1cb, 0x0, 0x5, 0x3, 0x1000, 0x3, 0x6, 0x7, 0x4, 0x5, 0x0, 0x8, 0x6, 0x4, 0x5, 0x2, 0x400, 0x8, 0x2, 0x4, 0x2, 0x9, 0x80000000, 0x0, 0x1, 0x0, 0x6, 0x9, 0x5, 0x3, 0x532, 0x2b, 0x1, 0x1, 0x3, 0xe34c, 0x1, 0x2, 0x9, 0x3, 0x6, 0x6, 0x7ff, 0x9, 0x0, 0x2b, 0x8, 0xe7, 0x1, 0x5, 0x3, 0x1000, 0xfffffffb, 0x2, 0x81, 0x6, 0x6, 0x4, 0x8, 0xd03f1d0a, 0x0, 0x6a2f, 0x74, 0x6, 0x4, 0x5, 0x800, 0x7, 0x0, 0x76fa, 0x2, 0x0, 0xca9, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x9, 0x7, 0x5, 0x1, 0x40, 0x10001, 0x19c, 0x24a4, 0x4, 0x401, 0x7, 0x6, 0x80000001, 0x6, 0x9, 0x4, 0xc290, 0x4, 0x6, 0x0, 0x2, 0x9, 0x2, 0x7, 0x0, 0x80000000, 0x8, 0x4, 0x9, 0xfffffff8, 0x7, 0x4, 0x3], "ea888965016e1b6985e91ff22ae3da21892f82111abd7043f3f0a862a49f2be692f57da50be20a1c130962b05cfb1162c644b0c24e4c5e4d885e37530296a1d7fe131094e1bdf43810e8ed75756171a152f5242df130a7ee69563683788d16658d0d7e980e765c4e9573e181aa5f7b506b12"}}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000a31f428a768018f8b15a561c69dc02d4d0a8f180dd4bc1c57aac2aea8de918778a76499e0c44a7d20db1d05dc62ea01345", @ANYRES16=r3, @ANYBLOB="000828bd7000fddbdf250800000008000a0001000000080009000200000005001300050000000c0010000000000000000000050021000100000006000200010000000c0016000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x8801) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000000)="adbcc72ca6d732549f13db1a0206c458", 0x10) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0xffffffff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 310.840318ms ago: executing program 0 (id=1092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="3e440f01c8440f0966ba4000ed0f01c4660fc734d7f3410faedd0f01c2c421f9e6475866bad004ec0f23f9", 0x2b}], 0x1, 0x570ec83dad0c32fd, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 310.475274ms ago: executing program 3 (id=1093): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x100, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000300)={0x1, 0x80, 0xffffffff, 0xfffffffb, 0xffffffff, 0x101, 0x40, 0x9, 0x10, 0xa37d, 0x1, 0x0, &(0x7f0000000100), 0x0, 0x0}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000480)={{0x3, @rose}, [@default, @remote, @remote, @netrom, @remote, @rose, @default, @netrom]}, &(0x7f0000000200)=0x48) r4 = accept4$netrom(r3, &(0x7f0000000180)={{0x3, @bcast}, [@null, @bcast, @remote, @netrom, @null, @bcast]}, &(0x7f0000000000)=0x48, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r6 = socket$igmp(0x2, 0x3, 0x2) unshare(0x6020400) r7 = socket(0x1d, 0x2, 0x6) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ppoll(&(0x7f00000000c0)=[{r8, 0x600}, {r8, 0x9411}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x26, 0x2f, 0x0, @multicast2, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r9, 0xda7322e1f362a59c, 0x9, 0x41, 0xfffff758, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x40, 0x7, 0x6, 0x2}}) r10 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_pressure(r11, &(0x7f0000000280)='cpu.pressure\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) chdir(&(0x7f0000000280)='./file0\x00') read(r12, &(0x7f0000000040)=""/252, 0xfc) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r5, @ANYBLOB="5d2e60727a9d71499ff7cd5b0000108100000a0001000180c20000000000140035006272696467655f736c6176655f310000"], 0x40}}, 0x0) 150.072637ms ago: executing program 0 (id=1094): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x4200, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x3, 0xeeee0000, 0x2000, &(0x7f0000fef000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="912375666b9a641992903468a391aece31011aa4bd337ab200e065c9f2372045d0c64d3917f024c1ce0ccbb124900c7397d844518ba7b6c862e41211fbf70c0c25f1daba8d1dcd1f50e7a56ab1bd15456f2412405ecde8aa107373c68cc85c301c6e17f556e4e5adefa9f8a3150e7932e5a1e89aef7fbae2145da047ec11a8119968d6b9fbb1059657b1d04f084f6f46469e118f4863082f27b56bb8e5bfaabe7db2036ed86072bddd290e1d7c1200ed452417b1bf9b49dfdfe31297b2b7ee93c648c6353f5f62e0b3e284f9147d53b9768201ab460e3f547a46030e497cc7cd5042518e59197f15fba7005a1cab167fdbb636"], 0x3c}}, 0x20048880) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) rt_sigaction(0x19, &(0x7f0000000100)={&(0x7f0000000080)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000340)=r8}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) (async) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r10, 0xc0603d0f, &(0x7f0000000040)) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9, {0x81, 0x1}}, './file0\x00'}) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000040080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r11, 0x58, &(0x7f00000005c0)}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x4, 0x5, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x8, 0x7, 0x97, 0x6}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0xf41, 0x4) lsm_get_self_attr(0x2, 0x0, &(0x7f0000001280), 0x0) 50.522326ms ago: executing program 0 (id=1095): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r2, 0x0, 0x7, 0x3eb8bb, 0x3, &(0x7f0000000100)="57a1f9", 0x10000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000515d62ed000000000000000000000000850000002c00000040e20300080000009500000000000000e3e6a1d7ed5ed3d54a9c4df9814b033f4018e0d9ebf3c0e8a2ad90d210b22ea41011897a55a0a0e774f7845394e6eeec10cf12b8437fb31237d5d038c363227a032f4525bce4925b1853f5aa2a06fb22fd8c0700000000000000cc3372f4ddcc885407ef5f6ed04c6394f60d2cdafa8bd7fd0d73"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 50.092302ms ago: executing program 0 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x106, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @udp={{0x2c, 0x4, 0x1, 0x1, 0xf8, 0x64, 0x0, 0x3, 0x11, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@rr={0x7, 0x17, 0x6c, [@rand_addr=0x64010100, @remote, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x42}]}, @cipso={0x86, 0x46, 0x1, [{0x1, 0x6, "892d0b39"}, {0x2, 0x5, "61a8e2"}, {0x1, 0x3, "cc"}, {0x7, 0xe, "f777a3de64a2c2dce8160c1f"}, {0x6, 0xf, "494119fdf0e0d0de7390787b00"}, {0x2, 0xe, "3856c3a7a67e8e8e8694ac42"}, {0x7, 0x7, "1b6c56fe45"}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x1c, 0x0, 0x5}, @cipso={0x86, 0x30, 0xffffffffffffffff, [{0x1, 0x3, "8b"}, {0x7, 0xa, "82ad3ea9ae6d3748"}, {0x1, 0x11, "34967301aa6446eec9d0b513f7248a"}, {0x6, 0xc, "d29b2dbbed1f7f7fa011"}]}]}}, {0x4e23, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "eba46a6f476a5e6c7e09ebe7776bb6da5ba9bf3db70ee551", "9f87081234a72428d17c41b3eccfd101d4eda15c1a7a78b3360f5d6768ed0f5f"}}}}}}, 0x0) 744.088µs ago: executing program 0 (id=1097): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0xd, 0xe, 0x7, 0x8005, 0x5}) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000040)) 0s ago: executing program 0 (id=1098): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050023000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f350768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) sendto$inet6(r5, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) kernel console output (not intermixed with test programs): 0406 failed: -4 [ 56.898154][ T6273] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.965461][ T6321] netlink: 'syz.1.103': attribute type 2 has an invalid length. [ 57.143451][ T6333] capability: warning: `syz.1.106' uses deprecated v2 capabilities in a way that may be insecure [ 57.154890][ T6039] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.155100][ T6056] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.162391][ T6333] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 57.166560][ T6333] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 57.288073][ T6344] netlink: 'syz.3.107': attribute type 3 has an invalid length. [ 57.291004][ T6344] netlink: 'syz.3.107': attribute type 6 has an invalid length. [ 57.294378][ T6344] netlink: 'syz.3.107': attribute type 8 has an invalid length. [ 57.297389][ T6344] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 57.300353][ T6344] netlink: 'syz.3.107': attribute type 11 has an invalid length. [ 57.304398][ T6056] usb 5-1: device descriptor read/64, error -71 [ 57.324024][ T6039] usb 7-1: Using ep0 maxpacket: 32 [ 57.330905][ T6039] usb 7-1: unable to get BOS descriptor or descriptor too short [ 57.334440][ T6039] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 57.336809][ T6039] usb 7-1: can't read configurations, error -71 [ 57.452563][ T6352] misc userio: No port type given on /dev/userio [ 57.543860][ T6056] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.565717][ T6361] netlink: 'syz.1.110': attribute type 3 has an invalid length. [ 57.568823][ T6361] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 57.582852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.585166][ T6357] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 57.683851][ T6056] usb 5-1: device descriptor read/64, error -71 [ 57.795519][ T6056] usb usb5-port1: attempt power cycle [ 57.872008][ T6375] overlayfs: overlapping lowerdir path [ 57.937138][ T6380] syz_tun: entered allmulticast mode [ 57.984126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.020144][ T6383] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 58.029996][ T6383] cramfs: wrong magic [ 58.054528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.154027][ T6056] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.186896][ T6056] usb 5-1: device descriptor read/8, error -71 [ 58.203841][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 58.206394][ T6352] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 58.242491][ T3249] libceph: connect (1)[c::]:6789 error -101 [ 58.244962][ T3249] libceph: mon0 (1)[c::]:6789 connect error [ 58.265837][ T6403] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 58.275932][ T6403] cramfs: wrong magic [ 58.435786][ T6056] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.454730][ T6056] usb 5-1: device descriptor read/8, error -71 [ 58.505841][ T3249] libceph: connect (1)[c::]:6789 error -101 [ 58.509045][ T3249] libceph: mon0 (1)[c::]:6789 connect error [ 58.539901][ T6420] process 'syz.3.127' launched './file0' with NULL argv: empty string added [ 58.575739][ T6056] usb usb5-port1: unable to enumerate USB device [ 58.604488][ T6039] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 58.617105][ T6422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.735404][ T63] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 58.763836][ T6039] usb 7-1: Invalid ep0 maxpacket: 16 [ 58.904376][ T6039] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 58.915202][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 58.915671][ T5973] Bluetooth: hci2: command 0x0419 tx timeout [ 58.916684][ T5333] Bluetooth: hci1: command 0x0419 tx timeout [ 59.015025][ T3249] libceph: connect (1)[c::]:6789 error -101 [ 59.017205][ T3249] libceph: mon0 (1)[c::]:6789 connect error [ 59.054166][ T6039] usb 7-1: Invalid ep0 maxpacket: 16 [ 59.058694][ T6039] usb usb7-port1: attempt power cycle [ 59.248683][ T5973] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 59.259993][ T6441] : entered promiscuous mode [ 59.265888][ T6441] : left promiscuous mode [ 59.404314][ T6039] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 59.425710][ T6039] usb 7-1: Invalid ep0 maxpacket: 16 [ 59.554815][ T6039] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 59.574942][ T6039] usb 7-1: Invalid ep0 maxpacket: 16 [ 59.577407][ T6039] usb usb7-port1: unable to enumerate USB device [ 59.635500][ T6056] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.783874][ T6056] usb 6-1: Using ep0 maxpacket: 16 [ 59.788100][ T6056] usb 6-1: config 0 has no interfaces? [ 59.792833][ T6056] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 59.797439][ T6056] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.800707][ T6056] usb 6-1: Product: syz [ 59.802398][ T6056] usb 6-1: Manufacturer: syz [ 59.804082][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 59.804436][ T6056] usb 6-1: SerialNumber: syz [ 59.811645][ T6056] usb 6-1: config 0 descriptor?? [ 59.980298][ T29] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 59.983168][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 59.987027][ T29] usb 5-1: Product: syz [ 59.988537][ T29] usb 5-1: Manufacturer: syz [ 59.990166][ T29] usb 5-1: SerialNumber: syz [ 59.993874][ T29] usb 5-1: config 0 descriptor?? [ 59.998305][ T29] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 60.001480][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 60.005726][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 60.009496][ T29] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 60.012309][ T29] usb 5-1: media controller created [ 60.024965][ T6445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.028685][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 60.029622][ T6445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.055814][ T6458] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 60.057958][ T6445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.062186][ T6445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.199019][ T6453] cxusb: i2c rd: len=81 is too big! [ 60.199019][ T6453] [ 60.205942][ T29] cxusb: set interface failed [ 60.207543][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 60.229786][ T29] DVB: Unable to find symbol mt352_attach() [ 60.231884][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 60.234435][ T29] zl10353_read_register: readreg error (reg=127, ret==-121) [ 60.236807][ T29] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 60.274084][ T5973] Bluetooth: hci0: command 0x0419 tx timeout [ 60.284078][ T29] rc_core: IR keymap rc-dvico-mce not found [ 60.285991][ T29] Registered IR keymap rc-empty [ 60.289440][ T29] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 60.293588][ T29] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input6 [ 60.300208][ T29] dvb-usb: schedule remote query interval to 100 msecs. [ 60.302433][ T29] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 60.306506][ T29] usb 5-1: USB disconnect, device number 6 [ 60.347654][ T29] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 60.594257][ T3249] libceph: connect (1)[c::]:6789 error -101 [ 60.596874][ T3249] libceph: mon0 (1)[c::]:6789 connect error [ 60.831921][ T6472] __nla_validate_parse: 7 callbacks suppressed [ 60.831937][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.142'. [ 60.921641][ T6056] hid (null): global environment stack underflow [ 60.924937][ T6056] hid (null): invalid report_size -1430925099 [ 60.927099][ T6056] hid (null): unknown global tag 0xe [ 60.931672][ T6056] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 60.934323][ T6056] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 60.937603][ T6056] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 60.940515][ T6056] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 60.943620][ T6056] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 60.947246][ T6056] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 60.950212][ T6056] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 60.953222][ T6056] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 60.955861][ T6056] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 60.958968][ T6056] hid-generic 000C:0007:000C.0002: unknown main item tag 0x0 [ 60.964447][ T6056] hid-generic 000C:0007:000C.0002: collection stack underflow [ 60.967496][ T6056] hid-generic 000C:0007:000C.0002: item 0 4 0 12 parsing failed [ 60.970835][ T6056] hid-generic 000C:0007:000C.0002: probe with driver hid-generic failed with error -22 [ 60.993962][ T5973] Bluetooth: hci3: command 0x0419 tx timeout [ 60.993976][ T63] Bluetooth: hci1: command 0x0419 tx timeout [ 61.189896][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 61.189929][ T40] audit: type=1400 audit(1757776931.855:267): avc: denied { watch watch_reads } for pid=6487 comm="syz.3.148" path="/48" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.196390][ T6488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.148'. [ 61.207986][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 61.212756][ T6394] ceph: No mds server is up or the cluster is laggy [ 61.240862][ T40] audit: type=1400 audit(1757776931.905:268): avc: denied { ioctl } for pid=6489 comm="syz.3.149" path="socket:[11184]" dev="sockfs" ino=11184 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.242125][ T6490] bridge0: port 3(syz_tun) entered blocking state [ 61.251370][ T6490] bridge0: port 3(syz_tun) entered disabled state [ 61.254667][ T6490] syz_tun: entered promiscuous mode [ 61.256573][ T6490] bridge0: port 3(syz_tun) entered blocking state [ 61.259021][ T6490] bridge0: port 3(syz_tun) entered forwarding state [ 61.267071][ T40] audit: type=1400 audit(1757776931.935:269): avc: denied { read } for pid=6491 comm="syz.2.150" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.275199][ T40] audit: type=1400 audit(1757776931.935:270): avc: denied { open } for pid=6491 comm="syz.2.150" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.282376][ T40] audit: type=1400 audit(1757776931.935:271): avc: denied { ioctl } for pid=6491 comm="syz.2.150" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.318635][ T40] audit: type=1400 audit(1757776931.985:272): avc: denied { write } for pid=6497 comm="syz.2.153" path="socket:[11190]" dev="sockfs" ino=11190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.328640][ T6500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'. [ 61.331981][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 61.341655][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 61.345582][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.350094][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.353542][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.357960][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.393837][ T40] audit: type=1400 audit(1757776932.055:273): avc: denied { create } for pid=6503 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.401112][ T40] audit: type=1400 audit(1757776932.065:274): avc: denied { setopt } for pid=6503 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.404279][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 61.408477][ T40] audit: type=1400 audit(1757776932.065:275): avc: denied { write } for pid=6504 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.418773][ T40] audit: type=1400 audit(1757776932.075:276): avc: denied { ioctl } for pid=6503 comm="syz.2.156" path="socket:[12365]" dev="sockfs" ino=12365 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.456160][ T6510] mkiss: ax0: crc mode is auto. [ 61.656306][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.161'. [ 61.865954][ T6531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.917653][ T6533] bond1: entered allmulticast mode [ 61.919607][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.919696][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 61.983156][ T6541] Bluetooth: MGMT ver 1.23 [ 62.354238][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 62.410316][ T29] usb 6-1: USB disconnect, device number 2 [ 62.517676][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 62.556593][ T6574] No source specified [ 62.583714][ T6578] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 62.587844][ T6578] overlayfs: overlapping lowerdir path [ 62.623080][ T6582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6582 comm=syz.3.182 [ 62.694284][ T6588] tipc: Started in network mode [ 62.695979][ T6588] tipc: Node identity 0e7ebebe9914, cluster identity 4711 [ 62.698312][ T6588] tipc: Enabled bearer , priority 0 [ 62.700881][ T6588] syzkaller0: entered promiscuous mode [ 62.702618][ T6588] syzkaller0: entered allmulticast mode [ 62.714342][ T6588] tipc: Resetting bearer [ 62.763067][ T6587] tipc: Resetting bearer [ 62.769028][ T6587] tipc: Disabling bearer [ 62.840885][ T6590] input: syz1 as /devices/virtual/input/input7 [ 62.846152][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 62.877244][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 62.880220][ T6592] macvlan0: entered allmulticast mode [ 62.882019][ T6592] veth1_vlan: entered allmulticast mode [ 63.003867][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 63.008027][ T29] usb 7-1: config 0 has no interfaces? [ 63.013939][ T29] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.017821][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.021151][ T29] usb 7-1: Product: syz [ 63.022952][ T29] usb 7-1: Manufacturer: syz [ 63.024996][ T29] usb 7-1: SerialNumber: syz [ 63.031016][ T29] usb 7-1: config 0 descriptor?? [ 63.083872][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 63.083895][ T5973] Bluetooth: hci1: command 0x0419 tx timeout [ 63.223316][ T5973] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 63.239655][ T6583] syz.2.183 uses obsolete (PF_INET,SOCK_PACKET) [ 63.242548][ T6583] syzkaller1: entered promiscuous mode [ 63.245580][ T6583] syzkaller1: entered allmulticast mode [ 63.326306][ T6039] usb 7-1: USB disconnect, device number 8 [ 63.541835][ T5973] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 63.568402][ T6603] kvm: pic: level sensitive irq not supported [ 63.568884][ T6603] kvm: pic: non byte read [ 63.574113][ T6603] kvm: pic: non byte read [ 63.576327][ T6603] kvm: pic: non byte read [ 63.578559][ T6603] kvm: pic: non byte read [ 63.580780][ T6603] kvm: pic: non byte read [ 63.583059][ T6603] kvm: pic: non byte read [ 63.585672][ T6603] kvm: pic: non byte read [ 63.587908][ T6603] kvm: pic: non byte read [ 63.590130][ T6603] kvm: pic: non byte read [ 63.592236][ T6603] kvm: pic: non byte read [ 63.741517][ T6611] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 63.953944][ T1459] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 64.055070][ T6638] input: syz0 as /devices/virtual/input/input8 [ 64.085108][ T1459] usb 6-1: device descriptor read/64, error -71 [ 64.325356][ T1459] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 64.443902][ T5973] Bluetooth: hci0: command 0x0419 tx timeout [ 64.453976][ T1459] usb 6-1: device descriptor read/64, error -71 [ 64.564279][ T1459] usb usb6-port1: attempt power cycle [ 64.692326][ T6678] overlay: filesystem on ./bus not supported as upperdir [ 64.903895][ T1459] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 64.925169][ T1459] usb 6-1: device descriptor read/8, error -71 [ 65.155028][ T5973] Bluetooth: hci3: command 0x0419 tx timeout [ 65.164195][ T1459] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 65.167751][ T5973] Bluetooth: hci1: command 0x0419 tx timeout [ 65.184449][ T1459] usb 6-1: device descriptor read/8, error -71 [ 65.294303][ T1459] usb usb6-port1: unable to enumerate USB device [ 65.463849][ T6056] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 65.615008][ T6056] usb 8-1: config 0 has no interfaces? [ 65.618420][ T6056] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 65.621375][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.624254][ T6056] usb 8-1: Product: syz [ 65.625729][ T6056] usb 8-1: Manufacturer: syz [ 65.627311][ T6056] usb 8-1: SerialNumber: syz [ 65.631225][ T6056] usb 8-1: config 0 descriptor?? [ 65.924525][ T6726] overlayfs: failed to decode file handle (len=2, type=0, flags=0, err=-22) [ 66.060796][ T1459] IPVS: starting estimator thread 0... [ 66.163951][ T6730] IPVS: using max 23 ests per chain, 55200 per kthread [ 66.176192][ T6739] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 66.183680][ T6739] loop6: detected capacity change from 0 to 64 [ 66.191534][ T6464] buffer_io_error: 322 callbacks suppressed [ 66.191548][ T6464] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.199347][ T6464] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.203243][ T6464] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.206546][ T6464] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.209446][ T6464] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.251369][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 66.251383][ T40] audit: type=1400 audit(1757776936.915:341): avc: denied { write } for pid=6743 comm="syz.2.224" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.264783][ T40] audit: type=1400 audit(1757776936.915:342): avc: denied { ioctl } for pid=6743 comm="syz.2.224" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.275618][ T40] audit: type=1400 audit(1757776936.925:343): avc: denied { connect } for pid=6743 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.439713][ T40] audit: type=1400 audit(1757776937.105:344): avc: denied { write } for pid=6747 comm="syz.2.226" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.450723][ T40] audit: type=1400 audit(1757776937.115:345): avc: denied { mount } for pid=6747 comm="syz.2.226" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.458642][ T40] audit: type=1400 audit(1757776937.125:346): avc: denied { unmount } for pid=5976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.513879][ T5973] Bluetooth: hci0: command 0x0419 tx timeout [ 66.550088][ T40] audit: type=1400 audit(1757776937.215:347): avc: denied { ioctl } for pid=6754 comm="syz.2.229" path="mnt:[4026532871]" dev="nsfs" ino=4026532871 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.587519][ T6757] 9pnet_virtio: no channels available for device syz [ 66.630654][ T6759] Invalid source name [ 66.632338][ T6759] UBIFS error (pid: 6759): cannot open "ubifs", error -22 [ 66.690526][ T6763] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.695887][ T6763] FAT-fs (loop2): unable to read boot sector [ 66.736810][ T6765] capability: warning: `syz.2.234' uses 32-bit capabilities (legacy support in use) [ 66.748477][ T6769] syz_tun: entered allmulticast mode [ 66.750816][ T40] audit: type=1400 audit(1757776937.415:348): avc: denied { open } for pid=6764 comm="syz.2.234" path="/dev/ptyq8" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 66.761280][ T40] audit: type=1400 audit(1757776937.415:349): avc: denied { ioctl } for pid=6764 comm="syz.2.234" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 66.793416][ T6773] __nla_validate_parse: 4 callbacks suppressed [ 66.793431][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'. [ 66.793432][ T6774] validate_nla: 1 callbacks suppressed [ 66.793442][ T6774] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 66.793606][ T3249] IPVS: starting estimator thread 0... [ 66.816357][ T40] audit: type=1400 audit(1757776937.485:350): avc: denied { append } for pid=6771 comm="syz.2.237" name="media0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.833336][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 66.836414][ T6774] netlink: 32 bytes leftover after parsing attributes in process `syz.2.237'. [ 66.883881][ T6777] IPVS: using max 25 ests per chain, 60000 per kthread [ 66.897247][ T6771] rtc_cmos 00:05: Alarms can be up to one day in the future [ 67.020849][ T6797] bond0: entered promiscuous mode [ 67.022946][ T6797] bond_slave_0: entered promiscuous mode [ 67.026802][ T6797] bond_slave_1: entered promiscuous mode [ 67.031317][ T6797] batadv0: entered promiscuous mode [ 67.036728][ T6797] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 67.041599][ T6797] bond0: left promiscuous mode [ 67.043657][ T6797] bond_slave_0: left promiscuous mode [ 67.046515][ T6797] bond_slave_1: left promiscuous mode [ 67.048999][ T6797] batadv0: left promiscuous mode [ 67.083355][ T6792] 9pnet_fd: p9_fd_create_tcp (6792): problem connecting socket to 127.0.0.1 [ 67.115679][ T5974] rtc_cmos 00:05: Alarms can be up to one day in the future [ 67.119582][ T5974] rtc_cmos 00:05: Alarms can be up to one day in the future [ 67.123288][ T5974] rtc_cmos 00:05: Alarms can be up to one day in the future [ 67.126508][ T5974] rtc_cmos 00:05: Alarms can be up to one day in the future [ 67.128824][ T5974] rtc rtc0: __rtc_set_alarm: err=-22 [ 67.244055][ T6825] input: syz1 as /devices/virtual/input/input9 [ 67.246621][ T6829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.247'. [ 68.018556][ T29] usb 8-1: USB disconnect, device number 2 [ 68.042237][ T6857] tmpfs: Unknown parameter 'ˆnode32' [ 68.185827][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 68.251002][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 68.311570][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 68.708451][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 68.711276][ T6898] netlink: 3 bytes leftover after parsing attributes in process `syz.0.266'. [ 68.804829][ T6901] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 68.899314][ T6907] netlink: 'syz.0.269': attribute type 2 has an invalid length. [ 68.901786][ T6907] netlink: 68 bytes leftover after parsing attributes in process `syz.0.269'. [ 69.227092][ T6927] geneve2: entered promiscuous mode [ 69.231515][ T6927] geneve2: entered allmulticast mode [ 69.274669][ T6932] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 69.277180][ T6932] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 69.279752][ T6932] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 69.282564][ T6932] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 69.285636][ T6932] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 69.288181][ T6932] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 69.290701][ T6932] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 69.293130][ T6932] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 69.429633][ T6958] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.462885][ T6958] 9pnet_virtio: no channels available for device syz [ 69.740376][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880539f4c00: rx timeout, send abort [ 69.744251][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880539f4800: rx timeout, send abort [ 69.747611][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880539f4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 69.754453][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880539f4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 69.783196][ T7005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=7005 comm=syz.3.303 [ 69.853916][ T3249] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 70.014320][ T3249] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 70.017501][ T3249] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.021039][ T3249] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.023963][ T5974] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 70.024665][ T3249] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.030040][ T3249] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.032771][ T3249] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.036271][ T3249] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.039138][ T3249] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.042000][ T3249] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.045440][ T3249] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.048306][ T3249] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.051042][ T3249] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.054477][ T3249] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.057215][ T3249] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.059948][ T3249] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.063235][ T3249] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.066211][ T3249] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.068935][ T3249] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.072235][ T3249] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.075112][ T3249] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.077902][ T3249] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.081210][ T3249] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.084098][ T3249] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.086847][ T3249] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.090149][ T3249] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.094754][ T3249] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 70.097526][ T3249] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 70.100082][ T3249] usb 7-1: Product: syz [ 70.101393][ T3249] usb 7-1: Manufacturer: syz [ 70.102843][ T3249] usb 7-1: SerialNumber: syz [ 70.105819][ T3249] usb 7-1: config 0 descriptor?? [ 70.112420][ T3249] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 70.173938][ T5974] usb 5-1: Using ep0 maxpacket: 8 [ 70.177870][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.181545][ T5974] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 70.184478][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.189331][ T5974] usb 5-1: config 0 descriptor?? [ 70.322417][ T3249] usb 7-1: USB disconnect, device number 9 [ 70.326353][ T3249] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 70.394987][ T5974] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 70.653558][ T34] usb 5-1: USB disconnect, device number 7 [ 70.653653][ C1] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 70.699567][ T7003] ======================================================= [ 70.699567][ T7003] WARNING: The mand mount option has been deprecated and [ 70.699567][ T7003] and is ignored by this kernel. Remove the mand [ 70.699567][ T7003] option from the mount to silence this warning. [ 70.699567][ T7003] ======================================================= [ 70.712258][ T7003] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 70.847049][ T7012] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 71.157091][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.159272][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.164020][ T5974] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.325309][ T5974] usb 8-1: Using ep0 maxpacket: 8 [ 71.328578][ T5974] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 71.331853][ T5974] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.335519][ T5974] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.339172][ T5974] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.342770][ T5974] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.348354][ T5974] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.359384][ T5974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.511939][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 71.511954][ T40] audit: type=1400 audit(1757776942.175:389): avc: denied { getopt } for pid=7039 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.541196][ T40] audit: type=1400 audit(1757776942.205:390): avc: denied { append } for pid=7041 comm="syz.0.313" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.541383][ T7042] random: crng reseeded on system resumption [ 71.576155][ T5974] usb 8-1: GET_CAPABILITIES returned 0 [ 71.577964][ T5974] usbtmc 8-1:16.0: can't read capabilities [ 71.626879][ T40] audit: type=1400 audit(1757776942.295:391): avc: denied { connect } for pid=7048 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.786582][ T5974] usb 8-1: USB disconnect, device number 3 [ 71.909594][ T7064] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 71.911835][ T7064] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 71.996337][ T40] audit: type=1400 audit(1757776942.665:392): avc: denied { create } for pid=7066 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.997892][ T7067] No buffer was provided with the request [ 72.007575][ T5973] Bluetooth: hci3: unexpected event for opcode 0x080c [ 72.013851][ T40] audit: type=1400 audit(1757776942.675:393): avc: denied { read } for pid=7066 comm="syz.2.321" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.021155][ T40] audit: type=1400 audit(1757776942.675:394): avc: denied { open } for pid=7066 comm="syz.2.321" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.098792][ T7069] validate_nla: 47 callbacks suppressed [ 72.098806][ T7069] netlink: 'syz.2.322': attribute type 1 has an invalid length. [ 72.497770][ T40] audit: type=1400 audit(1757776943.165:395): avc: denied { write } for pid=7082 comm="syz.2.327" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.503316][ T7083] binder: 7082:7083 ioctl c0306201 200000000080 returned -14 [ 72.505839][ T40] audit: type=1400 audit(1757776943.165:396): avc: denied { ioctl } for pid=7082 comm="syz.2.327" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.519310][ T40] audit: type=1400 audit(1757776943.165:397): avc: denied { set_context_mgr } for pid=7082 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 72.526675][ T40] audit: type=1400 audit(1757776943.175:398): avc: denied { map } for pid=7082 comm="syz.2.327" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.740698][ T7087] vxcan1: tx drop: invalid da for name 0x0000000000000016 [ 72.776563][ T7089] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 72.779447][ T7089] overlayfs: missing 'lowerdir' [ 72.885797][ T7096] kvm: user requested TSC rate below hardware speed [ 73.283866][ T3249] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 73.413886][ T3249] usb 6-1: device descriptor read/64, error -71 [ 73.653901][ T3249] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 73.680092][ T7116] smb3: Unknown parameter 'rdma1' [ 73.783828][ T3249] usb 6-1: device descriptor read/64, error -71 [ 73.904423][ T3249] usb usb6-port1: attempt power cycle [ 73.990286][ T5973] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 73.990340][ T5973] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 73.993399][ T5973] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 74.173327][ T7125] binder: 7124:7125 ioctl 80404804 200000000680 returned -22 [ 74.181112][ T7125] Illegal XDP return value 4294967274 on prog (id 103) dev syz_tun, expect packet loss! [ 74.227342][ T7127] __nla_validate_parse: 3 callbacks suppressed [ 74.227352][ T7127] netlink: 328 bytes leftover after parsing attributes in process `syz.3.342'. [ 74.243968][ T3249] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 74.264788][ T3249] usb 6-1: device descriptor read/8, error -71 [ 74.271220][ T7129] netlink: 'syz.3.343': attribute type 8 has an invalid length. [ 74.283350][ T7129] ubi31: attaching mtd0 [ 74.287135][ T7129] ubi31: scanning is finished [ 74.288645][ T7129] ubi31: empty MTD device detected [ 74.362264][ T7129] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 74.364824][ T7129] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 74.367752][ T7129] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 74.370555][ T7129] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 74.372817][ T7129] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 74.375405][ T7129] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 74.378822][ T7129] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 499223273 [ 74.382291][ T7129] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 74.386400][ T7130] ubi31: background thread "ubi_bgt31d" started, PID 7130 [ 74.490330][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 74.515440][ T3249] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 74.545433][ T3249] usb 6-1: device descriptor read/8, error -71 [ 74.646377][ T7142] netlink: 36 bytes leftover after parsing attributes in process `syz.3.348'. [ 74.654892][ T3249] usb usb6-port1: unable to enumerate USB device [ 75.063937][ T5974] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 75.217526][ T5974] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 75.220285][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.222747][ T5974] usb 5-1: Product: syz [ 75.224159][ T5974] usb 5-1: Manufacturer: syz [ 75.225610][ T5974] usb 5-1: SerialNumber: syz [ 75.231910][ T5974] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 75.249488][ T54] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.589710][ T7159] vivid-002: ================= START STATUS ================= [ 75.592321][ T7159] vivid-002: RDS Tx I/O Mode: Controls [ 75.594251][ T7159] vivid-002: RDS Program ID: 32904 [ 75.595931][ T7159] vivid-002: RDS Program Type: 3 [ 75.598140][ T7159] vivid-002: RDS PS Name: VIVID-TX [ 75.599769][ T7159] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 75.602993][ T7159] vivid-002: RDS Stereo: true [ 75.605666][ T7159] vivid-002: RDS Artificial Head: false [ 75.607465][ T7159] vivid-002: RDS Compressed: false [ 75.609088][ T7159] vivid-002: RDS Dynamic PTY: false [ 75.610721][ T7159] vivid-002: RDS Traffic Announcement: false [ 75.612591][ T7159] vivid-002: RDS Traffic Program: true [ 75.614444][ T7159] vivid-002: RDS Music: true [ 75.615966][ T7159] vivid-002: ================== END STATUS ================== [ 75.644658][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 75.664917][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 75.671674][ T6039] usb 5-1: USB disconnect, device number 8 [ 75.780186][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 75.784291][ T7174] netlink: 'syz.2.359': attribute type 10 has an invalid length. [ 75.801370][ T7174] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 75.806372][ T7173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.087431][ T7179] xt_HMARK: spi-set and port-set can't be combined [ 76.263117][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 76.266763][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 76.274972][ T54] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 76.278312][ T54] ath9k_htc: Failed to initialize the device [ 76.281187][ T6039] usb 5-1: ath9k_htc: USB layer deinitialized [ 76.349616][ T7212] netlink: 156 bytes leftover after parsing attributes in process `syz.0.369'. [ 76.352957][ T7212] syz.0.369 (7212) used obsolete PPPIOCDETACH ioctl [ 76.433272][ T7220] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 76.568837][ T7227] program syz.3.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.660072][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 76.660082][ T40] audit: type=1400 audit(1757776947.325:416): avc: denied { getopt } for pid=7218 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.757815][ T40] audit: type=1400 audit(1757776947.425:417): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.794001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.888327][ T6353] syz_tun (unregistering): left allmulticast mode [ 76.900897][ T40] audit: type=1400 audit(1757776947.565:418): avc: denied { ioctl } for pid=7240 comm="syz.0.378" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.962977][ T40] audit: type=1400 audit(1757776947.625:419): avc: denied { getopt } for pid=7248 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.982420][ T40] audit: type=1400 audit(1757776947.645:420): avc: denied { unmount } for pid=5976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 77.005354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.016103][ T40] audit: type=1400 audit(1757776947.685:421): avc: denied { setopt } for pid=7253 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.021052][ T7260] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:21 [ 77.065363][ T40] audit: type=1400 audit(1757776947.735:422): avc: denied { mount } for pid=7261 comm="syz.0.385" name="/" dev="hugetlbfs" ino=16451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 77.140473][ T40] audit: type=1400 audit(1757776947.805:423): avc: denied { execute } for pid=7265 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 77.153518][ T40] audit: type=1400 audit(1757776947.805:424): avc: denied { execute_no_trans } for pid=7265 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 77.170004][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 77.186747][ T7267] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 77.223686][ T40] audit: type=1400 audit(1757776947.885:425): avc: denied { read } for pid=7269 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.259020][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.262260][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.265703][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.278691][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.283320][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.323272][ T7283] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7283 comm=syz.2.393 [ 77.323595][ T7285] tmpfs: Unknown parameter 'usrquotae' [ 77.390350][ T7274] chnl_net:caif_netlink_parms(): no params data found [ 77.465150][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.467423][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.469661][ T7274] bridge_slave_0: entered allmulticast mode [ 77.472291][ T7274] bridge_slave_0: entered promiscuous mode [ 77.477895][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.480153][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.482416][ T7274] bridge_slave_1: entered allmulticast mode [ 77.485721][ T7274] bridge_slave_1: entered promiscuous mode [ 77.515608][ T7274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.520587][ T7274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.562294][ T7274] team0: Port device team_slave_0 added [ 77.566557][ T7274] team0: Port device team_slave_1 added [ 77.602240][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.604757][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.612705][ T7274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.617062][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.619241][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.627667][ T7274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.664243][ T7274] hsr_slave_0: entered promiscuous mode [ 77.666616][ T7274] hsr_slave_1: entered promiscuous mode [ 77.669231][ T7274] debugfs: 'hsr0' already exists in 'hsr' [ 77.671130][ T7274] Cannot create hsr debugfs directory [ 77.792124][ T7274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.797368][ T7274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.801891][ T7274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.806986][ T7274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.823323][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.825712][ T7274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.828531][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.830794][ T7274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.852781][ T7316] autofs4:pid:7316:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 77.861446][ T7274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.871374][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.879443][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.896694][ T7274] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.906926][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.909118][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.915064][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.917286][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.036116][ T7328] binder: 7327:7328 ioctl c0306201 200000000080 returned -14 [ 78.038866][ T7328] binder: 7327:7328 ioctl c0306201 200000000180 returned -22 [ 78.074024][ T7274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.187251][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 78.196471][ T7338] netlink: 'syz.2.404': attribute type 3 has an invalid length. [ 78.213659][ T7274] veth0_vlan: entered promiscuous mode [ 78.220472][ T7274] veth1_vlan: entered promiscuous mode [ 78.230823][ T7343] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 78.237435][ T7274] veth0_macvtap: entered promiscuous mode [ 78.241790][ T7274] veth1_macvtap: entered promiscuous mode [ 78.250548][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.260006][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.266772][ T1144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.274170][ T1144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.276987][ T1144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.282269][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.318198][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.321547][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.335279][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.337809][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.810237][ T7396] random: crng reseeded on system resumption [ 78.853482][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.856992][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.083843][ T3249] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 79.103881][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 79.266693][ T3249] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 79.269711][ T3249] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.272338][ T3249] usb 7-1: Product: syz [ 79.273905][ T3249] usb 7-1: Manufacturer: syz [ 79.275500][ T3249] usb 7-1: SerialNumber: syz [ 79.283920][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 79.286780][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 79.289461][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.292856][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.299020][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.302868][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.308180][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.311816][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.314040][ T63] Bluetooth: hci2: command tx timeout [ 79.519147][ T34] usb 5-1: usb_control_msg returned -71 [ 79.520961][ T34] usbtmc 5-1:16.0: can't read capabilities [ 79.525574][ T34] usb 5-1: USB disconnect, device number 9 [ 79.682873][ T3249] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 79.688822][ T3249] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 79.692523][ T3249] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 79.697904][ T3249] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 79.704894][ T3249] usb 7-1: USB disconnect, device number 10 [ 79.787724][ T7417] __nla_validate_parse: 138 callbacks suppressed [ 79.787734][ T7417] netlink: 84 bytes leftover after parsing attributes in process `syz.4.428'. [ 79.792543][ T7417] netlink: 84 bytes leftover after parsing attributes in process `syz.4.428'. [ 79.922526][ T7420] xfrm0: entered promiscuous mode [ 79.924459][ T7420] xfrm0: entered allmulticast mode [ 80.048789][ T7427] netlink: 'syz.0.431': attribute type 4 has an invalid length. [ 80.049310][ T7428] netlink: 'syz.0.431': attribute type 4 has an invalid length. [ 80.131867][ T7433] netlink: 'syz.0.433': attribute type 62 has an invalid length. [ 80.203671][ T7447] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.207878][ T7447] FAT-fs (loop2): unable to read boot sector [ 80.382250][ T7455] dlm: non-version read from control device 8224 [ 80.419666][ T7458] futex_wake_op: syz.2.442 tries to shift op by -1; fix this program [ 80.467350][ T7466] 9pnet_virtio: no channels available for device syz [ 80.533450][ T5974] IPVS: starting estimator thread 0... [ 80.585481][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 80.595055][ T7477] MPI: mpi too large (16392 bits) [ 80.596363][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.444'. [ 80.596406][ T63] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 80.633839][ T7471] IPVS: using max 45 ests per chain, 108000 per kthread [ 80.670308][ T7483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 80.680889][ T7483] picdev_read: 77 callbacks suppressed [ 80.680899][ T7483] kvm: pic: non byte read [ 80.687987][ T7483] kvm: pic: non byte read [ 80.691305][ T7483] kvm: pic: level sensitive irq not supported [ 80.692134][ T7483] kvm: pic: non byte read [ 80.729451][ T7487] __vm_enough_memory: pid: 7487, comm: syz.4.449, bytes: 21200036933632 not enough memory for the allocation [ 80.751514][ T7489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.792599][ T7491] macvlan0: left allmulticast mode [ 80.795037][ T7491] veth1_vlan: left allmulticast mode [ 80.926148][ T7494] veth0_to_bond: entered allmulticast mode [ 81.144470][ T5974] e1000 0000:00:06.0 eth0: Reset adapter [ 81.183008][ T63] Bluetooth: hci0: Unable to find connection for big 0x00 [ 81.227816][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 81.262685][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.460'. [ 81.304031][ T5974] e1000 0000:00:06.0 eth0: Reset adapter [ 81.406420][ T10] cfg80211: failed to load regulatory.db [ 81.444168][ T7525] e1000 0000:00:06.0 eth0: Reset adapter [ 82.593991][ T63] Bluetooth: hci2: command tx timeout [ 83.635510][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 84.674569][ T5973] Bluetooth: hci2: command tx timeout [ 84.675061][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 84.679217][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 84.682387][ T5973] Bluetooth: hci3: hardware error 0x00 [ 86.754181][ T5973] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 91.428029][ T7558] loop7: detected capacity change from 0 to 7 [ 91.431711][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.435671][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.437436][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 91.437448][ T40] audit: type=1400 audit(1757776962.105:457): avc: denied { module_request } for pid=7563 comm="syz.3.464" kmod="net-pf-2-proto-8-type-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.439261][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.451341][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.454671][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.458072][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.461343][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.464147][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.466599][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.469452][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.471936][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.474943][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.476846][ T40] audit: type=1400 audit(1757776962.145:458): avc: denied { ioctl } for pid=7567 comm="syz.2.465" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.478410][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.487330][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.488212][ T40] audit: type=1400 audit(1757776962.155:459): avc: denied { write } for pid=7559 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.490050][ T7558] ldm_validate_partition_table(): Disk read failed. [ 91.501819][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.504711][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.507395][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.510182][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.512691][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.515486][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.518401][ T7558] Dev loop7: unable to read RDB block 0 [ 91.522591][ T7558] loop7: unable to read partition table [ 91.525006][ T7558] loop7: partition table beyond EOD, truncated [ 91.527693][ T7558] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 91.535030][ T7570] ldm_validate_partition_table(): Disk read failed. [ 91.538311][ T7570] Dev loop7: unable to read RDB block 0 [ 91.540344][ T7570] loop7: unable to read partition table [ 91.542333][ T7570] loop7: partition table beyond EOD, truncated [ 91.547256][ T5382] ldm_validate_partition_table(): Disk read failed. [ 91.550000][ T5382] Dev loop7: unable to read RDB block 0 [ 91.552428][ T5382] loop7: unable to read partition table [ 91.554699][ T5382] loop7: partition table beyond EOD, truncated [ 91.587133][ T7587] efs: cannot read volume header [ 91.618124][ T7592] tmpfs: Bad value for 'mpol' [ 91.654842][ T7598] netlink: 'syz.3.474': attribute type 4 has an invalid length. [ 91.661663][ T7598] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ [ 91.744075][ T7611] netlink: 92 bytes leftover after parsing attributes in process `syz.3.479'. [ 91.769999][ T7607] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2819971867 (180478199488 ns) > initial count (2106944 ns). Using initial count to start timer. [ 91.808022][ T7609] team0 (unregistering): Port device team_slave_0 removed [ 91.813694][ T7609] team0 (unregistering): Port device team_slave_1 removed [ 91.940551][ T7623] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 91.946678][ T7623] openvswitch: netlink: Missing key (keys=40, expected=100) [ 91.985954][ T40] audit: type=1400 audit(1757776962.655:460): avc: denied { bind } for pid=7615 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.086413][ T7626] kvm: pic: non byte write [ 92.088796][ T7626] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 92.330548][ T7644] netlink: 'syz.2.491': attribute type 7 has an invalid length. [ 92.331740][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 92.339938][ T7644] : entered promiscuous mode [ 92.340289][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.489'. [ 92.386838][ T7653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 92.389897][ T7653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 92.395875][ T7653] vhci_hcd vhci_hcd.0: Device attached [ 92.398424][ T7656] vhci_hcd: connection closed [ 92.400487][ T1144] vhci_hcd: stop threads [ 92.405173][ T1144] vhci_hcd: release socket [ 92.406643][ T1144] vhci_hcd: disconnect device [ 92.426404][ T7661] netlink: 880 bytes leftover after parsing attributes in process `syz.3.495'. [ 92.432468][ T40] audit: type=1400 audit(1757776963.095:461): avc: denied { ioctl } for pid=7660 comm="syz.3.495" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.520888][ T40] audit: type=1400 audit(1757776963.185:462): avc: denied { ioctl } for pid=7671 comm="syz.0.499" path="socket:[19025]" dev="sockfs" ino=19025 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.576774][ T7681] netlink: 152 bytes leftover after parsing attributes in process `syz.4.502'. [ 92.578084][ T40] audit: type=1400 audit(1757776963.245:463): avc: denied { create } for pid=7680 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.612963][ T40] audit: type=1400 audit(1757776963.275:464): avc: denied { read } for pid=7687 comm="syz.4.505" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.619372][ T7688] comedi: No check for data length of config insn id 3 is implemented [ 92.622506][ T7688] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 92.626005][ T7688] comedi: Assuming n=15 is correct [ 92.627798][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 92.631132][ T7691] geneve2: entered promiscuous mode [ 92.632817][ T7691] geneve2: entered allmulticast mode [ 92.636238][ T46] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.639893][ T46] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.659277][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 92.663000][ T7694] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 92.665424][ T7694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.713894][ T46] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.716945][ T46] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 92.868831][ T7703] netlink: 3696 bytes leftover after parsing attributes in process `syz.4.508'. [ 92.871679][ T7703] netlink: 3696 bytes leftover after parsing attributes in process `syz.4.508'. [ 92.982298][ T40] audit: type=1400 audit(1757776963.645:465): avc: denied { read } for pid=7709 comm="syz.3.510" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 92.989451][ T40] audit: type=1400 audit(1757776963.645:466): avc: denied { open } for pid=7709 comm="syz.3.510" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 93.012951][ T7712] overlayfs: failed to resolve './file1': -2 [ 93.233876][ T54] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 93.363897][ T54] usb 7-1: device descriptor read/64, error -71 [ 93.403803][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 93.564160][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 93.568619][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.572710][ T34] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.576808][ T34] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 93.580501][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.582957][ T7733] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 93.584259][ T34] usb 8-1: config 0 descriptor?? [ 93.585914][ T7733] netlink: 224 bytes leftover after parsing attributes in process `syz.0.518'. [ 93.591605][ T7733] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.614531][ T54] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 93.743853][ T54] usb 7-1: device descriptor read/64, error -71 [ 93.755731][ T7735] netlink: zone id is out of range [ 93.758355][ T7735] netlink: zone id is out of range [ 93.760231][ T7735] netlink: zone id is out of range [ 93.761816][ T7735] netlink: zone id is out of range [ 93.763349][ T7735] netlink: zone id is out of range [ 93.788890][ T7525] usb 8-1: USB disconnect, device number 4 [ 93.854087][ T54] usb usb7-port1: attempt power cycle [ 94.193810][ T54] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 94.214214][ T54] usb 7-1: device descriptor read/8, error -71 [ 94.453981][ T54] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 94.473678][ T7762] [U] ^R [ 94.477290][ T7762] 9pnet_virtio: no channels available for device syz [ 94.484475][ T54] usb 7-1: device descriptor read/8, error -71 [ 94.607196][ T54] usb usb7-port1: unable to enumerate USB device [ 94.847866][ T7779] netlink: 'syz.0.531': attribute type 12 has an invalid length. [ 94.931794][ T7786] netlink: 'syz.0.534': attribute type 16 has an invalid length. [ 95.236904][ T7811] ufs: You didn't specify the type of your ufs filesystem [ 95.236904][ T7811] [ 95.236904][ T7811] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 95.236904][ T7811] [ 95.236904][ T7811] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 95.247693][ T7811] ufs: failed to set blocksize [ 95.254597][ T7815] tmpfs: Bad value for 'mpol' [ 95.987203][ T7895] orangefs_devreq_write_iter: total:8: must be at least:8240: [ 96.108159][ T7914] futex_wake_op: syz.4.568 tries to shift op by -1; fix this program [ 96.132758][ T7924] vlan2: entered promiscuous mode [ 96.134656][ T7924] bridge0: entered promiscuous mode [ 96.187912][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.191374][ T7934] batadv_slave_0: entered promiscuous mode [ 96.193226][ T7934] batadv_slave_0: entered allmulticast mode [ 96.201966][ T7934] usb usb8: usbfs: process 7934 (syz.0.578) did not claim interface 0 before use [ 96.902807][ T7971] geneve2: entered promiscuous mode [ 96.905486][ T7971] geneve2: entered allmulticast mode [ 96.908131][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.911697][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.915526][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.918803][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.952195][ T7975] Bluetooth: MGMT ver 1.23 [ 97.269682][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.274459][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.339009][ T7990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.345685][ T7990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.424674][ T7990] geneve2: left promiscuous mode [ 97.424687][ T7990] geneve2: left allmulticast mode [ 97.425224][ T1143] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.425270][ T1143] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.425292][ T1143] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.425350][ T1143] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.425373][ T1143] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.425395][ T1143] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.425462][ T1143] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.425485][ T1143] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.425508][ T1143] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.428413][ T1143] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.465509][ T1143] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.465529][ T1143] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.517040][ T7998] __nla_validate_parse: 10 callbacks suppressed [ 97.517054][ T7998] netlink: 48 bytes leftover after parsing attributes in process `syz.0.598'. [ 97.554197][ T6997] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 97.709706][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 97.709722][ T40] audit: type=1400 audit(1757776968.375:507): avc: denied { mount } for pid=8000 comm="syz.4.599" name="/" dev="rpc_pipefs" ino=23559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 97.721876][ T40] audit: type=1400 audit(1757776968.375:508): avc: denied { mounton } for pid=8000 comm="syz.4.599" path="/56/file0" dev="rpc_pipefs" ino=23559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 97.724249][ T6997] usb 8-1: Using ep0 maxpacket: 8 [ 97.735449][ T6997] usb 8-1: config 0 interface 0 has no altsetting 0 [ 97.738313][ T6997] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 97.743240][ T6997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.749329][ T6997] usb 8-1: config 0 descriptor?? [ 97.758193][ T40] audit: type=1400 audit(1757776968.425:509): avc: denied { unmount } for pid=7274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 97.836857][ T40] audit: type=1400 audit(1757776968.505:510): avc: denied { read } for pid=8002 comm="syz.4.600" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.846068][ T40] audit: type=1400 audit(1757776968.505:511): avc: denied { open } for pid=8002 comm="syz.4.600" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.854609][ T40] audit: type=1400 audit(1757776968.505:512): avc: denied { lock } for pid=8002 comm="syz.4.600" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.989840][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 97.992621][ T8011] net_ratelimit: 49 callbacks suppressed [ 97.992628][ T8011] openvswitch: netlink: Flow key attr not present in new flow. [ 98.156845][ T6997] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 98.203255][ T8035] tipc: Started in network mode [ 98.204935][ T8035] tipc: Node identity c, cluster identity 4711 [ 98.206823][ T8035] tipc: Node number set to 12 [ 98.212630][ T40] audit: type=1400 audit(1757776968.875:513): avc: denied { read write } for pid=8034 comm="syz.2.610" name="file0" dev="9p" ino=35913947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.215050][ T8037] kernel profiling enabled (shift: 63) [ 98.220886][ T40] audit: type=1400 audit(1757776968.875:514): avc: denied { ioctl open } for pid=8034 comm="syz.2.610" path="/136/file0/file0" dev="9p" ino=35913947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.221651][ T8037] profiling shift: 63 too large [ 98.317427][ T40] audit: type=1400 audit(1757776968.985:515): avc: denied { accept } for pid=8039 comm="syz.2.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 98.348056][ T40] audit: type=1400 audit(1757776969.015:516): avc: denied { watch watch_reads } for pid=8041 comm="syz.4.613" path="pipe:[23618]" dev="pipefs" ino=23618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 98.363552][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.367117][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.368041][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.373934][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.420525][ T6450] usb 8-1: USB disconnect, device number 5 [ 98.442148][ T8057] netlink: 'syz.2.617': attribute type 1 has an invalid length. [ 98.446492][ T8057] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.617'. [ 98.485240][ T8059] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.618'. [ 98.728158][ T8070] netlink: 272 bytes leftover after parsing attributes in process `syz.4.622'. [ 99.029155][ T8099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.631'. [ 99.031944][ T8099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.631'. [ 99.087241][ T8103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.633'. [ 99.106731][ T8103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8103 comm=syz.4.633 [ 99.142015][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.636'. [ 99.148751][ T8111] gre0: entered promiscuous mode [ 99.150547][ T8111] gre0: entered allmulticast mode [ 99.334051][ T8122] netlink: 'syz.3.638': attribute type 4 has an invalid length. [ 99.338642][ T8122] netlink: 'syz.3.638': attribute type 4 has an invalid length. [ 99.369865][ T8125] program syz.3.639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.404475][ T8125] usb usb1: check_ctrlrecip: process 8125 (syz.3.639) requesting ep 01 but needs 81 [ 99.407308][ T8125] usb usb1: usbfs: process 8125 (syz.3.639) did not claim interface 0 before use [ 99.442632][ T8129] Bluetooth: hci4: Frame reassembly failed (-84) [ 99.445508][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.457500][ T8120] netlink: 'syz.4.635': attribute type 4 has an invalid length. [ 100.460765][ T8120] netlink: 17 bytes leftover after parsing attributes in process `syz.4.635'. [ 100.714799][ T8159] kvm: user requested TSC rate below hardware speed [ 100.721453][ T8159] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (65416116 ns). Using initial count to start timer. [ 100.950263][ T8173] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 101.173480][ T8180] hsr_slave_1 (unregistering): left promiscuous mode [ 101.474912][ T5973] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 101.499890][ T8199] random: crng reseeded on system resumption [ 101.506240][ T8199] Restarting kernel threads ... [ 101.509074][ T8199] Done restarting kernel threads. [ 101.635159][ T8210] FAT-fs (nullb0): bogus number of reserved sectors [ 101.637402][ T8210] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 101.675998][ T8216] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 101.679647][ T8216] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 101.688631][ T8216] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 101.692081][ T8216] netlink: 'syz.4.667': attribute type 1 has an invalid length. [ 101.696243][ T8216] IPVS: lc: FWM 3 0x00000003 - no destination available [ 101.698506][ C3] IPVS: lc: FWM 3 0x00000003 - no destination available [ 101.800795][ T8222] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 101.803622][ T8222] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.807186][ T8222] vhci_hcd vhci_hcd.0: Device attached [ 101.811202][ T8221] vhci_hcd vhci_hcd.0: port 0 already used [ 101.827569][ T8223] vhci_hcd: connection closed [ 101.827803][ T1144] vhci_hcd: stop threads [ 101.831416][ T1144] vhci_hcd: release socket [ 101.832833][ T1144] vhci_hcd: disconnect device [ 101.923968][ T8230] syz.0.669 (8230) used greatest stack depth: 19752 bytes left [ 102.093645][ T8241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 102.137923][ T8245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36207 sclass=netlink_route_socket pid=8245 comm=syz.3.673 [ 102.144852][ T8245] NILFS (nullb0): couldn't find nilfs on the device [ 102.152818][ T8245] binder: 8244:8245 ioctl c0306201 200000000640 returned -22 [ 102.683158][ T8269] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=58 sclass=netlink_tcpdiag_socket pid=8269 comm=syz.4.680 [ 102.744655][ T8274] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 102.748960][ T8274] overlayfs: overlapping lowerdir path [ 102.754581][ T8272] netlink: 'syz.4.681': attribute type 39 has an invalid length. [ 102.912711][ T8277] bpf: Bad value for 'uid' [ 102.916398][ T8276] uprobe: syz.0.682:8276 failed to unregister, leaking uprobe [ 102.967975][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 102.967990][ T40] audit: type=1400 audit(1757776973.635:538): avc: denied { append } for pid=8278 comm="syz.4.683" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 102.978085][ T40] audit: type=1400 audit(1757776973.635:539): avc: denied { map } for pid=8278 comm="syz.4.683" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 102.987257][ T40] audit: type=1400 audit(1757776973.635:540): avc: denied { execute } for pid=8278 comm="syz.4.683" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 103.069128][ T8288] netlink: 'syz.3.686': attribute type 8 has an invalid length. [ 103.190689][ T8302] Can't find a SQUASHFS superblock on nullb0 [ 103.222037][ T8304] binder: 8303:8304 ioctl c0306201 200000000640 returned -22 [ 103.223104][ T40] audit: type=1400 audit(1757776973.885:541): avc: denied { read write } for pid=8303 comm="syz.3.692" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.236509][ T40] audit: type=1400 audit(1757776973.885:542): avc: denied { open } for pid=8303 comm="syz.3.692" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.246525][ T40] audit: type=1400 audit(1757776973.905:543): avc: denied { mounton } for pid=8305 comm="syz.4.693" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 103.246546][ T34] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 103.301850][ T40] audit: type=1400 audit(1757776973.965:544): avc: denied { append } for pid=8313 comm="syz.3.695" path="/181/file0/cpuacct.usage_sys" dev="9p" ino=35913960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.313690][ T8316] __nla_validate_parse: 5 callbacks suppressed [ 103.313699][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 103.349562][ T8316] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 103.378285][ T40] audit: type=1400 audit(1757776974.045:545): avc: denied { lock } for pid=8313 comm="syz.3.695" path="/181/file0/cpuacct.usage_sys" dev="9p" ino=35913960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.424550][ T34] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 103.428720][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.432454][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.437322][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.441316][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.445982][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.450912][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.456187][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.460382][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.465711][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.469584][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.473320][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.478280][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.483420][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.487139][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.491530][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.495311][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.499088][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.503597][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.508706][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.512446][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.517028][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.520674][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.524647][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.529103][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.533928][ T34] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 103.537689][ T34] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 103.541152][ T34] usb 5-1: Product: syz [ 103.542945][ T34] usb 5-1: Manufacturer: syz [ 103.545073][ T34] usb 5-1: SerialNumber: syz [ 103.549043][ T34] usb 5-1: config 0 descriptor?? [ 103.555448][ T34] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 103.582372][ T6997] libceph: connect (1)[c::]:6789 error -101 [ 103.584970][ T6997] libceph: mon0 (1)[c::]:6789 connect error [ 103.755927][ T34] usb 5-1: USB disconnect, device number 10 [ 103.763905][ T34] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 103.836744][ T8350] netlink: 180 bytes leftover after parsing attributes in process `syz.3.704'. [ 103.840291][ T8350] netlink: 180 bytes leftover after parsing attributes in process `syz.3.704'. [ 103.843330][ T8350] netlink: 'syz.3.704': attribute type 10 has an invalid length. [ 103.843993][ T6997] libceph: connect (1)[c::]:6789 error -101 [ 103.847967][ T6997] libceph: mon0 (1)[c::]:6789 connect error [ 103.850022][ T8350] team0: Cannot enslave team device to itself [ 103.906623][ T8354] overlayfs: invalid redirect ((null)) [ 103.909815][ T8354] overlayfs: invalid redirect ((null)) [ 104.039638][ T8364] program syz.3.708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.185835][ T8369] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 104.213684][ T8371] erofs (device loop3): cannot find valid erofs superblock [ 104.280721][ T8375] netlink: 272 bytes leftover after parsing attributes in process `syz.3.712'. [ 104.307841][ T40] audit: type=1400 audit(1757776974.975:546): avc: denied { ioctl } for pid=8379 comm="syz.3.713" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 104.354017][ T6997] libceph: connect (1)[c::]:6789 error -101 [ 104.356268][ T6997] libceph: mon0 (1)[c::]:6789 connect error [ 104.373236][ T8328] ceph: No mds server is up or the cluster is laggy [ 104.373542][ T8384] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 104.377553][ T8384] syzkaller0: group set to 0 [ 104.495613][ T40] audit: type=1400 audit(1757776975.165:547): avc: denied { mounton } for pid=8383 comm="syz.4.715" path="/95/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 104.679611][ T8405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.003821][ T6039] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 105.006425][ T6013] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 105.163862][ T6039] usb 8-1: Using ep0 maxpacket: 8 [ 105.166074][ T6013] usb 5-1: Using ep0 maxpacket: 32 [ 105.169635][ T6039] usb 8-1: config 2 interface 0 has no altsetting 0 [ 105.172430][ T6013] usb 5-1: config 0 has no interfaces? [ 105.175796][ T6039] usb 8-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 105.178629][ T6039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.181008][ T6039] usb 8-1: Product: syz [ 105.182398][ T6013] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 105.185374][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 105.187796][ T6013] usb 5-1: Product: syz [ 105.189365][ T6013] usb 5-1: Manufacturer: syz [ 105.191469][ T6039] usb 8-1: Manufacturer: syz [ 105.192922][ T6039] usb 8-1: SerialNumber: syz [ 105.194999][ T6013] usb 5-1: config 0 descriptor?? [ 105.418720][ T6039] usb 8-1: USB disconnect, device number 6 [ 105.554877][ T8433] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 105.608253][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.611242][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.633587][ T8444] fuse: Unknown parameter 'group_Ò' [ 105.718927][ T5988] usb 5-1: USB disconnect, device number 11 [ 105.804044][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.732'. [ 105.808658][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.732'. [ 105.857872][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 105.866136][ T8461] vxlan0: entered promiscuous mode [ 105.867824][ T8461] vxlan0: entered allmulticast mode [ 105.869873][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.872720][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.881896][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.886510][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.255432][ T8510] netlink: 'syz.0.740': attribute type 3 has an invalid length. [ 106.258724][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 106.322827][ T8522] netlink: 'syz.4.741': attribute type 32 has an invalid length. [ 106.380292][ T8531] netlink: 336 bytes leftover after parsing attributes in process `syz.4.741'. [ 106.384682][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 106.482127][ T8552] netlink: 'syz.4.749': attribute type 1 has an invalid length. [ 106.511452][ T8558] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 106.527556][ T8552] bond1: (slave geneve2): making interface the new active one [ 106.531780][ T8552] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 106.577388][ T8562] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.627005][ T8573] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 106.639305][ T8573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 106.647005][ T8573] vlan2: entered promiscuous mode [ 106.648726][ T8573] bond4: entered promiscuous mode [ 106.650392][ T8573] vlan2: entered allmulticast mode [ 106.651967][ T8573] bond4: entered allmulticast mode [ 106.659014][ T8573] gretap1: entered promiscuous mode [ 106.664206][ T8573] bond4: (slave gretap1): making interface the new active one [ 106.666672][ T8573] gretap1: entered allmulticast mode [ 106.669228][ T8573] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 106.691961][ T8577] binder: 8576:8577 ioctl c00c620f 200000000140 returned -22 [ 106.881444][ T8596] netlink: 'syz.2.762': attribute type 1 has an invalid length. [ 106.907292][ T8597] netlink: 'syz.0.761': attribute type 4 has an invalid length. [ 106.934805][ T8601] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 106.938032][ T8601] NCSI netlink: No device for ifindex 0 [ 107.352386][ T8609] macvlan1: mtu less than device minimum [ 107.396231][ T8611] evm: overlay not supported [ 107.416673][ T8611] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 107.454302][ T8613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8613 comm=syz.4.769 [ 107.482888][ T8618] openvswitch: netlink: Key type 16383 is out of range max 32 [ 107.772804][ T8636] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 107.813860][ T54] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 107.948838][ T8659] block nbd2: Attempted send on invalid socket [ 107.951451][ T8659] blk_print_req_error: 41 callbacks suppressed [ 107.951460][ T8659] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 107.958427][ T8659] gfs2: error -5 reading superblock [ 107.964009][ T54] usb 9-1: Using ep0 maxpacket: 8 [ 107.968084][ T54] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 107.971582][ T54] usb 9-1: config 0 has no interface number 0 [ 107.974751][ T54] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.979356][ T54] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 107.983233][ T54] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.987848][ T54] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.993173][ T54] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 107.997206][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.003505][ T54] usb 9-1: config 0 descriptor?? [ 108.012772][ T54] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 108.143713][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 108.146766][ T40] audit: type=1400 audit(1757776978.805:567): avc: denied { write } for pid=8661 comm="syz.0.784" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.269701][ T839] usb 9-1: USB disconnect, device number 2 [ 108.272179][ C1] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 108.272788][ T8623] ldusb 9-1:0.55: Couldn't submit interrupt_out_urb -19 [ 108.282078][ T839] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 108.659757][ T8685] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 108.662996][ T8685] __nla_validate_parse: 5 callbacks suppressed [ 108.663008][ T8685] netlink: 224 bytes leftover after parsing attributes in process `syz.0.791'. [ 108.712902][ T40] audit: type=1400 audit(1757776979.375:568): avc: denied { read } for pid=8681 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.713023][ T8682] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 108.887892][ T8699] fuse: Unknown parameter 'up_id' [ 108.893308][ T8699] bpf: Bad value for 'gid' [ 108.917077][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 108.919450][ T8695] netlink: 76 bytes leftover after parsing attributes in process `syz.0.794'. [ 108.962757][ T8707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'. [ 109.032714][ T8714] batadv1: entered promiscuous mode [ 109.069506][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 109.073255][ T8718] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 109.075856][ T8718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.079041][ T8715] binder: 8712:8715 ioctl c0306201 2000000003c0 returned -14 [ 109.079919][ T8718] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.801'. [ 109.119946][ T8721] netlink: 'syz.0.802': attribute type 9 has an invalid length. [ 109.121432][ T8720] netlink: 'syz.0.802': attribute type 9 has an invalid length. [ 109.139711][ T8720] program syz.0.802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.139794][ T8721] program syz.0.802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.173686][ T40] audit: type=1400 audit(1757776979.835:569): avc: denied { lock } for pid=8724 comm="syz.3.803" path="socket:[24571]" dev="sockfs" ino=24571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 109.180958][ T8725] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.181623][ T40] audit: type=1400 audit(1757776979.845:570): avc: denied { setopt } for pid=8724 comm="syz.3.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.340153][ T40] audit: type=1400 audit(1757776980.005:571): avc: denied { execute } for pid=8732 comm="syz.3.805" path="/blkio.bfq.io_wait_time" dev="hugetlbfs" ino=24576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 109.348156][ T40] audit: type=1400 audit(1757776980.005:572): avc: denied { execute } for pid=8732 comm="syz.3.805" path="/blkio.bfq.io_wait_time" dev="hugetlbfs" ino=24576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 109.372773][ T40] audit: type=1400 audit(1757776980.035:573): avc: denied { map } for pid=8737 comm="syz.3.806" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.736300][ T8741] afs: Unknown parameter 'dyn0211' [ 110.083856][ T6039] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 110.233869][ T6039] usb 9-1: Using ep0 maxpacket: 32 [ 110.238063][ T6039] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 110.243852][ T40] audit: type=1400 audit(1757776980.905:574): avc: denied { mounton } for pid=8757 comm="syz.3.813" path="/223/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 110.249204][ T6039] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 110.255143][ T6039] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 110.257706][ T6039] usb 9-1: Product: syz [ 110.259090][ T6039] usb 9-1: Manufacturer: syz [ 110.260603][ T6039] usb 9-1: SerialNumber: syz [ 110.274495][ T6039] usb 9-1: config 0 descriptor?? [ 110.277056][ T8751] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 110.281937][ T6039] hub 9-1:0.0: bad descriptor, ignoring hub [ 110.284302][ T6039] hub 9-1:0.0: probe with driver hub failed with error -5 [ 110.357688][ T8761] syz.0.814: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 110.414827][ T40] audit: type=1326 audit(1757776981.085:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.0.814" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f069e38eba9 code=0x0 [ 110.446143][ T40] audit: type=1400 audit(1757776981.115:576): avc: denied { shutdown } for pid=8763 comm="syz.2.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.541675][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 110.545132][ T8769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=8769 comm=syz.2.816 [ 110.550913][ T8769] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 110.556734][ T8769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.746859][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.749825][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.913396][ T8787] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 110.942743][ T8789] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.822' resets device [ 111.054473][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 111.710770][ T8860] comedi comedi3: comedi_config --init_data is deprecated [ 111.794565][ T8875] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 112.089469][ T8889] 9pnet_fd: p9_fd_create_unix (8889): problem connecting socket: éq‰Y’3aK: -91 [ 112.312686][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 112.489847][ T8919] smc: net device bond0 applied user defined pnetid SYZ0 [ 112.494159][ T8919] netlink: 172 bytes leftover after parsing attributes in process `syz.0.858'. [ 112.543885][ T8926] ata1.00: invalid multi_count 1 ignored [ 112.654712][ T6039] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 112.808777][ T6039] usb 7-1: Using ep0 maxpacket: 16 [ 112.813714][ T6039] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 112.816276][ T6039] usb 7-1: config 0 has no interface number 0 [ 112.819787][ T6039] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 112.822603][ T6039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.825040][ T6039] usb 7-1: Product: syz [ 112.826567][ T6039] usb 7-1: Manufacturer: syz [ 112.828216][ T6039] usb 7-1: SerialNumber: syz [ 112.832281][ T6039] usb 7-1: config 0 descriptor?? [ 112.835098][ T6039] hub 7-1:0.132: bad descriptor, ignoring hub [ 112.837386][ T6039] hub 7-1:0.132: probe with driver hub failed with error -5 [ 112.841510][ T6039] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input14 [ 112.982020][ T8974] team0 (unregistering): Port device team_slave_0 removed [ 112.987664][ T8974] team0 (unregistering): Port device team_slave_1 removed [ 113.294043][ T5988] usb 7-1: USB disconnect, device number 15 [ 113.510397][ T6997] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 113.664388][ T9033] fuse: Bad value for 'group_id' [ 113.666600][ T9033] fuse: Bad value for 'group_id' [ 113.679571][ T6997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.684376][ T6997] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.689156][ T6997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.699464][ T6997] usb 5-1: config 0 descriptor?? [ 113.827707][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 113.827719][ T40] audit: type=1400 audit(1758301272.444:588): avc: denied { listen } for pid=9043 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.827999][ T9044] __nla_validate_parse: 2 callbacks suppressed [ 113.828012][ T9044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.873'. [ 113.917417][ T6997] usbhid 5-1:0.0: can't add hid device: -71 [ 113.919348][ T6997] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 113.924030][ T6997] usb 5-1: USB disconnect, device number 12 [ 114.064085][ T40] audit: type=1400 audit(1758301272.668:589): avc: denied { read } for pid=9063 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.365355][ T6997] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 114.519768][ T6997] usb 5-1: Using ep0 maxpacket: 32 [ 114.522786][ T6997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.526451][ T6997] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 114.529958][ T6997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.533943][ T6997] usb 5-1: config 0 descriptor?? [ 114.537782][ T6997] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 114.543322][ T6997] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 114.964839][ T40] audit: type=1400 audit(1758301273.552:590): avc: denied { write } for pid=9101 comm="syz.2.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.966534][ T9102] comedi comedi0: dt2814: I/O port conflict (0x8d,2) [ 115.097770][ T40] audit: type=1400 audit(1758301273.678:591): avc: denied { append } for pid=9107 comm="syz.3.883" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.144555][ T40] audit: type=1400 audit(1758301273.717:592): avc: denied { map } for pid=9113 comm="syz.3.884" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.344068][ T40] audit: type=1400 audit(1758301273.922:593): avc: denied { map } for pid=9120 comm="syz.3.886" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.426229][ T9134] XFS (nbd3): no-recovery mounts must be read-only. [ 115.712444][ T839] raw-gadget.0 gadget.4: failed to queue suspend event [ 115.737775][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 115.762752][ T9169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.894'. [ 115.783888][ T9115] raw-gadget.0 gadget.4: failed to queue resume event [ 115.804944][ T839] raw-gadget.0 gadget.4: failed to queue suspend event [ 115.848661][ T40] audit: type=1400 audit(1758301274.409:594): avc: denied { watch } for pid=9175 comm="syz.3.896" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 115.860175][ T40] audit: type=1400 audit(1758301274.409:595): avc: denied { watch_sb } for pid=9175 comm="syz.3.896" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 115.886651][ T9115] raw-gadget.0 gadget.4: failed to queue resume event [ 115.907587][ T839] raw-gadget.0 gadget.4: failed to queue suspend event [ 115.926137][ T40] audit: type=1400 audit(1758301274.477:596): avc: denied { read } for pid=9175 comm="syz.3.896" path="socket:[27467]" dev="sockfs" ino=27467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 115.999297][ T9102] comedi comedi0: reset error (fatal) [ 115.999353][ T9115] raw-gadget.0 gadget.4: failed to queue resume event [ 116.021787][ T839] raw-gadget.0 gadget.4: failed to queue suspend event [ 116.102493][ T9115] raw-gadget.0 gadget.4: failed to queue resume event [ 116.124220][ T34] raw-gadget.0 gadget.4: failed to queue suspend event [ 116.194365][ T9115] raw-gadget.0 gadget.4: failed to queue resume event [ 116.215744][ T839] raw-gadget.0 gadget.4: failed to queue suspend event [ 116.286882][ T9115] raw-gadget.0 gadget.4: failed to queue resume event [ 116.308106][ T839] raw-gadget.0 gadget.4: failed to queue suspend event [ 116.379334][ T9115] raw-gadget.0 gadget.4: failed to queue resume event [ 116.400456][ T839] raw-gadget.0 gadget.4: failed to queue suspend event [ 116.412648][ T6997] usb 5-1: USB disconnect, device number 13 [ 116.418776][ T6997] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 116.708237][ T9210] 9pnet: Found fid 0 not clunked [ 118.028691][ T5973] Bluetooth: hci0: command 0x0419 tx timeout [ 118.028795][ T9177] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 118.917147][ T9177] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.921628][ T9177] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.923671][ T9177] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.928910][ T9177] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.933979][ T9196] random: crng reseeded on system resumption [ 118.972708][ T9236] input: syz0 as /devices/virtual/input/input15 [ 119.121029][ T9278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.125554][ T9278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.145026][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 119.148556][ T9283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.914'. [ 119.224263][ T5988] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 119.306723][ T40] audit: type=1326 audit(1758301277.788:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.2.917" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f29fc98eba9 code=0x0 [ 119.400416][ T9312] trusted_key: syz.2.919 sent an empty control message without MSG_MORE. [ 119.400824][ T5988] usb 5-1: config 0 has no interfaces? [ 119.408293][ T5988] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 119.412168][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.417222][ T5988] usb 5-1: config 0 descriptor?? [ 119.630714][ T5988] usb 5-1: USB disconnect, device number 14 [ 119.729382][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.924'. [ 119.734855][ T9342] kAFS: No cell specified [ 119.737944][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 119.769930][ T9349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.773513][ T9349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.805510][ T9354] Unknown options in mask b7f2 [ 119.811510][ T9354] netlink: 276 bytes leftover after parsing attributes in process `syz.2.927'. [ 119.840907][ T9357] binder: 9355:9357 ioctl c0306201 200000000080 returned -14 [ 119.844012][ T9357] binder: 9355:9357 ioctl c0306201 200000000180 returned -22 [ 119.847933][ T9357] batadv_slave_1: entered promiscuous mode [ 119.852772][ T9355] batadv_slave_1: left promiscuous mode [ 119.909323][ T40] audit: type=1400 audit(1758301278.385:598): avc: denied { connect } for pid=9361 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 119.917236][ T40] audit: type=1400 audit(1758301278.385:599): avc: denied { getopt } for pid=9361 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 119.928295][ T9363] 9pnet: Could not find request transport: xen [ 120.163336][ T5973] Bluetooth: hci1: command 0x0419 tx timeout [ 120.403215][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 120.407049][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 120.432477][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 120.435372][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 120.450222][ T40] audit: type=1400 audit(1758301278.915:600): avc: denied { setcheckreqprot } for pid=9392 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 120.473583][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 120.477388][ T9389] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 120.480240][ T9389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.616282][ T40] audit: type=1400 audit(1758301279.072:601): avc: denied { connect } for pid=9400 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.968855][ T5973] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.130618][ T9421] openvswitch: netlink: Message has 8 unknown bytes. [ 121.525552][ T9441] kvm: kvm [9440]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 121.528908][ T9441] kvm: kvm [9440]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 121.768340][ T40] audit: type=1400 audit(1758301280.200:602): avc: denied { execute } for pid=9454 comm="syz.2.949" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=29878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 121.786393][ T9456] netlink: 'syz.3.950': attribute type 2 has an invalid length. [ 121.789854][ T9456] netlink: 'syz.3.950': attribute type 1 has an invalid length. [ 121.814741][ T9459] random: crng reseeded on system resumption [ 121.843563][ T40] audit: type=1400 audit(1758301280.269:603): avc: denied { bind } for pid=9458 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.852163][ T9458] delete_channel: no stack [ 122.141476][ T9488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=9488 comm=syz.4.959 [ 122.184442][ T9495] ieee802154 phy1 wpan1: encryption failed: -22 [ 122.187108][ T40] audit: type=1400 audit(1758301280.613:604): avc: denied { block_suspend } for pid=9494 comm="syz.4.960" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.337618][ T9512] only policy match revision 0 supported [ 122.337635][ T9512] unable to load match [ 122.458833][ T9521] trusted_key: encrypted_key: insufficient parameters specified [ 122.486130][ T6450] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 122.530030][ T9525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.533863][ T9525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.624111][ T40] audit: type=1400 audit(1758301281.045:605): avc: denied { getopt } for pid=9531 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.628534][ T6450] usb 5-1: device descriptor read/64, error -71 [ 122.872487][ T6450] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 122.919697][ T40] audit: type=1400 audit(1758301281.331:606): avc: denied { accept } for pid=9572 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.004764][ T6450] usb 5-1: device descriptor read/64, error -71 [ 123.086148][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.117958][ T6450] usb usb5-port1: attempt power cycle [ 123.154440][ T9594] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 123.482961][ T6450] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 123.524623][ T6450] usb 5-1: device descriptor read/8, error -71 [ 123.654083][ T9628] netlink: 'syz.4.986': attribute type 2 has an invalid length. [ 123.658472][ T9628] gfs2: not a GFS2 filesystem [ 123.777150][ T6450] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 123.808833][ T6450] usb 5-1: device descriptor read/8, error -71 [ 123.883611][ T9643] Invalid ELF header magic: != ELF [ 123.919491][ T6450] usb usb5-port1: unable to enumerate USB device [ 125.039627][ T9651] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 125.199167][ T5973] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.502797][ T6450] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 125.654955][ T6450] usb 5-1: Using ep0 maxpacket: 8 [ 125.660806][ T6450] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 125.664578][ T6450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.667996][ T6450] usb 5-1: Product: syz [ 125.669740][ T6450] usb 5-1: Manufacturer: syz [ 125.671425][ T6450] usb 5-1: SerialNumber: syz [ 125.882194][ T6450] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 126.097758][ T6039] usb 5-1: USB disconnect, device number 19 [ 126.104458][ T6039] usblp1: removed [ 126.413146][ T9720] __nla_validate_parse: 5 callbacks suppressed [ 126.413157][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 126.418300][ T9720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1001'. [ 126.421117][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 126.423838][ T9720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1001'. [ 126.482445][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 126.485213][ T9726] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1002'. [ 126.906296][ T9753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1008'. [ 127.000723][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 127.306839][ T5973] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.946447][ T9780] ptrace attach of "/syz-executor exec"[5970] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 127.946858][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1012'. [ 127.983247][ T9781] netlink: 'syz.0.1012': attribute type 11 has an invalid length. [ 127.990288][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1012'. [ 127.993624][ T9781] netlink: 'syz.0.1012': attribute type 11 has an invalid length. [ 128.011798][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 128.011812][ T40] audit: type=1400 audit(1758301286.349:610): avc: denied { watch_reads } for pid=9786 comm="syz.2.1013" path="/235/file0" dev="tmpfs" ino=1281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.064844][ T9790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9790 comm=syz.2.1013 [ 128.966808][ T40] audit: type=1400 audit(1758301287.297:611): avc: denied { ioctl } for pid=9795 comm="syz.0.1016" path="socket:[30220]" dev="sockfs" ino=30220 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.105447][ T9811] ata1.00: invalid multi_count 1 ignored [ 129.530118][ T9838] block nbd0: Attempted send on invalid socket [ 129.532765][ T9838] I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 129.536541][ T9838] gfs2: error -5 reading superblock [ 130.278319][ T9859] sctp: [Deprecated]: syz.0.1029 (pid 9859) Use of int in maxseg socket option. [ 130.278319][ T9859] Use struct sctp_assoc_value instead [ 130.523245][ T1459] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 130.553787][ T9872] random: crng reseeded on system resumption [ 130.655040][ T1459] usb 5-1: device descriptor read/64, error -71 [ 130.680336][ T9887] macsec1: entered promiscuous mode [ 130.682571][ T9887] bridge0: entered promiscuous mode [ 130.897003][ T1459] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 131.028375][ T1459] usb 5-1: device descriptor read/64, error -71 [ 131.149698][ T1459] usb usb5-port1: attempt power cycle [ 131.492890][ T1459] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 131.514685][ T1459] usb 5-1: device descriptor read/8, error -71 [ 131.590011][ T9921] __nla_validate_parse: 2 callbacks suppressed [ 131.590022][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 131.738569][ T9933] sysfs: Unknown parameter 'fd' [ 131.752790][ T1459] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 131.773490][ T1459] usb 5-1: device descriptor read/8, error -71 [ 131.837690][ T40] audit: type=1400 audit(1758301546.144:612): avc: denied { connect } for pid=9980 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.883064][ T1459] usb usb5-port1: unable to enumerate USB device [ 131.892956][ T6450] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 131.987886][ T9997] ufs: You didn't specify the type of your ufs filesystem [ 131.987886][ T9997] [ 131.987886][ T9997] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 131.987886][ T9997] [ 131.987886][ T9997] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 131.998219][ T9997] ufs: failed to set blocksize [ 132.024369][T10000] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 132.027311][T10000] netlink: 'syz.3.1047': attribute type 3 has an invalid length. [ 132.029772][T10000] netlink: 'syz.3.1047': attribute type 3 has an invalid length. [ 132.033522][T10000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=10000 comm=syz.3.1047 [ 132.073002][ T6450] usb 7-1: Using ep0 maxpacket: 8 [ 132.075860][ T6450] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 132.078415][ T6450] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 132.081460][ T6450] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 132.084514][ T6450] usb 7-1: config 250 has no interface number 0 [ 132.086459][ T6450] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 132.090082][ T6450] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 132.093769][ T6450] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 132.097239][ T6450] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 132.102067][ T6450] usb 7-1: config 250 interface 228 has no altsetting 0 [ 132.106357][ T6450] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 132.109163][ T6450] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 132.111681][ T6450] usb 7-1: Product: syz [ 132.113336][ T6450] usb 7-1: SerialNumber: syz [ 132.118154][ T6450] hub 7-1:250.228: bad descriptor, ignoring hub [ 132.120555][ T6450] hub 7-1:250.228: probe with driver hub failed with error -5 [ 132.218533][ T40] audit: type=1400 audit(1758301546.524:613): avc: denied { watch } for pid=10016 comm="syz.3.1051" path="/287/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 132.231079][ T8476] Bluetooth: hci4: Frame reassembly failed (-84) [ 132.257768][T10017] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.320675][ T6450] usblp 7-1:250.228: usblp1: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 132.353158][T10017] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.414345][T10017] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.495958][T10017] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.520741][ T9926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.523766][ T9926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.527884][ T9926] loop2: detected capacity change from 0 to 7 [ 132.533036][ T9926] Dev loop2: unable to read RDB block 7 [ 132.534997][ T9926] loop2: unable to read partition table [ 132.537119][ T9926] loop2: partition table beyond EOD, truncated [ 132.540069][ T9926] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 132.582829][ T76] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.589558][ T76] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.598070][ T1152] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.612448][ T76] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.712877][ T6450] usb 7-1: USB disconnect, device number 16 [ 132.716300][ T6450] usblp1: removed [ 132.956147][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.145278][T10060] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 133.147629][T10060] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1052'. [ 133.150258][T10060] netlink: 'syz.2.1052': attribute type 2 has an invalid length. [ 133.152638][T10060] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 133.282656][T10072] bdev: Unknown parameter 'nfs' [ 133.491916][ T40] audit: type=1400 audit(1758301547.794:614): avc: denied { map } for pid=10100 comm="syz.2.1061" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.492237][T10101] random: crng reseeded on system resumption [ 133.511312][T10101] Restarting kernel threads ... [ 133.515130][T10101] Done restarting kernel threads. [ 133.519032][T10101] netlink: 'syz.2.1061': attribute type 1 has an invalid length. [ 133.522018][T10101] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1061'. [ 133.527293][T10101] loop6: detected capacity change from 0 to 524287999 [ 133.614867][T10108] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 133.618831][T10108] cramfs: wrong magic [ 133.711016][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 134.233040][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 134.233057][ T5973] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 134.329869][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 134.337486][ T40] audit: type=1400 audit(1758301548.644:615): avc: denied { mounton } for pid=10155 comm="syz.0.1071" path="/239/file0" dev="tmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 134.346350][T10154] tipc: Enabled bearer , priority 0 [ 134.348457][ T40] audit: type=1400 audit(1758301548.654:616): avc: denied { mount } for pid=10155 comm="syz.0.1071" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 134.352407][T10154] syzkaller0: entered promiscuous mode [ 134.357787][T10154] syzkaller0: entered allmulticast mode [ 134.361460][ T40] audit: type=1400 audit(1758301548.664:617): avc: denied { unmount } for pid=5970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 134.378983][T10154] tipc: Resetting bearer [ 134.433987][T10167] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1075'. [ 134.488808][ T24] usb 7-1: config 0 has no interfaces? [ 134.491157][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.494605][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.498387][ T24] usb 7-1: config 0 descriptor?? [ 134.583890][T10183] IPv6: NLM_F_REPLACE set, but no existing node found! [ 134.588436][T10183] bond0: entered allmulticast mode [ 134.590649][T10183] bond_slave_0: entered allmulticast mode [ 134.593288][T10183] bond_slave_1: entered allmulticast mode [ 134.702742][ T24] usb 7-1: USB disconnect, device number 17 [ 134.983279][ T40] audit: type=1400 audit(1758301549.294:618): avc: denied { execute } for pid=10213 comm="syz.0.1082" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.157352][T10222] usb usb8: usbfs: process 10222 (syz.0.1085) did not claim interface 0 before use [ 135.161420][T10222] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.314953][T10227] kvm: kvm [10226]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 135.318580][T10227] kvm: kvm [10226]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 135.374876][ T54] tipc: Node number set to 2540355262 [ 135.494784][T10247] netlink: 'syz.0.1090': attribute type 2 has an invalid length. [ 135.497184][T10247] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 135.499566][T10247] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 135.544550][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1093'. [ 135.689111][ T40] audit: type=1400 audit(1758301549.994:619): avc: denied { read write } for pid=10262 comm="syz.0.1094" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 135.696501][ T40] audit: type=1400 audit(1758301549.994:620): avc: denied { open } for pid=10262 comm="syz.0.1094" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 135.886724][T10278] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] SMP KASAN NOPTI [ 135.891487][T10278] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 135.896151][T10278] CPU: 3 UID: 0 PID: 10278 Comm: syz.0.1098 Not tainted syzkaller #0 PREEMPT(full) [ 135.900351][T10278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.904721][T10278] RIP: 0010:skb_segment+0x189c/0x3e20 [ 135.906807][T10278] Code: 00 00 fe e9 9b eb ff ff e8 b1 8d 51 f8 48 8b 84 24 c8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 c3 ec b7 f8 48 8b 84 24 c8 [ 135.913697][T10278] RSP: 0018:ffffc90005a1ea60 EFLAGS: 00010202 [ 135.915779][T10278] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc90007582000 [ 135.918368][T10278] RDX: 000000000000000e RSI: ffffffff896a111f RDI: 0000000000000070 [ 135.921152][T10278] RBP: ffffc90005a1eba8 R08: 0000000000000005 R09: 000000000000ffff [ 135.923586][T10278] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff8880297b5ec0 [ 135.926007][T10278] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 135.928355][T10278] FS: 00007f069f17c6c0(0000) GS:ffff8880d69b5000(0000) knlGS:0000000000000000 [ 135.931110][T10278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.933241][T10278] CR2: 0000200000200000 CR3: 0000000039117000 CR4: 0000000000352ef0 [ 135.935701][T10278] Call Trace: [ 135.936741][T10278] [ 135.937684][T10278] ? __lock_acquire+0x62e/0x1ce0 [ 135.939253][T10278] tcp_gso_segment+0x3be/0x19e0 [ 135.940802][T10278] ? __pfx_tcp_wfree+0x10/0x10 [ 135.942311][T10278] tcp6_gso_segment+0x1ec/0x1140 [ 135.943872][T10278] ipv6_gso_segment+0x7f5/0x1d60 [ 135.945434][T10278] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 135.947122][T10278] ? __pfx_skb_network_protocol+0x10/0x10 [ 135.948903][T10278] skb_mac_gso_segment+0x2a8/0x650 [ 135.950504][T10278] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 135.952179][T10278] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 135.953950][T10278] ? __pfx_stack_trace_save+0x10/0x10 [ 135.955625][T10278] __skb_gso_segment+0x36e/0x700 [ 135.957160][T10278] ? lock_acquire+0x179/0x350 [ 135.958645][T10278] validate_xmit_skb+0x662/0x1200 [ 135.960226][T10278] __dev_queue_xmit+0x976/0x4490 [ 135.961799][T10278] ? selinux_ip_postroute+0x73a/0xde0 [ 135.963443][T10278] ? __pfx___dev_queue_xmit+0x10/0x10 [ 135.965092][T10278] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 135.966841][T10278] ? __lock_acquire+0xb97/0x1ce0 [ 135.968356][T10278] ip6_finish_output2+0xe98/0x2020 [ 135.969906][T10278] __ip6_finish_output+0x3cd/0x1010 [ 135.971491][T10278] ip6_output+0x1ca/0x3e0 [ 135.972825][T10278] ip6_xmit+0x12d6/0x22f0 [ 135.974161][T10278] ? ip6_dst_check+0x352/0x950 [ 135.975624][T10278] ? __pfx_ip6_xmit+0x10/0x10 [ 135.977088][T10278] ? __sk_dst_check+0xe0/0x350 [ 135.978665][T10278] inet6_csk_xmit+0x3c7/0x740 [ 135.980121][T10278] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 135.981758][T10278] ? csum_ipv6_magic+0x299/0x320 [ 135.983295][T10278] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 135.984872][T10278] __tcp_transmit_skb+0x19bb/0x3df0 [ 135.986468][T10278] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 135.988144][T10278] ? kasan_quarantine_put+0x10a/0x240 [ 135.989830][T10278] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.991538][T10278] ? kfree_skbmem+0x16c/0x1f0 [ 135.993030][T10278] tcp_write_xmit+0x1274/0x84e0 [ 135.994602][T10278] __tcp_push_pending_frames+0xaf/0x390 [ 135.996377][T10278] tcp_rcv_established+0x90e/0x23f0 [ 135.998022][T10278] ? ip6_dst_check+0x352/0x950 [ 135.999528][T10278] ? __pfx_tcp_rcv_established+0x10/0x10 [ 136.001311][T10278] tcp_v6_do_rcv+0x895/0x1740 [ 136.002797][T10278] ? __local_bh_enable_ip+0xa4/0x120 [ 136.004492][T10278] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 136.006217][T10278] __release_sock+0x14c/0x400 [ 136.007716][T10278] __sk_flush_backlog+0x27/0xc0 [ 136.009267][T10278] tcp_sendmsg_locked+0x3957/0x42a0 [ 136.010926][T10278] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 136.012677][T10278] ? do_raw_spin_lock+0x12c/0x2b0 [ 136.014305][T10278] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.016023][T10278] ? __local_bh_enable_ip+0xa4/0x120 [ 136.017696][T10278] tcp_sendmsg+0x2e/0x50 [ 136.019048][T10278] ? __pfx_tcp_sendmsg+0x10/0x10 [ 136.020625][T10278] inet6_sendmsg+0xb9/0x140 [ 136.022083][T10278] __sys_sendto+0x376/0x520 [ 136.023540][T10278] ? __pfx___sys_sendto+0x10/0x10 [ 136.025131][T10278] ? __pfx___x64_sys_futex+0x10/0x10 [ 136.026739][T10278] ? ksys_write+0x1ac/0x250 [ 136.028130][T10278] ? __pfx_ksys_write+0x10/0x10 [ 136.029627][T10278] __x64_sys_sendto+0xe0/0x1c0 [ 136.031117][T10278] ? do_syscall_64+0x91/0x4e0 [ 136.032554][T10278] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.034192][T10278] do_syscall_64+0xcd/0x4e0 [ 136.035599][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.037451][T10278] RIP: 0033:0x7f069e38eba9 [ 136.038861][T10278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.044856][T10278] RSP: 002b:00007f069f17c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 136.047460][T10278] RAX: ffffffffffffffda RBX: 00007f069e5d5fa0 RCX: 00007f069e38eba9 [ 136.049921][T10278] RDX: ffffffffffffff1d RSI: 00002000000000c0 RDI: 0000000000000007 [ 136.052369][T10278] RBP: 00007f069e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 136.054830][T10278] R10: 0000000000000850 R11: 0000000000000246 R12: 0000000000000000 [ 136.057295][T10278] R13: 00007f069e5d6038 R14: 00007f069e5d5fa0 R15: 00007ffc5c6d4fe8 [ 136.059748][T10278] [ 136.060741][T10278] Modules linked in: [ 136.062084][T10278] ---[ end trace 0000000000000000 ]--- [ 136.063866][T10278] RIP: 0010:skb_segment+0x189c/0x3e20 [ 136.065575][T10278] Code: 00 00 fe e9 9b eb ff ff e8 b1 8d 51 f8 48 8b 84 24 c8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 c3 ec b7 f8 48 8b 84 24 c8 [ 136.071520][T10278] RSP: 0018:ffffc90005a1ea60 EFLAGS: 00010202 [ 136.073484][T10278] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffc90007582000 [ 136.075932][T10278] RDX: 000000000000000e RSI: ffffffff896a111f RDI: 0000000000000070 [ 136.078383][T10278] RBP: ffffc90005a1eba8 R08: 0000000000000005 R09: 000000000000ffff [ 136.080831][T10278] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff8880297b5ec0 [ 136.083360][T10278] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 136.085823][T10278] FS: 00007f069f17c6c0(0000) GS:ffff8880d69b5000(0000) knlGS:0000000000000000 [ 136.088587][T10278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.090656][T10278] CR2: 0000200000200000 CR3: 0000000039117000 CR4: 0000000000352ef0 [ 136.093191][T10278] Kernel panic - not syncing: Fatal exception in interrupt [ 136.096139][T10278] Kernel Offset: disabled [ 136.097512][T10278] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:23:26 Registers: info registers vcpu 0 CPU#0 RAX=00000000000b8334 RBX=0000000000000000 RCX=ffffffff8b94ab49 RDX=ffffed100d486656 RSI=ffffffff8c163180 RDI=ffffffff81914111 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7190 R15=0000000000000000 RIP=ffffffff8b94968f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555587e9b808 CR3=0000000039286000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558dcd0b94 000055558dcd0540 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558dcc887e 000055558dcc8510 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 757165732f766564 2f01ffffffffffff ffffe10801800300 0800208610002010 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02e8030004840002 e4030004840002e0 030384020002de03 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 032802c400045080 02041880020802bc 000802b4000a0004 0a02e40304048400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0402 8004018c10000601 72dc000200072802 9c000200040a02b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010380040880c5bc 8808000100000208 06060129ec018004 0380030004000408 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000401c7100008 024bd8006b636f73 762d74736f68762f 7665642f01ffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffdd0800 030fffffffffffff 04028004018c1000 060172dc00020007 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 28029c000200040a 02b0032802c40004 5080020418800208 02bc000802b4000a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000bae5c RBX=0000000000000001 RCX=ffffffff8b94ab49 RDX=ffffed100d4a6656 RSI=ffffffff8c163180 RDI=ffffffff81914111 RBP=ffffed1003bd2488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801de92440 R14=ffffffff90ab7190 R15=0000000000000000 RIP=ffffffff8b94968f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000040 CR3=000000004d304000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004010010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb79f6786 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb79f6786 00007ffdb79f678c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000315f6576616c 735f656764697262 0035001400000000 00c280010001000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f610d100 00007f59f55a7460 00007f59f55a0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f55a74b8 00007f59f55a74b0 00007f59f55a74a8 00007f59f55a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000c8834 RBX=0000000000000002 RCX=ffffffff8b94ab49 RDX=ffffed100d4c6656 RSI=ffffffff8c163180 RDI=ffffffff81914111 RBP=ffffed1003bd2910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801de94880 R14=ffffffff90ab7190 R15=0000000000000000 RIP=ffffffff8b94968f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39f0c9 CR3=000000004ff5b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000c0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb79f6600 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb79f6786 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb79f6786 00007ffdb79f678c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59f5412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8564a635 RDI=ffffffff9b1150e0 RBP=ffffffff9b1150a0 RSP=ffffc90005a1e3b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000000 R14=ffffffff9b1150a0 R15=ffffffff9b115360 RIP=ffffffff8564a65f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f069f17c6c0 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000200000 CR3=0000000039117000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000002fefee0 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069f17bbf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c6d54f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c6d54f6 00007ffc5c6d54fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069e412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069e412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069e412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069e412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069e412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f069e412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000