last executing test programs: 2.959821744s ago: executing program 2 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007480)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000075c0), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000007700)={0x0, 0x0, &(0x7f00000076c0)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "63ab1d0b7fa9f39f2ae15a57cd601853"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c0}, 0x4040) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) 2.958176291s ago: executing program 2 (id=960): ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000000)={0x0, 0x0, 0x0, @lost_msgs}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) timer_create(0x4, &(0x7f0000000100)={0x0, 0x2e, 0x4, @tid=r1}, &(0x7f0000000140)) (async) timer_create(0x4, &(0x7f0000000100)={0x0, 0x2e, 0x4, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000001c0)) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x173001) (async) r3 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x173001) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x8}) (async) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x8}) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {r4, r5+60000000}}, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000340)={r0, 0x0, r3, 0x80, 0x80000}) syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x400) (async) r6 = syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x400) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f00000003c0)=0x4) (async) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f00000003c0)=0x4) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000440)) (async) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000440)) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000004c0)={0x2000000a}) getrandom(&(0x7f0000000500)=""/5, 0x5, 0x2) ioctl$IOMMU_VFIO_IOAS$GET(r7, 0x3b88, &(0x7f0000000540)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r7, 0x3b87, &(0x7f0000000580)={0x18, 0x1, 0x1, 0x0, r9, 0x9}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f0000000600)={0x2, 0x7, 0x5d6, 0x8}) (async) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f0000000600)={0x2, 0x7, 0x5d6, 0x8}) socket$inet(0x2, 0x5, 0x80000000) (async) r11 = socket$inet(0x2, 0x5, 0x80000000) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$NBD_DO_IT(r3, 0xab03) flistxattr(r11, &(0x7f0000000640)=""/102, 0x66) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f00000006c0)={{0xa, 0x4e20, 0x6, @loopback, 0x2}, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x81}, 0x1, {[0x7, 0x1, 0x1ff, 0x6, 0x8, 0x80000001, 0x1, 0xbf]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f00000006c0)={{0xa, 0x4e20, 0x6, @loopback, 0x2}, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x81}, 0x1, {[0x7, 0x1, 0x1ff, 0x6, 0x8, 0x80000001, 0x1, 0xbf]}}, 0x5c) mq_timedsend(r7, &(0x7f0000000740)="a7043fe900a69ab98f1bb05ca41d9f91b5157a1ecd1fafe2c578a932cd866c8a1c732d816da75168365ed139f61ab535c3578e307b2eda016a93dbd0fb4f0f283d75421a1044894182e425548341d6a3aaa7252b90376535cc355e8fd95840937192d6bd6b08ad01ee57f3edda45dc328a971f42653a214fa61a10e0f6516f54a98744795fad21f95168ff4dfb9c264a7e4e95141a8533a9776a32a69b737e7ee40d213d11052e9def45c5a07c4c72b8f35b91", 0xb3, 0x2, &(0x7f0000000840)) 2.880328928s ago: executing program 2 (id=961): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) 2.879144632s ago: executing program 2 (id=962): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000005c0)=0x18, 0x4) sendmsg$netlink(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="280000005f00010600e400004013000018003b"], 0x28}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x472ae768}]}, 0x2c}}, 0x0) 2.829834481s ago: executing program 2 (id=963): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000012c0)}, 0x7}], 0x1, 0x40000040, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x1}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="05002df40132b2178fba9800000008000300", @ANYRES32=r5, @ANYBLOB="14002380"], 0x30}}, 0x40000) 2.827769467s ago: executing program 2 (id=964): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x310) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r1, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) mkdir(&(0x7f0000000240)='./file0\x00', 0xa) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/prev\x00') writev(r5, &(0x7f0000002840)=[{&(0x7f00000026c0)="63c756dba3", 0x5}], 0x1) umount2(&(0x7f0000000040)='./file0\x00', 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000700)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000001a40)={0x9c, "895cd46771f00301c1ca639506f24c672ecfd2bd1050f9c5774eb3e02ce08f61bb32758aa48d8b91deae8e868458c5a16302ef180c82320b8e92c2821ee0eb19"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000001c0)={0x5, 0x4a, 0x0, 0x2, 0x2, 0x7}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, {0x5, 0x7, 0x3}}, 0xa) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r8 = accept$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000440)=0x10) fsetxattr$security_ima(r8, &(0x7f0000000480), &(0x7f0000000500)=@ng={0x4, 0x3, "533628ff4c1989dd8837d1"}, 0xd, 0x1) 1.737100377s ago: executing program 0 (id=970): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) io_uring_setup(0xc90, &(0x7f0000000080)) r1 = io_uring_setup(0x4166, &(0x7f00000002c0)={0x0, 0x4, 0x1, 0x3, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r1, 0x0, 0x0, 0x1f, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r3, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) 1.680014991s ago: executing program 0 (id=973): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x4, 0x6, 0x7fff}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x1000007f, 0x6, 0x4d, 0xfffffff6, 0x5f, 0x9, 0x1, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0x81, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7ffd, 0x4c74, 0x80010000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10001, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x2, 0x8000, 0x9, 0x400, 0xffffffff, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x5, 0x2, 0x9, 0x4, 0x9, 0x2, 0x9, 0x6, 0x7, 0x8000, 0x4, 0x8000, 0xffff, 0x2, 0x7d, 0x9, 0x3, 0x3, 0x4, 0x1, 0x7, 0x3, 0x9, 0x48c9368e, 0x42, 0xb], [0x7, 0x4, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x27fff, 0x0, 0x5, 0xb, 0x8, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x5, 0x4086, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x80000, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x20000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x936, 0xa, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x800, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xb, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x2, 0x1, 0x10000, 0x5, 0x9, 0x30b1d693, 0xa1f, 0xe, 0x7, 0x1, 0x6c1a, 0x0, 0x4, 0x4, 0xb1c, 0x1, 0x600, 0xffff3441, 0x5]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0xc41, r2, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (fail_nth: 2) 1.510118965s ago: executing program 0 (id=977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x402203) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x10, 0x39, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000140)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000008, 0x20010, r4, 0x3000) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000022001000231ad1916634a7230210140b8400000218000000"], 0x1c}}, 0x88) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x2100, 0x0) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c040) 1.507190917s ago: executing program 0 (id=979): r0 = socket(0x0, 0x2, 0xfc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0x4, 0xfff3}, {0xffe0, 0xf}}, [{0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1}]}, 0x3c}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000e1ff004d564b"]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r7, 0x0, 0x0, 0x80, &(0x7f0000000000)={0x2, 0x4e28, @empty}, 0x10) recvmsg$can_raw(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x12100) r8 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r9, &(0x7f0000000000)=""/50, 0x32) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000f7b309f3e67b522b72862c661d5f000ef9ffffffff609268bc258e6794f0ffffffdbdf"], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e22, @dev}, 0x10) r10 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r10, 0x4122, 0x0) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{&(0x7f0000000440)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010101}}}], 0x20}}], 0x2, 0x401eb94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2], 0x8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x28, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) 1.407951696s ago: executing program 0 (id=981): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2, 0xa}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_vhci(&(0x7f0000003040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_link_policy={{0x50}, {0x0, 0xc8, 0xd}}}}, 0xb) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0x9c}, 0x80}}}, 0x7) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/oops_count', 0x400000, 0x2) getpeername$l2tp(r3, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000100), 0x4) 1.349741821s ago: executing program 3 (id=983): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfffa600000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x94402, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000000c0)) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x60, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}, 0xfffffffd}, [@replay_val={0x10, 0xa, {0x70bd29, 0x70bd2c, 0x7}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@getnetconf={0x14, 0x52, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4020805}, 0x4004080) r3 = socket(0x2, 0x2, 0x9) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) close(r3) 1.298999882s ago: executing program 3 (id=984): r0 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_clone(0x2001811, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_NMI(r4, 0xae9a) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000058"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$setregset(0x4205, r1, 0x204, 0x0) (async) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xffffffffffff00f1, 0xfffffffffffffff0}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000000000000e1ffff5300000008000300", @ANYRES32=r9], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, r7, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x1}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x2}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3cc1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000814) 1.180256215s ago: executing program 3 (id=985): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x4, 0x6, 0x7fff}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x1000007f, 0x6, 0x4d, 0xfffffff6, 0x5f, 0x9, 0x1, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0x81, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7ffd, 0x4c74, 0x80010000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10001, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x2, 0x8000, 0x9, 0x400, 0xffffffff, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x5, 0x2, 0x9, 0x4, 0x9, 0x2, 0x9, 0x6, 0x7, 0x8000, 0x4, 0x8000, 0xffff, 0x2, 0x7d, 0x9, 0x3, 0x3, 0x4, 0x1, 0x7, 0x3, 0x9, 0x48c9368e, 0x42, 0xb], [0x7, 0x4, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x27fff, 0x0, 0x5, 0xb, 0x8, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x5, 0x4086, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x80000, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x20000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x936, 0xa, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x800, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xb, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x2, 0x1, 0x10000, 0x5, 0x9, 0x30b1d693, 0xa1f, 0xe, 0x7, 0x1, 0x6c1a, 0x0, 0x4, 0x4, 0xb1c, 0x1, 0x600, 0xffff3441, 0x5]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0xc41, r2, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (fail_nth: 3) 1.050059154s ago: executing program 3 (id=986): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x401}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9}]}}]}, 0x48}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x538, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x468, 0xffffffff, 0xffffffff, 0x468, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'wlan0\x00', {0xab43}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x598) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41) r6 = dup2(r5, r5) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000001c0)={0x14000000}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) socket$netlink(0x10, 0x3, 0x1) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000031c0)="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", 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(r6, &(0x7f00000008c0)="07957807d854ddb67e19943fd956fe969f0f3bed0b8a965f2a9799fb0f8e9e1dc2050985965ab5a960", 0x29, 0x200048c0, &(0x7f0000000900)={0xa, 0x0, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100, 0x2}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) read$FUSE(r6, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000041c0)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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"], 0x1438}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="73a452673785037c724489d99e8499973aa9a55d46c2726514911e8cfbb63c824bb9c3478ead8ace7dd0a61e078be78fc79fc2c6e4ca314793073415ea8ebc6d27fadf27213287717014fe6005ca53fd55cc4384b7aa6c456132750e34fb64fe24e2"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180), 0x4) r12 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000040), 0x10) 509.844011ms ago: executing program 0 (id=988): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ceph\x00', 0x0, 0x0) io_setup(0x7fd, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="0d32818e", 0x4, 0x2}]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e625, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x12d042) r5 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/time\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f00000004c0)={0x8, 'vlan0\x00', {'veth1_to_bridge\x00'}, 0x3}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000002c0), 0x0) r8 = accept4(r6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) getsockname$llc(r1, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000280)=0x10) setsockopt$sock_attach_bpf(r9, 0x1, 0x2c, &(0x7f0000001140), 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x1b, &(0x7f0000000040), 0x4) recvmsg(r8, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000180)}, 0x2) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) 509.070823ms ago: executing program 1 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x10, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) splice(r0, 0x0, r2, 0x0, 0x1fffffffffff, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x109) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x450, &(0x7f00000000c0)={[{@cpuset_v2_mode}]}) 419.215826ms ago: executing program 1 (id=990): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044005}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80001010}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0x44}}, 0x1) select(0x40, &(0x7f0000000300)={0x6, 0xba23, 0x3, 0x814, 0x2, 0x7fffffff, 0xd496, 0x4}, &(0x7f0000000340)={0x0, 0x9, 0x1, 0x8000000000000001, 0x7, 0xfffffffffffffff8, 0x7ff, 0x7}, &(0x7f0000000380)={0xfffffffffffffff9, 0xfffffffffffffffb, 0x7, 0x1, 0x5, 0xab4a, 0x4, 0x7}, &(0x7f00000003c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x39}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r2, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xb, 0x11}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40051}, 0x240080c1) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x8c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xabf8, 0x24}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x4, 0x622, 0x8, 0xb, 0x2, 0x5, 0x0]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x613}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x503}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x10}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40140}, 0x40000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x4c040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x20000090) r7 = signalfd(r5, &(0x7f0000000b80)={[0x3fb1]}, 0x8) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x94, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4044000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r5) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x100, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @empty, 0x5f57}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10, @local, 0x1a31}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfc04}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r5) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, r9, 0x1, 0x5, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xe4, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3cb74006}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r5) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001300)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000001540)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0x100, r12, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 418.917729ms ago: executing program 1 (id=991): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_clone(0x8000200, 0x0, 0x31, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) wait4(r1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) (async, rerun: 32) rt_sigqueueinfo(r1, 0x6, &(0x7f0000000000)={0x14, 0x8001, 0x7}) (rerun: 32) 359.581505ms ago: executing program 1 (id=992): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x7fd, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x7, 0x0, r0, &(0x7f0000000080)="0d32818e", 0x4, 0x2}]) 179.836344ms ago: executing program 3 (id=993): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r0 = socket$pptp(0x18, 0x1, 0x2) vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000000080)="c2d91e2f1e541a17c4ee7daffde0a434bec349cc2922ef2742dd5ef148b78df79b34c105eec9df26da7ff19dd64a57edee4cef5f4757fb8de107e0bd010163599c8fe0e9af28f50cb55415a1b5c66baa9b33a98f2434860e382f26f8eb4aad7697760a299f32d19a79964f7ff78dd796661a7e5bdb3cffbe726ad44c9692e276eb0f41b9f3d4e8985b128f765a322aa060cee622ef645d3127aa4042e1bb889982", 0xa1}, {&(0x7f0000000140)="c67c7c067056caff6fef67cb31b0b78bc4c4ca92efe9d98bd9f09214dbfc473af6d65b65e27ad65806836dd43a683bb8539e0d4b33be61cac43c0c556a27baec07ab862fc53dcc3d7fb834628071f52edb34538040c5fd522c15a898fcd043c480e05985e3ef06af9ab4e020a0f89aea91b7bcd99d58beb511b2a94ffb0d0a7b57a44066b81a6cf50f680af8328ff89561cd463812edb77973c68735753ac86667323ebe8023bcecc1108b7931fdc30433d52e8495fe3a25ec84ccd93631ab305a82ab91207703f8ad6e", 0xca}, {&(0x7f0000000240)="e4834d30b5b79ed2362abce571cd5af59fa584762536a9c367cabc37fdc64ba8ebbbff275147e0b98c38c4c1bf136ad5dbfbdd038674c528fabab0b87e4f003c7c1cf66cd7ae566f799757d3ec07da938c25a33ff8ef643eb0942efabcd16e6ef27d972a71480902ad58d1cacc62265118babf90df1d3c8b2081890e6645c16202b7d6cd7faff55900582e749ac99ecfd0efa718fa3fd5ee0e80845a07f4c21490a3bf63ea2416238ff413e113f9bef929a54ce67a9b76ec02c13f35ba239fc83b613361487ac430aa3fa2583740a555f9", 0xd1}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="416c2084d970bb6e75150e093c87b6c290c34c6058c5924859ce4c622928dbbf466cc802724849b295cb4d3307f3acca47506429c45086813fa004129d6e0458ed4ad28899c9192b18be9e43afae9e1636b386b7d56e027725fa06047885a0bc41f2bd745370589ffdfa81814f3896f5cde51f1b69869f21eca73c58ed7ece556bd08afc1816fd11ea3c336d590a962c05b5496e34ff11a3bfbfc79df6a74f47cf908b4c5fba725f88d05319e46af328510adb61a24bd84da101176df016ad8f7ffcbcfdd017044d40ef11321e01ed", 0xcf}, {&(0x7f0000001440)="96070ed9c17e5974880933dedf153ad2e454b4d57ce033b4cb6836b4049d39545a8d663c1e60df52b89bcbb436ccac00cb02721d944cc8fb0a562214637eec4141caf31c39ea95668e853bc49d4659f2d6b1a9bad46db468757b008925f94952dd551bc730977e08b3384783505014c26e73ef3f25edd0736ebf091fc5ebd372f3e74ac14db1fbdb6d535ad89999346b74a603e788da1955815a982cb084e10b5fa61eb108012d333657f42068a1d4d4c7e25136200b5f94ff169e", 0xbb}, {&(0x7f0000001500)="48064bba2ff42ab79c08b4f67cc0aa52d76d0f1f80441b90145c6160dee6fc7bff7889fc3a6d52917bb99fb083c94704eface3c9781141bd81f0d1c154100a5d3c566106834441214ed047bff3b95a90b6c7760fcb98db94b5f50ddc8ebbf78eed063c4bcec657d3cc1e81dc884ba347c075c33556f84bf55d79a023ee1c574aaedeab9d4fa841d12cd659159b0d9ddbcf3d275d089d75488449f3a91b83637782a0211a76", 0xa5}, {&(0x7f00000015c0)="38429a859d2f364f45656713a5e699c5b64b5bd12204b7875be84ce3ae2fbb70794120666444ee0657f3f7cc570630c3c709e5a9da119a2a5d80cccc6b9530e2a965b8ab8373ecf6f1a90dd2ef67639dcc7a673d4ba1eaaff239fe8c32d8b75fac64a79c84a318abf01b8ee584481f42753a4b64a41bd6e0065e24e58e83bc418a1a61d9e57ea33e6ebceddd6d920d508cfc3befe81abf15e90fc84d5018322e65be", 0xa2}, {&(0x7f0000001680)="2266762ec652791c81552b5e813da1ca89e560460035aa0fdc3b9a537c920384dd02c71f78529b064026e0a3203865477b74f4529bd766812e46edf674e69139", 0x40}, {&(0x7f00000016c0)="476adc7bb553f681c13d0978168980b39666453536ca1ccfbc0d532687fa989e4a66f4d5eff2cf415703aad039a2cc6fa39ff3ce50c44679186ee6278658d1648827eabe00427b836b8498427bc7c3da4799beeae991f1c529558e206d7758f31c333276874003e54a1fe1b935a96d3548cfff299a20fee2a57fb3afc19bf2ff7160adeecb58c587d31a24b0bb4a8eeb1ee402d9a6d2fa1b1ee28da63d3eb40a4c7a0427cd175dd5970c74f9069503844acd630b8e75933b84c254300f50bc94e9b1f11a83702492c265d4e77efec8af7c7980826d4639", 0xd7}], 0xa, 0x1) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x44, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0xe00}, 0x0) write$sysctl(r1, &(0x7f0000000040)='5\x00', 0x2) 179.427856ms ago: executing program 1 (id=994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000440)=0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r8, 0x4068aea3, &(0x7f0000000180)) r9 = socket$unix(0x1, 0x2, 0x0) process_vm_readv(r5, &(0x7f0000000900)=[{&(0x7f0000000500)}, {&(0x7f0000000540)}, {&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f0000000580)=""/10, 0xa}, {&(0x7f00000005c0)=""/103, 0x67}, {&(0x7f00000007c0)=""/14, 0xe}, {&(0x7f0000000800)=""/154, 0x9a}, {&(0x7f00000008c0)=""/34, 0x22}], 0x8, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/198, 0xc6}, {&(0x7f0000000980)=""/132, 0x84}], 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(0xee01, r10, 0xffffffffffffffff) r11 = socket$inet(0x2, 0x3, 0x8) r12 = socket$inet(0x2, 0x6000000000000003, 0x6) r13 = dup3(r11, r12, 0x0) setsockopt$inet_int(r13, 0x0, 0xa, 0x0, 0x0) r14 = getgid() r15 = getegid() setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x4}, [{0x2, 0x3, r6}, {}, {0x2, 0x0, r10}], {0x4, 0x3}, [{0x8, 0x3, r14}, {0x8, 0x7, r15}], {}, {0x20, 0x3}}, 0x4c, 0x2) r16 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r16, 0xc0205649, &(0x7f0000000240)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x5, '\x00', @p_u32=0x0}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r16, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r17}, 0x10) 174.185174ms ago: executing program 3 (id=995): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r7, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r7, &(0x7f0000000400)='./file0/file0\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000c227c8617271f8a900000000000a000000", @ANYRES32=r4, @ANYBLOB="14000100ff0100000000000000000000000000010800080002040000"], 0x34}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000440)={{0x9, 0x95bb}, 0x100, './file0/file0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 0s ago: executing program 1 (id=996): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) r1 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x224, 0x24, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa, 0x1}, {0x1d, 0xb}, {0xfffc, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_pie={{0x8}, {0x44, 0x2, [@TCA_PIE_ALPHA={0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x9}, @TCA_PIE_BETA={0x8, 0x5, 0x19}, @TCA_PIE_TARGET={0x8, 0x1, 0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x23}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_BYTEMODE={0x8}]}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x0, 0x6bca, 0x0, 0x4, 0x9, 0x6}}, {0x10, 0x2, [0x2, 0x6, 0x8, 0xfffa, 0x5, 0x0]}}, {{0x1c, 0x1, {0x8, 0x6, 0x4, 0x7, 0x0, 0x6, 0x4, 0x5}}, {0xe, 0x2, [0x5, 0x445, 0x1, 0x3, 0x8]}}, {{0x1c, 0x1, {0xad, 0x0, 0x386, 0x6, 0x1, 0x7, 0xd, 0x1}}, {0x6, 0x2, [0x80]}}]}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x40084}, 0x2000005b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "7fa5bf073cff73aa"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0xfd, 0x0, 0xff, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) r3 = socket(0x200000100000011, 0x803, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) pipe2(&(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001580)={r8, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000540)=0x9c) sendto$packet(r3, &(0x7f0000000100)='m', 0x102, 0xf5ff, &(0x7f0000000200)={0x3a, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYBLOB], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x422882, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): v_slave_0 (retrying later): interface not active [ 44.918582][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.921378][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.931257][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.936557][ T5930] team0: Port device team_slave_1 added [ 44.947315][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.951140][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.958405][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.963693][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.965660][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.974094][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.985839][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.987659][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.994233][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.007908][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.009947][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.017210][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.039449][ T5929] hsr_slave_0: entered promiscuous mode [ 45.042573][ T5929] hsr_slave_1: entered promiscuous mode [ 45.061808][ T5938] hsr_slave_0: entered promiscuous mode [ 45.063745][ T5938] hsr_slave_1: entered promiscuous mode [ 45.065559][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.067746][ T5938] Cannot create hsr debugfs directory [ 45.092777][ T5937] hsr_slave_0: entered promiscuous mode [ 45.094745][ T5937] hsr_slave_1: entered promiscuous mode [ 45.096606][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.098768][ T5937] Cannot create hsr debugfs directory [ 45.111396][ T5930] hsr_slave_0: entered promiscuous mode [ 45.113489][ T5930] hsr_slave_1: entered promiscuous mode [ 45.115443][ T5930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.117603][ T5930] Cannot create hsr debugfs directory [ 45.305329][ T5938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.311667][ T5938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.316186][ T5938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.323527][ T5938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.338323][ T5929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.344271][ T5929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.353210][ T5929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.356473][ T5929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.371932][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.375852][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.381080][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.384271][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.414490][ T5930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.418013][ T5930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.421592][ T5930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.424548][ T5930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.453429][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.467822][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.483686][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.487833][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.490566][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.512728][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.514778][ T1227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.523785][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.534098][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.538680][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.545927][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.548171][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.554102][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.556714][ T1227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.561846][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.567075][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.574181][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.576188][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.582159][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.584200][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.593702][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.595704][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.603011][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.605070][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.614578][ T5929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.652585][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.676212][ T5938] veth0_vlan: entered promiscuous mode [ 45.684766][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.688816][ T5938] veth1_vlan: entered promiscuous mode [ 45.701755][ T5938] veth0_macvtap: entered promiscuous mode [ 45.711529][ T5938] veth1_macvtap: entered promiscuous mode [ 45.718205][ T5929] veth0_vlan: entered promiscuous mode [ 45.722987][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.733628][ T5929] veth1_vlan: entered promiscuous mode [ 45.736950][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.747507][ T5929] veth0_macvtap: entered promiscuous mode [ 45.752146][ T5929] veth1_macvtap: entered promiscuous mode [ 45.755915][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.758401][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.761590][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.764117][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.772344][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.778659][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.795372][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.798770][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.802226][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.813058][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.816052][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.819313][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.828858][ T5929] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.831439][ T5929] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.833807][ T5929] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.836171][ T5929] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.840982][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.843366][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.863052][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.865571][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.873749][ T5930] veth0_vlan: entered promiscuous mode [ 45.876448][ T5937] veth0_vlan: entered promiscuous mode [ 45.882908][ T5930] veth1_vlan: entered promiscuous mode [ 45.885214][ T5937] veth1_vlan: entered promiscuous mode [ 45.893810][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.917485][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.918407][ T5930] veth0_macvtap: entered promiscuous mode [ 45.919716][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.927592][ T5930] veth1_macvtap: entered promiscuous mode [ 45.946466][ T5937] veth0_macvtap: entered promiscuous mode [ 45.946570][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.951583][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.956580][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.959738][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.964456][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.968629][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.973149][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.978223][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.981799][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.984972][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.988862][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.994077][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.997813][ T5937] veth1_macvtap: entered promiscuous mode [ 46.003380][ T5995] warning: `syz.1.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 46.008644][ T5930] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.012864][ T5930] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.015514][ T5930] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.018326][ T5930] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.025901][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.029585][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.033190][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.036264][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.039086][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.042268][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.046057][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.054768][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.057884][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.061250][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.064267][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.067176][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.070480][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.074454][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.084255][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.086960][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.089468][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.091984][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.109251][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.112081][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.137286][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.139600][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.147292][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.149511][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.162232][ T64] Bluetooth: hci3: command tx timeout [ 46.163460][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.164017][ T64] Bluetooth: hci2: command tx timeout [ 46.164992][ T5288] Bluetooth: hci0: command tx timeout [ 46.165189][ T5288] Bluetooth: hci1: command tx timeout [ 46.166081][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.175021][ T6006] smc: net device bond0 applied user defined pnetid SYZ0 [ 46.321082][ T6027] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.464155][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 46.584684][ T6061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=210 sclass=netlink_route_socket pid=6061 comm=syz.2.24 [ 46.864368][ T6099] netlink: 'syz.3.34': attribute type 3 has an invalid length. [ 46.867310][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 47.510990][ T71] IPVS: starting estimator thread 0... [ 47.600159][ T6111] IPVS: using max 40 ests per chain, 96000 per kthread [ 47.681180][ T6120] lo speed is unknown, defaulting to 1000 [ 47.683104][ T6120] lo speed is unknown, defaulting to 1000 [ 47.685852][ T6120] lo speed is unknown, defaulting to 1000 [ 47.689363][ T6120] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 47.694583][ T6120] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 47.705287][ T6120] lo speed is unknown, defaulting to 1000 [ 47.707812][ T6120] lo speed is unknown, defaulting to 1000 [ 47.710145][ T6120] lo speed is unknown, defaulting to 1000 [ 47.712229][ T6120] lo speed is unknown, defaulting to 1000 [ 47.768305][ T6127] capability: warning: `syz.2.44' uses 32-bit capabilities (legacy support in use) [ 47.899400][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 47.964120][ T6106] dccp_close: ABORT with 36 bytes unread [ 47.977738][ T1332] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.003263][ T6149] evm: overlay not supported [ 48.060581][ T6159] netlink: 47 bytes leftover after parsing attributes in process `syz.0.57'. [ 48.064258][ T6157] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 48.104880][ T6161] Cannot find add_set index 0 as target [ 48.113777][ T6163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.59'. [ 48.137652][ T62] lo speed is unknown, defaulting to 1000 [ 48.140217][ T1332] usb 8-1: Using ep0 maxpacket: 16 [ 48.147013][ T1332] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.151371][ T1332] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.154220][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.61'. [ 48.156684][ T1332] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 48.163575][ T1332] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.165721][ T6166] can: request_module (can-proto-0) failed. [ 48.172662][ T1332] usb 8-1: config 0 descriptor?? [ 48.189344][ T6168] netlink: 'syz.0.62': attribute type 2 has an invalid length. [ 48.201609][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.61'. [ 48.240516][ T64] Bluetooth: hci1: command tx timeout [ 48.240647][ T5933] Bluetooth: hci0: command tx timeout [ 48.242206][ T64] Bluetooth: hci3: command tx timeout [ 48.251714][ T64] Bluetooth: hci2: command tx timeout [ 48.323567][ T6188] 9pnet_virtio: no channels available for device syz [ 48.425308][ T6196] delete_channel: no stack [ 48.989852][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 49.147779][ T1332] usbhid 8-1:0.0: can't add hid device: -71 [ 49.149662][ T1332] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 49.153477][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.153756][ T1332] usb 8-1: USB disconnect, device number 2 [ 49.156420][ T9] usb 7-1: config 0 has no interfaces? [ 49.162272][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.164868][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.167150][ T9] usb 7-1: Product: syz [ 49.168375][ T9] usb 7-1: Manufacturer: syz [ 49.169723][ T9] usb 7-1: SerialNumber: syz [ 49.174475][ T9] usb 7-1: config 0 descriptor?? [ 49.313151][ T39] kauditd_printk_skb: 185 callbacks suppressed [ 49.313162][ T39] audit: type=1400 audit(1736212598.396:300): avc: denied { ioctl } for pid=6259 comm="syz.1.89" path="socket:[10429]" dev="sockfs" ino=10429 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.326018][ T39] audit: type=1400 audit(1736212598.406:301): avc: denied { setopt } for pid=6259 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.331573][ T39] audit: type=1400 audit(1736212598.406:302): avc: denied { write } for pid=6259 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.354324][ T39] audit: type=1400 audit(1736212598.436:303): avc: denied { setopt } for pid=6264 comm="syz.1.90" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.377891][ T39] audit: type=1400 audit(1736212598.456:304): avc: denied { listen } for pid=6266 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.383687][ T9] usb 7-1: USB disconnect, device number 2 [ 49.386678][ T6267] Bluetooth: MGMT ver 1.23 [ 49.387370][ T39] audit: type=1400 audit(1736212598.456:305): avc: denied { connect } for pid=6266 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.394145][ T39] audit: type=1400 audit(1736212598.466:306): avc: denied { create } for pid=6266 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 49.399386][ T39] audit: type=1400 audit(1736212598.466:307): avc: denied { ioctl } for pid=6266 comm="syz.1.91" path="socket:[9742]" dev="sockfs" ino=9742 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 49.408005][ T39] audit: type=1400 audit(1736212598.466:308): avc: denied { write } for pid=6266 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.413594][ T39] audit: type=1400 audit(1736212598.466:309): avc: denied { accept } for pid=6266 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.421541][ T6269] syz.1.92 uses obsolete (PF_INET,SOCK_PACKET) [ 49.423576][ T6269] veth1_to_team: entered promiscuous mode [ 49.425318][ T6269] veth1_to_team: entered allmulticast mode [ 49.561443][ T6282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.96'. [ 49.697789][ T6299] Zero length message leads to an empty skb [ 49.841102][ T6321] Trying to write to read-only block-device nullb0 [ 49.858784][ T6324] xt_hashlimit: size too large, truncated to 1048576 [ 49.892423][ T6329] xt_hashlimit: size too large, truncated to 1048576 [ 50.051773][ T92] Bluetooth: Error in BCSP hdr checksum [ 50.310375][ T92] Bluetooth: Error in BCSP hdr checksum [ 50.319896][ T5288] Bluetooth: hci2: command tx timeout [ 50.320388][ T5933] Bluetooth: hci3: command tx timeout [ 50.320412][ T5940] Bluetooth: hci0: command tx timeout [ 50.320435][ T5940] Bluetooth: hci1: command tx timeout [ 50.877461][ T6361] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 50.911266][ T6367] nfs: Unknown parameter 'fdinfo/4' [ 50.935623][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 50.952461][ T5933] Bluetooth: hci1: unexpected event 0x0b length: 3 < 11 [ 50.987183][ T6388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6388 comm=syz.1.125 [ 51.018889][ T6395] netlink: 'syz.0.126': attribute type 1 has an invalid length. [ 51.021832][ T6395] netlink: 'syz.0.126': attribute type 2 has an invalid length. [ 51.029698][ T6395] netlink: 16074 bytes leftover after parsing attributes in process `syz.0.126'. [ 51.159023][ T6416] netlink: 'syz.1.132': attribute type 1 has an invalid length. [ 51.170852][ T6419] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 51.269005][ T5933] Bluetooth: hci1: unexpected event 0x2c length: 38 > 17 [ 51.269024][ T5933] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 51.287385][ T6430] xt_CT: No such helper "pptp" [ 51.334782][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 51.337665][ T6435] loop8: detected capacity change from 0 to 7 [ 51.343203][ T6435] Dev loop8: unable to read RDB block 7 [ 51.345578][ T6435] loop8: unable to read partition table [ 51.347957][ T6435] loop8: partition table beyond EOD, truncated [ 51.350759][ T6435] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 51.350759][ T6435] ) failed (rc=-5) [ 51.554594][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 51.840400][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 51.840678][ T5933] Bluetooth: hci4: command 0x1003 tx timeout [ 51.930365][ T6473] bridge0: port 3(syz_tun) entered blocking state [ 51.933407][ T6473] bridge0: port 3(syz_tun) entered disabled state [ 51.936276][ T6473] syz_tun: entered allmulticast mode [ 51.940227][ T6473] syz_tun: entered promiscuous mode [ 51.943952][ T6468] kvm: pic: non byte write [ 51.945251][ T6473] bridge0: port 3(syz_tun) entered blocking state [ 51.948819][ T6473] bridge0: port 3(syz_tun) entered forwarding state [ 51.957210][ T6473] __nla_validate_parse: 1 callbacks suppressed [ 51.957221][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 51.998932][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.040282][ T71] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.121943][ T6481] Invalid ELF header type: 0 != 1 [ 52.191574][ T71] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 52.194968][ T71] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 52.198615][ T71] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 52.202675][ T71] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 52.206368][ T71] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 52.212186][ T71] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 52.215805][ T71] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 52.218965][ T71] usb 5-1: Product: syz [ 52.220805][ T71] usb 5-1: Manufacturer: syz [ 52.225418][ T71] cdc_wdm 5-1:1.0: skipping garbage [ 52.226992][ T71] cdc_wdm 5-1:1.0: skipping garbage [ 52.233079][ T71] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 52.235096][ T71] cdc_wdm 5-1:1.0: Unknown control protocol [ 52.330164][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.409937][ T64] Bluetooth: hci3: command tx timeout [ 52.410040][ T5933] Bluetooth: hci2: command tx timeout [ 52.410685][ T5944] Bluetooth: hci0: command tx timeout [ 52.410714][ T5288] Bluetooth: hci1: command tx timeout [ 52.444858][ T6466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.146'. [ 52.449731][ T6466] raw_sendmsg: syz.0.146 forgot to set AF_INET. Fix it! [ 52.489979][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 52.492994][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 52.495766][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 52.498513][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 52.501533][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.505294][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 52.507927][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.638158][ T6506] infiniband syz2: set down [ 52.640273][ T6506] infiniband syz2: added ipvlan1 [ 52.653917][ T6506] RDS/IB: syz2: added [ 52.655962][ T6506] smc: adding ib device syz2 with port count 1 [ 52.658903][ T6506] smc: ib device syz2 port 1 has pnetid [ 52.718767][ T9] usb 7-1: usb_control_msg returned -32 [ 52.724209][ T9] usbtmc 7-1:16.0: can't read capabilities [ 53.190747][ T1018] hid-generic 0005:0C45:1010.0002: item fetching failed at offset 0/1 [ 53.193332][ T1018] hid-generic 0005:0C45:1010.0002: probe with driver hid-generic failed with error -22 [ 53.271708][ T6530] vivid-000: disconnect [ 53.335069][ T6529] vivid-000: reconnect [ 53.368780][ T6538] netlink: 'syz.3.168': attribute type 4 has an invalid length. [ 53.465134][ T6541] geneve2: entered promiscuous mode [ 53.467187][ T6541] geneve2: entered allmulticast mode [ 53.729884][ T1018] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.882116][ T1018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.886020][ T1018] usb 6-1: config 0 has no interfaces? [ 53.888327][ T1018] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.891848][ T1018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.897346][ T1018] usb 6-1: config 0 descriptor?? [ 54.103171][ T9] usb 6-1: USB disconnect, device number 2 [ 54.409296][ T39] kauditd_printk_skb: 64 callbacks suppressed [ 54.409307][ T39] audit: type=1400 audit(1736212603.486:374): avc: denied { create } for pid=6551 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 54.416996][ T39] audit: type=1400 audit(1736212603.486:375): avc: denied { ioctl } for pid=6551 comm="syz.3.172" path="socket:[12706]" dev="sockfs" ino=12706 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 54.633171][ T39] audit: type=1400 audit(1736212603.716:376): avc: denied { read } for pid=6561 comm="syz.1.175" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 54.639530][ T39] audit: type=1400 audit(1736212603.716:377): avc: denied { open } for pid=6561 comm="syz.1.175" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 54.732257][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 54.889991][ T35] usb 5-1: USB disconnect, device number 2 [ 54.928286][ T6571] netlink: 'syz.0.178': attribute type 10 has an invalid length. [ 54.956296][ T39] audit: type=1400 audit(1736212604.036:378): avc: denied { write } for pid=6572 comm="syz.0.179" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.995714][ T6577] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 54.997955][ T6577] netlink: 'syz.1.181': attribute type 2 has an invalid length. [ 55.000851][ T6577] netlink: 16074 bytes leftover after parsing attributes in process `syz.1.181'. [ 55.032017][ T6579] fuse: Bad value for 'fd' [ 55.066452][ T39] audit: type=1400 audit(1736212604.146:379): avc: denied { connect } for pid=6582 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.073336][ T39] audit: type=1400 audit(1736212604.146:380): avc: denied { write } for pid=6582 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.098607][ T9] usb 7-1: USB disconnect, device number 3 [ 55.161800][ T6581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.184'. [ 55.166977][ T6581] No such timeout policy "syz0" [ 55.197555][ T39] audit: type=1400 audit(1736212604.276:381): avc: denied { ioctl } for pid=6589 comm="syz.2.186" path="socket:[11831]" dev="sockfs" ino=11831 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.291233][ T39] audit: type=1400 audit(1736212604.376:382): avc: denied { mount } for pid=6605 comm="syz.2.189" name="/" dev="hugetlbfs" ino=11073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 55.304152][ T39] audit: type=1400 audit(1736212604.386:383): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 55.339007][ T6610] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.343853][ T1227] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.343972][ T6610] netlink: 'syz.2.190': attribute type 4 has an invalid length. [ 55.346773][ T1227] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.348902][ T6603] syz.1.188: attempt to access beyond end of device [ 55.348902][ T6603] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 55.348947][ T6603] efs: cannot read volume header [ 55.448436][ T6612] tmpfs: Unknown parameter 'si~e' [ 55.502587][ T6623] fuse: Bad value for 'fd' [ 55.522383][ T6625] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 55.524517][ T6625] netlink: 224 bytes leftover after parsing attributes in process `syz.3.194'. [ 55.542980][ T6630] netlink: 44 bytes leftover after parsing attributes in process `syz.1.195'. [ 55.573528][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'. [ 55.643770][ T6637] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 55.651899][ T6637] netlink: 'syz.3.198': attribute type 4 has an invalid length. [ 55.658675][ T6637] netlink: 'syz.3.198': attribute type 4 has an invalid length. [ 55.676054][ T6637] syz.3.198 (6637) used greatest stack depth: 20928 bytes left [ 55.939842][ T71] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 56.091123][ T71] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.094316][ T71] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.098021][ T71] usb 6-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 56.105621][ T71] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.108825][ T71] usb 6-1: config 0 descriptor?? [ 56.114933][ T6651] fuse: Bad value for 'fd' [ 56.314165][ T71] usbhid 6-1:0.0: can't add hid device: -71 [ 56.316644][ T71] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 56.317959][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 56.320965][ T71] usb 6-1: USB disconnect, device number 3 [ 56.635850][ T6672] netlink: 'syz.3.209': attribute type 29 has an invalid length. [ 56.639480][ T6672] netlink: 'syz.3.209': attribute type 29 has an invalid length. [ 56.644397][ T6672] netlink: 500 bytes leftover after parsing attributes in process `syz.3.209'. [ 56.649388][ T6672] unsupported nla_type 40 [ 56.661870][ T6672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6672 comm=syz.3.209 [ 56.888781][ T6689] fuse: Invalid rootmode [ 57.027104][ T6702] xt_ecn: cannot match TCP bits for non-tcp packets [ 57.066969][ T6709] capability: warning: `syz.0.220' uses deprecated v2 capabilities in a way that may be insecure [ 57.074555][ T6708] ======================================================= [ 57.074555][ T6708] WARNING: The mand mount option has been deprecated and [ 57.074555][ T6708] and is ignored by this kernel. Remove the mand [ 57.074555][ T6708] option from the mount to silence this warning. [ 57.074555][ T6708] ======================================================= [ 57.142044][ T6718] binder: 6717:6718 ioctl c018620c 20000100 returned -22 [ 57.359877][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 57.359893][ T5933] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.561427][ T6745] Cannot find del_set index 0 as target [ 57.563269][ T6747] Cannot find del_set index 0 as target [ 57.681995][ T6758] __nla_validate_parse: 1 callbacks suppressed [ 57.682006][ T6758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.239'. [ 57.759194][ T6764] netlink: 504 bytes leftover after parsing attributes in process `syz.1.241'. [ 57.880288][ T56] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 58.029825][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 58.033486][ T56] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 58.035837][ T56] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.038435][ T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.042507][ T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.045413][ T56] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.049039][ T56] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.051667][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.259537][ T56] usb 7-1: usb_control_msg returned -32 [ 58.261415][ T56] usbtmc 7-1:16.0: can't read capabilities [ 58.362729][ T6805] netlink: 44 bytes leftover after parsing attributes in process `syz.1.254'. [ 58.367576][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.254'. [ 58.370750][ T6805] netlink: 44 bytes leftover after parsing attributes in process `syz.1.254'. [ 58.545024][ T6824] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 59.073657][ T6849] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 59.079852][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 59.084463][ T6850] bond1 (unregistering): Released all slaves [ 59.091596][ T6849] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 59.207358][ T6855] netlink: 76 bytes leftover after parsing attributes in process `syz.0.268'. [ 59.229885][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 59.234161][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 59.238499][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 59.242977][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.246941][ T25] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 59.249571][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.253275][ T25] usb 6-1: config 0 descriptor?? [ 59.257557][ T25] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 59.321910][ T6861] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.365661][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.271'. [ 59.368280][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.271'. [ 59.371735][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.271'. [ 59.374296][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.271'. [ 59.404299][ T5933] Bluetooth: hci2: unexpected event 0x08 length: 7 > 4 [ 59.416448][ T6866] openvswitch: netlink: IPv4 frag type 224 is out of range max 2 [ 59.422841][ T6866] syz.0.272: attempt to access beyond end of device [ 59.422841][ T6866] loop0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 59.427055][ T6866] qnx4: unable to read the superblock [ 59.458866][ T1332] usb 6-1: USB disconnect, device number 4 [ 59.486414][ T6870] xt_hashlimit: overflow, try lower: 0/0 [ 59.518562][ T6870] bond0: entered promiscuous mode [ 59.521057][ T6870] bond_slave_0: entered promiscuous mode [ 59.522723][ T6870] bond_slave_1: entered promiscuous mode [ 59.524946][ T6870] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 59.527444][ T6870] bond0: left promiscuous mode [ 59.528829][ T6870] bond_slave_0: left promiscuous mode [ 59.530652][ T6870] bond_slave_1: left promiscuous mode [ 59.687281][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.691078][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.693436][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.696742][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.701300][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.702698][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 59.702707][ T39] audit: type=1400 audit(1736212608.786:435): avc: denied { create } for pid=6878 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.704548][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.706654][ T39] audit: type=1400 audit(1736212608.786:436): avc: denied { getopt } for pid=6878 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.714614][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.727197][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.730473][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.733889][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.736954][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.740348][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.743775][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.746823][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.748997][ T39] audit: type=1326 audit(1736212608.826:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.3.279" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff75785d29 code=0x0 [ 59.750009][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.759103][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.762474][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.764931][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.767791][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.770931][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.774512][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.776959][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.779340][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.782084][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.784515][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.786917][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.789257][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.791815][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.794275][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.796628][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.799252][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.801854][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.804304][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.806761][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.809290][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.812509][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.814924][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.817278][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.819604][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.822100][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.824619][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.827424][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.829980][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.832540][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.835037][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.838535][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.841799][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.844922][ T39] audit: type=1400 audit(1736212608.926:438): avc: denied { write } for pid=5328 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.851949][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.853163][ T39] audit: type=1400 audit(1736212608.926:439): avc: denied { remove_name } for pid=5328 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.856120][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.864477][ T39] audit: type=1400 audit(1736212608.926:440): avc: denied { rename } for pid=5328 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.866462][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.875460][ T39] audit: type=1400 audit(1736212608.926:441): avc: denied { add_name } for pid=5328 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.875825][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.882886][ T39] audit: type=1400 audit(1736212608.926:442): avc: denied { unlink } for pid=5328 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.884903][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.891261][ T39] audit: type=1400 audit(1736212608.926:443): avc: denied { create } for pid=5328 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.895317][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.902991][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.905423][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.909028][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.911702][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.914511][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.916867][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.919322][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.921764][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.924252][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.926573][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.929105][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.931611][ T6876] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 59.986936][ T6891] netlink: 'syz.0.282': attribute type 8 has an invalid length. [ 60.091250][ T6906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.095819][ T6912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.150819][ T39] audit: type=1400 audit(1736212609.236:444): avc: denied { ioctl } for pid=6913 comm="syz.3.289" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 60.652231][ T56] usb 7-1: USB disconnect, device number 4 [ 60.773711][ T6923] IPVS: set_ctl: invalid protocol: 43 172.30.1.3:20000 [ 60.882861][ T6934] unsupported nlmsg_type 40 [ 60.941321][ T6943] xt_hashlimit: size too large, truncated to 1048576 [ 60.962146][ T6946] syz.0.299 (6946) used obsolete PPPIOCDETACH ioctl [ 60.966767][ T6948] xt_hashlimit: max too large, truncated to 1048576 [ 61.034662][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.038386][ T6957] bridge_slave_1: left allmulticast mode [ 61.043184][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.046956][ T6957] netlink: 'syz.3.301': attribute type 2 has an invalid length. [ 61.050017][ T6957] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 61.064281][ T6957] netlink: 'syz.3.301': attribute type 29 has an invalid length. [ 61.067564][ T6957] netlink: 'syz.3.301': attribute type 29 has an invalid length. [ 61.369838][ T1332] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.549912][ T1332] usb 8-1: Using ep0 maxpacket: 8 [ 61.553286][ T1332] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 61.556240][ T1332] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.559724][ T1332] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.564121][ T1332] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.567746][ T1332] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.572569][ T1332] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 61.575360][ T1332] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.782400][ T1332] usb 8-1: usb_control_msg returned -32 [ 61.784542][ T1332] usbtmc 8-1:16.0: can't read capabilities [ 61.989916][ T35] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.141239][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.145620][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.149231][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.153986][ T35] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 62.156596][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.160668][ T35] usb 6-1: config 0 descriptor?? [ 62.376184][ T35] usbhid 6-1:0.0: can't add hid device: -71 [ 62.379214][ T35] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 62.387291][ T35] usb 6-1: USB disconnect, device number 5 [ 62.953597][ T7014] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.956943][ T7014] TCP: tcp_parse_options: Illegal window scaling value 42 > 14 received [ 62.966352][ T7017] __nla_validate_parse: 7 callbacks suppressed [ 62.966360][ T7017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.319'. [ 63.044927][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.321'. [ 63.161614][ T7036] gtp0: entered allmulticast mode [ 63.186569][ T7030] trusted_key: syz.0.323 sent an empty control message without MSG_MORE. [ 63.441612][ T5933] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 63.445142][ T5933] Bluetooth: hci2: Injecting HCI hardware error event [ 63.449639][ T5933] Bluetooth: hci2: hardware error 0x00 [ 63.861242][ T7073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7073 comm=syz.1.333 [ 63.949916][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 63.988230][ T7073] netlink: 200 bytes leftover after parsing attributes in process `syz.1.333'. [ 64.059045][ T7081] netlink: 'syz.0.335': attribute type 29 has an invalid length. [ 64.062070][ T7081] netlink: 'syz.0.335': attribute type 29 has an invalid length. [ 64.064727][ T7081] netlink: 500 bytes leftover after parsing attributes in process `syz.0.335'. [ 64.111427][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 64.127666][ T25] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 64.130677][ T25] usb 7-1: config 179 has no interface number 0 [ 64.132477][ T25] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 64.135637][ T25] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 64.138789][ T25] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 64.142543][ T25] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 64.146283][ T25] usb 7-1: config 179 interface 65 has no altsetting 0 [ 64.148273][ T25] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 64.150510][ T35] usb 8-1: USB disconnect, device number 3 [ 64.151001][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.157289][ T7071] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 64.164293][ T25] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input7 [ 64.210068][ T5331] input input7: unable to receive magic message: -110 [ 64.216936][ T5331] input input7: unable to receive magic message: -32 [ 64.224109][ T5331] input input7: unable to receive magic message: -32 [ 64.230185][ T5331] input input7: unable to receive magic message: -32 [ 64.242746][ T7100] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 64.285002][ T6223] input input7: unable to receive magic message: -32 [ 64.309375][ T5331] input input7: unable to receive magic message: -32 [ 64.315102][ T5331] input input7: unable to receive magic message: -32 [ 64.320654][ T7109] input: syz0 as /devices/virtual/input/input8 [ 64.328832][ T5331] input input7: unable to receive magic message: -32 [ 64.401854][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.344'. [ 64.421583][ T7112] lo speed is unknown, defaulting to 1000 [ 64.729673][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.735227][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.759832][ T1332] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 64.909844][ T1332] usb 6-1: Using ep0 maxpacket: 32 [ 64.912558][ T1332] usb 6-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.916186][ T1332] usb 6-1: config 1 interface 0 has no altsetting 0 [ 64.919876][ T1332] usb 6-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 64.922448][ T1332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.924527][ T35] usb 7-1: USB disconnect, device number 5 [ 64.924636][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 64.924941][ T1332] usb 6-1: Product: Ð¥ [ 64.924950][ T1332] usb 6-1: Manufacturer: ሉ畲饠 [ 64.927732][ T35] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 64.929162][ T1332] usb 6-1: SerialNumber: Ñ„ [ 65.138781][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 65.138791][ T39] audit: type=1400 audit(1736212614.216:472): avc: denied { map } for pid=7116 comm="syz.1.346" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 65.147306][ T39] audit: type=1400 audit(1736212614.216:473): avc: denied { execute } for pid=7116 comm="syz.1.346" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 65.188142][ T1332] usbhid 6-1:1.0: can't add hid device: -71 [ 65.190025][ T1332] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 65.197187][ T1332] usb 6-1: USB disconnect, device number 6 [ 65.212655][ T39] audit: type=1400 audit(1736212614.296:474): avc: denied { ioctl } for pid=7127 comm="syz.1.348" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.287111][ T7137] ucma_write: process 369 (syz.1.350) changed security contexts after opening file descriptor, this is not allowed. [ 65.294708][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 65.337780][ T39] audit: type=1400 audit(1736212614.416:475): avc: denied { write } for pid=7140 comm="syz.1.351" path="socket:[14056]" dev="sockfs" ino=14056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 65.421399][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.353'. [ 65.424137][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.353'. [ 65.440018][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.353'. [ 65.442878][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.353'. [ 65.512500][ T39] audit: type=1400 audit(1736212614.596:476): avc: denied { map } for pid=7156 comm="syz.0.357" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.519965][ T39] audit: type=1400 audit(1736212614.596:477): avc: denied { bind } for pid=7158 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.537761][ T5933] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 65.539859][ T39] audit: type=1400 audit(1736212614.596:478): avc: denied { execute } for pid=7156 comm="syz.0.357" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.572488][ T39] audit: type=1400 audit(1736212614.656:479): avc: denied { lock } for pid=7164 comm="syz.0.361" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.593983][ T39] audit: type=1400 audit(1736212614.676:480): avc: denied { read write } for pid=7168 comm="syz.2.362" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.603522][ T39] audit: type=1400 audit(1736212614.676:481): avc: denied { open } for pid=7168 comm="syz.2.362" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.606273][ T7171] nftables ruleset with unbound chain [ 66.205046][ T7185] syz.1.366[7185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.205097][ T7185] syz.1.366[7185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.208596][ T7185] syz.1.366[7185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.556039][ T7203] overlayfs: upper fs does not support file handles, falling back to index=off. [ 66.572328][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.664318][ T7216] geneve2: entered promiscuous mode [ 66.667102][ T7216] geneve2: entered allmulticast mode [ 66.677660][ T7185] syz.1.366 (7185): drop_caches: 2 [ 67.528767][ T7240] process 'syz.2.383' launched '/dev/fd/4' with NULL argv: empty string added [ 67.587446][ T7245] netlink: 'syz.1.385': attribute type 10 has an invalid length. [ 67.717850][ T7267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.729340][ T7271] netlink: 'syz.2.393': attribute type 15 has an invalid length. [ 67.745047][ T7272] netlink: 'syz.3.391': attribute type 5 has an invalid length. [ 67.807011][ T7278] team0: No ports can be present during mode change [ 67.850609][ T7286] netlink: 'syz.0.396': attribute type 1 has an invalid length. [ 67.852995][ T7286] netlink: 'syz.0.396': attribute type 2 has an invalid length. [ 67.882898][ T7289] netlink: 'syz.3.399': attribute type 3 has an invalid length. [ 67.888926][ T7289] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.892566][ T7289] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.895054][ T7289] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.897676][ T7289] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.988214][ T7300] syz.0.401: attempt to access beyond end of device [ 67.988214][ T7300] loop0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 67.992297][ T7300] qnx6: unable to read the first superblock [ 67.995201][ T7300] syz.0.401: attempt to access beyond end of device [ 67.995201][ T7300] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 67.998902][ T7300] qnx6: unable to read the first superblock [ 68.000864][ T7300] qnx6: unable to read the first superblock [ 68.037779][ T7304] program syz.0.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.043593][ T7304] netlink: zone id is out of range [ 68.045202][ T7304] netlink: zone id is out of range [ 68.046741][ T7304] netlink: zone id is out of range [ 68.048258][ T7304] netlink: zone id is out of range [ 68.049942][ T7304] netlink: zone id is out of range [ 68.051449][ T7304] netlink: zone id is out of range [ 68.053165][ T7304] netlink: zone id is out of range [ 68.054761][ T7304] netlink: zone id is out of range [ 68.056368][ T7304] netlink: zone id is out of range [ 68.143898][ T7310] syzkaller0: entered promiscuous mode [ 68.145623][ T7310] syzkaller0: entered allmulticast mode [ 68.329152][ T7327] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.575254][ T7344] __nla_validate_parse: 9 callbacks suppressed [ 68.575265][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 68.580795][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 69.177302][ T7344] sch_tbf: peakrate 8 is lower than or equals to rate 141 ! [ 69.203188][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 69.206047][ T7348] bridge_slAve_0: renamed from lo (while UP) [ 69.228108][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 69.262590][ T7354] rpc_pipefs: Unknown parameter 'fd' [ 69.586608][ T7376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.429'. [ 69.839940][ T64] Bluetooth: hci1: command 0x206a tx timeout [ 69.841891][ T5933] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 70.158860][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 70.158874][ T39] audit: type=1400 audit(1736212619.236:497): avc: denied { lock } for pid=7379 comm="syz.3.430" path="socket:[17456]" dev="sockfs" ino=17456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 70.189036][ T39] audit: type=1400 audit(1736212619.266:498): avc: denied { read } for pid=7382 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 70.273623][ T39] audit: type=1400 audit(1736212619.356:499): avc: denied { name_bind } for pid=7379 comm="syz.3.430" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 70.283749][ T7380] netlink: 852 bytes leftover after parsing attributes in process `syz.3.430'. [ 70.318774][ T39] audit: type=1400 audit(1736212619.396:500): avc: denied { read } for pid=7394 comm="syz.0.433" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.329402][ T39] audit: type=1400 audit(1736212619.396:501): avc: denied { open } for pid=7394 comm="syz.0.433" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.343651][ T39] audit: type=1400 audit(1736212619.406:502): avc: denied { append } for pid=7394 comm="syz.0.433" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.353622][ T39] audit: type=1400 audit(1736212619.416:503): avc: denied { ioctl } for pid=7394 comm="syz.0.433" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.806732][ T7436] netlink: 'syz.0.446': attribute type 10 has an invalid length. [ 70.813619][ T7436] team0: Device hsr_slave_0 failed to register rx_handler [ 70.832318][ T39] audit: type=1400 audit(1736212619.916:504): avc: denied { mount } for pid=7437 comm="syz.1.447" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.132586][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.134406][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.154848][ T7460] input: syz1 as /devices/virtual/input/input9 [ 71.201707][ T7465] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 71.272395][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.282407][ T7475] bridge_slave_1: left allmulticast mode [ 71.284113][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.287398][ T7475] netlink: 'syz.1.458': attribute type 2 has an invalid length. [ 71.316202][ T7480] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 71.324863][ T7480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.329127][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 71.363403][ T7484] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 71.739871][ T7501] syz.3.466 (7501) used greatest stack depth: 20704 bytes left [ 71.900019][ T7507] $Hÿ: renamed from bond0 (while UP) [ 71.904266][ T7507] $Hÿ: entered promiscuous mode [ 71.905792][ T7507] bond_slave_0: entered promiscuous mode [ 71.907681][ T7507] bond_slave_1: entered promiscuous mode [ 71.977923][ T7511] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 71.980089][ T7511] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 71.984212][ T7511] vhci_hcd vhci_hcd.0: Device attached [ 71.987197][ T7511] vhci_hcd vhci_hcd.0: port 0 already used [ 71.992966][ T7514] vhci_hcd: connection closed [ 71.995989][ T12] vhci_hcd: stop threads [ 72.000236][ T12] vhci_hcd: release socket [ 72.002259][ T12] vhci_hcd: disconnect device [ 72.285429][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.288917][ T7529] bridge0: entered allmulticast mode [ 72.337896][ T7538] program syz.2.476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.391785][ T7539] netlink: 32 bytes leftover after parsing attributes in process `syz.2.476'. [ 72.453575][ T7546] program syz.1.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.519525][ T39] audit: type=1400 audit(1736212621.596:505): avc: denied { bind } for pid=7550 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.605028][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.483'. [ 72.608333][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 72.625093][ T39] audit: type=1400 audit(1736212621.706:506): avc: denied { mount } for pid=7562 comm="syz.1.485" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.678093][ T7576] fuse: Bad value for 'user_id' [ 72.679632][ T7576] fuse: Bad value for 'user_id' [ 72.857519][ T7589] ipvlan2: entered promiscuous mode [ 73.046625][ T7600] Cannot find add_set index 0 as target [ 73.396739][ T7622] afs: Unknown parameter 'ï)(îŸS´uÔ&ÝŽ§ˆ³è”Î' [ 73.520531][ T68] wlan0: Trigger new scan to find an IBSS to join [ 73.570355][ T7634] sg_write: data in/out 1864171740/58 bytes for SCSI command 0x17-- guessing data in; [ 73.570355][ T7634] program syz.0.502 not setting count and/or reply_len properly [ 73.672923][ T7647] net_ratelimit: 4 callbacks suppressed [ 73.672932][ T7647] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 74.145747][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 74.476441][ T7685] lo speed is unknown, defaulting to 1000 [ 74.480881][ T7686] lo speed is unknown, defaulting to 1000 [ 74.864573][ T7699] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 75.173038][ T7727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.523'. [ 75.189971][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 75.190244][ T39] audit: type=1400 audit(1736212624.266:530): avc: denied { map } for pid=7721 comm="syz.1.522" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.199517][ T39] audit: type=1400 audit(1736212624.266:531): avc: denied { execute } for pid=7721 comm="syz.1.522" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.096178][ T39] audit: type=1400 audit(1736212625.176:532): avc: denied { connect } for pid=7744 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.114191][ T7745] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 76.116906][ T39] audit: type=1400 audit(1736212625.196:533): avc: denied { remount } for pid=7744 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.117049][ T7745] binder: Binderfs stats mode cannot be changed during a remount [ 76.222074][ T7756] netlink: 'syz.3.529': attribute type 9 has an invalid length. [ 76.224313][ T7756] netlink: 244 bytes leftover after parsing attributes in process `syz.3.529'. [ 76.385517][ T7762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=7762 comm=syz.3.531 [ 76.443510][ T7768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.551165][ T7773] mmap: syz.3.534 (7773) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.555335][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 76.560410][ T7773] macsec0: entered promiscuous mode [ 76.572387][ T92] wlan0: Trigger new scan to find an IBSS to join [ 76.628996][ T7784] netlink: 'syz.0.538': attribute type 11 has an invalid length. [ 76.634810][ T7785] xt_hashlimit: size too large, truncated to 1048576 [ 76.636767][ T7785] xt_hashlimit: max too large, truncated to 1048576 [ 76.643597][ T7788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.540'. [ 76.648101][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.540'. [ 76.651517][ T7788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.540'. [ 76.654218][ T7788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.540'. [ 76.675605][ T7793] overlayfs: failed to resolve './file0': -2 [ 76.713089][ T7796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7796 comm=syz.2.539 [ 76.852122][ T7810] netlink: 'syz.0.545': attribute type 9 has an invalid length. [ 76.854404][ T7810] netlink: 244 bytes leftover after parsing attributes in process `syz.0.545'. [ 77.009355][ T39] audit: type=1400 audit(1736212626.086:534): avc: denied { write } for pid=7812 comm="syz.0.546" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.022940][ T7813] tmpfs: Unknown parameter '0xffffffffffffffff' [ 77.484130][ T7819] Illegal XDP return value 74978319 on prog (id 127) dev N/A, expect packet loss! [ 77.706056][ T39] audit: type=1400 audit(1736212626.786:535): avc: denied { append } for pid=7827 comm="syz.3.551" name="dlm_plock" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.840545][ T39] audit: type=1400 audit(1736212626.926:536): avc: denied { append } for pid=7774 comm="syz.1.536" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.840677][ T7789] random: crng reseeded on system resumption [ 77.847148][ T39] audit: type=1400 audit(1736212626.926:537): avc: denied { open } for pid=7774 comm="syz.1.536" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.994006][ T39] audit: type=1400 audit(1736212627.076:538): avc: denied { ioctl } for pid=7774 comm="syz.1.536" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.009045][ T7775] ip6t_rpfilter: unknown options [ 78.632333][ T39] audit: type=1400 audit(1736212627.716:539): avc: denied { module_load } for pid=7851 comm="syz.1.557" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 78.632962][ T7852] kernel read not supported for file /policy (pid: 7852 comm: syz.1.557) [ 78.647433][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 78.650081][ T7852] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 78.791714][ T7858] Bluetooth: (null): Out-of-order packet arrived (7 != 0) [ 78.796800][ T1227] Bluetooth: (null): Invalid header checksum [ 78.877360][ T7863] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 79.084153][ T7884] pim6reg1: entered promiscuous mode [ 79.085727][ T7884] pim6reg1: entered allmulticast mode [ 79.198287][ T7897] devtmpfs: Bad value for 'usrquota_inode_hardlimit' [ 79.266240][ T7906] __nla_validate_parse: 2 callbacks suppressed [ 79.266250][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 79.276834][ T7906] kvm: MWAIT instruction emulated as NOP! [ 79.378456][ T7911] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 79.381346][ T7911] fuse: Unknown parameter 'rootmWdeJ00000000000kÛ‘öÙÇ000000040000-u¯‡f*Yid' [ 79.491711][ T7918] Cannot find del_set index 4 as target [ 79.495303][ T7918] x_tables: duplicate underflow at hook 2 [ 79.519891][ T12] wlan0: Trigger new scan to find an IBSS to join [ 79.612406][ T1227] wlan1: Trigger new scan to find an IBSS to join [ 79.679147][ T7946] MPI: mpi too large (16392 bits) [ 79.691506][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 79.740231][ T7954] x_tables: duplicate underflow at hook 3 [ 79.743191][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 79.746678][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 79.750252][ T7954] netlink: 'syz.1.590': attribute type 13 has an invalid length. [ 79.760077][ T56] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 79.761734][ T7955] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 79.767534][ T7955] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 79.769395][ T7955] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.772845][ T7955] vhci_hcd vhci_hcd.0: Device attached [ 79.788415][ T7956] vhci_hcd: connection closed [ 79.790156][ T12] vhci_hcd: stop threads [ 79.792866][ T12] vhci_hcd: release socket [ 79.794234][ T12] vhci_hcd: disconnect device [ 79.807863][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.592'. [ 79.828396][ T7970] random: crng reseeded on system resumption [ 79.887352][ T7977] fuse: Bad value for 'fd' [ 79.912114][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.915975][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.919212][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.924455][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.927315][ T56] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 79.930116][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.934531][ T56] hub 5-1:1.0: bad descriptor, ignoring hub [ 79.936339][ T56] hub 5-1:1.0: probe with driver hub failed with error -5 [ 79.939229][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 79.940968][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 79.943008][ T56] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 79.944970][ T56] cdc_wdm 5-1:1.0: Unknown control protocol [ 80.220011][ T62] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 80.243096][ T39] kauditd_printk_skb: 58 callbacks suppressed [ 80.243105][ T39] audit: type=1326 audit(1736212629.326:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.2.575" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6d185d29 code=0x7fc00000 [ 80.359936][ T62] usb 8-1: device descriptor read/64, error -71 [ 80.394576][ T7998] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.486975][ T68] wlan0: Creating new IBSS network, BSSID 9a:da:8b:db:b0:1e [ 80.525465][ T8021] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.610690][ T62] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 80.759828][ T62] usb 8-1: device descriptor read/64, error -71 [ 80.880157][ T62] usb usb8-port1: attempt power cycle [ 81.219833][ T62] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 81.240255][ T62] usb 8-1: device descriptor read/8, error -71 [ 81.362386][ T30] cfg80211: failed to load regulatory.db [ 81.479817][ T62] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 81.502463][ T62] usb 8-1: device descriptor read/8, error -71 [ 81.611314][ T62] usb usb8-port1: unable to enumerate USB device [ 82.641402][ T8070] netlink: 252 bytes leftover after parsing attributes in process `syz.2.609'. [ 82.655744][ T8070] netlink: 252 bytes leftover after parsing attributes in process `syz.2.609'. [ 83.047833][ T8081] netlink: 'syz.3.616': attribute type 29 has an invalid length. [ 83.055535][ T8081] netlink: 'syz.3.616': attribute type 29 has an invalid length. [ 83.087597][ T8083] syz.3.617: attempt to access beyond end of device [ 83.087597][ T8083] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 83.091602][ T8083] vxfs: unable to read disk superblock at 1 [ 83.094048][ T8083] syz.3.617: attempt to access beyond end of device [ 83.094048][ T8083] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 83.097687][ T8083] vxfs: unable to read disk superblock at 8 [ 83.099390][ T8083] vxfs: can't find superblock. [ 83.158392][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.619'. [ 83.165176][ T8090] netlink: 156 bytes leftover after parsing attributes in process `syz.3.619'. [ 83.168744][ T8090] netlink: 148 bytes leftover after parsing attributes in process `syz.3.619'. [ 83.413751][ T5969] usb 5-1: USB disconnect, device number 3 [ 83.415909][ T7926] cdc_wdm 5-1:1.0: Error autopm - -16 [ 83.430848][ T39] audit: type=1400 audit(1736212632.516:599): avc: denied { append } for pid=8097 comm="syz.2.623" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.464674][ T39] audit: type=1400 audit(1736212632.546:600): avc: denied { write } for pid=8102 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.477542][ T8109] netlink: 'syz.2.625': attribute type 21 has an invalid length. [ 83.491855][ T5990] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 83.612471][ T39] audit: type=1400 audit(1736212632.696:601): avc: denied { setopt } for pid=8121 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.667267][ T8128] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.670723][ T8128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.673526][ T5990] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 83.674361][ T8128] IPv6: NLM_F_CREATE should be set when creating new route [ 83.676676][ T5990] usb 8-1: config 0 has no interface number 0 [ 83.679349][ T8128] IPv6: NLM_F_CREATE should be set when creating new route [ 83.681269][ T5990] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.685693][ T8127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.686885][ T5990] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 83.692716][ T5990] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 83.695844][ T5990] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 83.698911][ T5990] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.707971][ T5990] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 83.710857][ T5990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.714880][ T5990] usb 8-1: config 0 descriptor?? [ 83.716794][ T8096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.722521][ T5990] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 83.934425][ T8143] ip6t_srh: unknown srh match flags 4000 [ 83.938479][ T8143] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 83.948453][ T8143] netem: incorrect gi model size [ 83.950436][ T8143] netem: change failed [ 83.990416][ T1018] usb 8-1: USB disconnect, device number 8 [ 83.993385][ T1018] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 84.421755][ T8155] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 84.428432][ T8155] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 84.438109][ T8157] Cannot find set identified by id 0 to match [ 84.480360][ T1139] wlan1: Trigger new scan to find an IBSS to join [ 84.640158][ T8178] netlink: 'syz.3.647': attribute type 10 has an invalid length. [ 84.640170][ T8178] netlink: 'syz.3.647': attribute type 19 has an invalid length. [ 84.640177][ T8178] __nla_validate_parse: 11 callbacks suppressed [ 84.640183][ T8178] netlink: 156 bytes leftover after parsing attributes in process `syz.3.647'. [ 84.640886][ T39] audit: type=1800 audit(1736212633.716:602): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.647" name="/newroot/158/file0" dev="tmpfs" ino=861 res=0 errno=0 [ 84.671450][ T39] audit: type=1400 audit(1736212633.726:603): avc: denied { read write } for pid=8177 comm="syz.3.647" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.671470][ T39] audit: type=1400 audit(1736212633.726:604): avc: denied { open } for pid=8177 comm="syz.3.647" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.687067][ T39] audit: type=1400 audit(1736212633.766:605): avc: denied { ioctl } for pid=8181 comm="syz.1.648" path="socket:[21200]" dev="sockfs" ino=21200 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.778307][ T39] audit: type=1400 audit(1736212633.856:606): avc: denied { load_policy } for pid=8194 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.778646][ T8195] SELinux: policydb string does not match my string SE Linux [ 84.786861][ T8195] SELinux: failed to load policy [ 84.790871][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 84.793401][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 84.801665][ T39] audit: type=1400 audit(1736212633.876:607): avc: denied { read } for pid=8203 comm="syz.3.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.871285][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 84.970379][ T8212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=8212 comm=syz.2.657 [ 85.072166][ T8236] openvswitch: netlink: IPv4 frag type 224 is out of range max 2 [ 85.080818][ T5990] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 85.231864][ T8251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.668'. [ 85.451109][ T1170] wlan1: Creating new IBSS network, BSSID 46:d6:6f:16:8a:bb [ 85.601115][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 86.138379][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 86.138389][ T39] audit: type=1400 audit(1736212635.216:609): avc: denied { validate_trans } for pid=8260 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 86.212346][ T8273] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 86.215530][ T8273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.253435][ T8276] delete_channel: no stack [ 86.257950][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 86.262718][ T8283] netlink: 80 bytes leftover after parsing attributes in process `syz.1.677'. [ 86.280308][ T8283] netlink: 80 bytes leftover after parsing attributes in process `syz.1.677'. [ 86.290075][ T8283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.336431][ T8295] netlink: 32 bytes leftover after parsing attributes in process `syz.0.679'. [ 86.338224][ T8293] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 86.435290][ T8308] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 86.437198][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.439434][ T8308] vhci_hcd vhci_hcd.0: Device attached [ 86.443152][ T8309] vhci_hcd: connection closed [ 86.443271][ T1170] vhci_hcd: stop threads [ 86.445928][ T1170] vhci_hcd: release socket [ 86.447233][ T1170] vhci_hcd: disconnect device [ 86.464073][ T39] audit: type=1400 audit(1736212635.546:610): avc: denied { execute } for pid=8305 comm="syz.2.683" path="/dev/audio" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 87.041705][ T39] audit: type=1400 audit(1736212636.126:611): avc: denied { listen } for pid=8319 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 87.050385][ T39] audit: type=1400 audit(1736212636.126:612): avc: denied { accept } for pid=8319 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 87.166407][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'. [ 87.181095][ T8334] bond2: entered promiscuous mode [ 87.182636][ T8334] bond2: entered allmulticast mode [ 87.184266][ T8334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.201791][ T8337] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 87.263731][ T39] audit: type=1400 audit(1736212636.346:613): avc: denied { create } for pid=8347 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 87.269972][ T39] audit: type=1400 audit(1736212636.346:614): avc: denied { write } for pid=8347 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 87.275743][ T39] audit: type=1400 audit(1736212636.346:615): avc: denied { append } for pid=8347 comm="syz.1.697" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 87.359045][ T39] audit: type=1400 audit(1736212636.436:616): avc: denied { sqpoll } for pid=8354 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.394885][ T39] audit: type=1400 audit(1736212636.476:617): avc: denied { map } for pid=8361 comm="syz.2.701" path="/dev/vcsa4" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 87.402773][ T39] audit: type=1400 audit(1736212636.476:618): avc: denied { ioctl } for pid=8361 comm="syz.2.701" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 87.715254][ T8379] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 87.717843][ T8379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.164035][ T8399] lo speed is unknown, defaulting to 1000 [ 88.251946][ T8406] netlink: 'syz.2.714': attribute type 26 has an invalid length. [ 88.401661][ T8422] syzkaller1: entered promiscuous mode [ 88.403375][ T8422] syzkaller1: entered allmulticast mode [ 88.406798][ T8422] netlink: 'syz.0.719': attribute type 39 has an invalid length. [ 88.629476][ T8426] netfs: Couldn't get user pages (rc=-14) [ 88.642549][ T8426] netfs: Zero-sized read [R=3] [ 88.853496][ T8453] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 88.897962][ T8460] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 88.900626][ T8460] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 88.909710][ T8453] veth1_to_batadv: entered promiscuous mode [ 88.912315][ T8453] macsec1: entered promiscuous mode [ 89.018188][ T8475] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 89.057454][ T8479] netlink: 'syz.3.737': attribute type 10 has an invalid length. [ 89.061122][ T8479] bridge0: port 3(syz_tun) entered disabled state [ 89.067817][ T8479] bridge0: port 3(syz_tun) entered blocking state [ 89.070198][ T8479] bridge0: port 3(syz_tun) entered forwarding state [ 89.073529][ T8479] bridge0: entered promiscuous mode [ 89.075505][ T8479] $Hÿ: (slave bridge0): Enslaving as an active interface with an up link [ 89.321846][ T8495] fuse: Invalid rootmode [ 89.396423][ T8510] x_tables: duplicate underflow at hook 1 [ 89.399064][ T8510] overlayfs: disabling nfs_export due to verity=on [ 89.558158][ T8519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8519 comm=syz.3.750 [ 89.685913][ T5933] block nbd0: Receive control failed (result -32) [ 89.692343][ T8453] block nbd0: shutting down sockets [ 89.840663][ T8539] xt_hashlimit: size too large, truncated to 1048576 [ 89.884011][ T8544] __nla_validate_parse: 12 callbacks suppressed [ 89.884022][ T8544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.757'. [ 89.888582][ T8544] netlink: 92 bytes leftover after parsing attributes in process `syz.0.757'. [ 89.958679][ T8558] netlink: 'syz.3.758': attribute type 10 has an invalid length. [ 89.970235][ T8558] veth0_vlan: left promiscuous mode [ 89.976618][ T8558] veth0_vlan: entered promiscuous mode [ 89.983005][ T8558] team0: Device veth0_vlan failed to register rx_handler [ 90.125648][ T8564] mkiss: ax0: crc mode is auto. [ 90.376492][ T8576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.378695][ T8576] IPv6: NLM_F_CREATE should be set when creating new route [ 90.561379][ T56] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 90.597094][ T8583] netlink: 'syz.0.769': attribute type 29 has an invalid length. [ 90.601201][ T8583] netlink: 'syz.0.769': attribute type 29 has an invalid length. [ 90.604425][ T8583] netlink: 'syz.0.769': attribute type 29 has an invalid length. [ 90.607546][ T8583] netlink: 'syz.0.769': attribute type 29 has an invalid length. [ 90.611251][ T8583] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 90.709838][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 90.713020][ T56] usb 6-1: config 1 interface 0 altsetting 99 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.716832][ T56] usb 6-1: config 1 interface 0 has no altsetting 0 [ 90.721317][ T56] usb 6-1: New USB device found, idVendor=046d, idProduct=c26e, bcdDevice= 0.40 [ 90.726936][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.730676][ T56] usb 6-1: Product: à ‡ [ 90.731929][ T56] usb 6-1: Manufacturer: ã­î©°é¿¾ë¶¦ï”꛷∻໳签씵㖲㹹ꖗ꒪忮昈Ꞿࠣ焌æ¥äº¯ã²ì·–䜽燺曇ূ餕㩩￿늢敠৓隲çºï”‰ïŒŽé‰ì­±áœ³ç®Œâ«ƒè®° [ 90.736441][ T56] usb 6-1: SerialNumber: 蟊齲ᘧᠸ俒惭통뼚㟧Ṉ푀贑⪅ڢ枤镪贘绉拯⽽⸃⤙뢮ݓ쩵箂斣鞿眬蒌㪠◺ê¹î™µé‰à®¢æ­“쯳⛡膽é¹è‘Œîª¼â–šè”¹éµ¶è‚“䅦鴾林勹삉ꅆ껅듇æŽí„‡âœì ¹è¢ì¾šÄ¼ç¿¯퓓춨﫳햽䆮ïµä§„曫犲䕥젼表樰뤫ᛒç§â…µå¥¢è°¤ç¯î…¾ëŒ·ä‰á·­ï쾌꽕묾íšé‡ìš²ÜŒî•¶ì”¨ [ 90.872321][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 90.872604][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 90.901699][ T8604] netlink: 72 bytes leftover after parsing attributes in process `syz.3.777'. [ 90.974310][ T56] usbhid 6-1:1.0: can't add hid device: -71 [ 90.976123][ T56] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 90.986337][ T56] usb 6-1: USB disconnect, device number 7 [ 91.031819][ T8622] syzkaller1: entered promiscuous mode [ 91.033873][ T8622] syzkaller1: entered allmulticast mode [ 91.065698][ T8633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.787'. [ 91.127567][ T8645] netlink: 32 bytes leftover after parsing attributes in process `syz.2.789'. [ 91.174453][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.791'. [ 91.180965][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 91.180975][ T39] audit: type=1400 audit(1736212640.266:638): avc: denied { read } for pid=8648 comm="syz.3.791" name="file0" dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.186153][ T8649] IPVS: Unknown mcast interface: dvmrp0 [ 91.188830][ T39] audit: type=1400 audit(1736212640.266:639): avc: denied { open } for pid=8648 comm="syz.3.791" path="/191/file0" dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.188849][ T39] audit: type=1400 audit(1736212640.266:640): avc: denied { ioctl } for pid=8648 comm="syz.3.791" path="/191/file0" dev="tmpfs" ino=1032 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.310378][ T39] audit: type=1400 audit(1736212640.396:641): avc: denied { nlmsg_write } for pid=8650 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.311057][ T8659] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 91.338668][ T8660] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.792'. [ 91.344142][ T8660] netlink: zone id is out of range [ 91.345662][ T8660] netlink: zone id is out of range [ 91.347263][ T8660] netlink: zone id is out of range [ 91.348788][ T8660] netlink: zone id is out of range [ 91.350371][ T8660] netlink: get zone limit has 8 unknown bytes [ 91.434641][ T8673] ptrace attach of "/syz-executor exec"[5930] was attempted by " [ 91.508813][ T8680] xt_hashlimit: size too large, truncated to 1048576 [ 91.514204][ T8677] kvm: emulating exchange as write [ 91.573400][ T8677] netlink: 'syz.3.799': attribute type 12 has an invalid length. [ 91.615325][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 92.224153][ T39] audit: type=1400 audit(1736212641.306:642): avc: denied { write } for pid=8711 comm="syz.3.807" path="socket:[22162]" dev="sockfs" ino=22162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.534720][ T8721] sp0: Synchronizing with TNC [ 92.715718][ T39] audit: type=1400 audit(1736212641.796:643): avc: denied { read } for pid=8727 comm="syz.1.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.011958][ T39] audit: type=1400 audit(1736212642.096:644): avc: denied { create } for pid=8746 comm="syz.1.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.017595][ T39] audit: type=1400 audit(1736212642.096:645): avc: denied { connect } for pid=8746 comm="syz.1.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.124282][ T8749] qrtr: Invalid version 0 [ 93.129394][ T39] audit: type=1400 audit(1736212642.206:646): avc: denied { listen } for pid=8746 comm="syz.1.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 93.253719][ T8760] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 93.253719][ T8760] program syz.3.820 not setting count and/or reply_len properly [ 93.366586][ T8763] xt_cgroup: invalid path, errno=-2 [ 93.368577][ T8763] xt_cgroup: invalid path, errno=-2 [ 93.376443][ T8763] xt_cgroup: invalid path, errno=-2 [ 93.378177][ T8763] xt_cgroup: invalid path, errno=-2 [ 93.380355][ T8763] xt_cgroup: invalid path, errno=-2 [ 93.382101][ T8763] xt_cgroup: invalid path, errno=-2 [ 93.383771][ T8763] xt_cgroup: invalid path, errno=-2 [ 93.385375][ T8763] xt_cgroup: invalid path, errno=-2 [ 93.386976][ T8763] xt_cgroup: invalid path, errno=-2 [ 93.388596][ T8763] xt_cgroup: invalid path, errno=-2 [ 93.422626][ T39] audit: type=1400 audit(1736212642.506:647): avc: denied { bind } for pid=8766 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.485984][ T8769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.839871][ T5990] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.989815][ T5990] usb 5-1: Using ep0 maxpacket: 16 [ 93.993317][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.996543][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.999378][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 94.003252][ T5990] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 94.006103][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.010066][ T5990] usb 5-1: config 0 descriptor?? [ 94.418409][ T5990] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 94.420592][ T5990] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 94.422563][ T5990] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 94.424459][ T5990] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 94.426991][ T5990] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 94.432348][ T5990] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 94.447566][ T5990] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 94.450474][ T5990] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 94.691185][ T62] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 94.691231][ T8] usb 5-1: USB disconnect, device number 4 [ 94.694715][ T62] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 94.699734][ T62] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 94.705788][ T62] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 94.811797][ T5933] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 95.016143][ T8797] veth1_to_batadv: entered promiscuous mode [ 95.018311][ T8797] macsec1: entered promiscuous mode [ 95.352287][ T8805] proc: Unknown parameter 'E+‡Ë%„Œþ ¯„xù›‘î]Uô& o—¥šG±' [ 95.356341][ T8805] mkiss: ax0: crc mode is auto. [ 95.624891][ T8830] delete_channel: no stack [ 95.656014][ T8838] __nla_validate_parse: 3 callbacks suppressed [ 95.656028][ T8838] netlink: 80 bytes leftover after parsing attributes in process `syz.0.844'. [ 95.948453][ T8857] SELinux: truncated policydb string identifier [ 95.951408][ T8857] SELinux: failed to load policy [ 96.261462][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 96.261473][ T39] audit: type=1400 audit(1736212645.346:656): avc: denied { read } for pid=8858 comm="syz.3.850" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.415960][ T8859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.418954][ T8859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.432976][ T8859] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.437238][ T8859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.439714][ T8859] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.444885][ T8859] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.588400][ T39] audit: type=1400 audit(1736212645.666:657): avc: denied { map } for pid=8868 comm="syz.0.853" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 96.682022][ T8866] syz.3.852 (8866): drop_caches: 2 [ 96.729171][ T8866] syz.3.852 (8866): drop_caches: 2 [ 96.962238][ T39] audit: type=1400 audit(1736212646.046:658): avc: denied { ioctl } for pid=8890 comm="syz.0.862" path="socket:[22446]" dev="sockfs" ino=22446 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.046950][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 97.548820][ T39] audit: type=1400 audit(1736212646.626:659): avc: denied { shutdown } for pid=8900 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.680735][ T39] audit: type=1400 audit(1736212646.766:660): avc: denied { ioctl } for pid=8905 comm="syz.3.867" path="socket:[22472]" dev="sockfs" ino=22472 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.739011][ T8908] ALSA: seq fatal error: cannot create timer (-19) [ 97.816277][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 97.820469][ T8914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8914 comm=syz.1.870 [ 97.825307][ T8914] netlink: 112 bytes leftover after parsing attributes in process `syz.1.870'. [ 97.829053][ T39] audit: type=1400 audit(1736212646.906:661): avc: denied { getopt } for pid=8913 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 97.878267][ T8916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.872'. [ 97.994728][ T39] audit: type=1400 audit(1736212647.076:662): avc: denied { map } for pid=8926 comm="syz.0.874" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.002123][ T39] audit: type=1400 audit(1736212647.076:663): avc: denied { execute } for pid=8926 comm="syz.0.874" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.031701][ T8932] nbd: socks must be embedded in a SOCK_ITEM attr [ 98.101014][ T39] audit: type=1400 audit(1736212647.186:664): avc: denied { ioctl } for pid=8937 comm="syz.1.878" path="socket:[25683]" dev="sockfs" ino=25683 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 98.247295][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 98.250018][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 98.252508][ T8952] netlink: 'syz.1.884': attribute type 13 has an invalid length. [ 98.254858][ T8952] netlink: 'syz.1.884': attribute type 11 has an invalid length. [ 98.298577][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.886'. [ 98.399952][ T5933] Bluetooth: hci1: command 0x206a tx timeout [ 98.425847][ T39] audit: type=1400 audit(1736212647.506:665): avc: denied { mount } for pid=8969 comm="syz.3.890" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 98.478512][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.891'. [ 98.489850][ T5933] Bluetooth: hci3: command 0x0405 tx timeout [ 98.550978][ T5970] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 98.701594][ T5970] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.706785][ T5970] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.709520][ T5970] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.712725][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.717367][ T8961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.722166][ T5970] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.808885][ T8987] input: syz1 as /devices/virtual/input/input14 [ 98.825343][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 98.920551][ T6253] usb 6-1: USB disconnect, device number 8 [ 98.964356][ T9000] fuse: Unknown parameter '0x0000000000000004' [ 99.830027][ T5969] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 99.992236][ T5969] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.995097][ T5969] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 99.997517][ T5969] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 100.000523][ T5969] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 100.002995][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.006483][ T9041] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 100.009495][ T5969] hub 6-1:1.0: bad descriptor, ignoring hub [ 100.011484][ T5969] hub 6-1:1.0: probe with driver hub failed with error -5 [ 100.013587][ T5969] cdc_wdm 6-1:1.0: skipping garbage [ 100.015011][ T5969] cdc_wdm 6-1:1.0: skipping garbage [ 100.018149][ T5969] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 100.019840][ T5969] cdc_wdm 6-1:1.0: Unknown control protocol [ 100.210297][ T9041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.213155][ T9041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.217897][ T9041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.221513][ T9041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.225115][ T9041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.228562][ T9041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.232322][ T9041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.235142][ T9041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.237957][ T9041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.240508][ T9041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.312369][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 100.314398][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 100.316936][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 100.318755][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 100.321011][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 100.322843][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 100.452303][ T56] usb 6-1: USB disconnect, device number 9 [ 100.479954][ T64] Bluetooth: hci1: command 0x206a tx timeout [ 100.559925][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 100.672034][ T9077] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.674069][ T9077] __nla_validate_parse: 3 callbacks suppressed [ 100.674077][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 100.721650][ T9083] overlayfs: failed to resolve './file1/file0': -2 [ 100.874369][ T9095] netlink: 666 bytes leftover after parsing attributes in process `syz.1.925'. [ 100.879783][ T9095] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 101.116723][ T9103] usb usb1: usbfs: process 9103 (syz.0.929) did not claim interface 0 before use [ 101.350039][ T9108] netlink: 'syz.0.931': attribute type 5 has an invalid length. [ 101.388486][ T9110] netlink: 412 bytes leftover after parsing attributes in process `syz.0.932'. [ 101.394893][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 101.394903][ T39] audit: type=1400 audit(1736212650.476:673): avc: denied { setopt } for pid=9109 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.518273][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 101.522152][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 101.525864][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 101.529009][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 101.532551][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 101.536126][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 101.539273][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 101.683706][ T9129] tun0: tun_chr_ioctl cmd 1074025678 [ 101.685355][ T9129] tun0: group set to 0 [ 101.907812][ T39] audit: type=1400 audit(1736212650.986:674): avc: denied { accept } for pid=9146 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 101.951799][ T9144] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 101.964504][ T9144] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.972052][ T9144] nfs4: Unknown parameter 'Ö' [ 102.092695][ T39] audit: type=1400 audit(1736212651.176:675): avc: denied { create } for pid=9163 comm="syz.1.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 102.171765][ T9173] netlink: 'syz.1.948': attribute type 1 has an invalid length. [ 102.243230][ T9175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9175 comm=syz.3.949 [ 102.280448][ T9178] netlink: 'syz.1.950': attribute type 13 has an invalid length. [ 102.288829][ T39] audit: type=1400 audit(1736212651.366:676): avc: denied { bind } for pid=9181 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 102.299914][ T39] audit: type=1400 audit(1736212651.366:677): avc: denied { write } for pid=9181 comm="syz.2.951" path="socket:[27153]" dev="sockfs" ino=27153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 102.317200][ T9189] input: syz0 as /devices/virtual/input/input15 [ 102.332776][ T39] audit: type=1400 audit(1736212651.416:678): avc: denied { read } for pid=9193 comm="syz.3.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.410983][ T39] audit: type=1400 audit(1736212651.496:679): avc: denied { map } for pid=9198 comm="syz.1.956" path="socket:[27164]" dev="sockfs" ino=27164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.559878][ T64] Bluetooth: hci1: command 0x206a tx timeout [ 102.642974][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.647049][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.649362][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.649847][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 102.651698][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.655751][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.657891][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.661134][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.663321][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.665379][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.667465][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.669488][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.671889][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.674228][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.676331][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.678453][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.681538][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.683820][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.685948][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.688049][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.690462][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.692609][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.694717][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.696750][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.698820][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.701218][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.703407][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.705548][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.707641][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.709874][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.711900][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.713993][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.716013][ T5969] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.721977][ T5969] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 102.889910][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 102.954716][ T9237] netlink: 'syz.0.965': attribute type 4 has an invalid length. [ 102.960029][ T9237] netlink: 'syz.0.965': attribute type 23 has an invalid length. [ 102.963163][ T9237] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.051652][ T8] usb 7-1: config 0 has no interfaces? [ 103.054131][ T8] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 103.057831][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.064174][ T8] usb 7-1: config 0 descriptor?? [ 103.801168][ T9269] fuse: Bad value for 'group_id' [ 103.802675][ T9269] fuse: Bad value for 'group_id' [ 103.805679][ T39] audit: type=1400 audit(1736212652.886:680): avc: denied { getopt } for pid=9268 comm="syz.3.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.808710][ T9265] FAULT_INJECTION: forcing a failure. [ 103.808710][ T9265] name failslab, interval 1, probability 0, space 0, times 1 [ 103.811542][ T39] audit: type=1326 audit(1736212652.886:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9270 comm="syz.1.975" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b7ab85d29 code=0x0 [ 103.814835][ T9265] CPU: 3 UID: 0 PID: 9265 Comm: syz.0.973 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 103.824019][ T9265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.827309][ T9265] Call Trace: [ 103.828282][ T9265] [ 103.829148][ T9265] dump_stack_lvl+0x16c/0x1f0 [ 103.830595][ T9265] should_fail_ex+0x497/0x5b0 [ 103.831975][ T9265] ? fs_reclaim_acquire+0xae/0x150 [ 103.833450][ T9265] should_failslab+0xc2/0x120 [ 103.834826][ T9265] __kmalloc_noprof+0xcb/0x510 [ 103.836221][ T9265] do_sys_poll+0x24b/0xde0 [ 103.837526][ T9265] ? __pfx_mark_lock+0x10/0x10 [ 103.838939][ T9265] ? __pfx_do_sys_poll+0x10/0x10 [ 103.840522][ T9265] ? __pfx___lock_acquire+0x10/0x10 [ 103.842111][ T9265] ? __mutex_unlock_slowpath+0x164/0x690 [ 103.843895][ T9265] ? set_user_sigmask+0x217/0x2a0 [ 103.845781][ T9265] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.848171][ T9265] ? __pfx_set_user_sigmask+0x10/0x10 [ 103.850331][ T9265] ? __fget_files+0x206/0x3a0 [ 103.852243][ T9265] __x64_sys_ppoll+0x25a/0x2d0 [ 103.854164][ T9265] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 103.855986][ T9265] ? ksys_write+0x1ba/0x250 [ 103.857299][ T9265] ? __pfx_ksys_write+0x10/0x10 [ 103.859000][ T9265] do_syscall_64+0xcd/0x250 [ 103.860799][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.863197][ T9265] RIP: 0033:0x7fa611785d29 [ 103.864976][ T9265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.872446][ T9265] RSP: 002b:00007fa612615038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 103.875612][ T9265] RAX: ffffffffffffffda RBX: 00007fa611975fa0 RCX: 00007fa611785d29 [ 103.878090][ T9265] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00000000200000c0 [ 103.880396][ T9265] RBP: 00007fa612615090 R08: 0000000000000000 R09: 0000000000000000 [ 103.882812][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.885247][ T9265] R13: 0000000000000000 R14: 00007fa611975fa0 R15: 00007fff67bb6768 [ 103.887621][ T9265] [ 103.933163][ T9283] binder: 9282:9283 ioctl c018620b 20000140 returned -14 [ 103.935837][ T39] audit: type=1400 audit(1736212653.016:682): avc: denied { append } for pid=9282 comm="syz.0.977" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.063723][ T9298] team_slave_0: entered allmulticast mode [ 104.310464][ T9313] FAULT_INJECTION: forcing a failure. [ 104.310464][ T9313] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.314249][ T9313] CPU: 3 UID: 0 PID: 9313 Comm: syz.3.985 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 104.317299][ T9313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.320328][ T9313] Call Trace: [ 104.321291][ T9313] [ 104.322145][ T9313] dump_stack_lvl+0x16c/0x1f0 [ 104.323554][ T9313] should_fail_ex+0x497/0x5b0 [ 104.324907][ T9313] _copy_from_user+0x2e/0xd0 [ 104.326430][ T9313] do_sys_poll+0x1d6/0xde0 [ 104.327746][ T9313] ? __pfx_mark_lock+0x10/0x10 [ 104.329076][ T9313] ? __pfx_do_sys_poll+0x10/0x10 [ 104.330474][ T9313] ? __pfx___lock_acquire+0x10/0x10 [ 104.331944][ T9313] ? __mutex_unlock_slowpath+0x164/0x690 [ 104.333534][ T9313] ? set_user_sigmask+0x217/0x2a0 [ 104.335036][ T9313] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.336775][ T9313] ? __pfx_set_user_sigmask+0x10/0x10 [ 104.338301][ T9313] ? __fget_files+0x206/0x3a0 [ 104.339672][ T9313] __x64_sys_ppoll+0x25a/0x2d0 [ 104.341052][ T9313] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 104.342562][ T9313] ? ksys_write+0x1ba/0x250 [ 104.343910][ T9313] ? __pfx_ksys_write+0x10/0x10 [ 104.345285][ T9313] do_syscall_64+0xcd/0x250 [ 104.346633][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.348221][ T9313] RIP: 0033:0x7eff75785d29 [ 104.349448][ T9313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.356182][ T9313] RSP: 002b:00007eff7665d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 104.358544][ T9313] RAX: ffffffffffffffda RBX: 00007eff75975fa0 RCX: 00007eff75785d29 [ 104.360790][ T9313] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00000000200000c0 [ 104.362986][ T9313] RBP: 00007eff7665d090 R08: 0000000000000000 R09: 0000000000000000 [ 104.365454][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.367734][ T9313] R13: 0000000000000000 R14: 00007eff75975fa0 R15: 00007ffc2e263d38 [ 104.370002][ T9313] [ 104.395949][ T9316] xt_hashlimit: size too large, truncated to 1048576 [ 104.676187][ T9324] bridge_slave_0: left allmulticast mode [ 104.677947][ T9324] bridge_slave_0: left promiscuous mode [ 104.679618][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.722729][ T5933] Bluetooth: hci3: command 0x0405 tx timeout [ 104.933443][ T9326] ceph: No source [ 105.189846][ T5969] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.283156][ T9346] netlink: 'syz.3.995': attribute type 27 has an invalid length. [ 105.312542][ T9346] bridge0: port 3(syz_tun) entered disabled state [ 105.317652][ T9346] $Hÿ: left promiscuous mode [ 105.319189][ T9346] bond_slave_0: left promiscuous mode [ 105.322332][ T9346] bond_slave_1: left promiscuous mode [ 105.324068][ T9346] bridge0: left promiscuous mode [ 105.340336][ T5969] usb 5-1: too many configurations: 37, using maximum allowed: 8 [ 105.354827][ T5969] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 105.358833][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.361291][ T5969] usb 5-1: Product: syz [ 105.362539][ T5969] usb 5-1: Manufacturer: syz [ 105.363855][ T5969] usb 5-1: SerialNumber: syz [ 105.366228][ T9346] bridge_slave_1: left promiscuous mode [ 105.370576][ T5969] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 105.397014][ T9346] team_slave_0: left allmulticast mode [ 105.402817][ T5969] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 105.415418][ T9346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.423637][ T9346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.497555][ T9346] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.500779][ T9346] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.503467][ T9346] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.506316][ T9346] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.512517][ T9346] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.515148][ T9346] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.517701][ T9346] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.520656][ T9346] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.541719][ T9350] bridge0: port 3(syz_tun) entered blocking state [ 105.543776][ T9350] bridge0: port 3(syz_tun) entered forwarding state [ 105.547073][ T9350] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 105.549203][ T8003] [ 105.550349][ T8003] ============================= [ 105.550678][ T9350] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.551794][ T8003] WARNING: suspicious RCU usage [ 105.551824][ T8003] 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 Not tainted [ 105.551831][ T8003] ----------------------------- [ 105.551835][ T8003] net/sched/sch_generic.c:1256 suspicious rcu_dereference_protected() usage! [ 105.555234][ T8003] [ 105.555234][ T8003] other info that might help us debug this: [ 105.555234][ T8003] [ 105.560548][ T8003] [ 105.560548][ T8003] rcu_scheduler_active = 2, debug_locks = 1 [ 105.560559][ T8003] 3 locks held by kworker/u32:26/8003: [ 105.560566][ T8003] #0: ffff8880262de148 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 105.560603][ T8003] #1: ffffc90005d5fd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 105.576934][ T8003] #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 105.579863][ T8003] [ 105.579863][ T8003] stack backtrace: [ 105.581592][ T8003] CPU: 2 UID: 0 PID: 8003 Comm: kworker/u32:26 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 105.584845][ T8003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.587972][ T8003] Workqueue: bond0 bond_mii_monitor [ 105.589527][ T8003] Call Trace: [ 105.590512][ T8003] [ 105.591395][ T8003] dump_stack_lvl+0x16c/0x1f0 [ 105.592804][ T8003] lockdep_rcu_suspicious+0x210/0x3c0 [ 105.594377][ T8003] dev_activate+0x457/0x12b0 [ 105.595715][ T8003] ? linkwatch_sync_dev+0x179/0x210 [ 105.597209][ T8003] ? __pfx_lock_release+0x10/0x10 [ 105.598689][ T8003] ? __pfx_dev_activate+0x10/0x10 [ 105.600129][ T8003] ? mark_held_locks+0x9f/0xe0 [ 105.601499][ T8003] linkwatch_do_dev+0x13d/0x160 [ 105.602932][ T8003] linkwatch_sync_dev+0x181/0x210 [ 105.604348][ T8003] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 105.605927][ T8003] ethtool_op_get_link+0x1d/0x70 [ 105.607357][ T8003] bond_check_dev_link+0x197/0x490 [ 105.608785][ T8003] ? __pfx_bond_check_dev_link+0x10/0x10 [ 105.610356][ T8003] bond_mii_monitor+0x3c1/0x2d90 [ 105.611754][ T8003] ? __pfx_bond_mii_monitor+0x10/0x10 [ 105.613216][ T8003] ? rcu_is_watching+0x12/0xc0 [ 105.614539][ T8003] ? lock_acquire+0x2f/0xb0 [ 105.615893][ T8003] ? process_one_work+0x921/0x1ba0 [ 105.617334][ T8003] process_one_work+0x9c5/0x1ba0 [ 105.618696][ T8003] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 105.620475][ T8003] ? __pfx_process_one_work+0x10/0x10 [ 105.621958][ T8003] ? rcu_is_watching+0x12/0xc0 [ 105.623314][ T8003] ? assign_work+0x1a0/0x250 [ 105.624591][ T8003] worker_thread+0x6c8/0xf00 [ 105.625920][ T8003] ? __pfx_worker_thread+0x10/0x10 [ 105.627444][ T8003] kthread+0x2c1/0x3a0 [ 105.628627][ T8003] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.630616][ T8003] ? __pfx_kthread+0x10/0x10 [ 105.632414][ T8003] ret_from_fork+0x45/0x80 [ 105.634116][ T8003] ? __pfx_kthread+0x10/0x10 [ 105.635946][ T8003] ret_from_fork_asm+0x1a/0x30 [ 105.637824][ T8003] [ 105.639092][ C2] vkms_vblank_simulate: vblank timer overrun [ 105.641811][ T8003] [ 105.642731][ T8003] ============================= [ 105.644391][ T8003] WARNING: suspicious RCU usage [ 105.645994][ T8003] 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 Not tainted [ 105.647891][ T8003] ----------------------------- [ 105.649245][ T8003] net/sched/sch_generic.c:1234 suspicious rcu_dereference_protected() usage! [ 105.651813][ T8003] [ 105.651813][ T8003] other info that might help us debug this: [ 105.651813][ T8003] [ 105.652820][ T56] usb 7-1: USB disconnect, device number 6 [ 105.654702][ T8003] [ 105.654702][ T8003] rcu_scheduler_active = 2, debug_locks = 1 [ 105.659160][ T8003] 3 locks held by kworker/u32:26/8003: [ 105.660776][ T8003] #0: ffff8880262de148 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 105.663800][ T8003] #1: ffffc90005d5fd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 105.667339][ T8003] #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 105.670437][ T8003] [ 105.670437][ T8003] stack backtrace: [ 105.672438][ T8003] CPU: 2 UID: 0 PID: 8003 Comm: kworker/u32:26 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 105.675743][ T8003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.679163][ T8003] Workqueue: bond0 bond_mii_monitor [ 105.681161][ T8003] Call Trace: [ 105.682444][ T8003] [ 105.683561][ T8003] dump_stack_lvl+0x16c/0x1f0 [ 105.685331][ T8003] lockdep_rcu_suspicious+0x210/0x3c0 [ 105.687367][ T8003] transition_one_qdisc+0x1d4/0x210 [ 105.688893][ T8003] dev_activate+0x211/0x12b0 [ 105.690196][ T8003] ? __pfx_lock_release+0x10/0x10 [ 105.691605][ T8003] ? __pfx_dev_activate+0x10/0x10 [ 105.693339][ T8003] ? mark_held_locks+0x9f/0xe0 [ 105.695060][ T8003] linkwatch_do_dev+0x13d/0x160 [ 105.696900][ T8003] linkwatch_sync_dev+0x181/0x210 [ 105.698844][ T8003] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 105.701022][ T8003] ethtool_op_get_link+0x1d/0x70 [ 105.702760][ T8003] bond_check_dev_link+0x197/0x490 [ 105.704705][ T8003] ? __pfx_bond_check_dev_link+0x10/0x10 [ 105.706848][ T8003] bond_mii_monitor+0x3c1/0x2d90 [ 105.708719][ T8003] ? __pfx_bond_mii_monitor+0x10/0x10 [ 105.710476][ T8003] ? rcu_is_watching+0x12/0xc0 [ 105.711830][ T8003] ? lock_acquire+0x2f/0xb0 [ 105.713124][ T8003] ? process_one_work+0x921/0x1ba0 [ 105.714565][ T8003] process_one_work+0x9c5/0x1ba0 [ 105.715949][ T8003] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 105.717741][ T8003] ? __pfx_process_one_work+0x10/0x10 [ 105.719294][ T8003] ? rcu_is_watching+0x12/0xc0 [ 105.720631][ T8003] ? assign_work+0x1a0/0x250 [ 105.721933][ T8003] worker_thread+0x6c8/0xf00 [ 105.723211][ T8003] ? __pfx_worker_thread+0x10/0x10 [ 105.724574][ T8003] kthread+0x2c1/0x3a0 [ 105.725949][ T8003] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.727678][ T8003] ? __pfx_kthread+0x10/0x10 [ 105.729062][ T8003] ret_from_fork+0x45/0x80 [ 105.730352][ T8003] ? __pfx_kthread+0x10/0x10 [ 105.731731][ T8003] ret_from_fork_asm+0x1a/0x30 [ 105.733156][ T8003] [ 105.734113][ C2] vkms_vblank_simulate: vblank timer overrun [ 105.736478][ T8003] [ 105.737317][ T8003] ============================= [ 105.739141][ T8003] WARNING: suspicious RCU usage [ 105.740739][ T8003] 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 Not tainted [ 105.742988][ T8003] ----------------------------- [ 105.744415][ T8003] ./include/linux/rtnetlink.h:156 suspicious rcu_dereference_protected() usage! [ 105.747025][ T8003] [ 105.747025][ T8003] other info that might help us debug this: [ 105.747025][ T8003] [ 105.749957][ T8003] [ 105.749957][ T8003] rcu_scheduler_active = 2, debug_locks = 1 [ 105.752229][ T8003] 3 locks held by kworker/u32:26/8003: [ 105.753777][ T8003] #0: ffff8880262de148 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 105.756841][ T8003] #1: ffffc90005d5fd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 105.760422][ T8003] #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 105.763179][ T8003] [ 105.763179][ T8003] stack backtrace: [ 105.764925][ T8003] CPU: 2 UID: 0 PID: 8003 Comm: kworker/u32:26 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 105.768062][ T8003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.771090][ T8003] Workqueue: bond0 bond_mii_monitor [ 105.772551][ T8003] Call Trace: [ 105.773514][ T8003] [ 105.774368][ T8003] dump_stack_lvl+0x16c/0x1f0 [ 105.775811][ T8003] lockdep_rcu_suspicious+0x210/0x3c0 [ 105.777382][ T8003] dev_activate+0x7eb/0x12b0 [ 105.778709][ T8003] ? __pfx_lock_release+0x10/0x10 [ 105.780164][ T8003] ? __pfx_dev_activate+0x10/0x10 [ 105.781608][ T8003] ? mark_held_locks+0x9f/0xe0 [ 105.782994][ T8003] linkwatch_do_dev+0x13d/0x160 [ 105.784391][ T8003] linkwatch_sync_dev+0x181/0x210 [ 105.785950][ T8003] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 105.787616][ T8003] ethtool_op_get_link+0x1d/0x70 [ 105.789003][ T8003] bond_check_dev_link+0x197/0x490 [ 105.790466][ T8003] ? __pfx_bond_check_dev_link+0x10/0x10 [ 105.792073][ T8003] bond_mii_monitor+0x3c1/0x2d90 [ 105.793495][ T8003] ? __pfx_bond_mii_monitor+0x10/0x10 [ 105.795143][ T8003] ? rcu_is_watching+0x12/0xc0 [ 105.796569][ T8003] ? lock_acquire+0x2f/0xb0 [ 105.797899][ T8003] ? process_one_work+0x921/0x1ba0 [ 105.799376][ T8003] process_one_work+0x9c5/0x1ba0 [ 105.800797][ T8003] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 105.802621][ T8003] ? __pfx_process_one_work+0x10/0x10 [ 105.804155][ T8003] ? rcu_is_watching+0x12/0xc0 [ 105.805712][ T8003] ? assign_work+0x1a0/0x250 [ 105.807117][ T8003] worker_thread+0x6c8/0xf00 [ 105.808447][ T8003] ? __pfx_worker_thread+0x10/0x10 [ 105.809917][ T8003] kthread+0x2c1/0x3a0 [ 105.811104][ T8003] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.812596][ T8003] ? __pfx_kthread+0x10/0x10 [ 105.813923][ T8003] ret_from_fork+0x45/0x80 [ 105.815312][ T8003] ? __pfx_kthread+0x10/0x10 [ 105.816640][ T8003] ret_from_fork_asm+0x1a/0x30 [ 105.818023][ T8003] [ 105.818954][ C2] vkms_vblank_simulate: vblank timer overrun [ 105.820905][ T8003] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 105.823503][ T8003] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 8003, name: kworker/u32:26 [ 105.826196][ T8003] preempt_count: 0, expected: 0 [ 105.827585][ T8003] RCU nest depth: 1, expected: 0 [ 105.829000][ T8003] 3 locks held by kworker/u32:26/8003: [ 105.831093][ T8003] #0: ffff8880262de148 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 105.834330][ T8003] #1: ffffc90005d5fd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 105.837885][ T8003] #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 105.840718][ T8003] CPU: 2 UID: 0 PID: 8003 Comm: kworker/u32:26 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 105.843774][ T8003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.846813][ T8003] Workqueue: bond0 bond_mii_monitor [ 105.848308][ T8003] Call Trace: [ 105.849290][ T8003] [ 105.850145][ T8003] dump_stack_lvl+0x16c/0x1f0 [ 105.851568][ T8003] __might_resched+0x3c0/0x5e0 [ 105.852953][ T8003] ? __pfx___might_resched+0x10/0x10 [ 105.854460][ T8003] down_read+0x73/0x330 [ 105.855716][ T8003] ? __pfx_down_read+0x10/0x10 [ 105.857147][ T8003] ? dev_map_notification+0x6a/0xaf0 [ 105.858679][ T8003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.860374][ T8003] wireless_nlevent_flush+0x1b/0x100 [ 105.861880][ T8003] wext_netdev_notifier_call+0xe/0x20 [ 105.863403][ T8003] notifier_call_chain+0xb7/0x410 [ 105.864885][ T8003] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 105.866662][ T8003] call_netdevice_notifiers_info+0xbe/0x140 [ 105.868359][ T8003] netdev_state_change+0x115/0x150 [ 105.869844][ T8003] ? __pfx_netdev_state_change+0x10/0x10 [ 105.871449][ T8003] ? mark_held_locks+0x9f/0xe0 [ 105.872817][ T8003] linkwatch_do_dev+0x12b/0x160 [ 105.874204][ T8003] linkwatch_sync_dev+0x181/0x210 [ 105.875662][ T8003] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 105.877261][ T8003] ethtool_op_get_link+0x1d/0x70 [ 105.878677][ T8003] bond_check_dev_link+0x197/0x490 [ 105.880145][ T8003] ? __pfx_bond_check_dev_link+0x10/0x10 [ 105.881749][ T8003] bond_mii_monitor+0x3c1/0x2d90 [ 105.883163][ T8003] ? __pfx_bond_mii_monitor+0x10/0x10 [ 105.884710][ T8003] ? rcu_is_watching+0x12/0xc0 [ 105.886105][ T8003] ? lock_acquire+0x2f/0xb0 [ 105.887417][ T8003] ? process_one_work+0x921/0x1ba0 [ 105.888885][ T8003] process_one_work+0x9c5/0x1ba0 [ 105.890314][ T8003] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 105.892267][ T8003] ? __pfx_process_one_work+0x10/0x10 [ 105.893809][ T8003] ? rcu_is_watching+0x12/0xc0 [ 105.895236][ T8003] ? assign_work+0x1a0/0x250 [ 105.896576][ T8003] worker_thread+0x6c8/0xf00 [ 105.897914][ T8003] ? __pfx_worker_thread+0x10/0x10 [ 105.899387][ T8003] kthread+0x2c1/0x3a0 [ 105.900569][ T8003] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.902061][ T8003] ? __pfx_kthread+0x10/0x10 [ 105.903408][ T8003] ret_from_fork+0x45/0x80 [ 105.904676][ T8003] ? __pfx_kthread+0x10/0x10 [ 105.906022][ T8003] ret_from_fork_asm+0x1a/0x30 [ 105.907412][ T8003] [ 105.908359][ C2] vkms_vblank_simulate: vblank timer overrun [ 105.910455][ T8003] [ 105.911367][ T8003] ============================= [ 105.912758][ T8003] [ BUG: Invalid wait context ] [ 105.914151][ T8003] 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 Tainted: G W [ 105.916647][ T8003] ----------------------------- [ 105.918035][ T8003] kworker/u32:26/8003 is trying to lock: [ 105.919646][ T8003] ffffffff8fec7210 (net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush+0x1b/0x100 [ 105.922262][ T8003] other info that might help us debug this: [ 105.923963][ T8003] context-{5:5} [ 105.924982][ T8003] 3 locks held by kworker/u32:26/8003: [ 105.926519][ T8003] #0: ffff8880262de148 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 105.929478][ T8003] #1: ffffc90005d5fd80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 105.932908][ T8003] #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 105.935651][ T8003] stack backtrace: [ 105.936730][ T8003] CPU: 3 UID: 0 PID: 8003 Comm: kworker/u32:26 Tainted: G W 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 105.940211][ T8003] Tainted: [W]=WARN [ 105.941309][ T8003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.944355][ T8003] Workqueue: bond0 bond_mii_monitor [ 105.945881][ T8003] Call Trace: [ 105.946849][ T8003] [ 105.947696][ T8003] dump_stack_lvl+0x116/0x1f0 [ 105.949051][ T8003] __lock_acquire+0x878/0x3c40 [ 105.950438][ T8003] ? mark_held_locks+0x9f/0xe0 [ 105.951822][ T8003] ? __pfx___lock_acquire+0x10/0x10 [ 105.953304][ T8003] ? irqentry_exit+0x3b/0x90 [ 105.954633][ T8003] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.956146][ T8003] lock_acquire.part.0+0x11b/0x380 [ 105.957608][ T8003] ? wireless_nlevent_flush+0x1b/0x100 [ 105.959170][ T8003] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 105.960767][ T8003] ? rcu_is_watching+0x12/0xc0 [ 105.962136][ T8003] ? trace_lock_acquire+0x14e/0x1f0 [ 105.963626][ T8003] ? __might_resched+0x3cc/0x5e0 [ 105.965061][ T8003] ? wireless_nlevent_flush+0x1b/0x100 [ 105.966622][ T8003] ? lock_acquire+0x2f/0xb0 [ 105.967930][ T8003] ? wireless_nlevent_flush+0x1b/0x100 [ 105.969494][ T8003] down_read+0x9a/0x330 [ 105.970682][ T8003] ? wireless_nlevent_flush+0x1b/0x100 [ 105.972236][ T8003] ? __pfx_down_read+0x10/0x10 [ 105.973638][ T8003] ? dev_map_notification+0x6a/0xaf0 [ 105.975181][ T8003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.976900][ T8003] wireless_nlevent_flush+0x1b/0x100 [ 105.978409][ T8003] wext_netdev_notifier_call+0xe/0x20 [ 105.979956][ T8003] notifier_call_chain+0xb7/0x410 [ 105.981392][ T8003] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 105.983193][ T8003] call_netdevice_notifiers_info+0xbe/0x140 [ 105.984888][ T8003] netdev_state_change+0x115/0x150 [ 105.986344][ T8003] ? __pfx_netdev_state_change+0x10/0x10 [ 105.987982][ T8003] ? mark_held_locks+0x9f/0xe0 [ 105.989372][ T8003] linkwatch_do_dev+0x12b/0x160 [ 105.990774][ T8003] linkwatch_sync_dev+0x181/0x210 [ 105.992229][ T8003] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 105.993795][ T8003] ethtool_op_get_link+0x1d/0x70 [ 105.995240][ T8003] bond_check_dev_link+0x197/0x490 [ 105.996740][ T8003] ? __pfx_bond_check_dev_link+0x10/0x10 [ 105.998329][ T8003] bond_mii_monitor+0x3c1/0x2d90 [ 105.999756][ T8003] ? __pfx_bond_mii_monitor+0x10/0x10 [ 106.001291][ T8003] ? rcu_is_watching+0x12/0xc0 [ 106.002683][ T8003] ? lock_acquire+0x2f/0xb0 [ 106.003987][ T8003] ? process_one_work+0x921/0x1ba0 [ 106.005479][ T8003] process_one_work+0x9c5/0x1ba0 [ 106.006924][ T8003] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 106.008743][ T8003] ? __pfx_process_one_work+0x10/0x10 [ 106.010278][ T8003] ? rcu_is_watching+0x12/0xc0 [ 106.011659][ T8003] ? assign_work+0x1a0/0x250 [ 106.012975][ T8003] worker_thread+0x6c8/0xf00 [ 106.014300][ T8003] ? __pfx_worker_thread+0x10/0x10 [ 106.015761][ T8003] kthread+0x2c1/0x3a0 [ 106.016945][ T8003] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.018423][ T8003] ? __pfx_kthread+0x10/0x10 [ 106.019759][ T8003] ret_from_fork+0x45/0x80 [ 106.021030][ T8003] ? __pfx_kthread+0x10/0x10 [ 106.022349][ T8003] ret_from_fork_asm+0x1a/0x30 [ 106.023728][ T8003] [ 106.025629][ T9350] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 106.028318][ T9350] chnl_net:chnl_net_open(): state disconnected [ 106.030199][ T9350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.040313][ T9356] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 106.049407][ T9356] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 106.053960][ T1018] usb 5-1: USB disconnect, device number 5 [ 106.071525][ T8367] $Hÿ: (slave bond_slave_0): link status definitely down, disabling slave [ 106.075040][ T8367] $Hÿ: (slave bond_slave_1): link status definitely down, disabling slave [ 106.489833][ T5969] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 106.491962][ T5969] ath9k_htc: Failed to initialize the device [ 106.493904][ T1018] usb 5-1: ath9k_htc: USB layer deinitialized [ 106.799874][ T5933] Bluetooth: hci3: command 0x0405 tx timeout [ 112.720238][ T7999] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 115.532018][ T7992] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) VM DIAGNOSIS: 01:17:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bd8f5 RDI=ffffffff9ab0fb20 RBP=ffffffff9ab0fae0 RSP=ffffc900042ce850 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=0000000000000039 R14=ffffffff851bd890 R15=0000000000000000 RIP=ffffffff851bd91f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007eff7661b6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9b7b9b7f98 CR3=000000005b286000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff67bb6b00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa611802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa611802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa611802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa611802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa611802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa611802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000b8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000129e3d RBX=0000000000000001 RCX=ffffffff8b29d7d9 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ed20 RBP=ffffed1003ad1910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d68c880 R14=ffffffff905f3bd0 R15=0000000000000000 RIP=ffffffff8b29ebbf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c27e66c CR3=000000005b286000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040200080008 0100000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff75802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff75802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff75802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff75802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff75802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff75802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bd8f5 RDI=ffffffff9ab0fb20 RBP=ffffffff9ab0fae0 RSP=ffffc90005d5f468 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=000000000000002e R14=ffffffff851bd890 R15=0000000000000000 RIP=ffffffff851bd91f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c37f1a2 CR3=000000005b286000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47cdba238d609ee9 ed383544724d436a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ef5d4b31fba9a65 7cb78f1640d7843d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e516c39df8f4002a e417b95bedd1831c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9607a0d18f171073 6395dddcedb2a3df ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002dc0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000aaaaaa00 96aaaaaaaa000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000004107c016 de0005ff00004108 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a20f4c0000004107 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7991501548022400 aaaaaaaa00004107 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 31274145631b3018 927427422eaee5ac ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c1f98d8ac762a4f1 6c9fbb7ea9fbc719 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff9a9fbee8 RCX=ffffffff8175d18e RDX=0000000000000001 RSI=ffffffff8b6cdce0 RDI=ffffffff9a9fbee8 RBP=0000000000000282 RSP=ffffc900043af148 R8 =0000000000000000 R9 =fffffbfff2dca398 R10=ffffffff96e51cc7 R11=0000000000000000 R12=ffffffff9a9fbee0 R13=00000000000009fc R14=0000000000000000 R15=ffff8880533ee000 RIP=ffffffff81773430 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001d40 CR3=0000000029a70000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555589488700 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555894fade1 00005555894faa00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555589491d91 0000555589491330 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002880800010800 0a0158fc10080007 8003000800061000 20100006005bce32 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffdf08 0980030008000410 0054100006025afa 0810000780041008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040007cc03100400 07c80300040007c4 031c040007c00300 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010b080840007de 031001e080808400 07dc0350040007d8 0300080007d0031a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 020007ea03000200 07e80334040007e4 0338040007e00302 10b880840007de03 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100006800401 0000100806060154 a800080006e00300 100006d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06c00302100006b0 0301a81000059003 00040008a4030004 0008a00336040008 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c03100400089803 0408000890030008 0008880300080008 800300080007f803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007f0030004 0007ec0300020007 ea0300020007e803 34040007e4033804 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000