last executing test programs: 18.179281117s ago: executing program 2 (id=150): r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x3c0, r2, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x19}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x40}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x29}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6}, @NL80211_ATTR_PEER_MEASUREMENTS={0x350, 0x111, 0x0, 0x1, {0x34c, 0x5, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xe8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x200, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x198, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc164}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bb}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000045}, 0x200c0850) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x10000}, {0x8, 0x0, 0xd}]}]}, 0x30}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c0002"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 18.177436333s ago: executing program 2 (id=151): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e00000020011000000ffffffffffffff970100000001000000000000001c000000000000000000000008"], 0x50}}], 0x2, 0x4000) 18.100174763s ago: executing program 2 (id=152): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r2, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a", 0x3}], 0x1}}], 0x1, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) 18.036817079s ago: executing program 2 (id=153): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xf4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000000)=0x3) (async) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000040)) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000010905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4000) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020600000400000008000000010000008000000033616a72e09e38ba87d1a0b873569ff79aa4deef85d8bb7aaedd4b06e335f3451eb297abad002242ad0b06041eee6c770b2d350fb5c6c103dad243ec61ebbf079a6754182a757be9f7"], 0x96) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1d8, 0x12, 0x200, 0x70bd27, 0x25dfdbfc, {0x1a, 0x8, 0x7, 0x0, {0x4e20, 0x4e20, [0x10000, 0x3ff, 0x6, 0x6], [0x7, 0x8, 0x4, 0x3], 0x0, [0x982, 0x2]}, 0xffff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x34, 0x1, "2e0a82412f15420b530c7713eeab45d8b7200204568e2df0abcc7c11663ff7ded4e5377b0bd58fd6cda0a816c02aef78"}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "94f6802a4540dedb5b58693285ae89f359e87215d0bb7bd7ef053dd0d63d1aa8d0bc1875e190b02c09f055059c0d36880f860b691ebe2f98475fc9ce021e075abc32cc84fbef000275809e2caeddd84f76a129fe03bf6c17fc3e008fe9fdd8c7bedf29ec69cdda0066a04db6bd750457a4fd3307034aced43dfd371ad9c1cb643096c11425b879aa6cb892"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "3ce4fc8a77db4ef6204ae39142850b28d5067adc563afa351fb86a55df13b19d911e309310b1198878995899abfb928a1914bf68e3df1c90b6cba9515708ee7e86c259b73d01bfb0e66a2019a38586cc2e66f9755bfc99bf70d755ea770a847aa08ca36e01ad3a539d425c26897bd908f9506c74821d54706a3361821cca7d951b89d0588937ae185b84c285c2b77435014f48a92488ec92cb0b39233c309600614238ac2e28264b65dc75ecb830dce72bef216309edb33e0fa157cea7f40db192"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20040041}, 0x81) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x7b}}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r9, {0x5, 0x10}, {0x1, 0xb}, {0xc, 0x15}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000840) (rerun: 64) 17.697901464s ago: executing program 2 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) select(0x40, &(0x7f0000000040)={0x80000000, 0x2, 0x80, 0x1, 0xd, 0x27, 0x4}, &(0x7f00000000c0)={0x2, 0x8, 0x6, 0xc, 0x0, 0x2, 0xd93e, 0x5}, &(0x7f0000000200)={0x9272, 0x3, 0x0, 0x68b, 0xfff, 0x8, 0xf232, 0x8}, &(0x7f0000000240)={0x77359400}) r0 = socket(0x1c, 0x3e972075cffef302, 0x4b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd\x00', 0x200002, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) socket$nl_route(0x10, 0x3, 0x0) 17.619996761s ago: executing program 2 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @initdev}, &(0x7f0000000180)=0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000007e0100003801") 5.503345675s ago: executing program 3 (id=240): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7, 0x4, 0x1, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="610508c0"], 0x113) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) 2.42288092s ago: executing program 32 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @initdev}, &(0x7f0000000180)=0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000007e0100003801") 2.3795209s ago: executing program 3 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006"], 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006"], 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) (async) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 2.022865977s ago: executing program 0 (id=255): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x310, 0x11, 0x148, 0x310, 0x0, 0x410, 0x2a8, 0x2a8, 0x410, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x0, 0x8, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'nr0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) 1.925055075s ago: executing program 0 (id=256): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7, 0x4, 0x1, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="610508c0"], 0x113) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) 1.649294313s ago: executing program 0 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffd}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x808d4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.446226278s ago: executing program 0 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f0000000000)="ff", 0x8200, 0x400000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ed) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x2a, 0x107, 0xfffffffe, 0x3, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x135}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048848}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ed) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000140)='lowerdir=./lower,upperdir=./upper,workdir=./work,override_creds\x00') pwrite64(r0, &(0x7f0000000240)="95d0371d7c0e65aff306a88c98a068dcfe5fbbaa4afa517f03a34d6450184cfea0118171d1b9f516a18b248c78d592ce849f96d8f9a3e3c2696dedc296d6ea181479035a891a28ad8f514a9bd04152fcc2a893ba31f598dc751d4ea415286d5880099dc260b9502a8655d5e5e7ecb989fefa107d16ac5a250ccb1330332b5bcf8b71590ee9dd8401cccb5147817c6eaac1215bbeeaf8d7701d0685b4627e7031119ea1895cab3bf155ec62e22bf8776b6c8b069bb19e6bf9186196731d3581ea71e1917e921c97630ed97589127dbae8dbff", 0xd2, 0xb0) 1.445486831s ago: executing program 1 (id=264): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r1, 0xf5f) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x38, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x38}}, 0x90) accept(r1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2000, @loopback, 0x7}, 0x1c) 979.938174ms ago: executing program 3 (id=265): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffeffffe}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x20200, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x20200, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000ec0)={0x48, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) pwritev(r0, &(0x7f0000002f40)=[{&(0x7f0000000300)="f2985ae75cd93c61cb552c5c867d4630b69e85f7363462f928dc27ba847932616c83e469f51330f84b8924116bc08e8e0f17e080083577b3db0b2191a3a39927b06b870522ec7bbcbbc604f86128f923417e1320735f84f35b639b747a769d64b45010e154659d727eb08272b7e6440605f606a0c3c052589f368e4ac342bff6dcfd95dbca6e76fe9ff0766b054d62b6bcee65d038147339a63f95fe01bb9890fb95ec7660509ec61918be470858715902a507f0d3ded838d6d26780b762f3af5aa34f864fa8a4a1f483e44e80", 0xcd}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="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", 0x1000}], 0x3, 0x3, 0x2) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r5}, 0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xca880, 0x163) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xca880, 0x163) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x0) (async) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0xaf) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) close_range(r1, 0xffffffffffffffff, 0x0) 729.681861ms ago: executing program 3 (id=266): syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x9, 0x80000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x4}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000002060500000000000000000000000000040007800500010006000000050005000200000005000400000000000900020073797a30000000000c0003006861542f0ec1ad0070bfa533a673683a697000"], 0x48}, 0x1, 0x0, 0x0, 0x4041014}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001400010000000000ffdbdf2508000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x64, 0x0, 0x7, 0x201, 0x0, 0x0, {0x9, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) 650.237395ms ago: executing program 3 (id=267): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7, 0x4, 0x1, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="610508c0"], 0x113) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) 649.804918ms ago: executing program 0 (id=268): setreuid(0xee01, 0xffffffffffffffff) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000002c0)={0x1, 0x0, {0x37, 0x33, 0x12, 0xb, 0x7, 0x1000, 0x0, 0x5f, 0x1}}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000000c0)={0x1, @sliced={0xffff, [0x4, 0x8a, 0x7, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1, 0x9, 0x7, 0xaa, 0x3b1d, 0xffff, 0x49f9, 0x4, 0x4, 0xff, 0x2, 0x101, 0x1b7, 0x0, 0x2, 0x1, 0x0, 0x7be6, 0x4, 0x7, 0x0, 0x6, 0x4, 0x0, 0x40, 0x65f6, 0x6, 0x93b, 0x0, 0xff, 0x4, 0x4, 0x8, 0x9, 0xc, 0x8, 0xf, 0x5, 0xe717], 0x3}}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x2c180, 0x0) r6 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4) 569.422035ms ago: executing program 0 (id=269): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x82, 0x100000, "aa2fe1a243fcd9abf29cc3391c06b86f68e7f73d4f0bff9669a8e82040ccb44d75131fb06cade553a6bdc314438ce0af11c38cd724980b087a7a16f9295be0a69db51576e7a06ef6bcabc67b52ba82e73504fa842ec2f0c06bf006f3e5bcdd5057997bf171c60d96a538b02ee9f4b573457498ca09cb417b1fbe6dc3b0c27ab0693ac57aff136748f7740dfc33f3a902b670f8933aec28869e637c18379d6d0b4d844b732cb1932733dfcec2f69f8b6df76ba84e1f001ad29105230471f466b6f9d7d2b05a57fe16e7363e5ecebc2c74539ca55c7ce3a175061adedd20532a9de97379f4dd5baeeae835946311e6e4e2361355c54b3bd500"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x40, 0x2c, 0xea, {0xea, 0xa, "b413acdaf74caa0977bd55459abe5c2c1d29df713b677eee8f6a825a54e29f2495665696cf67d9c5f8d41b514508e15eab63cbaa67ed2d3ea28beffe01b8a37ef55fcfd267785ca6329beb2aa0e449dcbe5cdb25ca5dfc288eba6d0fbb3839f994b8516538e1281f2f86484c52706e16231d6e3b89306352d1ad96cd5a16c139a2c6cfe03303f5b6eb9fea2038a54715309018bc10758d278165e3cb0b50e30591b35dba9c99728a7ff79be79964c6e87ac293fa934d1f912f613cca0b458bb7d8df0d4800d5c9edf8c7c1f1865e9f9d3481599cb3846067c9ddbeec31e602297d79f610f5400541"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x0, 0x16, 0xe1, "5d640658f52dd84a64de6912ca4f4914e95f23225b62606c28306398ef6b41a5afc650894b2e67fbab5e7c24104353fc7c4e20d9cbc3aa273a623150d4494ffdf09cabe4eb0475472fec0593669a293e447ef1b9754a88c8a6c5bb83674cd96d1ebde505d0e26ffd1828f7de81d8e8260e2a96f57a52f5b51dc7419a0a5f03c8d351e2ee7fa8fd610899ae6280b6ecc16520012272f44591089c613daefd540b3acd9a052ee1ba93cc123d3c16a4a4696cf0e3dfbc43a295ce10491fd71814f3bb5010403a983bf9184015556fb23b713e71fe349182a50a36e1e4722070a80467"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0xfffe, 0x9, 0x8, 0x1, 0xa, 0x0, 0x8, 0x4, 0x7, 0x2, 0x7, 0x5}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0xd2f3}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 568.964183ms ago: executing program 1 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r0, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup(r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) 347.432338ms ago: executing program 1 (id=271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffd}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x808d4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 218.928018ms ago: executing program 3 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r2, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") sched_setscheduler(0x0, 0x2, 0x0) getpid() sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000c2dad7000000000004e0000000e0001006e657464657673696d0000040f0002006e657464653d89ac0397bb347300ab0014ffffff08000b006b0b000006001f0000000000d315ea62b8b80c8d344efe6a"], 0x4c}}, 0x4044040) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}, 0x8000}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="dc297bf1ce66483446d8201c47351c48446d35092c264952b8f5dc29101250a70dd587d7ce50b9d0498d730e2ebab5f00af36c7140005940a14d8ab9b12d393c3d0c4ee11a4d7387a436eae3fdf34c3066886a8e313cc51eb9b9202e0dfa69ff22f804a605555a9229ba5cf9a481032d85f29f418f14be1c5a5068f0e59e7dca13596a93002b768a2a9162dc177d1b696f0a20d8249cb3241b2cf5952a014e7ec0efbedcb8a132773999003dd76838", 0xaf}, {&(0x7f0000000800)="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", 0x509}], 0x2, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x80, 0x88c, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x700, 0x40, 0x2, 0x1}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000000) 217.489229ms ago: executing program 1 (id=273): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@overlay={0x5cc2, 0x6, 0x4, 0x0, 0x2, {0x0, 0xea60}, {0x5, 0x2, 0x1, 0x9d, 0x8, 0x32, "42881f28"}, 0x5, 0x3, {}, 0x4}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000004200", "f4bd000000801900", [0x0, 0x31]}}) 80.454963ms ago: executing program 1 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='100', 0x3) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lremovexattr(&(0x7f0000000040)='./sys\x00', &(0x7f00000001c0)=@random={'btrfs.', '-&]-'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bond0/bonding/arp_interval\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './sys/class/net/bond0/bonding/arp_ip_target\x00'}) setresgid(r2, r3, r4) 0s ago: executing program 1 (id=275): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "67a71ebc03e75ca1"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0xc000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x6, 0x5, 0x1}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8004081}, 0x2000081) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:58344' (ED25519) to the list of known hosts. [ 42.511161][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 42.511234][ T43] audit: type=1400 audit(1788050105.707:141): avc: denied { mounton } for pid=5719 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.522276][ T5719] cgroup: Unknown subsys name 'net' [ 42.524344][ T43] audit: type=1400 audit(1788050105.707:142): avc: denied { mount } for pid=5719 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.524719][ T43] audit: type=1400 audit(1788050105.717:143): avc: denied { unmount } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.657731][ T5719] cgroup: Unknown subsys name 'cpuset' [ 42.661639][ T5719] cgroup: Unknown subsys name 'rlimit' [ 42.811190][ T43] audit: type=1400 audit(1788050106.007:144): avc: denied { setattr } for pid=5719 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.811688][ T43] audit: type=1400 audit(1788050106.007:145): avc: denied { create } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.811918][ T43] audit: type=1400 audit(1788050106.007:146): avc: denied { write } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.812158][ T43] audit: type=1400 audit(1788050106.007:147): avc: denied { read } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.843159][ T43] audit: type=1400 audit(1788050106.037:148): avc: denied { read } for pid=5446 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.850249][ T43] audit: type=1400 audit(1788050106.047:149): avc: denied { read } for pid=5446 comm="dhcpcd" name="n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.850533][ T43] audit: type=1400 audit(1788050106.047:150): avc: denied { open } for pid=5446 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.891515][ T5724] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.633136][ T5719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.208209][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 48.208294][ T43] audit: type=1400 audit(1788050111.407:156): avc: denied { execmem } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.455439][ T43] audit: type=1400 audit(1788050111.657:157): avc: denied { create } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.463893][ T43] audit: type=1400 audit(1788050111.657:158): avc: denied { read write } for pid=5732 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.463944][ T43] audit: type=1400 audit(1788050111.657:159): avc: denied { read write } for pid=5731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.463981][ T43] audit: type=1400 audit(1788050111.657:160): avc: denied { open } for pid=5732 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.474771][ T43] audit: type=1400 audit(1788050111.667:161): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[7368]" dev="sockfs" ino=7368 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.487231][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.508122][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.510614][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.511915][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.513842][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.515375][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.516637][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.516884][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.517373][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.520228][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.521203][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.521405][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.522817][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.523279][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.525715][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.526907][ T43] audit: type=1400 audit(1788050111.727:162): avc: denied { read } for pid=5731 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.527112][ T43] audit: type=1400 audit(1788050111.727:163): avc: denied { open } for pid=5731 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.527401][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.528045][ T43] audit: type=1400 audit(1788050111.727:164): avc: denied { mounton } for pid=5731 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.530216][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.530645][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.530783][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.533446][ T43] audit: type=1400 audit(1788050111.727:165): avc: denied { module_request } for pid=5731 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.543782][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.187406][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.187511][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.187611][ T5731] bridge_slave_0: entered allmulticast mode [ 49.189168][ T5731] bridge_slave_0: entered promiscuous mode [ 49.191372][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.191425][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.191572][ T5731] bridge_slave_1: entered allmulticast mode [ 49.192409][ T5731] bridge_slave_1: entered promiscuous mode [ 49.270535][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.299215][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.309014][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.309162][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.309250][ T5740] bridge_slave_0: entered allmulticast mode [ 49.310418][ T5740] bridge_slave_0: entered promiscuous mode [ 49.345409][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.345562][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.345866][ T5740] bridge_slave_1: entered allmulticast mode [ 49.347320][ T5740] bridge_slave_1: entered promiscuous mode [ 49.398477][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.398630][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.398974][ T5732] bridge_slave_0: entered allmulticast mode [ 49.401487][ T5732] bridge_slave_0: entered promiscuous mode [ 49.405484][ T5731] team0: Port device team_slave_0 added [ 49.406917][ T5731] team0: Port device team_slave_1 added [ 49.417066][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.417272][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.417345][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.417622][ T5732] bridge_slave_1: entered allmulticast mode [ 49.418930][ T5732] bridge_slave_1: entered promiscuous mode [ 49.433376][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.433487][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.433594][ T5733] bridge_slave_0: entered allmulticast mode [ 49.434468][ T5733] bridge_slave_0: entered promiscuous mode [ 49.436972][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.461741][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.461801][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.461851][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.464146][ T5740] team0: Port device team_slave_0 added [ 49.464338][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.464409][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.464516][ T5733] bridge_slave_1: entered allmulticast mode [ 49.465822][ T5733] bridge_slave_1: entered promiscuous mode [ 49.493261][ T5740] team0: Port device team_slave_1 added [ 49.493979][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.493990][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.494011][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.508580][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.533545][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.536231][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.546206][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.549184][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.553417][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.557682][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.568063][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.568123][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.568173][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.621489][ T5732] team0: Port device team_slave_0 added [ 49.623421][ T5733] team0: Port device team_slave_0 added [ 49.635819][ T5731] hsr_slave_0: entered promiscuous mode [ 49.636364][ T5731] hsr_slave_1: entered promiscuous mode [ 49.638368][ T5732] team0: Port device team_slave_1 added [ 49.651841][ T5733] team0: Port device team_slave_1 added [ 49.677195][ T5740] hsr_slave_0: entered promiscuous mode [ 49.678057][ T5740] hsr_slave_1: entered promiscuous mode [ 49.678933][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 49.679007][ T5740] Cannot create hsr debugfs directory [ 49.690919][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.690977][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.691043][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.711026][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.711075][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.711118][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.712828][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.712842][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.712860][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.714694][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.714710][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.714729][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.809001][ T5733] hsr_slave_0: entered promiscuous mode [ 49.809497][ T5733] hsr_slave_1: entered promiscuous mode [ 49.809802][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 49.809819][ T5733] Cannot create hsr debugfs directory [ 49.882256][ T5732] hsr_slave_0: entered promiscuous mode [ 49.883044][ T5732] hsr_slave_1: entered promiscuous mode [ 49.883530][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 49.883547][ T5732] Cannot create hsr debugfs directory [ 50.115123][ T5740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.122474][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.123158][ T5740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.130727][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.131498][ T5740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.137183][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.138016][ T5740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.142314][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.197035][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.201221][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.201896][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.205742][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.209862][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.213909][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.214639][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.218417][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.291471][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.297455][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.305627][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.309764][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.316763][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.321344][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.336601][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.340542][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.366686][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.412378][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.419227][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.419990][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.425935][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.431324][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.433686][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.438196][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.442051][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.446685][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.467481][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.467787][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.473860][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.498841][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.498986][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.503633][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.519584][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.519715][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.534306][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.534444][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.546200][ T5740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.546301][ T5740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.586536][ T66] Bluetooth: hci1: command tx timeout [ 50.586909][ T5747] Bluetooth: hci3: command tx timeout [ 50.587182][ T5735] Bluetooth: hci2: command tx timeout [ 50.587530][ T5738] Bluetooth: hci0: command tx timeout [ 50.602010][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.620799][ T5731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.627237][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.637141][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.637237][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.639827][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.649473][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.649551][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.669870][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.677243][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.677386][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.684959][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.685027][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.749443][ T5733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.905387][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.958294][ T5740] veth0_vlan: entered promiscuous mode [ 50.962614][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.976376][ T5740] veth1_vlan: entered promiscuous mode [ 51.008361][ T5731] veth0_vlan: entered promiscuous mode [ 51.025083][ T5731] veth1_vlan: entered promiscuous mode [ 51.028606][ T5740] veth0_macvtap: entered promiscuous mode [ 51.038130][ T5740] veth1_macvtap: entered promiscuous mode [ 51.053420][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.057796][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.059945][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.064065][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.088538][ T5731] veth0_macvtap: entered promiscuous mode [ 51.098904][ T5731] veth1_macvtap: entered promiscuous mode [ 51.142264][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.154778][ T5545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.157862][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.159168][ T5732] veth0_vlan: entered promiscuous mode [ 51.181661][ T5733] veth0_vlan: entered promiscuous mode [ 51.187691][ T5732] veth1_vlan: entered promiscuous mode [ 51.211028][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.211103][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.225276][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.225329][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.237698][ T5733] veth1_vlan: entered promiscuous mode [ 51.253849][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.254205][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.284350][ T5545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.301495][ T5732] veth0_macvtap: entered promiscuous mode [ 51.306156][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.306202][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.323622][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.327796][ T5732] veth1_macvtap: entered promiscuous mode [ 51.330100][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.330118][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.342309][ T5733] veth0_macvtap: entered promiscuous mode [ 51.346477][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.346781][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.347037][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.347347][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.351077][ T5733] veth1_macvtap: entered promiscuous mode [ 51.363308][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.373520][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.376625][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.381915][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.500678][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.500767][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.522446][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.522493][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.531926][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.531990][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.552473][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.552526][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.584745][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.584816][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.584873][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.584920][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.584987][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.585033][ T5811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.585077][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.585122][ T5811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.758002][ T5901] Zero length message leads to an empty skb [ 51.918193][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 52.002083][ T5915] syz.1.14: attempt to access beyond end of device [ 52.002083][ T5915] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 52.002202][ T5915] gfs2: error -5 reading superblock [ 52.006257][ T5915] mmap: syz.1.14 (5915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.077008][ T5919] syz.1.14: attempt to access beyond end of device [ 52.077008][ T5919] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 52.077083][ T5919] gfs2: error -5 reading superblock [ 52.124066][ T5924] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 52.664391][ T66] Bluetooth: hci1: command tx timeout [ 52.664484][ T66] Bluetooth: hci3: command tx timeout [ 52.664711][ T5738] Bluetooth: hci0: command tx timeout [ 52.684417][ T5882] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.845075][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 52.846968][ T5882] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 52.848380][ T5882] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 52.848395][ T5882] usb 6-1: config 0 has no interface number 0 [ 52.848414][ T5882] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 52.848425][ T5882] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 52.848438][ T5882] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.848451][ T5882] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.850018][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.850033][ T5882] usb 6-1: Product: syz [ 52.850041][ T5882] usb 6-1: Manufacturer: syz [ 52.850048][ T5882] usb 6-1: SerialNumber: syz [ 52.854652][ T5882] usb 6-1: config 0 descriptor?? [ 52.865029][ T5882] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input5 [ 53.133699][ T5850] usb 6-1: USB disconnect, device number 2 [ 53.664153][ T43] kauditd_printk_skb: 75 callbacks suppressed [ 53.665225][ T43] audit: type=1400 audit(1788050116.857:241): avc: denied { read append } for pid=5956 comm="syz.3.26" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 53.665733][ T43] audit: type=1400 audit(1788050116.867:242): avc: denied { open } for pid=5956 comm="syz.3.26" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 53.666959][ T43] audit: type=1400 audit(1788050116.867:243): avc: denied { ioctl } for pid=5956 comm="syz.3.26" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 53.670297][ T5958] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 53.671099][ T43] audit: type=1400 audit(1788050116.867:244): avc: denied { ioctl } for pid=5956 comm="syz.3.26" path="socket:[9437]" dev="sockfs" ino=9437 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.691089][ T5957] fuse: Unknown parameter '' [ 53.691303][ T5957] fuse: Unknown parameter '' [ 53.691478][ T5957] fuse: Unknown parameter '' [ 53.694036][ T5957] fuse: Unknown parameter '' [ 53.694161][ T43] audit: type=1400 audit(1788050116.897:245): avc: denied { sys_module } for pid=5956 comm="syz.3.26" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.694896][ T5957] fuse: Unknown parameter '' [ 53.695009][ T5957] fuse: Unknown parameter '' [ 53.695108][ T5957] fuse: Unknown parameter '' [ 53.695208][ T5957] fuse: Unknown parameter '' [ 53.695344][ T5957] fuse: Unknown parameter '' [ 53.695562][ T5957] fuse: Unknown parameter '' [ 53.695767][ T5957] fuse: Unknown parameter '' [ 53.695970][ T5957] fuse: Unknown parameter '' [ 53.696241][ T5957] fuse: Unknown parameter '' [ 53.696429][ T5957] fuse: Unknown parameter '' [ 53.696622][ T5957] fuse: Unknown parameter '' [ 53.696773][ T5957] fuse: Unknown parameter '' [ 53.696916][ T5957] fuse: Unknown parameter '' [ 53.697093][ T5957] fuse: Unknown parameter '' [ 53.697237][ T5957] fuse: Unknown parameter '' [ 53.697401][ T5957] fuse: Unknown parameter '' [ 53.697519][ T5957] fuse: Unknown parameter '' [ 53.697631][ T5957] fuse: Unknown parameter '' [ 53.697737][ T5957] fuse: Unknown parameter '' [ 53.697896][ T5957] fuse: Unknown parameter '' [ 53.698008][ T5957] fuse: Unknown parameter '' [ 53.698207][ T5957] fuse: Unknown parameter '' [ 53.698324][ T5957] fuse: Unknown parameter '' [ 53.698448][ T5957] fuse: Unknown parameter '' [ 53.698554][ T5957] fuse: Unknown parameter '' [ 53.698704][ T5957] fuse: Unknown parameter '' [ 53.698821][ T5957] fuse: Unknown parameter '' [ 53.698939][ T5957] fuse: Unknown parameter '' [ 53.731786][ T43] audit: type=1400 audit(1788050116.927:246): avc: denied { create } for pid=5967 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.732262][ T43] audit: type=1400 audit(1788050116.927:247): avc: denied { bind } for pid=5967 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.732718][ T43] audit: type=1400 audit(1788050116.927:248): avc: denied { node_bind } for pid=5967 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 53.807236][ T43] audit: type=1400 audit(1788050117.007:249): avc: denied { read write } for pid=5974 comm="syz.0.29" name="video8" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 53.808046][ T43] audit: type=1400 audit(1788050117.007:250): avc: denied { open } for pid=5974 comm="syz.0.29" path="/dev/video8" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 53.860806][ T5973] syzkaller0: create flow: hash 2395462067 index 1 [ 53.911462][ T5972] syzkaller0: delete flow: hash 2395462067 index 1 [ 54.714629][ T851] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.754681][ T5735] Bluetooth: hci3: command tx timeout [ 54.755316][ T5735] Bluetooth: hci0: command tx timeout [ 54.755395][ T5738] Bluetooth: hci1: command tx timeout [ 54.864477][ T851] usb 5-1: device descriptor read/64, error -71 [ 54.968584][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969023][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969122][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969128][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969197][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969202][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969275][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969280][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969346][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969351][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969419][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969424][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969492][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969497][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969562][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969567][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969636][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969641][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969714][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969719][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969844][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969850][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969911][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969917][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.969985][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.969990][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970058][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970063][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970132][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970138][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970204][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970210][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970272][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970278][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970345][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970352][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970418][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970424][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970491][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970497][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970563][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970569][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970636][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970642][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970709][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970715][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970779][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970785][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970852][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970858][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970925][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.970931][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.970997][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.971003][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.971069][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.971075][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.971145][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.971151][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.971216][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.971222][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.971288][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.971294][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.971358][ T6008] binder: BINDER_SET_CONTEXT_MGR already set [ 54.971364][ T6008] binder: 6003:6008 ioctl 4018620d 200000000100 returned -16 [ 54.975355][ T6004] binder: 6003:6004 ioctl c0306201 200000000080 returned -14 [ 54.990076][ T6004] binder: 6003:6004 ioctl c0306201 2000000004c0 returned -14 [ 54.990979][ T6004] binder: 6003:6004 ioctl c0306201 2000000001c0 returned -14 [ 55.114325][ T851] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.244310][ T851] usb 5-1: device descriptor read/64, error -71 [ 55.263723][ T5999] cgroup: fork rejected by pids controller in /syz3 [ 55.357572][ T851] usb usb5-port1: attempt power cycle [ 55.694354][ T851] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.715763][ T851] usb 5-1: device descriptor read/8, error -71 [ 55.875522][ T5738] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 55.875646][ T5738] Bluetooth: hci2: Injecting HCI hardware error event [ 55.876609][ T5735] Bluetooth: hci2: hardware error 0x00 [ 55.932230][ T6086] loop5: detected capacity change from 0 to 7 [ 55.936461][ T6086] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 55.936522][ T6086] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 55.936587][ T6086] Dev loop5: unable to read RDB block 7 [ 55.936600][ T6086] loop5: AHDI p2 [ 55.936648][ T6086] loop5: partition table partially beyond EOD, truncated [ 55.954859][ T851] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 55.975912][ T851] usb 5-1: device descriptor read/8, error -71 [ 56.000997][ T6091] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 56.001402][ T6092] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 56.011176][ T6091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.019318][ T6091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60176 sclass=netlink_route_socket pid=6091 comm=syz.3.39 [ 56.090048][ T851] usb usb5-port1: unable to enumerate USB device [ 56.197868][ T6098] kvm: user requested TSC rate below hardware speed [ 56.198619][ T6098] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (1080055392 ns). Using initial count to start timer. [ 56.786727][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 56.835651][ T5738] Bluetooth: hci1: command tx timeout [ 56.835674][ T66] Bluetooth: hci3: command tx timeout [ 56.835707][ T66] Bluetooth: hci0: command tx timeout [ 56.909511][ T6135] netlink: 'syz.1.56': attribute type 14 has an invalid length. [ 56.974456][ T35] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 57.370359][ T35] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 57.373684][ T35] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 57.373706][ T35] usb 8-1: can't read configurations, error -71 [ 57.509465][ T6144] loop5: detected capacity change from 0 to 7 [ 57.511359][ T6144] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 57.511373][ T6144] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 57.511409][ T6144] Dev loop5: unable to read RDB block 7 [ 57.511422][ T6144] loop5: AHDI p2 [ 57.511431][ T6144] loop5: partition table partially beyond EOD, truncated [ 57.553961][ T6154] trusted_key: encrypted_key: insufficient parameters specified [ 57.828815][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 57.829606][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 57.829641][ T6173] netlink: 'syz.1.67': attribute type 7 has an invalid length. [ 57.916674][ T6180] FAT-fs (nullb0): bogus number of reserved sectors [ 57.916738][ T6180] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 57.920539][ T6180] fuse: Bad value for 'user_id' [ 57.920549][ T6180] fuse: Bad value for 'user_id' [ 57.955734][ T5735] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 58.024951][ T5850] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 58.194361][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 58.194985][ T5850] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.197177][ T5850] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 58.197202][ T5850] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.197213][ T5850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.197225][ T5850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.197236][ T5850] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.197254][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.220927][ T6197] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 58.302834][ T6197] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 58.305921][ T6198] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 58.312922][ T6197] libceph: resolve '4' (ret=-3): failed [ 58.404449][ T5850] usb 5-1: usb_control_msg returned -32 [ 58.404512][ T5850] usbtmc 5-1:16.0: can't read capabilities [ 58.770390][ T43] kauditd_printk_skb: 57 callbacks suppressed [ 58.770677][ T43] audit: type=1400 audit(1788050121.967:308): avc: denied { create } for pid=6170 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.771658][ T43] audit: type=1400 audit(1788050121.967:309): avc: denied { connect } for pid=6170 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.772936][ T43] audit: type=1400 audit(1788050121.967:310): avc: denied { write } for pid=6170 comm="syz.0.66" path="socket:[9851]" dev="sockfs" ino=9851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.974050][ T6219] xt_connbytes: Forcing CT accounting to be enabled [ 58.974507][ T6219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.274993][ T43] audit: type=1400 audit(1788050122.477:311): avc: denied { read write } for pid=6226 comm="syz.1.84" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.275119][ T43] audit: type=1400 audit(1788050122.477:312): avc: denied { open } for pid=6226 comm="syz.1.84" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.846835][ T43] audit: type=1400 audit(1788050123.047:313): avc: denied { map } for pid=6229 comm="syz.3.85" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.846899][ T43] audit: type=1400 audit(1788050123.047:314): avc: denied { read write } for pid=6229 comm="syz.3.85" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.011929][ T43] audit: type=1400 audit(1788050123.207:315): avc: denied { mount } for pid=6233 comm="syz.2.86" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 60.088223][ T6235] bq24190-charger 0-0006: Can't get irq info [ 60.088757][ T6235] bq24190-charger 0-0006: probe with driver bq24190-charger failed with error -22 [ 60.089520][ T6235] i2c i2c-0: new_device: Instantiated device bq24190 at 0x06 [ 60.104439][ T35] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.232019][ T43] audit: type=1400 audit(1788050123.427:316): avc: denied { create } for pid=6240 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.234181][ T43] audit: type=1400 audit(1788050123.427:317): avc: denied { write } for pid=6240 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.266258][ T35] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 60.267445][ T35] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 60.268505][ T35] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 60.272834][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.272854][ T35] usb 8-1: Product: syz [ 60.272866][ T35] usb 8-1: Manufacturer: syz [ 60.272877][ T35] usb 8-1: SerialNumber: syz [ 60.288000][ T35] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 60.297608][ T35] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 60.307505][ T35] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 60.745591][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 60.820934][ T35] usb 5-1: USB disconnect, device number 6 [ 60.920649][ T6262] ipt_rpfilter: unknown options [ 60.985459][ T63] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.122416][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 61.138098][ T63] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.138928][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.138943][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.138954][ T63] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.138973][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.141711][ T63] usb 7-1: config 0 descriptor?? [ 61.630226][ T63] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 61.871063][ T63] usb 7-1: USB disconnect, device number 2 [ 62.043737][ T6279] tmpfs: Bad value for 'mpol' [ 62.115908][ T6283] XFS (loop1): SB validate failed with error -5. [ 62.182346][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 62.311630][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 62.368119][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 62.406004][ T6308] synth uevent: /bus/acpi: unknown uevent action string [ 62.513456][ T6315] xt_nfacct: accounting object `' does not exist [ 62.564206][ T6320] loop5: detected capacity change from 0 to 7 [ 62.574415][ T6320] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 62.574470][ T6320] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 62.574552][ T6320] Dev loop5: unable to read RDB block 7 [ 62.574571][ T6320] loop5: AHDI p2 [ 62.574587][ T6320] loop5: partition table partially beyond EOD, truncated [ 62.590659][ T6230] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 62.595316][ T6230] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 62.595354][ T6230] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 62.595649][ T6230] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 62.608049][ T1026] usb 8-1: USB disconnect, device number 4 [ 62.631105][ T6323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6323 comm=syz.1.116 [ 62.659567][ T1026] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 62.665147][ T1026] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 62.665934][ T1026] ti_usb_3410_5052 8-1:2.0: device disconnected [ 62.724605][ T6325] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 62.729568][ T6323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=6323 comm=syz.1.116 [ 62.729590][ T6323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=6323 comm=syz.1.116 [ 62.729796][ T6323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=6323 comm=syz.1.116 [ 62.729813][ T6323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=6323 comm=syz.1.116 [ 62.729911][ T6323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=6323 comm=syz.1.116 [ 62.729926][ T6323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=6323 comm=syz.1.116 [ 62.730025][ T6323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=6323 comm=syz.1.116 [ 62.730041][ T6323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=6323 comm=syz.1.116 [ 62.730132][ T6323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=6323 comm=syz.1.116 [ 62.744999][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.880933][ T6360] device-mapper: ioctl: Empty message received. [ 62.902077][ T10] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 62.902641][ T10] usb 7-1: config 0 has no interfaces? [ 62.903101][ T10] usb 7-1: config 0 has no interfaces? [ 62.905006][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.905023][ T10] usb 7-1: Product: syz [ 62.905035][ T10] usb 7-1: Manufacturer: syz [ 62.905046][ T10] usb 7-1: SerialNumber: syz [ 62.910134][ T10] usb 7-1: config 0 descriptor?? [ 62.928600][ T6365] netlink: 44 bytes leftover after parsing attributes in process `syz.1.123'. [ 62.967684][ T6367] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 62.967764][ T6367] CIFS mount error: No usable UNC path provided in device string! [ 62.967764][ T6367] [ 62.967912][ T6370] netlink: 'syz.1.125': attribute type 21 has an invalid length. [ 62.968257][ T6367] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 62.997943][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 63.122574][ T10] usb 7-1: USB disconnect, device number 3 [ 63.206107][ T6385] can0: slcan on ttyS3. [ 63.276134][ T6385] can0 (unregistered): slcan off ttyS3. [ 63.344356][ T6394] device-mapper: ioctl: Empty message received. [ 63.413757][ T6405] loop5: detected capacity change from 0 to 7 [ 63.416502][ T6405] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 63.416515][ T6405] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 63.416550][ T6405] Dev loop5: unable to read RDB block 7 [ 63.416562][ T6405] loop5: AHDI p2 [ 63.416570][ T6405] loop5: partition table partially beyond EOD, truncated [ 63.636563][ T5850] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 63.681192][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 63.701388][ T6431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.794495][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.795005][ T5850] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 63.796709][ T5850] usb 5-1: Dual-Role OTG device on HNP port [ 63.796993][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.803204][ T5850] gspca_main: spca501-2.14.0 probing 0000:0000 [ 63.805629][ T5850] gspca_spca501: reg write: error -32 [ 63.805637][ T5850] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 63.805671][ T5850] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 63.813234][ T6440] netlink: 56 bytes leftover after parsing attributes in process `syz.0.141'. [ 63.859264][ T43] kauditd_printk_skb: 116 callbacks suppressed [ 63.859363][ T43] audit: type=1400 audit(63.759:434): avc: denied { bind } for pid=6425 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.887944][ T6426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.944432][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 63.945421][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.948656][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 63.948700][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.948721][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.948742][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.948763][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.948799][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.983925][ T6452] loop5: detected capacity change from 0 to 7 [ 63.990720][ T6452] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 63.991131][ T6452] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 63.991172][ T6452] Dev loop5: unable to read RDB block 7 [ 63.991184][ T6452] loop5: AHDI p2 [ 63.991194][ T6452] loop5: partition table partially beyond EOD, truncated [ 64.164053][ T6468] netlink: 212396 bytes leftover after parsing attributes in process `syz.2.150'. [ 64.164308][ T6468] openvswitch: netlink: Message has 512 unknown bytes. [ 64.177048][ T10] usb 6-1: usb_control_msg returned -32 [ 64.177151][ T10] usbtmc 6-1:16.0: can't read capabilities [ 64.178736][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.180564][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.189151][ T10] usb 6-1: USB disconnect, device number 3 [ 64.259388][ T43] audit: type=1400 audit(64.159:435): avc: denied { connect } for pid=6472 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.260352][ T43] audit: type=1400 audit(64.159:436): avc: denied { write } for pid=6472 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.303469][ T43] audit: type=1400 audit(64.199:437): avc: denied { append } for pid=6474 comm="syz.2.153" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.330613][ T43] audit: type=1400 audit(64.229:438): avc: denied { mount } for pid=6477 comm="syz.0.154" name="/" dev="hugetlbfs" ino=13567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 64.339053][ T43] audit: type=1400 audit(64.239:439): avc: denied { read write } for pid=6477 comm="syz.0.154" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 64.339349][ T43] audit: type=1400 audit(64.239:440): avc: denied { open } for pid=6477 comm="syz.0.154" path="/36/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 64.339775][ T6478] size and base must be multiples of 4 kiB [ 64.339789][ T6478] CPU: 3 UID: 0 PID: 6478 Comm: syz.0.154 Not tainted syzkaller #0 PREEMPT(full) [ 64.339809][ T6478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.339819][ T6478] Call Trace: [ 64.339825][ T6478] [ 64.339832][ T6478] dump_stack_lvl+0x100/0x190 [ 64.339865][ T6478] mtrr_del.cold+0x72/0x85 [ 64.339885][ T6478] mtrr_ioctl+0xbc8/0xcf0 [ 64.339907][ T6478] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 64.339938][ T6478] ? __pfx_mtrr_ioctl+0x10/0x10 [ 64.339955][ T6478] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.339987][ T6478] ? __fget_files+0x34/0x3d0 [ 64.340019][ T6478] ? __pfx_mtrr_ioctl+0x10/0x10 [ 64.340037][ T6478] proc_reg_unlocked_ioctl+0x229/0x320 [ 64.340062][ T6478] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 64.340090][ T6478] __x64_sys_ioctl+0x18e/0x210 [ 64.340119][ T6478] do_syscall_64+0x123/0x790 [ 64.340142][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.340161][ T6478] RIP: 0033:0x7fd72e99e159 [ 64.340175][ T6478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.340192][ T6478] RSP: 002b:00007fd72f7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.340210][ T6478] RAX: ffffffffffffffda RBX: 00007fd72ec25fa0 RCX: 00007fd72e99e159 [ 64.340222][ T6478] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000005 [ 64.340232][ T6478] RBP: 00007fd72ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 64.340243][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.340253][ T6478] R13: 00007fd72ec26038 R14: 00007fd72ec25fa0 R15: 00007ffe9e0e4798 [ 64.340277][ T6478] [ 64.340345][ T43] audit: type=1400 audit(64.239:441): avc: denied { ioctl } for pid=6477 comm="syz.0.154" path="/36/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 64.340709][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 64.388274][ T43] audit: type=1400 audit(64.289:442): avc: denied { mounton } for pid=6477 comm="syz.0.154" path="/36/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 64.390647][ T6478] size and base must be multiples of 4 kiB [ 64.390663][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: syz.0.154 Not tainted syzkaller #0 PREEMPT(full) [ 64.390684][ T6478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.390692][ T6478] Call Trace: [ 64.390697][ T6478] [ 64.390702][ T6478] dump_stack_lvl+0x100/0x190 [ 64.390726][ T6478] mtrr_del.cold+0x72/0x85 [ 64.390740][ T6478] mtrr_ioctl+0xbc8/0xcf0 [ 64.390764][ T6478] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 64.390797][ T6478] ? __pfx_mtrr_ioctl+0x10/0x10 [ 64.390814][ T6478] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.390847][ T6478] ? __fget_files+0x34/0x3d0 [ 64.390881][ T6478] ? __pfx_mtrr_ioctl+0x10/0x10 [ 64.390901][ T6478] proc_reg_unlocked_ioctl+0x229/0x320 [ 64.390926][ T6478] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 64.390954][ T6478] __x64_sys_ioctl+0x18e/0x210 [ 64.390985][ T6478] do_syscall_64+0x123/0x790 [ 64.391009][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.391028][ T6478] RIP: 0033:0x7fd72e99e159 [ 64.391044][ T6478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.391062][ T6478] RSP: 002b:00007fd72f7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.391081][ T6478] RAX: ffffffffffffffda RBX: 00007fd72ec25fa0 RCX: 00007fd72e99e159 [ 64.391093][ T6478] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000005 [ 64.391104][ T6478] RBP: 00007fd72ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 64.391115][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.391126][ T6478] R13: 00007fd72ec26038 R14: 00007fd72ec25fa0 R15: 00007ffe9e0e4798 [ 64.391152][ T6478] [ 64.467300][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 64.467430][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 64.467503][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 64.467612][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 64.587747][ T6488] loop5: detected capacity change from 0 to 7 [ 64.593706][ T6488] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 64.599373][ T6488] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 64.603133][ T6488] Dev loop5: unable to read RDB block 7 [ 64.603225][ T6488] loop5: AHDI p2 [ 64.603256][ T6488] loop5: partition table partially beyond EOD, truncated [ 64.616177][ T43] audit: type=1400 audit(64.519:443): avc: denied { bind } for pid=6485 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 64.667078][ T6494] binder: 6485:6494 ioctl c018620c 200000000080 returned -22 [ 64.870649][ T6503] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 64.899589][ T6503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.918659][ T6503] bond1: (slave ip6gretap1): making interface the new active one [ 64.922103][ T6503] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 64.974665][ T6508] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 65.150600][ T6518] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 65.759343][ T6528] kvm: emulating exchange as write [ 66.033741][ T6543] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 66.033778][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.034986][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 66.037958][ T6543] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 66.037979][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.038036][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 66.041589][ T6543] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 66.041611][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.041708][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 66.045091][ T6543] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(26) [ 66.045110][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.045165][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 66.055360][ T6543] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(28) [ 66.055382][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.055416][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 66.060604][ T6543] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(32) [ 66.060629][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.060697][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 66.070336][ T6543] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(45) [ 66.070357][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.070393][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 66.083716][ T6543] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(52) [ 66.083740][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.083774][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 66.101977][ T6543] vhci_hcd vhci_hcd.0: port 0 already used [ 66.118590][ T6550] vhci_hcd: connection closed [ 66.119099][ T6548] vhci_hcd: connection closed [ 66.121202][ T6546] vhci_hcd: connection closed [ 66.121361][ T5545] vhci_hcd vhci_hcd.0: stop threads [ 66.122341][ T5545] vhci_hcd vhci_hcd.0: release socket [ 66.122365][ T5545] vhci_hcd vhci_hcd.0: disconnect device [ 66.122880][ T5545] vhci_hcd vhci_hcd.0: stop threads [ 66.122892][ T5545] vhci_hcd vhci_hcd.0: release socket [ 66.122906][ T5545] vhci_hcd vhci_hcd.0: disconnect device [ 66.123362][ T5545] vhci_hcd vhci_hcd.0: stop threads [ 66.123374][ T5545] vhci_hcd vhci_hcd.0: release socket [ 66.123387][ T5545] vhci_hcd vhci_hcd.0: disconnect device [ 66.124687][ T6544] vhci_hcd: connection closed [ 66.127713][ T5545] vhci_hcd vhci_hcd.0: stop threads [ 66.127728][ T5545] vhci_hcd vhci_hcd.0: release socket [ 66.127742][ T5545] vhci_hcd vhci_hcd.0: disconnect device [ 66.599317][ T6575] netlink: 'syz.3.176': attribute type 2 has an invalid length. [ 66.777029][ T6558] vhci_hcd: connection closed [ 66.777889][ T6556] vhci_hcd: connection closed [ 66.778885][ T6554] vhci_hcd: connection closed [ 66.779602][ T6552] vhci_hcd: connection closed [ 66.784563][ T5545] vhci_hcd vhci_hcd.0: stop threads [ 66.784629][ T5545] vhci_hcd vhci_hcd.0: release socket [ 66.784936][ T5545] vhci_hcd vhci_hcd.0: disconnect device [ 66.785106][ T5545] vhci_hcd vhci_hcd.0: stop threads [ 66.785114][ T5545] vhci_hcd vhci_hcd.0: release socket [ 66.785123][ T5545] vhci_hcd vhci_hcd.0: disconnect device [ 66.785215][ T5545] vhci_hcd vhci_hcd.0: stop threads [ 66.785223][ T5545] vhci_hcd vhci_hcd.0: release socket [ 66.785231][ T5545] vhci_hcd vhci_hcd.0: disconnect device [ 66.785311][ T5545] vhci_hcd vhci_hcd.0: stop threads [ 66.785318][ T5545] vhci_hcd vhci_hcd.0: release socket [ 66.785327][ T5545] vhci_hcd vhci_hcd.0: disconnect device [ 69.638847][ T6577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.685670][ T6599] __nla_validate_parse: 65 callbacks suppressed [ 69.685782][ T6599] netlink: 168 bytes leftover after parsing attributes in process `syz.1.182'. [ 69.763582][ T6606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.185'. [ 69.766244][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 69.766256][ T43] audit: type=1400 audit(69.669:470): avc: denied { mount } for pid=6604 comm="syz.3.185" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.809326][ T43] audit: type=1400 audit(69.709:471): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.816414][ T43] audit: type=1400 audit(69.719:472): avc: denied { create } for pid=6602 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.818559][ T43] audit: type=1400 audit(69.719:473): avc: denied { connect } for pid=6602 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.905265][ T43] audit: type=1400 audit(69.809:474): avc: denied { mount } for pid=6611 comm="syz.0.188" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 69.917895][ T43] audit: type=1400 audit(69.819:475): avc: denied { ioctl } for pid=6617 comm="syz.3.190" path="socket:[14608]" dev="sockfs" ino=14608 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.921905][ T43] audit: type=1400 audit(69.819:476): avc: denied { setopt } for pid=6617 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.923417][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 69.923429][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'. [ 69.976651][ T43] audit: type=1400 audit(69.879:477): avc: denied { write } for pid=6623 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.046465][ T6631] loop5: detected capacity change from 0 to 7 [ 70.049800][ T6631] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 70.051828][ T6631] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 70.051891][ T6631] Dev loop5: unable to read RDB block 7 [ 70.051908][ T6631] loop5: AHDI p2 [ 70.051924][ T6631] loop5: partition table partially beyond EOD, truncated [ 70.118334][ T6634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.474529][ T851] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.634927][ T851] usb 6-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 70.635835][ T851] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.635859][ T851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.635871][ T851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.635882][ T851] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 70.637700][ T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.637712][ T851] usb 6-1: Product: syz [ 70.637719][ T851] usb 6-1: Manufacturer: syz [ 70.637726][ T851] usb 6-1: SerialNumber: syz [ 70.791579][ T43] audit: type=1400 audit(70.689:478): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 70.825663][ T6643] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 70.828039][ T6014] IPVS: starting estimator thread 0... [ 70.845363][ T6644] capability: warning: `syz.0.197' uses 32-bit capabilities (legacy support in use) [ 70.914377][ T6645] IPVS: using max 44 ests per chain, 105600 per kthread [ 70.965680][ T6640] ushc 6-1:1.0: probe with driver ushc failed with error -110 [ 70.974340][ T42] usb 6-1: USB disconnect, device number 4 [ 71.108087][ T43] audit: type=1400 audit(71.009:479): avc: denied { setopt } for pid=6651 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.220158][ T6655] ªªªªª): renamed from hsr0 (while UP) [ 71.537929][ T6665] netlink: 52 bytes leftover after parsing attributes in process `syz.1.203'. [ 71.538031][ T6665] netlink: 52 bytes leftover after parsing attributes in process `syz.1.203'. [ 71.540377][ T6665] netlink: 52 bytes leftover after parsing attributes in process `syz.1.203'. [ 71.551152][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.551252][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.576164][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.203'. [ 71.606531][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.203'. [ 71.636278][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.203'. [ 73.040348][ T6626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.091753][ T6714] EXT4-fs (nbd0): unable to read superblock [ 73.194924][ T6723] xt_nfacct: accounting object `' does not exist [ 73.214131][ T6725] overlayfs: cannot append lower layer [ 73.260424][ T6729] Bluetooth: MGMT ver 1.23 [ 73.264047][ T6729] vcan0: tx drop: invalid da for name 0x0000000000800000 [ 73.399917][ T6740] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 73.399917][ T6740] [ 73.400057][ T6740] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 73.400206][ T6740] CIFS: Attempting to mount //127.0.0.1/share [ 73.462312][ T6740] CIFS: VFS: cifs_mount failed w/return code = -112 [ 73.525445][ T10] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 73.633077][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.634191][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.686526][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 73.686619][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.693195][ T10] usb 8-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.693236][ T10] usb 8-1: config 1 interface 0 has no altsetting 0 [ 73.700063][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.704099][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.705596][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.710765][ T10] usb 8-1: Product: syz [ 73.710775][ T10] usb 8-1: Manufacturer: syz [ 73.710783][ T10] usb 8-1: SerialNumber: syz [ 73.826813][ T5811] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.831005][ T5811] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.833891][ T5811] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.836944][ T5811] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.838593][ T6757] xt_nfacct: accounting object `' does not exist [ 74.062686][ T10] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 74.069250][ T10] usb 8-1: USB disconnect, device number 5 [ 74.848684][ T6767] loop5: detected capacity change from 0 to 7 [ 74.855884][ T6767] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 74.855932][ T6767] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 74.856226][ T6767] Dev loop5: unable to read RDB block 7 [ 74.856247][ T6767] loop5: AHDI p2 [ 74.856262][ T6767] loop5: partition table partially beyond EOD, truncated [ 75.010747][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 75.012741][ T43] audit: type=1400 audit(74.909:490): avc: denied { read } for pid=6773 comm="syz.0.227" name="usbmon4" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.012790][ T43] audit: type=1400 audit(74.909:491): avc: denied { open } for pid=6773 comm="syz.0.227" path="/dev/usbmon4" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.028956][ T6774] Invalid source name [ 75.028972][ T6774] UBIFS error (pid: 6774): cannot open "ubifs", error -22 [ 75.054629][ T43] audit: type=1400 audit(74.959:492): avc: denied { getopt } for pid=6773 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.055498][ T43] audit: type=1400 audit(74.959:493): avc: denied { create } for pid=6773 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.056384][ T43] audit: type=1400 audit(74.959:494): avc: denied { write } for pid=6773 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.149902][ T43] audit: type=1400 audit(75.049:495): avc: denied { setopt } for pid=6778 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.235075][ T43] audit: type=1400 audit(75.139:496): avc: denied { mounton } for pid=6778 comm="syz.0.229" path="/proc/207/task" dev="proc" ino=14160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 75.247057][ T43] audit: type=1400 audit(75.149:497): avc: denied { read } for pid=6778 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.523533][ T6746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.571041][ T6786] xt_nfacct: accounting object `' does not exist [ 76.625170][ T6789] bond0: entered promiscuous mode [ 76.625222][ T6789] bond_slave_0: entered promiscuous mode [ 76.625346][ T6789] bond_slave_1: entered promiscuous mode [ 76.627601][ T6789] batadv0: entered promiscuous mode [ 76.629879][ T6789] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 76.634675][ T6789] netlink: 'syz.1.231': attribute type 10 has an invalid length. [ 76.635285][ T6789] syz_tun: entered promiscuous mode [ 76.645055][ T6789] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 76.672718][ T6794] netlink: 'syz.0.235': attribute type 4 has an invalid length. [ 76.677050][ T25] cfg80211: failed to load regulatory.db [ 76.763277][ T43] audit: type=1400 audit(76.659:498): avc: denied { write } for pid=6793 comm="syz.0.235" name="cgroup.subtree_control" dev="cgroup2" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.775701][ T6794] ======================================================= [ 76.775701][ T6794] WARNING: The mand mount option has been deprecated and [ 76.775701][ T6794] and is ignored by this kernel. Remove the mand [ 76.775701][ T6794] option from the mount to silence this warning. [ 76.775701][ T6794] ======================================================= [ 76.797778][ T43] audit: type=1400 audit(76.699:499): avc: denied { accept } for pid=6801 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.909429][ T6817] xt_nfacct: accounting object `' does not exist [ 77.204340][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 77.386538][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 77.388059][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.389127][ T30] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 77.389142][ T30] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 77.390949][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.390966][ T30] usb 6-1: Product: syz [ 77.390973][ T30] usb 6-1: Manufacturer: syz [ 77.390980][ T30] usb 6-1: SerialNumber: syz [ 77.642359][ T6822] macvlan2: entered promiscuous mode [ 77.734213][ T30] cdc_ncm 6-1:1.0: bind() failure [ 77.738991][ T30] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 77.739670][ T30] cdc_ncm 6-1:1.1: bind() failure [ 77.745445][ T30] usb 6-1: USB disconnect, device number 5 [ 78.274777][ T6829] ubi31: attaching mtd0 [ 78.277660][ T6829] ubi31: scanning is finished [ 78.279704][ T6829] ubi31: empty MTD device detected [ 78.385735][ T63] usb 5-1: USB disconnect, device number 7 [ 78.449710][ T6832] tun0: tun_chr_ioctl cmd 1074025675 [ 78.449762][ T6832] tun0: persist enabled [ 78.450200][ T6832] tun0: tun_chr_ioctl cmd 1074025675 [ 78.450237][ T6832] tun0: persist disabled [ 78.521916][ T6829] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 78.521999][ T6829] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 78.522301][ T6829] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 78.522313][ T6829] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 78.522323][ T6829] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 78.522332][ T6829] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 78.522343][ T6829] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3421001216 [ 78.522354][ T6829] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 78.524679][ T6833] ubi31: background thread "ubi_bgt31d" started, PID 6833 [ 79.884333][ T6813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.043126][ T5738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.049138][ T5738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.050029][ T5738] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.050831][ T5738] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.051376][ T5738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.062998][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 80.063170][ T43] audit: type=1400 audit(79.959:509): avc: denied { write } for pid=6843 comm="syz.0.249" name="usbmon6" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.134029][ T43] audit: type=1400 audit(80.029:510): avc: denied { mount } for pid=6853 comm="syz.0.250" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.135392][ T43] audit: type=1400 audit(80.029:511): avc: denied { append } for pid=6853 comm="syz.0.250" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.156815][ T43] audit: type=1400 audit(80.049:512): avc: denied { write } for pid=6851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.159367][ T43] audit: type=1400 audit(80.059:513): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.196461][ T6863] xt_nfacct: accounting object `' does not exist [ 80.203272][ T43] audit: type=1400 audit(80.099:514): avc: denied { write } for pid=6861 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.248382][ T43] audit: type=1400 audit(80.149:515): avc: denied { write } for pid=6867 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.278262][ T43] audit: type=1400 audit(80.179:516): avc: denied { write } for pid=6869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.287708][ T25] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 80.357268][ T43] audit: type=1400 audit(80.259:517): avc: denied { write } for pid=6876 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.390547][ T43] audit: type=1400 audit(80.289:518): avc: denied { write } for pid=6878 comm="syz.1.254" name="/" dev="9p" ino=73158803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.539649][ T5813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.546716][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.547091][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.580578][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.580903][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.581030][ T6840] bridge_slave_0: entered allmulticast mode [ 80.582440][ T6840] bridge_slave_0: entered promiscuous mode [ 80.588185][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.588317][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.588435][ T6840] bridge_slave_1: entered allmulticast mode [ 80.592773][ T6840] bridge_slave_1: entered promiscuous mode [ 80.624452][ T6906] __nla_validate_parse: 30 callbacks suppressed [ 80.627115][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.629377][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.637143][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 80.644142][ T6906] option changes via remount are deprecated (pid=6902 comm=syz.1.257) [ 80.687744][ T5813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.715937][ T6840] team0: Port device team_slave_0 added [ 80.730613][ T6840] team0: Port device team_slave_1 added [ 80.798783][ T5813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.807053][ T25] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 80.807873][ T25] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 80.807895][ T25] usb 8-1: can't read configurations, error -71 [ 80.822309][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.822426][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.822447][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.825364][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.825374][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.825387][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.873882][ T6840] hsr_slave_0: entered promiscuous mode [ 80.875424][ T6840] hsr_slave_1: entered promiscuous mode [ 80.875726][ T6840] debugfs: 'hsr0' already exists in 'hsr' [ 80.875737][ T6840] Cannot create hsr debugfs directory [ 80.890545][ T5813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.901285][ T6921] process 'syz.1.262' launched '/dev/fd/4' with NULL argv: empty string added [ 81.065725][ T5813] bridge_slave_1: left allmulticast mode [ 81.065795][ T5813] bridge_slave_1: left promiscuous mode [ 81.067308][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.076464][ T5813] bridge_slave_0: left allmulticast mode [ 81.076513][ T5813] bridge_slave_0: left promiscuous mode [ 81.076703][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.217691][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.227350][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.232880][ T5813] bond0 (unregistering): Released all slaves [ 81.240197][ T5813] bond1 (unregistering): Released all slaves [ 81.265578][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 81.315967][ T6840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.323743][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.325398][ T6840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.332636][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.333573][ T6840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.341968][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.379568][ T6840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.386711][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.447074][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.454210][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.462565][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.462710][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.468026][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.468105][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.503008][ T6840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.517125][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 81.538391][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.544833][ T6946] bridge_slave_1 (unregistering): left allmulticast mode [ 81.544903][ T6946] bridge_slave_1 (unregistering): left promiscuous mode [ 81.545137][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.583283][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 81.598775][ T5813] hsr_slave_0: left promiscuous mode [ 81.603487][ T5813] hsr_slave_1: left promiscuous mode [ 81.606203][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.606270][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.609111][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.609130][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.630328][ T5813] veth1_macvtap: left promiscuous mode [ 81.630419][ T5813] veth0_macvtap: left promiscuous mode [ 81.630542][ T5813] veth1_vlan: left promiscuous mode [ 81.630585][ T5813] veth0_vlan: left promiscuous mode [ 81.750151][ T6960] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 81.841307][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 81.853084][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 82.024707][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.104984][ T5735] Bluetooth: hci4: command tx timeout [ 82.177383][ T30] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 82.182180][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.182241][ T30] usb 5-1: Product: syz [ 82.182267][ T30] usb 5-1: Manufacturer: syz [ 82.182277][ T30] usb 5-1: SerialNumber: syz [ 82.193138][ T6985] loop5: detected capacity change from 0 to 7 [ 82.194331][ T6985] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 82.194343][ T6985] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 82.194377][ T6985] Dev loop5: unable to read RDB block 7 [ 82.194389][ T6985] loop5: AHDI p2 [ 82.194403][ T6985] loop5: partition table partially beyond EOD, truncated [ 82.201079][ T30] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 82.211942][ T30] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 82.229459][ T30] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 82.299570][ T13] bond0: (slave bond_slave_0): interface is now down [ 82.299669][ T13] bond0: (slave bond_slave_1): interface is now down [ 82.299717][ T13] bond0: (slave syz_tun): interface is now down [ 82.315479][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.317806][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4 [ 82.405953][ T12] bond0: (slave bond_slave_0): interface is now down [ 82.406051][ T12] bond0: (slave ** replaying previous printk message ** [ 82.406051][ T12] bond0: (slave bond_slave_1): interface is now down [ 82.406086][ T12] bond0: (slave syz_tun): interface is now down [ 82.406968][ C1] ================================================================== [ 82.406979][ C1] BUG: KASAN: slab-out-of-bounds in find_endpoint+0x2a3/0x2c0 [ 82.407023][ C1] Read of size 1 at addr ffff88803a0f0112 by task dhcpcd-run-hook/7001 [ 82.407038][ C1] [ 82.407052][ C1] CPU: 1 UID: 0 PID: 7001 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 82.407073][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.407084][ C1] Call Trace: [ 82.407091][ C1] [ 82.407098][ C1] dump_stack_lvl+0x100/0x190 [ 82.407122][ C1] print_report+0x13d/0x4b0 [ 82.407149][ C1] ? __virt_addr_valid+0x239/0x430 [ 82.407169][ C1] ? find_endpoint+0x2a3/0x2c0 [ 82.407188][ C1] kasan_report+0xdf/0x1c0 [ 82.407218][ C1] ? find_endpoint+0x2a3/0x2c0 [ 82.407242][ C1] find_endpoint+0x2a3/0x2c0 [ 82.407264][ C1] dummy_timer+0x500/0x3700 [ 82.407295][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.407329][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 82.407350][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 82.407375][ C1] ? mark_held_locks+0x40/0x70 [ 82.407393][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.407422][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 82.407445][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 82.407474][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 82.407500][ C1] handle_softirqs+0x1e6/0x9d0 [ 82.407520][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 82.407538][ C1] ? _raw_spin_unlock+0x28/0x50 [ 82.407564][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 82.407591][ C1] __irq_exit_rcu+0x194/0x210 [ 82.407609][ C1] irq_exit_rcu+0x9/0x30 [ 82.407626][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 82.407645][ C1] [ 82.407651][ C1] [ 82.407658][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 82.407679][ C1] RIP: 0010:lock_release+0x19e/0x310 [ 82.407699][ C1] Code: ff 65 0f c1 05 1b e1 a4 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 1d 9a a4 12 0f 85 4d 01 00 00 48 83 c4 [ 82.407716][ C1] RSP: 0018:ffffc90003d3f210 EFLAGS: 00000206 [ 82.407749][ C1] RAX: 0000000000000046 RBX: ffffffff8edec060 RCX: ffffc90003d3f21c [ 82.407762][ C1] RDX: 0000000000000000 RSI: ffffffff8e3c46cc RDI: ffffffff8c620c80 [ 82.407775][ C1] RBP: ffffffff81b9946e R08: 0000000000000001 R09: 0000000000000007 [ 82.407787][ C1] R10: 0000000000000200 R11: 000000000000b9b4 R12: ffff88802a47cb00 [ 82.407799][ C1] R13: ffffc90003d3f318 R14: 0000000000000202 R15: 0000000000000002 [ 82.407813][ C1] ? unwind_next_frame+0x3be/0x2090 [ 82.407844][ C1] unwind_next_frame+0x3c3/0x2090 [ 82.407868][ C1] ? __unwind_start+0x2f7/0x7e0 [ 82.407894][ C1] __unwind_start+0x3cd/0x7e0 [ 82.407918][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 82.407942][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 82.407985][ C1] arch_stack_walk+0x73/0xf0 [ 82.408010][ C1] ? arch_stack_walk+0x73/0xf0 [ 82.408033][ C1] stack_trace_save+0x8e/0xc0 [ 82.408064][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 82.408093][ C1] ? stack_trace_save+0x8e/0xc0 [ 82.408120][ C1] kasan_save_stack+0x30/0x50 [ 82.408153][ C1] kasan_save_track+0x14/0x30 [ 82.408171][ C1] __kasan_kmalloc+0xaa/0xb0 [ 82.408190][ C1] __kmalloc_noprof+0x32f/0x840 [ 82.408208][ C1] ? tomoyo_encode2+0xfb/0x3c0 [ 82.408228][ C1] tomoyo_encode2+0xfb/0x3c0 [ 82.408246][ C1] tomoyo_encode+0x29/0x50 [ 82.408262][ C1] tomoyo_realpath_from_path+0x18c/0x690 [ 82.408283][ C1] tomoyo_check_open_permission+0x2af/0x3c0 [ 82.408311][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 82.408337][ C1] ? trace_sched_exit_tp+0x120/0x160 [ 82.408361][ C1] ? __schedule+0x126b/0x6920 [ 82.408379][ C1] ? hook_file_open+0x248/0x8e0 [ 82.408409][ C1] tomoyo_file_open+0x6b/0x90 [ 82.408431][ C1] security_file_open+0xb5/0x1e0 [ 82.408450][ C1] do_dentry_open+0x588/0x14d0 [ 82.408470][ C1] vfs_open+0x82/0x3f0 [ 82.408491][ C1] path_openat+0x19fa/0x2440 [ 82.408514][ C1] ? __pfx_path_openat+0x10/0x10 [ 82.408536][ C1] do_file_open+0x20e/0x430 [ 82.408556][ C1] ? __pfx_do_file_open+0x10/0x10 [ 82.408582][ C1] ? _raw_spin_unlock+0x28/0x50 [ 82.408607][ C1] ? alloc_fd+0x471/0x7a0 [ 82.408630][ C1] do_sys_openat2+0x10f/0x1e0 [ 82.408651][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.408676][ C1] __x64_sys_openat+0x12d/0x210 [ 82.408698][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.408719][ C1] ? ksys_read+0x1ac/0x250 [ 82.408746][ C1] do_syscall_64+0x123/0x790 [ 82.408767][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.408784][ C1] RIP: 0033:0x7fa47cd26407 [ 82.408822][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 82.408838][ C1] RSP: 002b:00007ffe20bae920 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 82.408855][ C1] RAX: ffffffffffffffda RBX: 00007fa47cbd6c80 RCX: 00007fa47cd26407 [ 82.408867][ C1] RDX: 0000000000000241 RSI: 000055cf978962b8 RDI: ffffffffffffff9c [ 82.408879][ C1] RBP: 000055cf9788ef80 R08: 0000000000000000 R09: 0000000000000000 [ 82.408890][ C1] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055cf97895e90 [ 82.408903][ C1] R13: 000055cf978962b8 R14: 0000000000000001 R15: 0000000000000000 [ 82.408920][ C1] [ 82.408927][ C1] [ 82.408931][ C1] Allocated by task 6840: [ 82.408940][ C1] kasan_save_stack+0x30/0x50 [ 82.408957][ C1] kasan_save_track+0x14/0x30 [ 82.408973][ C1] __kasan_kmalloc+0xaa/0xb0 [ 82.408989][ C1] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 82.409013][ C1] device_add+0xd3f/0x1970 [ 82.409029][ C1] netdev_register_kobject+0x1df/0x410 [ 82.409058][ C1] register_netdevice+0x15b6/0x25a0 [ 82.409073][ C1] __ip_tunnel_create+0x52b/0x670 [ 82.409089][ C1] ip_tunnel_init_net+0x230/0x780 [ 82.409106][ C1] ops_init+0x1e2/0x5f0 [ 82.409120][ C1] setup_net+0x118/0x3a0 [ 82.409135][ C1] copy_net_ns+0x345/0x7a0 [ 82.409151][ C1] create_new_namespaces+0x3ea/0xac0 [ 82.409168][ C1] unshare_nsproxy_namespaces+0xf2/0x220 [ 82.409187][ C1] ksys_unshare+0x4a2/0xa70 [ 82.409205][ C1] __x64_sys_unshare+0x31/0x40 [ 82.409223][ C1] do_syscall_64+0x123/0x790 [ 82.409241][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.409258][ C1] [ 82.409262][ C1] The buggy address belongs to the object at ffff88803a0f0000 [ 82.409262][ C1] which belongs to the cache kmalloc-512 of size 512 [ 82.409276][ C1] The buggy address is located 2 bytes to the right of [ 82.409276][ C1] allocated 272-byte region [ffff88803a0f0000, ffff88803a0f0110) [ 82.409294][ C1] [ 82.409298][ C1] The buggy address belongs to the physical page: [ 82.409305][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a0f0 [ 82.409321][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 82.409335][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 82.409350][ C1] page_type: f5(slab) [ 82.409365][ C1] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 82.409381][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 82.409398][ C1] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 82.409413][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 82.409429][ C1] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 82.409444][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 82.409453][ C1] page dumped because: kasan: bad access detected [ 82.409461][ C1] page_owner tracks the page as allocated [ 82.409467][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6391, tgid 6389 (syz.3.131), ts 63393755138 [ 82.409495][ C1] post_alloc_hook+0xfd/0x120 [ 82.409517][ C1] get_page_from_freelist+0x110d/0x35b0 [ 82.409540][ C1] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 82.409564][ C1] new_slab+0xa9/0x6e0 [ 82.409585][ C1] refill_objects+0xe3/0x410 [ 82.409607][ C1] __pcs_replace_empty_main+0x35e/0x650 [ 82.409629][ C1] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 82.409652][ C1] snd_mixer_oss_build_test+0x7a/0x380 [ 82.409678][ C1] snd_mixer_oss_build_test_all+0x230/0x6e0 [ 82.409704][ C1] snd_mixer_oss_build_input+0x139/0xd50 [ 82.409720][ C1] snd_mixer_oss_notify_handler+0x48d/0x990 [ 82.409738][ C1] snd_card_register+0x2af/0x760 [ 82.409757][ C1] f_midi2_bind+0x1198/0x2770 [ 82.409773][ C1] usb_add_function+0x219/0x890 [ 82.409793][ C1] configfs_composite_bind+0xd83/0x1960 [ 82.409812][ C1] gadget_bind_driver+0x28c/0xbf0 [ 82.409835][ C1] page last free pid 5142 tgid 5142 ts 56252246839 stack trace: [ 82.409846][ C1] __free_frozen_pages+0x79f/0x10f0 [ 82.409866][ C1] qlist_free_all+0x47/0xf0 [ 82.409881][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 82.409895][ C1] __kasan_slab_alloc+0x69/0x90 [ 82.409912][ C1] kmem_cache_alloc_noprof+0x269/0x6a0 [ 82.409928][ C1] do_getname+0x35/0x390 [ 82.409949][ C1] do_readlinkat+0xa9/0x370 [ 82.409966][ C1] __x64_sys_readlink+0x78/0xc0 [ 82.409987][ C1] do_syscall_64+0x123/0x790 [ 82.410007][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.410023][ C1] [ 82.410026][ C1] Memory state around the buggy address: [ 82.410032][ C1] ffff88803a0f0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.410044][ C1] ffff88803a0f0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.410064][ C1] >ffff88803a0f0100: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.410072][ C1] ^ [ 82.410082][ C1] ffff88803a0f0180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.410093][ C1] ffff88803a0f0200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.410102][ C1] ================================================================== [ 82.410111][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.784933][ C1] CPU: 1 UID: 0 PID: 7001 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 82.788219][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.791385][ C1] Call Trace: [ 82.792367][ C1] [ 82.793216][ C1] dump_stack_lvl+0x100/0x190 [ 82.794673][ C1] vpanic+0x553/0x970 [ 82.795901][ C1] ? __pfx_vpanic+0x10/0x10 [ 82.797339][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 82.798964][ C1] ? find_endpoint+0x2a3/0x2c0 [ 82.800538][ C1] panic+0xd1/0xe0 [ 82.802118][ C1] ? __pfx_panic+0x10/0x10 [ 82.803894][ C1] ? end_report.part.0+0x23/0x90 [ 82.805562][ C1] ? rcu_is_watching+0x13/0xc0 [ 82.807228][ C1] ? end_report.part.0+0x23/0x90 [ 82.808919][ C1] check_panic_on_warn.cold+0x19/0x34 [ 82.810666][ C1] end_report.part.0+0x3a/0x90 [ 82.812406][ C1] kasan_report.cold+0xe/0x18 [ 82.813919][ C1] ? find_endpoint+0x2a3/0x2c0 [ 82.815441][ C1] find_endpoint+0x2a3/0x2c0 [ 82.816919][ C1] dummy_timer+0x500/0x3700 [ 82.818372][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.820218][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 82.822129][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 82.823720][ C1] ? mark_held_locks+0x40/0x70 [ 82.825312][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.827380][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 82.829155][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 82.830771][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 82.832358][ C1] handle_softirqs+0x1e6/0x9d0 [ 82.834562][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 82.836806][ C1] ? _raw_spin_unlock+0x28/0x50 [ 82.838595][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 82.840451][ C1] __irq_exit_rcu+0x194/0x210 [ 82.842075][ C1] irq_exit_rcu+0x9/0x30 [ 82.843502][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 82.845303][ C1] [ 82.846266][ C1] [ 82.847206][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 82.849114][ C1] RIP: 0010:lock_release+0x19e/0x310 [ 82.850749][ C1] Code: ff 65 0f c1 05 1b e1 a4 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 1d 9a a4 12 0f 85 4d 01 00 00 48 83 c4 [ 82.856938][ C1] RSP: 0018:ffffc90003d3f210 EFLAGS: 00000206 [ 82.858925][ C1] RAX: 0000000000000046 RBX: ffffffff8edec060 RCX: ffffc90003d3f21c [ 82.861729][ C1] RDX: 0000000000000000 RSI: ffffffff8e3c46cc RDI: ffffffff8c620c80 [ 82.864415][ C1] RBP: ffffffff81b9946e R08: 0000000000000001 R09: 0000000000000007 [ 82.867157][ C1] R10: 0000000000000200 R11: 000000000000b9b4 R12: ffff88802a47cb00 [ 82.869678][ C1] R13: ffffc90003d3f318 R14: 0000000000000202 R15: 0000000000000002 [ 82.872144][ C1] ? unwind_next_frame+0x3be/0x2090 [ 82.873820][ C1] unwind_next_frame+0x3c3/0x2090 [ 82.875502][ C1] ? __unwind_start+0x2f7/0x7e0 [ 82.877153][ C1] __unwind_start+0x3cd/0x7e0 [ 82.878754][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 82.880366][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 82.882369][ C1] arch_stack_walk+0x73/0xf0 [ 82.883883][ C1] ? arch_stack_walk+0x73/0xf0 [ 82.885475][ C1] stack_trace_save+0x8e/0xc0 [ 82.887043][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 82.888892][ C1] ? stack_trace_save+0x8e/0xc0 [ 82.890571][ C1] kasan_save_stack+0x30/0x50 [ 82.892264][ C1] kasan_save_track+0x14/0x30 [ 82.893906][ C1] __kasan_kmalloc+0xaa/0xb0 [ 82.895458][ C1] __kmalloc_noprof+0x32f/0x840 [ 82.897192][ C1] ? tomoyo_encode2+0xfb/0x3c0 [ 82.898851][ C1] tomoyo_encode2+0xfb/0x3c0 [ 82.900514][ C1] tomoyo_encode+0x29/0x50 [ 82.902084][ C1] tomoyo_realpath_from_path+0x18c/0x690 [ 82.904035][ C1] tomoyo_check_open_permission+0x2af/0x3c0 [ 82.905974][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 82.908066][ C1] ? trace_sched_exit_tp+0x120/0x160 [ 82.909779][ C1] ? __schedule+0x126b/0x6920 [ 82.911268][ C1] ? hook_file_open+0x248/0x8e0 [ 82.912845][ C1] tomoyo_file_open+0x6b/0x90 [ 82.914328][ C1] security_file_open+0xb5/0x1e0 [ 82.915877][ C1] do_dentry_open+0x588/0x14d0 [ 82.917400][ C1] vfs_open+0x82/0x3f0 [ 82.918814][ C1] path_openat+0x19fa/0x2440 [ 82.920431][ C1] ? __pfx_path_openat+0x10/0x10 [ 82.922174][ C1] do_file_open+0x20e/0x430 [ 82.923841][ C1] ? __pfx_do_file_open+0x10/0x10 [ 82.925558][ C1] ? _raw_spin_unlock+0x28/0x50 [ 82.927116][ C1] ? alloc_fd+0x471/0x7a0 [ 82.928558][ C1] do_sys_openat2+0x10f/0x1e0 [ 82.930085][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.931711][ C1] __x64_sys_openat+0x12d/0x210 [ 82.933278][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.935170][ C1] ? ksys_read+0x1ac/0x250 [ 82.936674][ C1] do_syscall_64+0x123/0x790 [ 82.938223][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.940295][ C1] RIP: 0033:0x7fa47cd26407 [ 82.941928][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 82.948527][ C1] RSP: 002b:00007ffe20bae920 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 82.951323][ C1] RAX: ffffffffffffffda RBX: 00007fa47cbd6c80 RCX: 00007fa47cd26407 [ 82.953792][ C1] RDX: 0000000000000241 RSI: 000055cf978962b8 RDI: ffffffffffffff9c [ 82.956462][ C1] RBP: 000055cf9788ef80 R08: 0000000000000000 R09: 0000000000000000 [ 82.959633][ C1] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055cf97895e90 [ 82.963178][ C1] R13: 000055cf978962b8 R14: 0000000000000001 R15: 0000000000000000 [ 82.966012][ C1] [ 82.967699][ C1] Kernel Offset: disabled [ 82.969114][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:35:45 Registers: info registers vcpu 0 CPU#0 RAX=8000000000000001 RBX=dffffc0000000000 RCX=0000000000000001 RDX=ffff88801eee8000 RSI=ffffffff81ea1433 RDI=ffffc90000137da8 RBP=ffffc90000137da8 RSP=ffffc90000137958 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=28203a30646e6f62 R12=0000000000000000 R13=ffffc90000137da8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff820be770 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa47cef2feb CR3=0000000035f94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000000 Opmask01=000000000000001c Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa47ce70b20 00007fa47ce70b20 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000075676f0086 8589888482818387 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cf97895eb0 000000000000006c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa47cd37d48 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cf9788e560 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666666666666666 6666666666666666 6666666666666666 6666666666666666 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 828183873a3d007e 7d7c605d5c5b3f3e 3d3c3b3a2d2a2928 2726242221200a09 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 828183873a3d0018 1b1a063b3a3d3f3e 3d3c3b3a2d2a2928 2726242221200a09 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20343031203d8120 3f812481205b8120 7c7c2031263e3220 6c6c756e2f766564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cf97894918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afc6c5 RDI=ffffffff9bc60ca0 RBP=ffffffff9bc60c60 RSP=ffffc900006b03c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000064616552 R12=0000000000000000 R13=0000000000000030 R14=0000000000000005 R15=ffffc900006b06e0 RIP=ffffffff85afc6ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa47cbd6c80 ffffffff 00c00000 GS =0000 ffff8880d5c64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa47cf25aa2 CR3=0000000035f94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000007ffec400 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000080 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f25e35601 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f25e355f9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f25e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f25e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f25e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f25e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 00000000000000fc 00007ffd2000346d 697376656474656e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2f7665642f206e 65706f2074276e61 63203a6e75740074 656e2f7665642f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b0a5340410a054b 40554a0551024b44 46051f4b50510051 404b0a5340410a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f25ff25f8 00007f8f25ff25c8 00007f8f25ff2600 00007f8f25ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888033ffb268 RBX=0000000000000002 RCX=ffffffff81e77798 RDX=ffff888034bb82a8 RSI=0000000000000000 RDI=ffff888033ffb280 RBP=ffffc9000386f1c8 RSP=ffffc9000386f0a0 R8 =0000000000000001 R9 =fffff5200070de02 R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=ffff88805db09000 R14=0000000000000000 R15=ffff88805db0a000 RIP=ffffffff8533d656 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0b32a03a10 CR3=00000000517b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9e0e4c86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9e0e4c86 00007ffe9e0e4c8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd72ea35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd72ea35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd72ea357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd72ea35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=8000000000000002 RBX=0000000000000020 RCX=0000000000000001 RDX=0000000000000002 RSI=ffffffff821c6b39 RDI=ffff88801cb59b60 RBP=ffff88801cb59b68 RSP=ffffc900056b7990 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffff88801cb59b60 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff821c6580 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb0e4f556c8 CR3=000000005389c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000006202c100 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562a365a3b90 0000562a365a3b90 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562a36541190 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562a36553ea0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464324e5230e424 6464324e5230d5e4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464324e52313754 6464324e5230fb24 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6568007365747962 20756c3825202020 20202020203a657a 697320656c696600 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 404d005640515c47 0550491d00050505 05050505051f405f 4c560540494c4300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f3074726f702d30 2e323a313a302d62 73752d332e646368 5f796d6d75640031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000536540430 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000