last executing test programs: 6m28.452514605s ago: executing program 32 (id=7636): r0 = socket(0x2, 0x80805, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000200)) 5m43.657606262s ago: executing program 33 (id=10591): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 5m21.076661873s ago: executing program 5 (id=11589): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000480)={0x8, 0x0, r1}) 5m21.068675519s ago: executing program 5 (id=11592): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000140)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x1, 0xd59f83, 0x19f2, 0x3f, 0x8, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x2c, {0x8, 0xffffffff}, 0xd0, 0x9}}) 5m21.009312989s ago: executing program 5 (id=11594): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) 5m20.950297211s ago: executing program 5 (id=11595): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 5m20.9495065s ago: executing program 5 (id=11596): r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x101042, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000200)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0x0, r0, 0x0}]) 5m20.543813473s ago: executing program 5 (id=11609): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 5m20.498314119s ago: executing program 34 (id=11609): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 4m30.234779562s ago: executing program 2 (id=13639): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd27, 0x0, {0x7, 0x0, 0x68, r1, 0x12042, 0x27025}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048d4}, 0x40000) 4m29.276363015s ago: executing program 2 (id=13646): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x3, 0xa9, 0x8000c5f) 4m29.276124196s ago: executing program 2 (id=13648): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 4m29.257653665s ago: executing program 2 (id=13650): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 4m29.161659143s ago: executing program 2 (id=13652): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 4m29.099845053s ago: executing program 2 (id=13655): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c0003800600010000000000080002000300000006000300a7aa0000080001"], 0x5c}}, 0x0) 4m13.081834745s ago: executing program 35 (id=13655): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c0003800600010000000000080002000300000006000300a7aa0000080001"], 0x5c}}, 0x0) 3m48.474520647s ago: executing program 1 (id=14805): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 3m48.428379832s ago: executing program 1 (id=14808): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) 3m48.424042662s ago: executing program 1 (id=14811): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 3m48.367032187s ago: executing program 1 (id=14814): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m48.311681442s ago: executing program 1 (id=14817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x63, 0x0, [{0x400000f5, 0x0, 0x9}]}) 3m48.090454542s ago: executing program 1 (id=14828): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) llistxattr(&(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0) 3m48.008988449s ago: executing program 36 (id=14828): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) llistxattr(&(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0) 3m17.898357059s ago: executing program 8 (id=15770): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 3m16.432425066s ago: executing program 8 (id=15777): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 3m16.360582189s ago: executing program 8 (id=15778): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) 3m16.197299377s ago: executing program 8 (id=15780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2d, 0x27dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x20004000) 3m16.113198484s ago: executing program 8 (id=15781): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 3m16.112148308s ago: executing program 8 (id=15782): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 3m0.0539774s ago: executing program 37 (id=15782): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 2m27.42946876s ago: executing program 9 (id=16838): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 2m27.429152262s ago: executing program 9 (id=16839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x3}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8800) 2m27.310012761s ago: executing program 9 (id=16841): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="c45088"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) 2m27.219575409s ago: executing program 9 (id=16843): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 2m27.211954388s ago: executing program 9 (id=16845): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m26.541756964s ago: executing program 9 (id=16853): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000080)) 2m26.486372436s ago: executing program 38 (id=16853): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000080)) 2m5.344891814s ago: executing program 3 (id=17209): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 2m5.298795227s ago: executing program 3 (id=17210): r0 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af7, 0x80, 0x1, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000020000000000000000000850000003600000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[r3], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x32}) io_uring_enter(r0, 0x47f3, 0x0, 0x0, 0x0, 0x0) 2m5.23531123s ago: executing program 3 (id=17212): r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="03"], 0x400, 0x0) msgsnd(r0, &(0x7f0000001a40)=ANY=[], 0x401, 0x0) msgsnd(r0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x1800) 2m4.320267978s ago: executing program 3 (id=17228): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m4.317627481s ago: executing program 3 (id=17229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x0, 0x4, 0x5, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x9, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 2m4.145064034s ago: executing program 3 (id=17231): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x16) 2m4.098125576s ago: executing program 39 (id=17231): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x16) 3.145816866s ago: executing program 6 (id=19829): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x400000, 0x1}}, @uexit={0x0, 0x18, 0xface}], 0x68}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xface) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 2.944486444s ago: executing program 6 (id=19833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}}, 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.931923322s ago: executing program 6 (id=19834): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 2.645114517s ago: executing program 4 (id=19844): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) wait4(r0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 1.928451272s ago: executing program 6 (id=19847): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e22, 0x8, @private0, 0xd470}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000000)="2200000809809a85", 0x8) 1.904249455s ago: executing program 6 (id=19848): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000002440)='-', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001600)={0x218, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x1f9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_b, @initial, {0xb, 0x2}}, 0x10001, @default, 0x410, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x2c, 0x9}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x300, 0x0, 0x2, 0x0, {0xfff, 0x2e, 0x0, 0xa, 0x0, 0x0, 0x1}, 0x300, 0x80000001, 0xa0}}, @void, @void, @val={0x76, 0x6, {0x8, 0x10, 0xb, 0x4}}, [{0xdd, 0x8f, "de29e33aefe432db9ad2116dbd68cb9bfe8c6521c2a1d4d155482a7bfc9074ea9d3b124f573fd55a8991feff19c8704bd6f4d420b6176568febc2aead4b5b9972c6cf17dd00f03ee0351043ca9632a1b2f1e9ec9ad0c3e53c08d3a6bed53dc93d2cf59e6927bed1735aa741b950a23bb3d875f9bb94c83428794153c948b58a45d4a0a95b81a5a37b2853ac905f6db"}, {0xdd, 0x74, "e8e2dc7b972b2bd7d3be5385262773f9f97002f927dc9474bba27eab1d87782f916718e709ce2033be0f4f6a0d1c3da3112101704a1c72c80260fe4f00fdb05bc60ca8a5c7dccd5eed82a1f267f8bb5924784fe421bc789f75865d9279cd09ff0b67888440bb009d40c40d45fe51697ff748303b"}, {0xdd, 0x6d, "1cd116ed815339556dd03f4c4264d37bc8e95013a71f9c727557311791a447cd67edffe70556fc6c6782994372b1fb0e931248a0ddfb784dd03311f226e2a738521b96110d6638d50271c381151e4894220e61b67872a34be6ac7c7e2fafb9dc0fa8a2f7d0e046a5d055fcc837"}, {0xdd, 0x2d, "008e5ee0f40debaad30c071e2d20cea54212d90cc20a0a5523814ae1a8b04eb9b4fdb97d66b26935169b13a697"}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg(r2, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) splice(r0, 0x0, r1, 0x0, 0xfffd, 0xa) 1.822354801s ago: executing program 6 (id=19849): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) timer_gettime(r0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) 1.697123571s ago: executing program 4 (id=19850): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 1.675670459s ago: executing program 0 (id=19851): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, &(0x7f0000000000)) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}]}, 0x28}}, 0x0) 1.674059318s ago: executing program 4 (id=19852): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) splice(r0, 0x0, r4, 0x0, 0x10000000000066, 0xa) 1.637445604s ago: executing program 0 (id=19853): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x2) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.544215105s ago: executing program 4 (id=19856): setrlimit(0xf, &(0x7f0000000000)={0x0, 0x9}) timer_create(0x3, 0x0, &(0x7f0000000300)) r0 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 580.414288ms ago: executing program 0 (id=19865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x9, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) 439.577485ms ago: executing program 7 (id=19858): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4b, {0x0, "430f0135000000000f23c80f21f8350c20000f33f8bebe3266b864000f00d03500010000b8050002000f006080020b01b00f30"}}], 0x1c}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x41, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 437.919763ms ago: executing program 4 (id=19859): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 377.55966ms ago: executing program 7 (id=19860): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) ioctl$TIOCGPTPEER(r3, 0x40140921, 0x200000000005) ioctl$TIOCGPTPEER(r2, 0x40140921, 0x200000000005) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 377.363575ms ago: executing program 0 (id=19861): r0 = getpid() ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000380)) syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r2], 0xb8}}, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x309, @time={0x400, 0x7}, 0x8, {0x8, 0x10}, 0x3}) 377.197244ms ago: executing program 7 (id=19862): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040d4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}}, 0x20}}, 0x0) 281.186269ms ago: executing program 0 (id=19863): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x88001, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) 218.799355ms ago: executing program 0 (id=19864): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) 56.29161ms ago: executing program 7 (id=19866): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r4, 0x15}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 390.666µs ago: executing program 7 (id=19867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000001c0)={0xf, 0x2, 'client0\x00', 0x6, "2f26199f7fdd6188", "a392f7896cf01b60a97b5696d6de30b14a9b127e400445ccf5e8ca146ccdccef", 0x2, 0x9}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 123.847µs ago: executing program 4 (id=19868): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000008300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="27af093f6a0c107d659327a0c6e1e4ccd76fe556919f0acaf028d41eb699d4e3504a142bda5870fbf3ab", 0x2a}], 0x1, 0x0, 0x0, 0x20048000}], 0x1, 0x40800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 7 (id=19869): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) kernel console output (not intermixed with test programs): Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.430878][T12282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.804333][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.916167][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.989912][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17747'. [ 456.001584][ T6122] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 456.005093][T12353] bond0: Invalid ad_actor_system MAC address. [ 456.007056][T12353] bond0: option ad_actor_system: invalid value (27571) [ 456.019916][T12353] bond0 (unregistering): Released all slaves [ 456.142694][T12356] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.17748'. [ 456.207045][T12360] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 456.207045][T12360] cct.usage_percpu_sys' [ 456.245778][T12362] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 456.600976][ T8445] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 456.602608][ T6122] Bluetooth: hci5: command 0xfc11 tx timeout [ 456.831856][T12372] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 457.041179][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.054634][T12395] syzkaller1: entered promiscuous mode [ 457.057013][T12395] syzkaller1: entered allmulticast mode [ 457.397654][T12412] bridge0: port 3(syz_tun) entered blocking state [ 457.400044][T12412] bridge0: port 3(syz_tun) entered forwarding state [ 457.406343][T12412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.409231][T12412] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.434635][T12412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.528650][T12416] netlink: 'syz.4.17774': attribute type 7 has an invalid length. [ 457.532954][T12416] netlink: 'syz.4.17774': attribute type 7 has an invalid length. [ 457.589412][T12423] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.17778'. [ 457.627780][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.893775][ T4320] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 458.086210][ T4320] usb 9-1: Using ep0 maxpacket: 8 [ 458.099144][ T4320] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.102632][ T4320] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.105710][ T4320] usb 9-1: config 0 interface 0 has no altsetting 0 [ 458.110215][ T4320] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 458.113454][ T4320] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.121323][ T4320] usb 9-1: config 0 descriptor?? [ 458.139805][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.572275][ T4320] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 458.575293][ T4320] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 458.583623][ T4320] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 458.586549][ T4320] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 458.590194][ T4320] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 458.593863][ T4320] mcp2221 0003:04D8:00DD.0018: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 458.784294][T30586] usb 9-1: USB disconnect, device number 7 [ 459.233610][ T40] kauditd_printk_skb: 135 callbacks suppressed [ 459.233620][ T40] audit: type=1400 audit(2000000706.530:45373): avc: denied { read write } for pid=12510 comm="syz.0.17812" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 459.245892][ T40] audit: type=1400 audit(2000000706.530:45374): avc: denied { wake_alarm } for pid=12509 comm="syz.7.17813" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 459.253463][ T40] audit: type=1400 audit(2000000706.539:45375): avc: denied { open } for pid=12510 comm="syz.0.17812" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 459.261188][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.264697][ T40] audit: type=1400 audit(2000000706.539:45376): avc: denied { ioctl } for pid=12510 comm="syz.0.17812" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 459.274560][ T40] audit: type=1400 audit(2000000706.567:45377): avc: denied { create } for pid=12509 comm="syz.7.17813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 459.391663][ T40] audit: type=1400 audit(2000000706.679:45378): avc: denied { create } for pid=12517 comm="syz.4.17815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 459.411123][ T40] audit: type=1400 audit(2000000706.679:45379): avc: denied { bind } for pid=12517 comm="syz.4.17815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 459.439453][ T40] audit: type=1400 audit(2000000706.679:45380): avc: denied { setopt } for pid=12517 comm="syz.4.17815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 459.451212][ T40] audit: type=1400 audit(2000000706.679:45381): avc: denied { accept } for pid=12517 comm="syz.4.17815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 459.459053][ T40] audit: type=1400 audit(2000000706.679:45382): avc: denied { write } for pid=12517 comm="syz.4.17815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 459.482621][T12524] netlink: 'syz.0.17818': attribute type 9 has an invalid length. [ 459.485712][T12524] netlink: 'syz.0.17818': attribute type 11 has an invalid length. [ 459.497495][T12524] netlink: 'syz.0.17818': attribute type 12 has an invalid length. [ 459.501512][T12524] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.17818'. [ 459.636258][ T39] usb 11-1: new low-speed USB device number 26 using dummy_hcd [ 459.729439][ T8445] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 459.809050][ T39] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.813341][ T39] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 459.819082][ T39] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 459.823874][ T39] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 459.827421][ T39] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.842903][T12516] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 459.847984][ T39] hub 11-1:1.0: bad descriptor, ignoring hub [ 459.851190][ T6828] page_pool_release_retry() stalled pool shutdown: id 124, 1 inflight 60 sec [ 459.858701][ T39] hub 11-1:1.0: probe with driver hub failed with error -5 [ 459.863350][ T39] cdc_wdm 11-1:1.0: skipping garbage [ 459.865737][ T39] cdc_wdm 11-1:1.0: skipping garbage [ 459.870713][ T39] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 459.873760][ T39] cdc_wdm 11-1:1.0: Unknown control protocol [ 459.924223][T12556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12556 comm=syz.7.17831 [ 459.930488][T12556] netlink: 'syz.7.17831': attribute type 1 has an invalid length. [ 459.955592][T12556] bond0: (slave bridge1): making interface the new active one [ 459.960017][T12556] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 460.378012][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.451655][T12589] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 460.461265][T12589] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.17838'. [ 460.465897][T12589] netlink: Conntrack attr has 4 unknown bytes [ 460.628992][T12602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17844'. [ 460.688922][T12515] cdc_wdm 11-1:1.0: Error autopm - -16 [ 460.689083][ T6191] usb 11-1: USB disconnect, device number 26 [ 460.708894][T12608] sit2: entered allmulticast mode [ 460.844942][ T6191] usb 11-1: new full-speed USB device number 27 using dummy_hcd [ 461.021319][ T6191] usb 11-1: unable to get BOS descriptor or descriptor too short [ 461.027392][ T6191] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 461.030248][ T6191] usb 11-1: can't read configurations, error -71 [ 461.486010][ T24] net_ratelimit: 1 callbacks suppressed [ 461.486023][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.449836][T12671] netlink: 'syz.4.17874': attribute type 4 has an invalid length. [ 462.454693][T12671] netlink: 'syz.4.17874': attribute type 4 has an invalid length. [ 462.588856][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.658451][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17882'. [ 462.779755][T12709] netlink: 'syz.4.17884': attribute type 4 has an invalid length. [ 462.786548][T12709] netlink: 'syz.4.17884': attribute type 4 has an invalid length. [ 462.792794][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17885'. [ 462.796422][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17885'. [ 462.846790][T12717] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.17889'. [ 462.887877][T12722] netlink: 'syz.0.17891': attribute type 4 has an invalid length. [ 463.399022][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17909'. [ 463.441821][T12765] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 463.445136][ T61] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 463.447973][ T61] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 463.450756][ T61] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 463.454147][ T46] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 463.536445][T12774] fuse: Bad value for 'fd' [ 463.567233][T12778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.700100][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.822133][T12795] geneve2: entered promiscuous mode [ 463.826450][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.829861][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.832681][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.835442][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.013789][T12807] gretap0: entered promiscuous mode [ 464.018045][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17926'. [ 464.022671][T12807] gretap0: left promiscuous mode [ 464.110946][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17929'. [ 464.147755][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.210124][T12819] netfs: Couldn't get user pages (rc=-14) [ 464.213016][T12819] netfs: Zero-sized read [R=6] [ 464.468882][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.658579][ T40] kauditd_printk_skb: 173 callbacks suppressed [ 464.658591][ T40] audit: type=1400 audit(2000000711.600:45556): avc: denied { unmount } for pid=11034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 464.687983][ T40] audit: type=1400 audit(2000000711.628:45557): avc: denied { mount } for pid=12828 comm="syz.4.17934" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 464.716472][ T40] audit: type=1400 audit(2000000711.656:45558): avc: denied { read } for pid=12808 comm="syz.0.17927" path="socket:[164487]" dev="sockfs" ino=164487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 464.766807][ T40] audit: type=1400 audit(2000000711.703:45559): avc: denied { create } for pid=12832 comm="syz.4.17936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 464.773304][ T40] audit: type=1400 audit(2000000711.712:45560): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=33144 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 464.781238][ T40] audit: type=1400 audit(2000000711.712:45561): avc: denied { setopt } for pid=12832 comm="syz.4.17936" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 464.798819][ T40] audit: type=1400 audit(2000000711.731:45562): avc: denied { create } for pid=12834 comm="syz.4.17937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 464.805580][ T40] audit: type=1400 audit(2000000711.740:45563): avc: denied { connect } for pid=12834 comm="syz.4.17937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 464.813670][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.816768][ T40] audit: type=1400 audit(2000000711.740:45564): avc: denied { name_connect } for pid=12834 comm="syz.4.17937" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 464.824268][ T40] audit: type=1400 audit(2000000711.740:45565): avc: denied { listen } for pid=12834 comm="syz.4.17937" lport=39694 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 465.154896][ T817] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 465.781340][T12875] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 465.922606][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.175544][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17955'. [ 466.361306][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17957'. [ 466.404066][ T6828] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 466.553290][T12898] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 466.556293][T12898] netlink: 14 bytes leftover after parsing attributes in process `syz.7.17961'. [ 466.595897][ T6828] usb 9-1: Using ep0 maxpacket: 8 [ 466.598964][ T6828] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 466.601719][ T6828] usb 9-1: config 0 has no interface number 0 [ 466.603745][ T6828] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 466.608965][ T6828] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 466.612777][ T6828] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 466.616851][ T6828] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 466.621429][ T6828] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 466.624422][ T6828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.630055][ T6828] usb 9-1: config 0 descriptor?? [ 466.640011][ T6828] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 467.045617][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.245088][T12920] overlayfs: failed to clone upperpath [ 467.250886][T12921] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17970'. [ 467.260130][T12921] geneve3: entered promiscuous mode [ 467.387496][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.637470][T12933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.869683][T12974] netlink: 'syz.0.17992': attribute type 1 has an invalid length. [ 467.885563][T12974] bond2: entered promiscuous mode [ 467.887239][T12974] bond2: entered allmulticast mode [ 467.889132][T12974] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.911259][T12974] erspan1: entered allmulticast mode [ 467.915133][T12974] bond2: (slave erspan1): making interface the new active one [ 467.917564][T12974] erspan1: entered promiscuous mode [ 467.924812][T12974] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 468.001483][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17995'. [ 468.004428][T12981] netlink: 'syz.0.17995': attribute type 20 has an invalid length. [ 468.012911][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17995'. [ 468.015742][T12981] netlink: 'syz.0.17995': attribute type 20 has an invalid length. [ 468.018924][T10534] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.021883][T10534] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.024674][T10534] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.027390][T10534] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.148547][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.943472][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18004'. [ 468.955156][T13001] netlink: 7 bytes leftover after parsing attributes in process `syz.6.18004'. [ 469.003280][ T6828] usb 9-1: USB disconnect, device number 8 [ 469.006792][ T6828] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 469.104839][T13012] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 469.202987][T13022] overlayfs: failed to clone upperpath [ 469.268708][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.296925][T13028] fuse: Bad value for 'fd' [ 469.332050][T13031] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 469.334624][T13031] overlayfs: failed to set xattr on upper [ 469.336363][T13031] overlayfs: ...falling back to redirect_dir=nofollow. [ 469.339631][T13031] overlayfs: ...falling back to index=off. [ 469.341336][T13031] overlayfs: ...falling back to uuid=null. [ 469.343101][T13031] overlayfs: maximum fs stacking depth exceeded [ 469.501369][T13026] kvm_intel: kvm [13025]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x3a0d [ 469.515116][T13026] kvm: kvm [13025]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xa408 [ 469.557666][T13046] overlayfs: failed to clone upperpath [ 469.606330][T13053] ªªªªªª: renamed from wg2 (while UP) [ 469.684342][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18029'. [ 469.687812][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18029'. [ 469.691295][T13058] netlink: 'syz.6.18029': attribute type 11 has an invalid length. [ 469.708426][T13060] syz_tun: left allmulticast mode [ 469.710114][T13060] syz_tun: left promiscuous mode [ 469.711849][T13060] bridge0: port 3(syz_tun) entered disabled state [ 469.715499][T13060] bridge_slave_1: left allmulticast mode [ 469.718811][T13060] bridge_slave_1: left promiscuous mode [ 469.720683][T13060] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.725056][T13060] bridge_slave_0: left allmulticast mode [ 469.726887][T13060] bridge_slave_0: left promiscuous mode [ 469.728969][T13060] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.008079][ T40] kauditd_printk_skb: 145 callbacks suppressed [ 470.008089][ T40] audit: type=1400 audit(2000000716.604:45711): avc: denied { execute_no_trans } for pid=13089 comm="syz.6.18044" path="/1568/file1" dev="tmpfs" ino=8066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 470.020424][ T40] audit: type=1400 audit(2000000716.623:45712): avc: denied { listen } for pid=13089 comm="syz.6.18044" laddr=::ffff:0.0.0.0 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 470.063379][ T40] audit: type=1400 audit(2000000716.660:45713): avc: denied { setattr } for pid=13086 comm="syz.4.18043" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 470.073258][ T40] audit: type=1400 audit(2000000716.670:45714): avc: denied { unmount } for pid=11034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 470.081261][ T40] audit: type=1400 audit(2000000716.670:45715): avc: denied { read write } for pid=13094 comm="syz.6.18046" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 470.088991][ T40] audit: type=1400 audit(2000000716.670:45716): avc: denied { open } for pid=13094 comm="syz.6.18046" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 470.096133][ T40] audit: type=1400 audit(2000000716.670:45717): avc: denied { ioctl } for pid=13094 comm="syz.6.18046" path="/dev/video3" dev="devtmpfs" ino=959 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 470.107858][ T40] audit: type=1400 audit(2000000716.698:45718): avc: denied { map } for pid=13096 comm="syz.4.18047" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=165853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 470.115255][ T40] audit: type=1400 audit(2000000716.698:45719): avc: denied { read write } for pid=13096 comm="syz.4.18047" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=165853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 470.122518][ T40] audit: type=1400 audit(2000000716.698:45720): avc: denied { connect } for pid=13097 comm="syz.6.18048" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 470.266341][T13104] gtp1: entered promiscuous mode [ 470.371791][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.630206][T10008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.851991][ T9] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 471.021882][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 471.024832][ T9] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 471.028687][ T9] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 471.033297][ T9] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.036816][ T9] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 471.042558][ T9] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 471.046256][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.048754][ T9] usb 11-1: Product: syz [ 471.050117][ T9] usb 11-1: Manufacturer: syz [ 471.051648][ T9] usb 11-1: SerialNumber: syz [ 471.065986][ C0] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 471.069420][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input67 [ 471.134751][T13158] overlayfs: failed to clone upperpath [ 471.299829][ T9] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 471.302697][ T9] (id 0x00) [ 471.374854][ T9] rc_core: IR keymap rc-imon-pad not found [ 471.376784][ T9] Registered IR keymap rc-empty [ 471.378375][ T9] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 471.381620][ T9] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 471.481959][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.523585][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0 [ 471.534726][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input68 [ 471.545698][ T9] imon 11-1:155.0: iMON device (15c2:ffdc, intf0) on usb<11:29> initialized [ 471.716167][ T9] usb 11-1: USB disconnect, device number 29 [ 472.307512][T13201] __nla_validate_parse: 3 callbacks suppressed [ 472.307524][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18085'. [ 472.374102][T13195] syz.0.18082 (13195): drop_caches: 2 [ 472.600361][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.766100][ T46] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 472.990088][T13239] netlink: 'syz.0.18097': attribute type 1 has an invalid length. [ 472.993322][T13239] netlink: 92 bytes leftover after parsing attributes in process `syz.0.18097'. [ 473.705435][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.876393][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.732885][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.826956][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.878901][T13224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.911458][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 475.911469][ T40] audit: type=1400 audit(2000000722.132:45816): avc: denied { create } for pid=13249 comm="syz.7.18104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.923904][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18104'. [ 475.932196][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.934979][ T40] audit: type=1400 audit(2000000722.132:45817): avc: denied { module_request } for pid=13247 comm="syz.4.18102" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 475.945975][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18104'. [ 475.950382][ T40] audit: type=1400 audit(2000000722.142:45818): avc: denied { bind } for pid=13249 comm="syz.7.18104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.957556][ T40] audit: type=1400 audit(2000000722.142:45819): avc: denied { setopt } for pid=13249 comm="syz.7.18104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.964765][ T40] audit: type=1400 audit(2000000722.142:45820): avc: denied { write } for pid=13249 comm="syz.7.18104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.971293][ T40] audit: type=1400 audit(2000000722.160:45821): avc: denied { mounton } for pid=13252 comm="syz.0.18103" path="/205/file0" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 475.992729][ T40] audit: type=1400 audit(2000000722.160:45822): avc: denied { unlink } for pid=13252 comm="syz.0.18103" name="#31" dev="tmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 476.001106][ T40] audit: type=1400 audit(2000000722.160:45823): avc: denied { mount } for pid=13252 comm="syz.0.18103" name="/" dev="overlay" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 476.009328][ T40] audit: type=1400 audit(2000000722.160:45824): avc: denied { read } for pid=13247 comm="syz.4.18102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 476.017262][ T40] audit: type=1400 audit(2000000722.188:45825): avc: denied { unmount } for pid=10853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 476.164116][T13273] all: renamed from bridge_slave_0 (while UP) [ 476.442504][T13313] netlink: 'syz.6.18132': attribute type 39 has an invalid length. [ 476.582142][T13316] tipc: Started in network mode [ 476.583968][T13316] tipc: Node identity 080211000001, cluster identity 4711 [ 476.586595][T13316] tipc: Enabled bearer , priority 10 [ 477.005872][T13364] netlink: 'syz.7.18153': attribute type 1 has an invalid length. [ 477.014393][T13364] netlink: 'syz.7.18153': attribute type 4 has an invalid length. [ 477.016902][T13364] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.18153'. [ 477.042579][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.064867][T13367] fuse: Bad value for 'fd' [ 477.127996][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.589431][T13399] overlayfs: failed to clone upperpath [ 477.660745][ T24] tipc: Node number set to 134418688 [ 477.839457][T13406] o2cb: This node has not been configured. [ 477.841371][T13406] o2cb: Cluster check failed. Fix errors before retrying. [ 477.843937][T13406] (syz.4.18171,13406,2):user_dlm_register:674 ERROR: status = -22 [ 477.846494][T13406] (syz.4.18171,13406,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 477.911463][T13414] batadv_slave_1: entered allmulticast mode [ 477.915503][T13413] batadv_slave_1: left allmulticast mode [ 478.152599][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.263220][T13436] kvm: kvm [13435]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 478.266787][T13436] kvm: kvm [13435]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 478.622629][T13452] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 478.778089][T13460] netlink: 'syz.6.18194': attribute type 14 has an invalid length. [ 478.780675][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18194'. [ 478.783709][T13460] netlink: 'syz.6.18194': attribute type 14 has an invalid length. [ 478.786689][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18194'. [ 478.807326][T13462] overlayfs: statfs failed on './file0' [ 479.266412][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.413343][T13510] netlink: 'syz.6.18216': attribute type 4 has an invalid length. [ 479.475808][T13514] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 480.214274][T13558] fuse: Bad value for 'fd' [ 480.298125][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18240'. [ 480.333075][T13488] Set syz1 is full, maxelem 65536 reached [ 480.362913][T13570] 8021q: VLANs not supported on syzkaller0 [ 480.376512][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.379957][T10008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.691980][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18258'. [ 480.696052][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18258'. [ 480.892387][T13632] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x16 ref_ctr_offset(new): 0x0 [ 480.962530][T13634] kvm: kvm [13633]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 480.965905][T13634] kvm: kvm [13633]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 480.974472][T13642] overlay: filesystem on ./file1 not supported as upperdir [ 480.983639][T13634] kvm: kvm [13633]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 481.002193][T13634] kvm: kvm [13633]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 481.005693][T13634] kvm: kvm [13633]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 481.190390][T13655] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.193583][T13655] bridge_slave_1: left allmulticast mode [ 481.195801][T13655] bridge_slave_1: left promiscuous mode [ 481.198036][T13655] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.208177][T13655] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 481.374261][T13659] fuse: Bad value for 'fd' [ 481.375803][ T40] kauditd_printk_skb: 287 callbacks suppressed [ 481.375813][ T40] audit: type=1400 audit(2000000727.240:46113): avc: denied { name_bind } for pid=13660 comm="syz.4.18279" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 481.407691][ T40] audit: type=1400 audit(2000000727.268:46114): avc: denied { write } for pid=13662 comm="syz.0.18280" name="unix" dev="proc" ino=4026534151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 481.416135][ T40] audit: type=1400 audit(2000000727.277:46115): avc: denied { mount } for pid=13662 comm="syz.0.18280" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 481.452616][ T40] audit: type=1400 audit(2000000727.305:46116): avc: denied { mount } for pid=13665 comm="syz.0.18281" name="/" dev="autofs" ino=167755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 481.466190][ T40] audit: type=1400 audit(2000000727.314:46117): avc: denied { unmount } for pid=10853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 481.489592][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.493071][ T40] audit: type=1400 audit(2000000727.352:46118): avc: denied { create } for pid=13667 comm="syz.0.18282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 481.500055][ T40] audit: type=1400 audit(2000000727.352:46119): avc: denied { bind } for pid=13667 comm="syz.0.18282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 481.506151][ T40] audit: type=1400 audit(2000000727.352:46120): avc: denied { getopt } for pid=13667 comm="syz.0.18282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 481.594299][ T40] audit: type=1400 audit(2000000727.436:46121): avc: denied { create } for pid=13673 comm="syz.4.18284" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 481.606650][ T40] audit: type=1400 audit(2000000727.445:46122): avc: denied { ioctl } for pid=13673 comm="syz.4.18284" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=170299 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 481.778516][T13678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.781612][T13678] IPv6: NLM_F_CREATE should be set when creating new route [ 482.599864][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.059498][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18311'. [ 483.062737][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18311'. [ 483.637683][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.696037][T13776] overlayfs: failed to clone upperpath [ 483.713391][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.723978][ T8445] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 484.512609][T13820] netlink: 'syz.4.18346': attribute type 1 has an invalid length. [ 484.515704][T13820] netlink: 'syz.4.18346': attribute type 4 has an invalid length. [ 484.518358][T13820] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.18346'. [ 484.824803][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.002247][ T6191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.052007][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18357'. [ 485.082432][ T8445] Bluetooth: hci0: command tx timeout [ 485.204294][T13861] overlayfs: failed to clone upperpath [ 485.262583][T13867] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.18367'. [ 485.265669][T13867] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 485.341023][T13875] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18371'. [ 485.379687][T13875] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18371'. [ 485.382790][T13875] nbd: nbd64 already in use [ 485.517150][T22385] udevd[22385]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 485.624187][T13822] Set syz1 is full, maxelem 65536 reached [ 485.937149][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.406740][ T6828] libceph: connect (1)[c::]:6789 error -101 [ 486.409512][ T6828] libceph: mon0 (1)[c::]:6789 connect error [ 486.473577][ T6828] libceph: connect (1)[c::]:6789 error -101 [ 486.475626][ T6828] libceph: mon0 (1)[c::]:6789 connect error [ 486.687101][ T6828] libceph: connect (1)[c::]:6789 error -101 [ 486.689202][ T6828] libceph: mon0 (1)[c::]:6789 connect error [ 486.748777][ T6828] libceph: connect (1)[c::]:6789 error -101 [ 486.751648][ T6828] libceph: mon0 (1)[c::]:6789 connect error [ 486.781021][ T40] kauditd_printk_skb: 157 callbacks suppressed [ 486.781033][ T40] audit: type=1400 audit(2000000732.300:46280): avc: denied { read write } for pid=13941 comm="syz.4.18394" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 486.791163][ T40] audit: type=1400 audit(2000000732.300:46281): avc: denied { open } for pid=13941 comm="syz.4.18394" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 486.799312][ T40] audit: type=1400 audit(2000000732.309:46282): avc: denied { mounton } for pid=13941 comm="syz.4.18394" path="/223/file0" dev="tmpfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 486.809442][ T40] audit: type=1400 audit(2000000732.319:46283): avc: denied { mount } for pid=13941 comm="syz.4.18394" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 486.876242][T10008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.967299][ T40] audit: type=1400 audit(2000000732.468:46284): avc: denied { unmount } for pid=11034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 487.047309][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.088526][ T40] audit: type=1400 audit(2000000732.581:46285): avc: denied { mounton } for pid=13949 comm="syz.4.18397" path="/226/file0" dev="tmpfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 487.109586][ T40] audit: type=1400 audit(2000000732.581:46286): avc: denied { unmount } for pid=13949 comm="syz.4.18397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 487.138997][ T40] audit: type=1400 audit(2000000732.627:46287): avc: denied { read } for pid=13951 comm="syz.4.18398" dev="nsfs" ino=4026533579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 487.147644][ T40] audit: type=1400 audit(2000000732.627:46288): avc: denied { open } for pid=13951 comm="syz.4.18398" path="net:[4026533579]" dev="nsfs" ino=4026533579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 487.155639][ T40] audit: type=1400 audit(2000000732.627:46289): avc: denied { create } for pid=13951 comm="syz.4.18398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 487.155818][T13952] Bluetooth: hci0: invalid len left 7, exp >= 49 [ 487.239974][T10008] libceph: connect (1)[c::]:6789 error -101 [ 487.241892][T10008] libceph: mon0 (1)[c::]:6789 connect error [ 487.280719][T13932] ceph: No mds server is up or the cluster is laggy [ 487.284288][T13936] ceph: No mds server is up or the cluster is laggy [ 487.293520][ T39] libceph: connect (1)[c::]:6789 error -101 [ 487.295616][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 487.379591][T13961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18399'. [ 487.820395][T13993] netlink: 156 bytes leftover after parsing attributes in process `syz.0.18414'. [ 488.160598][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.656962][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18440'. [ 488.745860][T14059] overlayfs: failed to clone upperpath [ 489.270910][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.756448][T14114] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 490.130978][T10008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.384963][T14129] netlink: 'syz.0.18474': attribute type 4 has an invalid length. [ 490.385221][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.388743][T14129] netlink: 17 bytes leftover after parsing attributes in process `syz.0.18474'. [ 491.072468][ T6044] IPVS: starting estimator thread 0... [ 491.074462][T14171] IPVS: dh: FWM 3 0x00000003 - no destination available [ 491.163431][T14172] IPVS: using max 48 ests per chain, 115200 per kthread [ 491.179861][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18497'. [ 491.326617][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18502'. [ 491.329453][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18502'. [ 491.494887][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.715775][T14227] overlayfs: failed to clone upperpath [ 491.747115][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18519'. [ 491.941122][T14244] netlink: 'syz.6.18523': attribute type 1 has an invalid length. [ 491.985746][T14248] loop2: detected capacity change from 0 to 7 [ 491.993426][T14248] Dev loop2: unable to read RDB block 7 [ 491.995350][T14248] loop2: unable to read partition table [ 491.998535][T14248] loop2: partition table beyond EOD, truncated [ 492.001819][T14248] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 492.033548][ T5340] Dev loop2: unable to read RDB block 7 [ 492.035970][ T5340] loop2: unable to read partition table [ 492.038176][ T5340] loop2: partition table beyond EOD, truncated [ 492.139707][ T40] kauditd_printk_skb: 180 callbacks suppressed [ 492.139719][ T40] audit: type=1400 audit(2000000737.304:46470): avc: denied { allowed } for pid=14268 comm="syz.6.18532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 492.150867][ T40] audit: type=1400 audit(2000000737.323:46471): avc: denied { create } for pid=14268 comm="syz.6.18532" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 492.181009][ T40] audit: type=1400 audit(2000000737.323:46472): avc: denied { map } for pid=14268 comm="syz.6.18532" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=170968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 492.188689][ T40] audit: type=1400 audit(2000000737.323:46473): avc: denied { read write } for pid=14268 comm="syz.6.18532" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=170968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 492.202166][ T40] audit: type=1400 audit(2000000737.333:46474): avc: denied { read } for pid=14268 comm="syz.6.18532" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 492.210678][ T40] audit: type=1400 audit(2000000737.333:46475): avc: denied { open } for pid=14268 comm="syz.6.18532" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 492.218531][ T40] audit: type=1400 audit(2000000737.333:46476): avc: denied { ioctl } for pid=14268 comm="syz.6.18532" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 492.228323][ T40] audit: type=1400 audit(2000000737.342:46477): avc: denied { create } for pid=14273 comm="syz.0.18535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 492.235116][ T40] audit: type=1400 audit(2000000737.342:46478): avc: denied { sys_admin } for pid=14273 comm="syz.0.18535" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 492.241768][ T40] audit: type=1400 audit(2000000737.361:46479): avc: denied { read } for pid=14276 comm="syz.6.18536" dev="nsfs" ino=4026532952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 492.608472][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.747444][T14332] batadv_slave_1: entered allmulticast mode [ 492.750239][T14331] batadv_slave_1: left allmulticast mode [ 493.376133][T10008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.712058][T14375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18576'. [ 493.715154][T14375] netlink: 'syz.6.18576': attribute type 7 has an invalid length. [ 493.717750][T14375] netlink: 'syz.6.18576': attribute type 8 has an invalid length. [ 493.718445][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.720697][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18576'. [ 493.995199][T14393] netlink: 880 bytes leftover after parsing attributes in process `syz.7.18583'. [ 494.335033][T14422] netfs: Couldn't get user pages (rc=-14) [ 494.660538][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18602'. [ 494.668820][T14447] syz_tun: entered allmulticast mode [ 494.671522][T14447] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 494.674255][T14447] mroute: pending queue full, dropping entries [ 494.676847][T14447] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 494.679614][T14447] mroute: pending queue full, dropping entries [ 494.682334][T14445] syz_tun: left allmulticast mode [ 494.759349][T14460] overlayfs: failed to clone upperpath [ 494.791541][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18606'. [ 494.841829][T14474] overlayfs: failed to clone upperpath [ 494.844959][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.106683][T14508] IPVS: ip_vs_add_dest(): server weight less than zero [ 495.257986][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.697368][T14541] ceph: No mds server is up or the cluster is laggy [ 495.941947][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.142104][T14567] __nla_validate_parse: 3 callbacks suppressed [ 496.142117][T14567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18643'. [ 496.637976][T10008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.055441][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.658797][ T40] kauditd_printk_skb: 205 callbacks suppressed [ 497.658809][ T40] audit: type=1400 audit(2000000742.468:46685): avc: denied { mounton } for pid=14628 comm="syz.6.18669" path="/1711/file0" dev="tmpfs" ino=8806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 497.685286][ T40] audit: type=1400 audit(2000000742.468:46686): avc: denied { unlink } for pid=14628 comm="syz.6.18669" name="#39" dev="tmpfs" ino=8812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 497.692516][ T40] audit: type=1400 audit(2000000742.468:46687): avc: denied { mount } for pid=14628 comm="syz.6.18669" name="/" dev="overlay" ino=8808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 497.705532][ T40] audit: type=1400 audit(2000000742.477:46688): avc: denied { mount } for pid=14628 comm="syz.6.18669" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 497.713443][ T40] audit: type=1400 audit(2000000742.487:46689): avc: denied { recv } for pid=5915 comm="syz-executor" saddr=127.0.0.1 src=33144 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 497.722135][ T40] audit: type=1400 audit(2000000742.496:46690): avc: denied { unmount } for pid=30382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 497.729377][ T40] audit: type=1400 audit(2000000742.496:46691): avc: denied { create } for pid=14631 comm="syz.7.18670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 497.736335][ T40] audit: type=1400 audit(2000000742.543:46692): avc: denied { create } for pid=14633 comm="syz.6.18671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 497.745476][ T40] audit: type=1400 audit(2000000742.552:46693): avc: denied { connect } for pid=14633 comm="syz.6.18671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 497.746948][T14634] l2tp_ppp: sess 2/0: no socket in recv [ 497.751936][ T40] audit: type=1400 audit(2000000742.552:46694): avc: denied { write } for pid=14633 comm="syz.6.18671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 497.856093][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18676'. [ 497.863803][T14642] netlink: 24 bytes leftover after parsing attributes in process `syz.6.18676'. [ 497.967913][T14659] netlink: 24 bytes leftover after parsing attributes in process `syz.6.18684'. [ 498.060113][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18690'. [ 498.165701][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.216187][T14685] overlayfs: failed to clone upperpath [ 498.246375][T14688] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18694'. [ 498.297158][T14692] netlink: 'syz.7.18696': attribute type 27 has an invalid length. [ 498.323371][T14692] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.463047][T14702] fuse: Bad value for 'fd' [ 498.514157][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18702'. [ 498.591066][T14692] batadv_slave_0: left promiscuous mode [ 498.689196][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 498.993230][T14692] vlan2: left allmulticast mode [ 498.994946][T14692] vlan0: left allmulticast mode [ 498.996582][T14692] veth0_vlan: left allmulticast mode [ 499.035033][T14692] macvlan2: left promiscuous mode [ 499.039819][T14692] gretap1: left promiscuous mode [ 499.043322][T14692] erspan1: left promiscuous mode [ 499.045174][T14692] erspan1: left allmulticast mode [ 499.077004][T14716] netlink: 24 bytes leftover after parsing attributes in process `syz.6.18705'. [ 499.197165][T14697] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.225806][T14697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.238423][ T1175] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.241243][ T1175] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.264442][T14718] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18706'. [ 499.277690][ T1175] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.279551][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.281060][ T1175] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.288598][ T1175] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.291458][ T1175] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.294649][ T1175] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.297922][ T1175] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.333880][T14725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18707'. [ 499.405748][T14729] syzkaller1: entered promiscuous mode [ 499.407558][T14729] syzkaller1: entered allmulticast mode [ 499.591536][T14747] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 499.595003][T14747] overlayfs: failed to set xattr on upper [ 499.602737][T14747] overlayfs: ...falling back to redirect_dir=nofollow. [ 499.605432][T14747] overlayfs: ...falling back to index=off. [ 499.607711][T14747] overlayfs: ...falling back to uuid=null. [ 499.610808][T14747] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 499.853079][T14760] netfs: Couldn't get user pages (rc=-14) [ 500.045507][T14786] netlink: 'syz.6.18737': attribute type 1 has an invalid length. [ 500.062882][T14786] bond3: entered promiscuous mode [ 500.064661][T14786] 8021q: adding VLAN 0 to HW filter on device bond3 [ 500.095937][T14786] bond3: (slave bridge1): making interface the new active one [ 500.098603][T14786] bridge1: entered promiscuous mode [ 500.101629][T14786] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 500.231418][T14806] netlink: 'syz.7.18744': attribute type 1 has an invalid length. [ 500.254448][T14806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.292456][T14810] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 500.297116][T14810] block device autoloading is deprecated and will be removed. [ 500.297556][T14806] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 500.349507][T14803] md: superblock version 12389 not known [ 500.351742][T14803] md: couldn't set array info. -22 [ 500.399640][ T24] net_ratelimit: 1 callbacks suppressed [ 500.399652][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.618284][T14852] xt_hashlimit: size too large, truncated to 1048576 [ 501.054316][T14890] bond3: entered promiscuous mode [ 501.056254][T14890] 8021q: adding VLAN 0 to HW filter on device bond3 [ 501.069691][T14890] bond3: (slave sit4): refused to change device type [ 501.107182][ T2587] libceph: connect (1)[c::]:6789 error -101 [ 501.109191][ T2587] libceph: mon0 (1)[c::]:6789 connect error [ 501.213956][T14894] ceph: No mds server is up or the cluster is laggy [ 501.416121][ T817] tipc: Resetting bearer [ 501.504882][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.260191][ T6191] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 502.424094][ T6191] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.429016][ T6191] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 502.435256][ T6191] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 502.439323][ T6191] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 502.444827][ T6191] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.448818][ T6191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.456050][ T6191] usb 9-1: config 0 descriptor?? [ 502.612741][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.899524][ T6191] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 503.012506][ T40] kauditd_printk_skb: 188 callbacks suppressed [ 503.012519][ T40] audit: type=1400 audit(2000000747.482:46883): avc: denied { create } for pid=14955 comm="syz.7.18796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 503.014469][T14956] __nla_validate_parse: 17 callbacks suppressed [ 503.014481][T14956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18796'. [ 503.014582][ T40] audit: type=1400 audit(2000000747.482:46884): avc: denied { ioctl } for pid=14955 comm="syz.7.18796" path="socket:[175754]" dev="sockfs" ino=175754 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 503.033734][ T40] audit: type=1400 audit(2000000747.482:46885): avc: denied { bind } for pid=14955 comm="syz.7.18796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 503.039755][ T40] audit: type=1400 audit(2000000747.482:46886): avc: denied { setopt } for pid=14955 comm="syz.7.18796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 503.047206][ T40] audit: type=1400 audit(2000000747.482:46887): avc: denied { write } for pid=14955 comm="syz.7.18796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 503.053303][ T40] audit: type=1400 audit(2000000747.482:46888): avc: denied { connect } for pid=14955 comm="syz.7.18796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 503.125902][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.432575][ T40] audit: type=1400 audit(2000000747.865:46889): avc: denied { allowed } for pid=14957 comm="syz.0.18797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 503.439696][ T40] audit: type=1400 audit(2000000747.865:46890): avc: denied { create } for pid=14957 comm="syz.0.18797" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 503.446444][ T40] audit: type=1400 audit(2000000747.874:46891): avc: denied { map_create } for pid=14957 comm="syz.0.18797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 503.452297][ T40] audit: type=1400 audit(2000000747.893:46892): avc: denied { create } for pid=14957 comm="syz.0.18797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 503.544059][T14966] io-wq is not configured for unbound workers [ 503.652281][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18805'. [ 503.725452][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18805'. [ 503.728958][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.827319][ T10] usb 9-1: USB disconnect, device number 9 [ 503.893439][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18813'. [ 504.153802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.168016][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18826'. [ 504.175370][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18826'. [ 504.232165][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18828'. [ 504.397471][T15038] netlink: 'syz.4.18832': attribute type 1 has an invalid length. [ 504.423463][T15038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.441550][T15038] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 504.546915][T15050] kvm: emulating exchange as write [ 504.764161][T15075] overlayfs: failed to clone upperpath [ 504.820495][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18851'. [ 504.836726][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.091046][T15099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 505.095214][T15099] block device autoloading is deprecated and will be removed. [ 505.099356][T15096] md: md130 stopped. [ 505.277311][T15107] netlink: 68 bytes leftover after parsing attributes in process `syz.4.18862'. [ 505.522959][ T6191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.791398][T15122] fuse: Bad value for 'fd' [ 505.951093][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.987471][T15137] fuse: Bad value for 'fd' [ 506.052212][T15146] tipc: Resetting bearer [ 506.082727][T15146] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 506.129071][T15154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18882'. [ 506.391745][T10008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.748929][T15205] fuse: Bad value for 'fd' [ 506.791642][T15209] fuse: Bad value for 'fd' [ 506.895507][T15215] team_slave_0 (unregistering): left promiscuous mode [ 506.899498][T15215] team_slave_0 (unregistering): left allmulticast mode [ 506.903988][T15215] team0: Port device team_slave_0 removed [ 507.060281][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.435774][T15259] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 508.057207][T15323] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 508.059837][T15323] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 508.142567][T15328] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 508.174805][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.176957][T15326] kvm: kvm [15325]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 508.181981][T15326] kvm: kvm [15325]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 508.373028][ T40] kauditd_printk_skb: 223 callbacks suppressed [ 508.373252][ T40] audit: type=1400 audit(2000000752.486:47116): avc: denied { create } for pid=15350 comm="syz.0.18968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 syzkaller[ 508.382058][ T40] audit: type=1400 audit(2000000752.495:47117): avc: denied { mounton } for pid=15351 comm="syz.4.18969" path="/324/file1" dev="tmpfs" ino=1694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 508.389546][ T40] audit: type=1400 audit(2000000752.495:47118): avc: denied { mount } for pid=15351 comm="syz.4.18969" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 syzkaller login: [ 508.398113][ T40] audit: type=1400 audit(2000000752.495:47119): avc: denied { ioctl } for pid=15350 comm="syz.0.18968" path="socket:[179575]" dev="sockfs" ino=179575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 508.405887][ T40] audit: type=1400 audit(2000000752.514:47120): avc: denied { unmount } for pid=11034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 508.420412][T15356] netlink: 'syz.4.18970': attribute type 1 has an invalid length. [ 508.435603][T15356] bond2: entered promiscuous mode [ 508.437540][T15356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.447436][ T40] audit: type=1400 audit(2000000752.561:47121): avc: denied { create } for pid=15358 comm="syz.0.18971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 508.458368][T15356] bond2: (slave bridge1): making interface the new active one [ 508.460451][ T40] audit: type=1400 audit(2000000752.561:47122): avc: denied { setopt } for pid=15358 comm="syz.0.18971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 508.461120][T15356] bridge1: entered promiscuous mode [ 508.472494][T15356] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 508.497113][ T40] audit: type=1400 audit(2000000752.608:47123): avc: denied { setopt } for pid=15362 comm="syz.0.18973" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 508.516203][ T40] audit: type=1400 audit(2000000752.626:47124): avc: denied { read write } for pid=15364 comm="syz.4.18974" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 508.525616][ T40] audit: type=1400 audit(2000000752.626:47125): avc: denied { open } for pid=15364 comm="syz.4.18974" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 508.603403][T15370] __nla_validate_parse: 13 callbacks suppressed [ 508.603416][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18976'. [ 509.001124][T15382] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 509.003456][T15382] overlayfs: failed to set xattr on upper [ 509.005308][T15382] overlayfs: ...falling back to redirect_dir=nofollow. [ 509.010059][T15382] overlayfs: ...falling back to metacopy=off. [ 509.012092][T15382] overlayfs: ...falling back to index=off. [ 509.013954][T15382] overlayfs: ...falling back to uuid=null. [ 509.057424][T15386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18990'. [ 509.257555][T15399] overlayfs: failed to clone upperpath [ 509.283753][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.369737][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18993'. [ 509.379940][T15410] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.18992'. [ 509.383811][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18992'. [ 509.625859][T10008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.060941][T15420] tmpfs: Unknown parameter 'usrquota0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.060941][T15420] 0 [ 510.182901][T15429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.396979][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.946248][T15419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.018840][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19023'. [ 511.277944][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19027'. [ 511.484672][T15511] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19034'. [ 511.508826][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.517946][T15513] overlay: filesystem on ./bus not supported [ 512.054606][T15544] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 512.057712][T15544] overlayfs: failed to set xattr on upper [ 512.060295][T15544] overlayfs: ...falling back to redirect_dir=nofollow. [ 512.063413][T15544] overlayfs: ...falling back to index=off. [ 512.065523][T15544] overlayfs: ...falling back to uuid=null. [ 512.067682][T15544] overlayfs: ...falling back to xino=off. [ 512.070072][T15544] overlayfs: conflicting lowerdir path [ 512.165406][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19052'. [ 512.393231][T15567] sctp: [Deprecated]: syz.7.19057 (pid 15567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.393231][T15567] Use struct sctp_sack_info instead [ 512.558292][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19064'. [ 512.622264][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.628022][ T2587] libceph: connect (1)[c::]:6789 error -101 [ 512.640744][ T2587] libceph: mon0 (1)[c::]:6789 connect error [ 512.714182][T15585] ceph: No mds server is up or the cluster is laggy [ 512.876814][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.020624][T15624] netlink: 'syz.0.19080': attribute type 10 has an invalid length. [ 513.027561][T15624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.030228][T15624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.033134][T15624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.186057][ T6179] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 513.257676][T15632] macvlan2: entered promiscuous mode [ 513.291244][T15638] netlink: 'syz.4.19086': attribute type 1 has an invalid length. [ 513.306177][T15638] bond4: entered promiscuous mode [ 513.308478][T15638] 8021q: adding VLAN 0 to HW filter on device bond4 [ 513.365753][T15638] 8021q: adding VLAN 0 to HW filter on device bond4 [ 513.377133][T15638] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 513.377989][ T6179] usb 11-1: Using ep0 maxpacket: 32 [ 513.381379][T15638] bond4: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 513.390360][T15638] bond4: (slave vxcan1): making interface the new active one [ 513.392965][T15638] vxcan1: entered promiscuous mode [ 513.396916][ T6179] usb 11-1: config 0 has no interfaces? [ 513.398745][ T6179] usb 11-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 513.398935][T15638] vxcan1: left promiscuous mode [ 513.401863][ T6179] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.410344][ T6179] usb 11-1: config 0 descriptor?? [ 513.642572][T10008] usb 11-1: USB disconnect, device number 30 [ 513.735358][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.774683][ T40] kauditd_printk_skb: 198 callbacks suppressed [ 513.774696][ T40] audit: type=1400 audit(2000000757.547:47324): avc: denied { write } for pid=15648 comm="syz.4.19090" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 513.839871][ T40] audit: type=1400 audit(2000000757.612:47325): avc: denied { mount } for pid=15655 comm="syz.7.19093" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 514.023455][ T40] audit: type=1400 audit(2000000757.780:47326): avc: denied { mount } for pid=15661 comm="syz.4.19096" name="/" dev="ramfs" ino=182347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 514.033333][ T40] audit: type=1400 audit(2000000757.790:47327): avc: denied { mounton } for pid=15661 comm="syz.4.19096" path="/file0" dev="ramfs" ino=182348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 514.034684][T15662] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 514.052542][T15662] overlayfs: failed to set xattr on upper [ 514.054370][T15662] overlayfs: ...falling back to redirect_dir=nofollow. [ 514.056992][T15662] overlayfs: ...falling back to index=off. [ 514.059662][T15662] overlayfs: ...falling back to uuid=null. [ 514.064904][ T40] audit: type=1400 audit(2000000757.818:47328): avc: denied { mount } for pid=15661 comm="syz.4.19096" name="/" dev="overlay" ino=182349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 514.081167][ T40] audit: type=1400 audit(2000000757.827:47329): avc: denied { name_bind } for pid=15665 comm="syz.7.19098" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 514.115167][ T40] audit: type=1400 audit(2000000757.855:47330): avc: denied { read } for pid=15667 comm="syz.4.19099" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 514.124881][ T40] audit: type=1400 audit(2000000757.855:47331): avc: denied { open } for pid=15667 comm="syz.4.19099" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 514.136089][ T40] audit: type=1400 audit(2000000757.865:47332): avc: denied { ioctl } for pid=15667 comm="syz.4.19099" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 514.139542][T15668] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 514.183802][ T40] audit: type=1400 audit(2000000757.930:47333): avc: denied { recv } for pid=5914 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=33144 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 514.298514][T15675] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 514.773874][T15690] netlink: 'syz.0.19106': attribute type 13 has an invalid length. [ 514.846695][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.250706][T15705] kvm: pic: non byte read [ 515.254030][T15705] kvm: pic: non byte read [ 515.256998][T15705] kvm: pic: single mode not supported [ 515.257353][T15705] kvm: pic: non byte read [ 515.262507][T15705] kvm: pic: level sensitive irq not supported [ 515.262850][T15705] kvm: pic: non byte read [ 515.268648][T15705] kvm: pic: non byte read [ 515.272270][T15705] kvm: pic: non byte read [ 515.276650][T15705] kvm: pic: single mode not supported [ 515.276663][T15705] kvm: pic: level sensitive irq not supported [ 515.279827][T15705] kvm: pic: non byte read [ 515.285945][T15705] kvm: pic: non byte read [ 515.332310][T15715] __nla_validate_parse: 2 callbacks suppressed [ 515.332328][T15715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19116'. [ 515.794944][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.818056][T15740] overlayfs: failed to clone upperpath [ 515.954532][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.031965][ T6122] Bluetooth: hci0: SCO packet for unknown connection handle 1069 [ 516.125623][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.068299][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.911360][T15835] macsec2: entered promiscuous mode [ 517.913488][T15835] macsec2: entered allmulticast mode [ 518.062503][T15845] overlayfs: failed to clone upperpath [ 518.179294][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.917856][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19169'. [ 519.302496][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.376280][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.555713][T15771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.580433][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 519.580451][ T40] audit: type=1400 audit(2000000762.981:47452): avc: denied { read write } for pid=30382 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.617617][ T40] audit: type=1400 audit(2000000762.981:47453): avc: denied { open } for pid=30382 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.629228][ T40] audit: type=1400 audit(2000000762.981:47454): avc: denied { ioctl } for pid=30382 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.641137][ T40] audit: type=1400 audit(2000000763.009:47455): avc: denied { execute } for pid=15854 comm="syz.4.19172" path="/350/bus" dev="tmpfs" ino=1838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 519.650000][T15860] netlink: 'syz.4.19173': attribute type 1 has an invalid length. [ 519.653631][ T40] audit: type=1800 audit(2000000763.009:47456): pid=15856 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.19172" name="bus" dev="tmpfs" ino=1838 res=0 errno=0 [ 519.691975][T15860] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 519.696869][T15860] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 519.701217][T15860] bond5: (slave ip6gre2): making interface the new active one [ 519.703954][T15860] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 519.729986][ T40] audit: type=1400 audit(2000000763.121:47457): avc: denied { mounton } for pid=15867 comm="syz.0.19176" path="/550/file0" dev="tmpfs" ino=2917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 519.763541][ T40] audit: type=1400 audit(2000000763.150:47458): avc: denied { listen } for pid=15871 comm="syz.0.19178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 519.774832][ T40] audit: type=1400 audit(2000000763.159:47459): avc: denied { accept } for pid=15871 comm="syz.0.19178" lport=39942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 519.833572][T15876] overlayfs: failed to clone upperpath [ 519.835809][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19180'. [ 519.849731][ T40] audit: type=1400 audit(2000000763.224:47460): avc: denied { prog_load } for pid=15857 comm="syz.6.19171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 519.855810][ T40] audit: type=1400 audit(2000000763.224:47461): avc: denied { bind } for pid=15877 comm="syz.4.19180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 519.910921][T15882] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 519.914562][T15882] overlayfs: failed to set xattr on upper [ 519.916760][T15882] overlayfs: ...falling back to redirect_dir=nofollow. [ 519.919599][T15882] overlayfs: ...falling back to index=off. [ 519.922466][T15882] overlayfs: ...falling back to uuid=null. [ 519.929169][T15886] overlayfs: failed to clone upperpath [ 519.934436][T15882] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 520.402074][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.437870][T15922] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 520.450946][T15922] xt_hashlimit: max too large, truncated to 1048576 [ 520.887552][T15937] input: syz1 as /devices/virtual/input/input70 [ 520.897623][T15939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19206'. [ 520.900936][T15939] netlink: 'syz.0.19206': attribute type 7 has an invalid length. [ 520.903519][T15939] netlink: 'syz.0.19206': attribute type 8 has an invalid length. [ 520.906149][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19206'. [ 521.122798][T15947] netlink: 'syz.0.19210': attribute type 1 has an invalid length. [ 521.146425][T15947] bond4: (slave geneve3): making interface the new active one [ 521.149169][T15947] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 521.152333][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 521.155117][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 521.157905][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 521.162011][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19210'. [ 521.167360][T15947] bond4 (unregistering): (slave geneve3): Releasing active interface [ 521.266955][T15947] bond4 (unregistering): Released all slaves [ 521.276781][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 521.290077][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 521.292973][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 521.341622][T15956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19214'. [ 521.347888][T15956] ip6gre2: entered promiscuous mode [ 521.349581][T15956] ip6gre2: entered allmulticast mode [ 521.355574][T15956] netlink: 'syz.0.19214': attribute type 6 has an invalid length. [ 521.358177][T15956] netlink: 72 bytes leftover after parsing attributes in process `syz.0.19214'. [ 521.388725][T15958] syz_tun: entered allmulticast mode [ 521.392969][T15957] syz_tun: left allmulticast mode [ 521.515481][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.595220][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19221'. [ 521.598073][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19221'. [ 522.611645][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19229'. [ 522.636446][T10008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.640098][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.174134][T16012] mac80211_hwsim hwsim28 syzkaller0: Caught tx_queue_len zero misconfig [ 523.330716][T16018] bridge0: port 3(team0) entered disabled state [ 523.334350][T16018] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.400372][T16022] overlayfs: failed to clone upperpath [ 523.600843][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19249'. [ 523.748073][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.936600][T16056] overlayfs: failed to clone upperpath [ 524.815106][T16071] netlink: 16166 bytes leftover after parsing attributes in process `syz.7.19266'. [ 524.849406][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.968625][ T40] kauditd_printk_skb: 128 callbacks suppressed [ 524.968637][ T40] audit: type=1400 audit(2000000768.023:47590): avc: denied { mount } for pid=16078 comm="syz.7.19270" name="/" dev="autofs" ino=182729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 524.985885][ T40] audit: type=1400 audit(2000000768.032:47591): avc: denied { mount } for pid=16078 comm="syz.7.19270" name="/" dev="9p" ino=73662523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 525.008493][ T40] audit: type=1400 audit(2000000768.051:47592): avc: denied { read } for pid=16076 comm="syz.4.19269" name="mISDNtimer" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 525.017150][ T40] audit: type=1400 audit(2000000768.051:47593): avc: denied { open } for pid=16076 comm="syz.4.19269" path="/dev/mISDNtimer" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 525.026326][ T40] audit: type=1400 audit(2000000768.051:47594): avc: denied { ioctl } for pid=16076 comm="syz.4.19269" path="/dev/mISDNtimer" dev="devtmpfs" ino=1292 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 525.035210][ T40] audit: type=1400 audit(2000000768.070:47595): avc: denied { write } for pid=16080 comm="syz.0.19271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 525.042076][T16081] netlink: 'syz.0.19271': attribute type 3 has an invalid length. [ 525.042123][ T40] audit: type=1400 audit(2000000768.070:47596): avc: denied { read } for pid=16080 comm="syz.0.19271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 525.100786][ T40] audit: type=1400 audit(2000000768.135:47597): avc: denied { create } for pid=16086 comm="syz.4.19272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 525.108802][ T40] audit: type=1804 audit(2000000768.135:47598): pid=16085 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.19273" name="file0" dev="tmpfs" ino=3088 res=1 errno=0 [ 525.115644][ T40] audit: type=1400 audit(2000000768.154:47599): avc: denied { bind } for pid=16086 comm="syz.4.19272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 525.886193][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.962509][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.051123][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.053916][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.319301][T16128] __nla_validate_parse: 1 callbacks suppressed [ 526.319312][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19289'. [ 526.324319][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19289'. [ 526.484443][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19293'. [ 526.487578][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19293'. [ 526.734457][T16157] netlink: 'syz.4.19300': attribute type 1 has an invalid length. [ 526.769491][T16157] veth11: entered promiscuous mode [ 526.774498][T16157] bond6: (slave veth11): Enslaving as a backup interface with a down link [ 527.072800][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.158218][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 527.320721][T16167] netlink: 'syz.6.19305': attribute type 1 has an invalid length. [ 527.329286][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 527.336018][ T10] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 527.338612][ T10] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 527.342457][ T10] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 527.346012][ T10] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 527.350136][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 527.358889][T16167] bond4: (slave geneve4): making interface the new active one [ 527.362254][ T10] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 527.365185][ T10] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 527.367817][ T10] usb 9-1: Product: syz [ 527.369192][ T10] usb 9-1: Manufacturer: syz [ 527.370669][ T10] usb 9-1: SerialNumber: syz [ 527.372858][T16167] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 527.374797][ T10] usb 9-1: config 0 descriptor?? [ 527.377301][ T12] netdevsim netdevsim6 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 527.379213][ T10] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 527.382779][ T12] netdevsim netdevsim6 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 527.384768][ T10] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 527.390228][ T12] netdevsim netdevsim6 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 527.394265][ T12] netdevsim netdevsim6 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 527.397686][T16167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19305'. [ 527.402294][T16167] bond4 (unregistering): (slave geneve4): Releasing active interface [ 527.506836][T16167] bond4 (unregistering): Released all slaves [ 527.515208][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 527.518100][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 527.520963][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 527.523819][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 527.708000][T16181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.711523][T16181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.717156][T16162] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 527.717191][ T6828] usb 9-1: USB disconnect, device number 10 [ 527.722866][ T6828] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 527.781272][T16182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.783845][T16182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.786694][T16182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.789265][T16182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.792952][T16182] batman_adv: batadv0: Interface deactivated: gretap1 [ 527.795531][T16182] batman_adv: batadv0: Removing interface: gretap1 [ 528.186815][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.232580][T16224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19325'. [ 529.307324][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.309958][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.410807][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19331'. [ 529.413705][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19331'. [ 529.576403][T16247] tipc: Started in network mode [ 529.578064][T16247] tipc: Node identity 4, cluster identity 4711 [ 529.580157][T16247] tipc: Node number set to 4 [ 529.690818][T16267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19344'. [ 529.841567][T16278] 0xfffffffffffffffd-0x00000001f0f5 : "" [ 529.844118][T16278] mtd: partition "" is out of reach -- disabled [ 529.845973][T16284] overlayfs: failed to clone upperpath [ 529.866197][T16278] ftl_cs: FTL header not found. [ 530.136023][T16302] overlayfs: failed to clone upperpath [ 530.208366][T16311] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 530.212462][T16311] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 530.219467][T16311] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 530.323776][ T40] kauditd_printk_skb: 176 callbacks suppressed [ 530.323789][ T40] audit: type=1400 audit(2000000773.018:47776): avc: denied { create } for pid=16332 comm="syz.4.19370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.325680][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19373'. [ 530.325798][ T40] audit: type=1400 audit(2000000773.027:47777): avc: denied { create } for pid=16332 comm="syz.4.19370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 530.348672][ T40] audit: type=1400 audit(2000000773.027:47778): avc: denied { getopt } for pid=16332 comm="syz.4.19370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 530.359853][ T40] audit: type=1400 audit(2000000773.055:47779): avc: denied { prog_load } for pid=16338 comm="syz.6.19374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 530.377482][ T40] audit: type=1400 audit(2000000773.074:47780): avc: denied { create } for pid=16336 comm="syz.7.19375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 530.388267][ T40] audit: type=1400 audit(2000000773.074:47781): avc: denied { bind } for pid=16336 comm="syz.7.19375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 530.394609][ T40] audit: type=1400 audit(2000000773.074:47782): avc: denied { node_bind } for pid=16336 comm="syz.7.19375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 530.419421][ T40] audit: type=1400 audit(2000000773.074:47783): avc: denied { write } for pid=16336 comm="syz.7.19375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.425797][ T40] audit: type=1400 audit(2000000773.074:47784): avc: denied { read } for pid=16336 comm="syz.7.19375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.429660][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.435413][ T40] audit: type=1400 audit(2000000773.093:47785): avc: denied { execute } for pid=16337 comm="syz.4.19376" name="file0" dev="tmpfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 530.478585][T16352] ref_ctr increment failed for inode: 0x250c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880302f3100 [ 530.499681][T16350] kvm: vcpu 0: requested 3200 ns lapic timer period limited to 200000 ns [ 530.502402][T16350] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 530.728636][T16365] bond7: entered allmulticast mode [ 530.736404][T16365] macvlan0: entered promiscuous mode [ 530.738198][T16365] macvlan0: entered allmulticast mode [ 530.740523][T16365] bond7: entered promiscuous mode [ 530.742519][T16365] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 530.788280][T16365] bond7: left promiscuous mode [ 530.794449][T16370] overlayfs: failed to clone upperpath [ 531.531073][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.566074][T16405] vlan3: entered promiscuous mode [ 531.567788][T16405] vlan3: entered allmulticast mode [ 531.569480][T16405] hsr_slave_1: entered allmulticast mode [ 531.793134][T16428] __nla_validate_parse: 6 callbacks suppressed [ 531.793146][T16428] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19410'. [ 531.799353][T16428] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19410'. [ 531.848666][T16434] netlink: 'syz.4.19413': attribute type 3 has an invalid length. [ 531.888936][T16440] netlink: 'syz.0.19415': attribute type 1 has an invalid length. [ 531.929054][T16440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 531.934097][T16440] bond4: (slave bond5): making interface the new active one [ 531.936644][T16440] bond4: (slave bond5): Enslaving as an active interface with an up link [ 531.946260][T16440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19415'. [ 531.949463][T16440] bond4: entered allmulticast mode [ 531.951275][T16440] bond5: entered allmulticast mode [ 532.546484][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.635185][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.787600][T16451] netlink: 'syz.7.19420': attribute type 10 has an invalid length. [ 532.790396][T16451] mac80211_hwsim hwsim34 wlan1: left allmulticast mode [ 532.855673][T16459] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 532.866711][T16462] netlink: 'syz.7.19425': attribute type 3 has an invalid length. [ 533.750002][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.758338][T16495] kvm: Disabled LAPIC found during irq injection [ 533.803152][T16499] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 534.005237][T16510] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 534.008252][T16510] overlayfs: failed to set xattr on upper [ 534.010591][T16510] overlayfs: ...falling back to redirect_dir=nofollow. [ 534.015002][T16510] overlayfs: ...falling back to index=off. [ 534.017125][T16510] overlayfs: ...falling back to uuid=null. [ 534.089476][T16517] netlink: 'syz.7.19446': attribute type 1 has an invalid length. [ 534.104827][T16517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.127190][T16517] bond3: entered allmulticast mode [ 534.732839][T16541] netlink: 'syz.6.19455': attribute type 1 has an invalid length. [ 534.746024][T16541] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.760333][T16541] vlan3: entered allmulticast mode [ 534.762006][T16541] veth0_to_bond: entered allmulticast mode [ 534.765641][T16541] bond4: (slave vlan3): making interface the new active one [ 534.768670][T16541] bond4: (slave vlan3): Enslaving as an active interface with an up link [ 534.868126][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.413394][ T6122] Bluetooth: hci1: link tx timeout [ 535.416181][ T6122] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 535.422138][ T6122] Bluetooth: hci1: link tx timeout [ 535.423789][ T6122] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 535.536865][T16599] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 535.548538][T16603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19472'. [ 535.580746][T16603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19472'. [ 535.681476][ T40] kauditd_printk_skb: 178 callbacks suppressed [ 535.681492][ T40] audit: type=1400 audit(2000000778.041:47964): avc: denied { create } for pid=16622 comm="syz.6.19481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 535.690112][ T40] audit: type=1400 audit(2000000778.041:47965): avc: denied { bind } for pid=16622 comm="syz.6.19481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 535.696565][ T40] audit: type=1400 audit(2000000778.041:47966): avc: denied { listen } for pid=16622 comm="syz.6.19481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 535.704775][ T40] audit: type=1400 audit(2000000778.041:47967): avc: denied { write } for pid=16622 comm="syz.6.19481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 535.711059][ T40] audit: type=1400 audit(2000000778.041:47968): avc: denied { accept } for pid=16622 comm="syz.6.19481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 535.717279][ T40] audit: type=1400 audit(2000000778.041:47969): avc: denied { create } for pid=16622 comm="syz.6.19481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 535.731724][ T40] audit: type=1400 audit(2000000778.041:47970): avc: denied { write } for pid=16622 comm="syz.6.19481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 535.741944][ T40] audit: type=1400 audit(2000000778.041:47971): avc: denied { read } for pid=16622 comm="syz.6.19481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 535.758349][ T40] audit: type=1400 audit(2000000778.060:47972): avc: denied { read } for pid=16626 comm="syz.6.19483" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 535.765659][ T40] audit: type=1400 audit(2000000778.060:47973): avc: denied { open } for pid=16626 comm="syz.6.19483" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 535.796691][T10008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.848175][T16641] overlayfs: failed to clone upperpath [ 535.888384][T16647] vlan4: entered promiscuous mode [ 535.890032][T16647] dummy0: entered promiscuous mode [ 535.893464][T16647] vlan4: entered allmulticast mode [ 535.895352][T16647] dummy0: entered allmulticast mode [ 535.905831][T16647] team0: Port device vlan4 added [ 535.968490][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.081264][T16656] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 536.232446][T16672] netlink: 277 bytes leftover after parsing attributes in process `syz.4.19501'. [ 536.312273][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.427522][T16692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19509'. [ 536.659944][T16702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.706452][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19516'. [ 536.723495][T16702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.754380][T16712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19518'. [ 536.778717][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19518'. [ 536.782757][T16702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.996899][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.095273][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.119374][T16737] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 537.592253][ T6122] Bluetooth: hci1: command 0x0406 tx timeout [ 537.966808][T16788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.018383][T16790] __nla_validate_parse: 1 callbacks suppressed [ 538.018397][T16790] netlink: 52 bytes leftover after parsing attributes in process `syz.0.19546'. [ 538.028062][T16790] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.034358][T16790] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19546'. [ 538.037454][T16790] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.039748][T16790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.049077][T16790] netlink: 52 bytes leftover after parsing attributes in process `syz.0.19546'. [ 538.054081][T16790] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.115231][T16800] netlink: 'syz.7.19550': attribute type 1 has an invalid length. [ 538.161136][T16800] 8021q: adding VLAN 0 to HW filter on device bond5 [ 538.166889][T16800] bond4: (slave bond5): making interface the new active one [ 538.173503][T16800] bond4: (slave bond5): Enslaving as an active interface with an up link [ 538.184169][T16800] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 538.189228][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.7.19550'. [ 538.192797][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.213230][T16800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 538.255250][ T6122] Bluetooth: hci4: unknown advertising packet type: 0x62 [ 538.255315][ T6122] Bluetooth: hci4: Malformed LE Event: 0x02 [ 538.371462][T16818] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19557'. [ 538.479777][T16833] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19564'. [ 538.572081][T16842] netlink: 36 bytes leftover after parsing attributes in process `syz.7.19569'. [ 538.612820][ T6122] Bluetooth: hci4: Malformed HCI Event [ 538.684210][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19573'. [ 539.326546][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.919656][ T6122] Bluetooth: hci1: command 0x0406 tx timeout [ 539.970151][T16883] netlink: 'syz.0.19587': attribute type 1 has an invalid length. [ 539.989513][T16885] overlayfs: failed to clone upperpath [ 540.050692][T16883] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.070346][T16887] vlan4: entered allmulticast mode [ 540.072050][T16887] bond6: entered allmulticast mode [ 540.266557][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.425418][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.090782][ T40] kauditd_printk_skb: 158 callbacks suppressed [ 541.090793][ T40] audit: type=1400 audit(2000000783.102:48132): avc: denied { create } for pid=16908 comm="syz.7.19597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.344986][ T40] audit: type=1400 audit(2000000783.326:48133): avc: denied { execute } for pid=16910 comm="syz.0.19598" name="file0" dev="tmpfs" ino=3578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 541.352023][ T40] audit: type=1400 audit(2000000783.326:48134): avc: denied { execute_no_trans } for pid=16910 comm="syz.0.19598" path="/673/file0" dev="tmpfs" ino=3578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 541.406277][ T40] audit: type=1400 audit(2000000783.392:48135): avc: denied { ioctl } for pid=16913 comm="syz.0.19599" path="socket:[186099]" dev="sockfs" ino=186099 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 541.529723][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.565296][ T46] bond0: (slave bond_slave_0): interface is now down [ 541.571675][ T46] bond0: (slave bond_slave_1): interface is now down [ 541.666244][ T40] audit: type=1400 audit(2000000783.635:48136): avc: denied { write } for pid=16920 comm="syz.6.19601" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 542.091237][ T40] audit: type=1400 audit(2000000784.028:48137): avc: denied { recv } for pid=5915 comm="syz-executor" saddr=127.0.0.1 src=33144 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 542.139352][ T40] audit: type=1400 audit(2000000784.074:48138): avc: denied { unmount } for pid=11034 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 542.184950][ T40] audit: type=1400 audit(2000000784.121:48139): avc: denied { create } for pid=16930 comm="syz.0.19606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 542.192086][T16932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19606'. [ 542.194978][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19606'. [ 542.198273][T16932] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.200807][T16932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.205571][ T40] audit: type=1400 audit(2000000784.131:48140): avc: denied { ioctl } for pid=16930 comm="syz.0.19606" path="socket:[187937]" dev="sockfs" ino=187937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 542.215283][T16931] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 542.328339][ T40] audit: type=1400 audit(2000000784.252:48141): avc: denied { execmem } for pid=16940 comm="syz.7.19610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 542.492312][T16952] netlink: 'syz.7.19615': attribute type 1 has an invalid length. [ 542.571551][T16952] 8021q: adding VLAN 0 to HW filter on device bond6 [ 542.664658][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.742468][T16958] bond6: (slave dummy0): making interface the new active one [ 542.749440][T16958] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 543.225372][T16994] kvm: pic: non byte write [ 543.227751][T16994] kvm: pic: non byte write [ 543.229790][T16994] kvm: pic: single mode not supported [ 543.229800][T16994] kvm: pic: level sensitive irq not supported [ 543.242955][T16994] kvm: pic: level sensitive irq not supported [ 543.506923][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.609089][T17021] overlayfs: upper fs does not support tmpfile. [ 543.754227][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.762684][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.766593][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.770927][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.194735][T17051] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.198577][T17051] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.204369][T17051] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 544.314740][T17051] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.319587][T17051] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.324323][T17051] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 544.408097][T17051] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.411531][T17051] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.415338][T17051] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 544.487830][T17051] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.491612][T17051] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.494897][T17051] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 544.649848][ T1175] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.653877][ T1175] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 544.658930][ T1175] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 544.668897][ T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.672607][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 544.676000][ T12] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 544.686260][ T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.689638][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 544.694004][ T12] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 544.705868][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.709120][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 544.713181][ T12] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 544.875925][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.229422][T17081] __nla_validate_parse: 3 callbacks suppressed [ 545.229434][T17081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19669'. [ 545.329118][T17090] syz_tun: entered allmulticast mode [ 545.339976][T17090] dvmrp6: entered allmulticast mode [ 545.344194][T17089] syz_tun: left allmulticast mode [ 545.902875][T17098] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 545.976265][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.207420][T17106] tipc: Failed to remove unknown binding: 66,0,0/0:1642052517/1642052518 [ 546.211250][T17106] tipc: Failed to remove unknown binding: 66,0,0/0:1642052517/1642052518 [ 546.496289][ T40] kauditd_printk_skb: 215 callbacks suppressed [ 546.496301][ T40] audit: type=1400 audit(2000000788.153:48357): avc: denied { shutdown } for pid=17124 comm="syz.0.19687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 546.505134][ T40] audit: type=1400 audit(2000000788.162:48358): avc: denied { read } for pid=17126 comm="syz.6.19686" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 546.529152][ T40] audit: type=1400 audit(2000000788.181:48359): avc: denied { getopt } for pid=17128 comm="syz.7.19688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.536660][ T40] audit: type=1400 audit(2000000788.190:48360): avc: denied { cmd } for pid=17128 comm="syz.7.19688" path="socket:[189550]" dev="sockfs" ino=189550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 546.546909][ T40] audit: type=1400 audit(2000000788.200:48361): avc: denied { read } for pid=17132 comm="syz.6.19690" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 546.555278][ T40] audit: type=1400 audit(2000000788.200:48362): avc: denied { open } for pid=17132 comm="syz.6.19690" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 546.558820][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19689'. [ 546.564350][ T40] audit: type=1400 audit(2000000788.218:48363): avc: denied { ioctl } for pid=17132 comm="syz.6.19690" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 546.567254][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19689'. [ 546.577339][ T40] audit: type=1400 audit(2000000788.218:48364): avc: denied { set_context_mgr } for pid=17132 comm="syz.6.19690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 546.583261][ T2587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.592742][ T40] audit: type=1400 audit(2000000788.228:48365): avc: denied { map } for pid=17132 comm="syz.6.19690" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 546.613579][ T40] audit: type=1400 audit(2000000788.237:48366): avc: denied { call } for pid=17132 comm="syz.6.19690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 546.754126][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.757165][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.765100][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.768041][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.051413][T17165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19704'. [ 547.100325][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.360629][T17192] overlayfs: failed to clone upperpath [ 547.367441][T17194] netlink: 'syz.4.19716': attribute type 1 has an invalid length. [ 547.382241][T17194] 8021q: adding VLAN 0 to HW filter on device bond8 [ 547.419947][T17194] bond8: (slave veth15): Enslaving as an active interface with a down link [ 547.436590][T17194] vlan1: entered allmulticast mode [ 547.438689][T17194] bond8: entered allmulticast mode [ 547.441117][T17194] bond8: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 547.590257][T17214] overlayfs: failed to clone upperpath [ 547.631944][T17219] netlink: 'syz.4.19726': attribute type 3 has an invalid length. [ 547.642801][T17217] uprobe: syz.6.19725:17217 failed to unregister, leaking uprobe [ 548.210655][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.823754][T17270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19747'. [ 548.826842][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19747'. [ 548.834062][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19747'. [ 548.903893][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19747'. [ 548.906656][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19747'. [ 549.227200][T17293] overlayfs: failed to clone upperpath [ 549.320677][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.721940][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19766'. [ 550.253154][T17328] netlink: 'syz.0.19771': attribute type 1 has an invalid length. [ 550.305578][T17328] veth13: entered promiscuous mode [ 550.308980][T17328] bond7: (slave veth13): Enslaving as a backup interface with a down link [ 550.432380][ T6179] net_ratelimit: 1 callbacks suppressed [ 550.432398][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.858894][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19776'. [ 550.868758][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19776'. [ 550.882285][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19775'. [ 550.986128][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19779'. [ 551.099064][T17360] netlink: 'syz.6.19782': attribute type 3 has an invalid length. [ 551.102217][T17360] netlink: 'syz.6.19782': attribute type 3 has an invalid length. [ 551.538999][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.896992][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19791'. [ 551.910505][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 551.910516][ T40] audit: type=1400 audit(2000000793.223:48464): avc: denied { create } for pid=17382 comm="syz.7.19792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 551.923948][ T40] audit: type=1400 audit(2000000793.232:48465): avc: denied { bind } for pid=17382 comm="syz.7.19792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 551.933606][ T40] audit: type=1400 audit(2000000793.232:48466): avc: denied { setopt } for pid=17382 comm="syz.7.19792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 551.941813][ T40] audit: type=1400 audit(2000000793.232:48467): avc: denied { accept } for pid=17382 comm="syz.7.19792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 551.949050][ T40] audit: type=1400 audit(2000000793.241:48468): avc: denied { write } for pid=17382 comm="syz.7.19792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 552.069629][ T40] audit: type=1400 audit(2000000793.372:48469): avc: denied { create } for pid=17390 comm="syz.0.19795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 552.076437][ T40] audit: type=1400 audit(2000000793.372:48470): avc: denied { ioctl } for pid=17390 comm="syz.0.19795" path="socket:[186942]" dev="sockfs" ino=186942 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 552.120344][ T40] audit: type=1400 audit(2000000793.410:48471): avc: denied { unlink } for pid=17392 comm="syz.6.19796" name="#64" dev="tmpfs" ino=9854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 552.127786][ T40] audit: type=1400 audit(2000000793.419:48472): avc: denied { mount } for pid=17392 comm="syz.6.19796" name="/" dev="overlay" ino=9849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 552.169290][ T40] audit: type=1400 audit(2000000793.457:48473): avc: denied { unmount } for pid=30382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 552.294857][T17403] VFS: Mount too revealing [ 552.657535][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.662830][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19812'. [ 553.276909][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.330504][ T8445] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 553.334778][ T8445] Bluetooth: hci0: Injecting HCI hardware error event [ 553.338434][ T6122] Bluetooth: hci0: hardware error 0x00 [ 553.654614][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19824'. [ 553.657511][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19824'. [ 553.780277][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.935683][T17500] netlink: 228 bytes leftover after parsing attributes in process `syz.6.19833'. [ 553.938923][T17500] netlink: 228 bytes leftover after parsing attributes in process `syz.6.19833'. [ 554.004639][T17506] netlink: 'syz.4.19835': attribute type 4 has an invalid length. [ 554.017747][T17506] netlink: 'syz.4.19835': attribute type 4 has an invalid length. [ 554.879146][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.206262][T17541] tipc: Failed to remove unknown binding: 66,0,0/4:785108779/785108781 [ 555.208907][T17541] tipc: Failed to remove unknown binding: 66,0,0/4:785108779/785108780 [ 555.213253][T17541] tipc: Failed to remove unknown binding: 66,0,0/4:785108779/785108781 [ 555.215791][T17541] tipc: Failed to remove unknown binding: 66,0,0/4:785108779/785108780 [ 555.734435][ T6122] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 555.991040][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.299482][T17562] netlink: 'syz.7.19857': attribute type 1 has an invalid length. [ 556.378072][T17562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 556.381123][T17562] bond7: (slave bond8): making interface the new active one [ 556.383617][T17562] bond7: (slave bond8): Enslaving as an active interface with an up link [ 556.408289][T17562] netlink: 28 bytes leftover after parsing attributes in process `syz.7.19857'. [ 556.411381][T17562] bond7: entered allmulticast mode [ 556.413019][T17562] bond8: entered allmulticast mode [ 556.464689][T17565] netlink: 56 bytes leftover after parsing attributes in process `syz.0.19865'. [ 556.496167][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.576864][T17580] 8021q: adding VLAN 0 to HW filter on device bond9 [ 556.591165][T17580] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 556.696749][ T1175] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 556.846076][ T6191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.861140][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.864395][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.888648][ T6191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.974794][ C0] ------------[ cut here ]------------ [ 556.977418][ C0] sk->sk_forward_alloc [ 556.977428][ C0] WARNING: net/ipv4/af_inet.c:163 at inet_sock_destruct+0x653/0x800, CPU#0: syz.6.19849/17539 [ 556.982203][ C0] Modules linked in: [ 556.984159][ C0] CPU: 0 UID: 0 PID: 17539 Comm: syz.6.19849 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 556.987709][ C0] Tainted: [L]=SOFTLOCKUP [ 556.989312][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 556.992494][ C0] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 556.994383][ C0] Code: f1 4e ff e9 06 fd ff ff e8 1a 81 ff f7 90 0f 0b 90 e9 35 fe ff ff e8 0c 81 ff f7 90 0f 0b 90 e9 c5 fe ff ff e8 fe 80 ff f7 90 <0f> 0b 90 e9 04 ff ff ff e8 f0 80 ff f7 90 0f 0b 90 e9 65 fe ff ff [ 557.000581][ C0] RSP: 0018:ffffc90000007d98 EFLAGS: 00010246 [ 557.002494][ C0] RAX: 0000000000000000 RBX: ffff888040983300 RCX: ffffffff8a0973e7 [ 557.005077][ C0] RDX: ffff88802b4b24c0 RSI: ffffffff8a0974e2 RDI: ffff88802b4b24c0 [ 557.007803][ C0] RBP: 0000000000000090 R08: 0000000000000005 R09: 0000000000000000 [ 557.010503][ C0] R10: 0000000000000090 R11: 0000000000000000 R12: ffff888040983300 [ 557.013024][ C0] R13: ffff888040983390 R14: ffffffff81eebb9d R15: 0000000000000002 [ 557.015493][ C0] FS: 00007f796b2ad6c0(0000) GS:ffff8880d633f000(0000) knlGS:0000000000000000 [ 557.018374][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.021104][ C0] CR2: 0000200000009b60 CR3: 000000004c827000 CR4: 0000000000352ef0 [ 557.023645][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 557.026134][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 557.028867][ C0] Call Trace: [ 557.029947][ C0] [ 557.030878][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 557.032629][ C0] ? rcu_core+0x59d/0x10d0 [ 557.034057][ C0] __sk_destruct+0x85/0xbb0 [ 557.035509][ C0] ? rcu_core+0x59d/0x10d0 [ 557.036946][ C0] rcu_core+0x5a2/0x10d0 [ 557.038399][ C0] ? __pfx_rcu_core+0x10/0x10 [ 557.039921][ C0] ? run_timer_base+0x121/0x190 [ 557.041482][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 557.043136][ C0] handle_softirqs+0x1eb/0x9e0 [ 557.044665][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 557.046340][ C0] __irq_exit_rcu+0xef/0x150 [ 557.047818][ C0] irq_exit_rcu+0x9/0x30 [ 557.049243][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 557.051050][ C0] [ 557.052018][ C0] [ 557.052986][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 557.054890][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 557.056698][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a 8d 51 f6 48 89 df e8 62 dd 51 f6 e8 ad 73 7d f6 fb bf 01 00 00 00 22 fe 41 f6 65 8b 05 cb 8e 7a 08 85 c0 74 06 5b c3 cc cc cc cc [ 557.062781][ C0] RSP: 0018:ffffc9000503fc98 EFLAGS: 00000206 [ 557.064723][ C0] RAX: 0000000000052853 RBX: ffff88802d20ca00 RCX: 0000000000000000 [ 557.067206][ C0] RDX: 0000000000000000 RSI: ffffffff8de788fd RDI: 0000000000000001 [ 557.069720][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 557.072278][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000011 [ 557.074643][ C0] R13: ffff88802d20cc00 R14: dffffc0000000000 R15: ffff88802b4b24c0 [ 557.077148][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.078801][ C0] get_signal+0x195a/0x21e0 [ 557.080271][ C0] ? __pfx_get_signal+0x10/0x10 [ 557.081890][ C0] ? do_futex+0x192/0x350 [ 557.083278][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 557.085033][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 557.086976][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 557.088667][ C0] exit_to_user_mode_loop+0x86/0x4a0 [ 557.090331][ C0] do_syscall_64+0x67c/0xf80 [ 557.091853][ C0] ? clear_bhb_loop+0x40/0x90 [ 557.093343][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.095200][ C0] RIP: 0033:0x7f796a39c799 [ 557.096619][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.102647][ C0] RSP: 002b:00007f796b2ad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 557.105291][ C0] RAX: fffffffffffffe00 RBX: 00007f796a615fa8 RCX: 00007f796a39c799 [ 557.107738][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f796a615fa8 [ 557.110163][ C0] RBP: 00007f796a615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 557.112619][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.115163][ C0] R13: 00007f796a616038 R14: 00007ffc186384d0 R15: 00007ffc186385b8 [ 557.115254][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.117617][ C0] [ 557.121363][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 557.124242][ C0] CPU: 0 UID: 0 PID: 17539 Comm: syz.6.19849 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.128505][ C0] Tainted: [L]=SOFTLOCKUP [ 557.130226][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 557.134166][ C0] Call Trace: [ 557.135489][ C0] [ 557.136703][ C0] dump_stack_lvl+0x100/0x190 [ 557.138340][ C0] vpanic+0x552/0x970 [ 557.139808][ C0] ? __pfx_vpanic+0x10/0x10 [ 557.141623][ C0] panic+0xd1/0xe0 [ 557.143088][ C0] ? __pfx_panic+0x10/0x10 [ 557.144874][ C0] ? check_panic_on_warn+0x1f/0x90 [ 557.146875][ C0] check_panic_on_warn.cold+0x19/0x34 [ 557.149026][ C0] ? inet_sock_destruct+0x653/0x800 [ 557.151127][ C0] __warn.cold+0x191/0x348 [ 557.152912][ C0] __report_bug+0x296/0x3d0 [ 557.154699][ C0] ? inet_sock_destruct+0x653/0x800 [ 557.156771][ C0] ? __pfx___report_bug+0x10/0x10 [ 557.158813][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.161227][ C0] ? inet_sock_destruct+0x653/0x800 [ 557.163304][ C0] report_bug+0xb2/0x220 [ 557.165037][ C0] ? inet_sock_destruct+0x653/0x800 [ 557.167056][ C0] handle_bug+0x16a/0x2a0 [ 557.168777][ C0] exc_invalid_op+0x17/0x50 [ 557.170563][ C0] asm_exc_invalid_op+0x1a/0x20 [ 557.172495][ C0] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 557.174768][ C0] Code: f1 4e ff e9 06 fd ff ff e8 1a 81 ff f7 90 0f 0b 90 e9 35 fe ff ff e8 0c 81 ff f7 90 0f 0b 90 e9 c5 fe ff ff e8 fe 80 ff f7 90 <0f> 0b 90 e9 04 ff ff ff e8 f0 80 ff f7 90 0f 0b 90 e9 65 fe ff ff [ 557.182307][ C0] RSP: 0018:ffffc90000007d98 EFLAGS: 00010246 [ 557.184736][ C0] RAX: 0000000000000000 RBX: ffff888040983300 RCX: ffffffff8a0973e7 [ 557.187875][ C0] RDX: ffff88802b4b24c0 RSI: ffffffff8a0974e2 RDI: ffff88802b4b24c0 [ 557.190982][ C0] RBP: 0000000000000090 R08: 0000000000000005 R09: 0000000000000000 [ 557.194075][ C0] R10: 0000000000000090 R11: 0000000000000000 R12: ffff888040983300 [ 557.197150][ C0] R13: ffff888040983390 R14: ffffffff81eebb9d R15: 0000000000000002 [ 557.200396][ C0] ? rcu_core+0x59d/0x10d0 [ 557.202224][ C0] ? inet_sock_destruct+0x557/0x800 [ 557.204272][ C0] ? inet_sock_destruct+0x652/0x800 [ 557.206352][ C0] ? inet_sock_destruct+0x652/0x800 [ 557.208424][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 557.210598][ C0] ? rcu_core+0x59d/0x10d0 [ 557.212446][ C0] __sk_destruct+0x85/0xbb0 [ 557.214253][ C0] ? rcu_core+0x59d/0x10d0 [ 557.216075][ C0] rcu_core+0x5a2/0x10d0 [ 557.217772][ C0] ? __pfx_rcu_core+0x10/0x10 [ 557.219679][ C0] ? run_timer_base+0x121/0x190 [ 557.221657][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 557.223833][ C0] handle_softirqs+0x1eb/0x9e0 [ 557.226032][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 557.228150][ C0] __irq_exit_rcu+0xef/0x150 [ 557.230004][ C0] irq_exit_rcu+0x9/0x30 [ 557.231682][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 557.233910][ C0] [ 557.235096][ C0] [ 557.236282][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 557.238647][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 557.240956][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a 8d 51 f6 48 89 df e8 62 dd 51 f6 e8 ad 73 7d f6 fb bf 01 00 00 00 22 fe 41 f6 65 8b 05 cb 8e 7a 08 85 c0 74 06 5b c3 cc cc cc cc [ 557.248489][ C0] RSP: 0018:ffffc9000503fc98 EFLAGS: 00000206 [ 557.250890][ C0] RAX: 0000000000052853 RBX: ffff88802d20ca00 RCX: 0000000000000000 [ 557.253929][ C0] RDX: 0000000000000000 RSI: ffffffff8de788fd RDI: 0000000000000001 [ 557.257416][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 557.260012][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000011 [ 557.262637][ C0] R13: ffff88802d20cc00 R14: dffffc0000000000 R15: ffff88802b4b24c0 [ 557.265484][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.267344][ C0] get_signal+0x195a/0x21e0 [ 557.268903][ C0] ? __pfx_get_signal+0x10/0x10 [ 557.270544][ C0] ? do_futex+0x192/0x350 [ 557.271989][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 557.273892][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 557.275933][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 557.277643][ C0] exit_to_user_mode_loop+0x86/0x4a0 [ 557.279430][ C0] do_syscall_64+0x67c/0xf80 [ 557.281000][ C0] ? clear_bhb_loop+0x40/0x90 [ 557.282565][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.284540][ C0] RIP: 0033:0x7f796a39c799 [ 557.286028][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.292593][ C0] RSP: 002b:00007f796b2ad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 557.295394][ C0] RAX: fffffffffffffe00 RBX: 00007f796a615fa8 RCX: 00007f796a39c799 [ 557.298011][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f796a615fa8 [ 557.300591][ C0] RBP: 00007f796a615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 557.303136][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.305762][ C0] R13: 00007f796a616038 R14: 00007ffc186384d0 R15: 00007ffc186385b8 [ 557.308522][ C0] [ 557.310235][ C0] Kernel Offset: disabled [ 557.311685][ C0] Rebooting in 86400 seconds..