last executing test programs: 37.469785973s ago: executing program 0 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000004165be97"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x800}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000080), 0x0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c0001800600060065580000100002800c0009"], 0x34}}, 0x10) 37.330102167s ago: executing program 0 (id=171): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x15) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x2, 0x0, 0x7d889395ab3b5234, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d5, 0x6c}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x9}, {0x0, 0x4, 0x40000000, 0xfffffffffffffffc}, {0x40}, 0x0, 0x0, 0xa, 0x2, 0x1, 0xe0}}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0x4810) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r5], 0x3c}}, 0x40000) (async, rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) getsockopt$sock_buf(r7, 0x1, 0x1f, &(0x7f00000002c0)=""/233, &(0x7f0000000140)=0xe9) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 37.227248926s ago: executing program 0 (id=173): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x2) (async, rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x0, 0x2, 0xfa, 0x6}, {0x8, 0xb, 0x81, 0x7}, {0x400, 0x2, 0x2, 0x100}, {0x2, 0x0, 0x8, 0xfff}, {0x401, 0x27, 0x9, 0x5}]}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfc85}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 37.226306734s ago: executing program 0 (id=175): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) (async) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000300)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004adfda9957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558150800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000180)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee88197c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) (async) ptrace$setregset(0x4205, r3, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000240)=0x6, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x28, 0x1, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1}, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x5}}}, 0x24}}, 0x0) (async) fspick(r2, &(0x7f0000000100)='./file1\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r10}, &(0x7f0000000380), &(0x7f0000000280)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x8001, 0x7}, {0x5, 0xc35}]}, 0x14, 0x1) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x1) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) 37.149990903s ago: executing program 0 (id=177): chroot(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) copy_file_range(r0, 0x0, r1, &(0x7f0000000240)=0xfffffffffffffffe, 0x20000009, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') pivot_root(0x0, 0x0) 36.809308415s ago: executing program 0 (id=187): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}]}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r3, @ANYRES32, @ANYBLOB="050033000100d0000500"], 0x34}}, 0x80) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x100, 0x2, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4004) landlock_create_ruleset(&(0x7f0000000380)={0x68}, 0x18, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, r1, 0x1, 0x3, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xb4, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x8c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd98ace46}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7b09}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffff7f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x45f3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x11) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xb4, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x8c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd98ace46}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7b09}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffff7f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x45f3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000961920000000000001c0000000400000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000961920000000000001c0000000400000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r9, &(0x7f0000000100)=ANY=[], 0xfce1) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) 36.753763833s ago: executing program 32 (id=187): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}]}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r3, @ANYRES32, @ANYBLOB="050033000100d0000500"], 0x34}}, 0x80) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x100, 0x2, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4004) landlock_create_ruleset(&(0x7f0000000380)={0x68}, 0x18, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, r1, 0x1, 0x3, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xb4, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x8c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd98ace46}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7b09}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffff7f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x45f3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x11) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xb4, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x8c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3a}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd98ace46}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7b09}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffff7f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x45f3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000961920000000000001c0000000400000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000961920000000000001c0000000400000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r9, &(0x7f0000000100)=ANY=[], 0xfce1) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) 1.848585459s ago: executing program 4 (id=925): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) (async) clock_getres(0x2, &(0x7f0000000000)) ppoll(&(0x7f0000000280)=[{r0, 0x10320}], 0x1, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.780993998s ago: executing program 2 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xd0003, 0x0, {[0x6807, 0x6, 0x81, 0xffffffffefffff15, 0x3, 0x0, 0xa99, 0xb37f]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x80002, 0x0, {[0xaa, 0x80, 0x8000000000000000, 0x3, 0x1, 0x0, 0xf169, 0x8]}}) 1.695395081s ago: executing program 2 (id=933): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x1ff, 0x56f39c1abc6ba11f, 0xfff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x18, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 1.629154891s ago: executing program 2 (id=936): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000480)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b706d45f", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000860b"], 0x40}, 0x20000810) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000180)=""/218, &(0x7f0000000280)=0xda) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x90) 1.628993341s ago: executing program 1 (id=937): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 1.549872053s ago: executing program 2 (id=940): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1], 0x1c}}, 0x92be896863cfc659) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x8, 0x3000000000002}, 0x801) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x4, 0x37) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f00000001c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000200900020073797a3100000000080004400000000009000100f3797a3000000000080003400000000a140000001100010000000000000000000000000a9211450f2c13e14da3cbba242573f19a86"], 0x64}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r8 = epoll_create1(0x0) fcntl$dupfd(r8, 0x0, r2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008b5f747ee4bb19973c5a53aad1d6e9dd18be5c895749b54d23d47df31195988f598a61ed000400003bb62d0004a7522cfad1da74d8672c3c9c87a092b0c0d3f72034a27e1224e62e7f1758c57e1b09878e92edb636d0a06c89be6146568c48497118f4c0c28f54191d14ce357195e7a231bede60faf4ae987c2580b024440996bf1ab4e1fe80", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300000000000100"/28], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, &(0x7f0000000500)="224e00ad98ca1675ba601daa70953b16d223668d643ac69f0d69c52ac71b003ef30e53920e7771ec757912d322884afd2a8fdc4f7efeec034a96e699c1e174864b8b2b7c7f9469b2ca45461075e18cc4e21d061280234d2030f1adc158450a93ef8ef438b80557f51f80cbcd5e61b369861a8c2e54394157d307a865d1dd", 0x0}, 0xfffffffffffffef0) 960.863678ms ago: executing program 4 (id=941): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85}) socketpair(0x22, 0x2, 0x4, &(0x7f0000000080)) 960.504158ms ago: executing program 4 (id=942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x7, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 889.425703ms ago: executing program 4 (id=943): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0xebec93e830f96115}) io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r6, 0xfffffffffffffffe, 0x1) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pread64(r7, &(0x7f0000000040)=""/203, 0xcb, 0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f00000001c0)={0x8, 'pim6reg\x00', {'gre0\x00'}, 0xbf}) 728.674315ms ago: executing program 1 (id=944): r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)=@ipv4_newaddr={0xffffffef, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xff, r1}}, 0x28}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 728.207487ms ago: executing program 1 (id=945): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000140)={0x3}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) ioctl$EVIOCGREP(r1, 0x80284504, &(0x7f0000000040)=""/102) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000fcdbdf2503000000180001801400020073797a5f74756e0000000000000000000500050001000000050003"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) 668.208067ms ago: executing program 2 (id=946): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x840) 667.255439ms ago: executing program 4 (id=947): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140607000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000080)="6fe0fd37ab269c1f721d461481bde3ad8f68570dd0f91ce3cf2eded44011d0bfadb9f8a8b920b865fbc97d5bd56b771d27435429c1f0c4c4880db8bd92d74590ae3e04f8184010a8f8da6b9b3e34c851a91a8c0c65bab5989bb688f315f14b4554abb623f2fdf55af7140e6321e779479bb8a8d9bee531acbfbb1d8016f85c9c37cf8b03ab2a22473c2a0854e95d3934e0b5159517", 0x95}], 0x2}, 0x20004090) 666.89931ms ago: executing program 1 (id=948): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000002080)={'#! ', '', [], 0xa, "e3ab19e0"}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x29914}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x62795}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r0, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @private1, 0xf}, 0x1c) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x87, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) 598.721534ms ago: executing program 2 (id=950): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) r2 = memfd_create(&(0x7f0000001100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000100000000001c140000fe004001000000000800010000000100"], 0x24}}, 0x2000a000) syz_emit_ethernet(0x6a, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500005c0000000000019078c31e0001ac1414aa05009078e00000e0400000000001000000330000ac1414aa0000000083030007030044240003ac1e0601000100000000000000000000ac1414aa00000000ac1414bb000000000000"], 0x0) r3 = socket(0x27, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000020300000000000000010000840000000400000000010000000e0000000000000000000004"], 0x0, 0x4a}, 0x20) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0xfffffffd, 0x7}, 0xff14) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540), 0x240e00, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x7a643) close(r9) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000052000100000000000000ecff0200000004000180c8dceac89d5da88c01370f7354c558fbfe728a5e0e05000000000000009a6c8f8523089d367ddb59c733f73f8d5350455ba59ddae459e53eb4343ce0f34a8f2da336fd76b76d2a3c1a134f51c30c828a418ce8b804d9ec55bab84464757919637b5233c3385b9b4241ee24bdca313673ebbe65c71de586efbaecb4175337f6e78e9dfeb2a6aa58981184b10a66484a2e71d6050058021c668e9b1734bdd9b27b1a42ceff548ce0f0676a3385c2e1ea314314eafef9f3d955"], 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000140)) 598.127722ms ago: executing program 4 (id=951): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0xb, &(0x7f00000002c0)={0x0, 0x38, 0x0, @tid=r0}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f00000000c0)=""/30, 0x1e) read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4093, 0xffd}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000b40)=""/206, 0xce}], 0x5}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2202, 0x0) (async) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c40)={0x1528, 0x14, 0x100, 0x70bd26, 0x25dfdbff, "", [@nested={0x103, 0x77, 0x0, 0x1, [@typed={0x14, 0x86, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}, @generic="1fcd768abf59917fadf18ed571557e72f3c8fddb9b50800ef8b245cf13190042fe270511c2b314ab71988dcc0ec1027c73c273793eec744eecfc29238da28b4895aaf1d910acc20962ddddcd5f2252b3894915580b21fc5959b5bee604c7d115d00b228889e56e5e4e2581f3f9e743ecfe66af067470fe4e5fd6363761791d33b8838a5600c50b905d3f46f1fdbcbbff9512b3cd7bc1c4198129b483653df78738db3bdc7eec4935139e79b98c55821b910486e3274793bf3749ce68bd03027bb92d2129d570e302f73c2a52e8d4d5914f3692a66fbcbc88f2815a145c712e8f38d685b35fe83e150b82e2"]}, @nested={0x15b, 0x9e, 0x0, 0x1, [@generic="8dbbe931cf301f2ffed35766ed83a74c2258bb11d185495799aabbbe449ffbc36f5959f7b62f3f628f430839611860220090344c6608947ef0d14e45b5e4fb9d45c8eabf81f6f27a28843873c80f1c67b35921d075faabc2a81c44e53234f4eedc2fc00a4c6a3b6e4ce9f49d77382abbe16ba6864c69d5e4bbcbd7d794087f452168ca728aa95a49892b086294455b6e1e14867d41d2d5d8a900cac9036a458e4ba9a29082eb7f9f431ceba1a6b2", @generic="7931628f98d915f37627a12ecf821a2a9511a45edc4ee966fe6ee61858364e2c80278beaa6e61ad0956d7eec49c25fc41303068a19195da1a12a0d895861c822d53d1ca277989170980fc55fdc0cef384af634f4338e346eafb9c6f8229bbc5dcf72777990b0ca8a32509b8e67ba9727d0", @generic="74ad2f5d5c8450fa9396a8c1d48aad523267d387d5c1dc74f71556846db7759f4c2d1e8b4e3f4efb7da3cb30fb1f911a829b51bb", @nested={0x4, 0x2f}]}, @nested={0xb9, 0x33, 0x0, 0x1, [@generic="27058cef5ae1a7e2", @typed={0x8, 0x89, 0x0, 0x0, @pid=r0}, @generic="9edb8ce504e747bed717048cb7d2fefa66a9316f1ae3829bb362a8a7d0c968e0fe33eba6dbf6a09c9c76a0608db7ba2587493d851721bf8451c44c2321c9695e179378536550be", @generic="441d50baaf6c6039ab1640a6ac2660f3adc5dd477e1bc3a915b95895db21bb2353c10cbd9fbfaa0d19587ff685daa6abad3e1969627153dbfbbbd85bd5c82de7039560e09fbfd8889f98a26520ae8c2a8dc6e04f8f6cb9206b20dbe369eb"]}, @generic="07d7500c613306914f129ce143bfba46c7b083fcb6cf738a644a56ead23a472b3186192deec239b2992413f892592d77971769b04a74915753af0fe50ed56fcb14a3c546d9b8478a94d0f79443bf436a4cd4f070d0d620dc1b5a47abf25460fe5c09315d5c82d87e10ccf74be014a81f86581b371e2b1add8b9edf9995dc9cbea697a1098056e24a43899139eed98b489826cb0d96a65afbdc8b5b295855a267ebd1288a1e21aeafd9eaf117f38a79bfd8c4f2de7a7deb194fadf02af7170a6b9228bd532b0139f8d8f70d5dc905b4602e19f10c9cb13295e9fb0248da7dc03494f783f83ad709c1c1d43613ff5bcc", @nested={0xf6, 0xb3, 0x0, 0x1, [@generic="884013a370bfab853939850a16f2d85e0dd712dc156dafd8cc9702e721624120cbaa7f11a7b7f0e95ea8f813031ce3f4d5048900f891a67f73043ccc75ae86f913c49e684cf6e5be21c0b4af335fe0a16b188ce92d73990b1f1b116a91d4093ad599eeb98b650f1c043f676a9996a770f82c2f5828c377df1e293aa270ccd10b8867cd25d10a7f1fe51f31b268150d9d82e62bf5ba2a11a75b6f399e6b381c3526ce04bd8f999af3d2e4f443c8cb8eb96ce4af89acb5702209f66db102f6a3ab5c77ba3f6d234d95606db4031099d1c8e1734c915ba9", @nested={0x4, 0xda}, @typed={0x4, 0x5f}, @typed={0x8, 0x34, 0x0, 0x0, @uid=r4}, @typed={0xc, 0x68, 0x0, 0x0, @u64=0xffffffffffffffff}]}, @typed={0xf, 0xb8, 0x0, 0x0, @str='/dev/i2c-#\x00'}, @generic="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", @typed={0x4, 0x117}]}, 0x1528}, {&(0x7f00000003c0)={0xd8, 0x2a, 0x20, 0x70bd28, 0x25dfdbfb, "", [@generic="92851c54fdf5079484c5e8c8f6dbb331f6dfbe59c2cb75f6fed0c769e8e6762016c13d6a4eee3b65debf8f9e8a2324160aa71d53f65e74f892f93bd6608f25f5eff1a343231613bdb4a4f0972689b4d89aba0dfdc9032c", @generic="d6927228475d416616b6c224e026253344c31391f20f9c7ad2e85a065226235b0b93c4c9d7534df8faf20cf18b348e92723cfc3256d2819666bc7740fe946565b98dc2cc283ade804b424808b34f8d49ecb8499b5fc89aca90b10d60b0d76052ba7db65f878c19cb744f81b0dd1497"]}, 0xd8}, {&(0x7f00000004c0)={0x20, 0x2c, 0x200, 0x70bd29, 0x25dfdbfd, "", [@typed={0xf, 0x19, 0x0, 0x0, @str='/dev/i2c-#\x00'}]}, 0x20}], 0x3}, 0x2000080) (async) r5 = syz_open_dev$I2C(&(0x7f0000000100), 0x6, 0x10000) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000280)={0x0, 0x7, 0x2, &(0x7f0000000140)={0x18, "1a3109619e3f8f89cdd7c7053eb7da27e00e67e66e7c24103179c5f1fb258a7cf4"}}) 593.592111ms ago: executing program 1 (id=952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3a0d0125"], 0x3d) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x3fff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f00000004c0)={0x8f, 0x0, 0x8}) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x0) 499.408506ms ago: executing program 1 (id=953): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) shutdown(r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x204}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_generic(r1, &(0x7f0000003300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x315c, 0x14, 0x2, 0x70bd2a, 0x25dfdbfd, {0x16}, [@nested={0x3148, 0x4b, 0x0, 0x1, [@nested={0x4, 0x17}, @nested={0x4, 0x94}, @typed={0x8, 0xfe, 0x0, 0x0, @uid=r2}, @generic="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", @generic="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", @generic="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", @nested={0x4, 0x2e}, @generic="f26c63d80ea57d341a1dc0426ec5d790a3a35a20adb3e59884e391464b6ff23cd1d4944fb0e1bcc1e647781d42fb0eb02e486a6c27f44c56dbcf3e7622eb99d90d86eff112728cedb4ab44862524ffd96afa1daa61f9015754d2c12f2a020faa27c09f999de32c947a1f40e6070d645905ba85c929f10fd608025ba32ed98103cebe5d8d48a70d7d4e9938245f781f4b3051e84e90d11c9f34aa68fcc83fef9b26e8267cd12973cb09fc153d3db8162949ff13df42ebea6f9780a99234f36f2d0c", @generic="7ca0acbd9ca6838b56a321e96d86da77e32d7969a863897ab4128592c1f60612aeeb7598d6f246555e2d8b83a212cfc2a5f51568b79ce0dfb72faa053f745fca656c391bdea65feb626a3abc8e9718fea3fe7603c8a538eb69e3c1cb631fc74d9b3040b4a827fb564593fe", @nested={0x4, 0x18}]}]}, 0x315c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) 370.009613ms ago: executing program 3 (id=954): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x800, 0x1000, 0x400c}}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0xfffffffffffffffd) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) 369.625157ms ago: executing program 3 (id=955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdir(&(0x7f0000000440)='./bus\x00', 0x30) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) (async) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r6, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000bc0)="ff0fc73f3f2390b9800000c00f3235010000000f300f20d8c4a1ff2d0a0f22d8440f78b60000000066baf80cb83879e487ef66bafc0cb8010000000f01d966b88e008ec02d1aa80000460f1c460041ae", 0x50}], 0x1, 0x74, 0x0, 0x0) (async) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000080)='$>3uT', 0x5, 0x8}, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) 250.220897ms ago: executing program 3 (id=956): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x8084) r1 = syz_io_uring_setup(0x24fc, &(0x7f00000000c0)={0x0, 0x0, 0x10100, 0x1, 0xe6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000000)=0x4806, 0x4) clock_getres(0x3, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) (async) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) 249.123489ms ago: executing program 3 (id=957): arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000040)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000080)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000000c0)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000140)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000180)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000001c0)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000200)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000280)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000002c0)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000300)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000340)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000380)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000003c0)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000400)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000440)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) read$nci(r0, &(0x7f00000004c0)=""/185, 0xb9) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000580)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000005c0)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000600)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000640)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000680)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000006c0)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000700)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000740)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000780)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000007c0)) 190.501939ms ago: executing program 3 (id=958): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x7, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x8000c}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030228bd7000fadbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0a0018000303038a5bf3281fecbe78a53d470303"], 0x30}, 0x1, 0x0, 0x0, 0x4e808}, 0x4000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080), 0x1c) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=959): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) (async) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x40) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x10, 0x700, 0xfff, 0x2, {{0x2b, 0x4, 0x3, 0x1b, 0xac, 0x65, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@end, @timestamp_prespec={0x44, 0x1c, 0xe1, 0x3, 0x9, [{@rand_addr=0x64010101, 0x3c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0xde}]}, @timestamp_prespec={0x44, 0x2c, 0x15, 0x3, 0x0, [{@loopback, 0x3}, {@rand_addr=0x64010101, 0x7b2b}, {@multicast1, 0x8}, {@loopback, 0x1}, {@private=0xa010102, 0x2}]}, @noop, @cipso={0x86, 0x2a, 0x3, [{0x7, 0xd, "398bb0d35981fc72a03c20"}, {0x1, 0x2}, {0x7, 0xc, "8d81daeee72ef462cb71"}, {0x0, 0x9, "a1095381e77a77"}]}, @rr={0x7, 0x17, 0x6f, [@loopback, @local, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x11}]}, @noop, @timestamp={0x44, 0xc, 0xf9, 0x0, 0x7, [0x5, 0x9]}]}}}}}) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0xe, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000400)=""/4096, 0x28, 0x1000, 0x0, 0x800}, 0x28) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) (async) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001480)={r0, 0x1, 0xf, 0x1}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x1, 0x1, 0x5, 0x8, 0xffffffffffffff80, 0x10}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @exit], &(0x7f0000000000)='GPL\x00', 0xea3, 0x96, &(0x7f00000001c0)=""/150, 0x41000, 0x40, '\x00', r3, @fallback=0x17, r4, 0x8, &(0x7f0000001440)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x6, &(0x7f00000014c0)=[r7, r1], &(0x7f0000001500)=[{0x4, 0x1, 0x2, 0x2}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x4, 0xc, 0x2}, {0x5, 0x3, 0x0, 0x8}, {0x3, 0x3, 0xb, 0xc}, {0x0, 0x5, 0x3, 0x5}], 0x10, 0x7e}, 0x94) kernel console output (not intermixed with test programs): th: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.287109][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.289601][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.292488][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.292721][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.293507][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.296254][ T40] audit: type=1400 audit(1759389012.116:85): avc: denied { read } for pid=5953 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.296286][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.298390][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.300158][ T40] audit: type=1400 audit(1759389012.116:86): avc: denied { open } for pid=5953 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.325627][ T40] audit: type=1400 audit(1759389012.116:87): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.590579][ T40] audit: type=1400 audit(1759389012.406:88): avc: denied { module_request } for pid=5941 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.634471][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 52.654655][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 52.696072][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 52.733160][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 52.815900][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.819627][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.823995][ T5941] bridge_slave_0: entered allmulticast mode [ 52.826771][ T5941] bridge_slave_0: entered promiscuous mode [ 52.887683][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.890391][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.893322][ T5941] bridge_slave_1: entered allmulticast mode [ 52.896339][ T5941] bridge_slave_1: entered promiscuous mode [ 52.913440][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.915801][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.918319][ T5953] bridge_slave_0: entered allmulticast mode [ 52.921259][ T5953] bridge_slave_0: entered promiscuous mode [ 52.975481][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.977849][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.980659][ T5953] bridge_slave_1: entered allmulticast mode [ 52.984001][ T5953] bridge_slave_1: entered promiscuous mode [ 52.986575][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.988884][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.991513][ T5940] bridge_slave_0: entered allmulticast mode [ 52.994318][ T5940] bridge_slave_0: entered promiscuous mode [ 53.003214][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.043571][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.045996][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.048414][ T5940] bridge_slave_1: entered allmulticast mode [ 53.051187][ T5940] bridge_slave_1: entered promiscuous mode [ 53.089965][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.094976][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.113246][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.115566][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.118012][ T5949] bridge_slave_0: entered allmulticast mode [ 53.120721][ T5949] bridge_slave_0: entered promiscuous mode [ 53.157197][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.184903][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.188054][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.191030][ T5949] bridge_slave_1: entered allmulticast mode [ 53.195346][ T5949] bridge_slave_1: entered promiscuous mode [ 53.217050][ T5941] team0: Port device team_slave_0 added [ 53.221324][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.271703][ T5941] team0: Port device team_slave_1 added [ 53.275387][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.280642][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.285934][ T5953] team0: Port device team_slave_0 added [ 53.320161][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.324397][ T5953] team0: Port device team_slave_1 added [ 53.405244][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.407644][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.415778][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.421012][ T5940] team0: Port device team_slave_0 added [ 53.425304][ T5949] team0: Port device team_slave_0 added [ 53.459457][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.461749][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.471542][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.476748][ T5940] team0: Port device team_slave_1 added [ 53.479669][ T5949] team0: Port device team_slave_1 added [ 53.482200][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.485020][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.493944][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.534654][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.536895][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.546220][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.589752][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.592868][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.600897][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.605377][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.608037][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.617785][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.622077][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.624287][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.633161][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.637853][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.640640][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.650948][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.734670][ T5953] hsr_slave_0: entered promiscuous mode [ 53.737034][ T5953] hsr_slave_1: entered promiscuous mode [ 53.756521][ T5941] hsr_slave_0: entered promiscuous mode [ 53.758762][ T5941] hsr_slave_1: entered promiscuous mode [ 53.760823][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 53.762853][ T5941] Cannot create hsr debugfs directory [ 53.895489][ T5949] hsr_slave_0: entered promiscuous mode [ 53.898023][ T5949] hsr_slave_1: entered promiscuous mode [ 53.900258][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 53.902370][ T5949] Cannot create hsr debugfs directory [ 53.915352][ T5940] hsr_slave_0: entered promiscuous mode [ 53.917917][ T5940] hsr_slave_1: entered promiscuous mode [ 53.920502][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 53.922449][ T5940] Cannot create hsr debugfs directory [ 54.246016][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.253902][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.259920][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.270594][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.302019][ T5953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.312651][ T5953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.317414][ T5953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.322375][ T5953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.331605][ T5945] Bluetooth: hci1: command tx timeout [ 54.331871][ T5305] Bluetooth: hci0: command tx timeout [ 54.334407][ T5945] Bluetooth: hci3: command tx timeout [ 54.336990][ T5952] Bluetooth: hci2: command tx timeout [ 54.373933][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.381006][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.390228][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.397830][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.471946][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.479043][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.486133][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.498906][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.524631][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.545721][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.580407][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.590217][ T219] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.593216][ T219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.603444][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.610593][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.613328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.625274][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.628177][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.639497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.642446][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.666503][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.697138][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.719039][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.725641][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.732335][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.734912][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.748920][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.751578][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.757259][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.759848][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.763908][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.767053][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.770798][ T40] audit: type=1400 audit(1759389014.586:89): avc: denied { sys_module } for pid=5953 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.823944][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.829698][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.865440][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.884872][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.899321][ T5953] veth0_vlan: entered promiscuous mode [ 54.916010][ T5953] veth1_vlan: entered promiscuous mode [ 54.937173][ T5941] veth0_vlan: entered promiscuous mode [ 54.954105][ T5941] veth1_vlan: entered promiscuous mode [ 54.959588][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.963370][ T5953] veth0_macvtap: entered promiscuous mode [ 54.967034][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.975410][ T5953] veth1_macvtap: entered promiscuous mode [ 54.999598][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.012039][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.018676][ T5941] veth0_macvtap: entered promiscuous mode [ 55.029638][ T219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.034994][ T5941] veth1_macvtap: entered promiscuous mode [ 55.044677][ T219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.047891][ T219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.056449][ T219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.062327][ T5940] veth0_vlan: entered promiscuous mode [ 55.064405][ T5949] veth0_vlan: entered promiscuous mode [ 55.084457][ T5949] veth1_vlan: entered promiscuous mode [ 55.094623][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.100111][ T5940] veth1_vlan: entered promiscuous mode [ 55.117325][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.122938][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.125732][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.141798][ T219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.147422][ T5949] veth0_macvtap: entered promiscuous mode [ 55.153243][ T5940] veth0_macvtap: entered promiscuous mode [ 55.160803][ T219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.164348][ T219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.169100][ T5949] veth1_macvtap: entered promiscuous mode [ 55.175205][ T5940] veth1_macvtap: entered promiscuous mode [ 55.177684][ T219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.187454][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.190745][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.211050][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.218987][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.230508][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.236374][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.242566][ T5953] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.245128][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.257816][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.260495][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.266006][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.268480][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.279381][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.283021][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.297839][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.301868][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.307953][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.309160][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.310436][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.340412][ T6029] process 'syz.1.2' launched '/dev/fd/3' with NULL argv: empty string added [ 55.359463][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.361993][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.377843][ T6031] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3'. [ 55.390330][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.393186][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.429244][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.434313][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.448276][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.452297][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.514161][ T6038] misc userio: Begin command sent, but we're already running [ 55.689336][ T6042] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 55.691040][ T6038] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 55.694842][ T6042] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 55.694937][ T6038] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.706839][ T6038] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.711042][ T6038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 55.714051][ T6038] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.719765][ T6038] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.727120][ T6038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 55.729278][ T6038] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.732156][ T6038] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.735319][ T6038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.737436][ T6038] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.740603][ T6038] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.751924][ T6042] cgroup: Invalid name [ 55.853285][ T6076] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10'. [ 55.914584][ T6081] netlink: 248 bytes leftover after parsing attributes in process `syz.0.12'. [ 55.975264][ T6089] syz.2.14 (6089): attempted to duplicate a private mapping with mremap. This is not supported. [ 55.989648][ T6089] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 56.194909][ T6111] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 56.269365][ T6122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36880 sclass=netlink_route_socket pid=6122 comm=syz.0.20 [ 56.284595][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 56.304093][ T6124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.499227][ T6131] syz.3.22 uses obsolete (PF_INET,SOCK_PACKET) [ 56.624703][ T6133] dvmrp0: entered allmulticast mode [ 56.664345][ T6135] netlink: 248 bytes leftover after parsing attributes in process `syz.3.24'. [ 56.863927][ T6152] misc userio: Begin command sent, but we're already running [ 57.034576][ T6152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.037132][ T6152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.039946][ T6152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.043025][ T6152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.570950][ T6207] misc userio: Begin command sent, but we're already running [ 57.638743][ T6214] openvswitch: netlink: Missing key (keys=40, expected=100) [ 57.646219][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.32'. [ 57.650687][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.32'. [ 57.664526][ T6204] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 57.666983][ T6204] netlink: 'syz.2.30': attribute type 4 has an invalid length. [ 57.710728][ T6216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.722584][ T6211] cgroup: Invalid name [ 57.745414][ T6207] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.747731][ T6207] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.749862][ T6207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.752021][ T6207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.039331][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 58.039349][ T40] audit: type=1400 audit(1759389017.856:217): avc: denied { read } for pid=6225 comm="syz.2.36" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.052543][ T40] audit: type=1400 audit(1759389017.856:218): avc: denied { open } for pid=6225 comm="syz.2.36" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.052612][ T40] audit: type=1400 audit(1759389017.856:219): avc: denied { ioctl } for pid=6225 comm="syz.2.36" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.052668][ T40] audit: type=1400 audit(1759389017.856:220): avc: denied { set_context_mgr } for pid=6225 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 58.092703][ T40] audit: type=1400 audit(1759389017.916:221): avc: denied { map_create } for pid=6225 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.230477][ T40] audit: type=1400 audit(1759389018.046:222): avc: denied { create } for pid=6231 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.232759][ T6232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.237595][ T40] audit: type=1400 audit(1759389018.046:223): avc: denied { getopt } for pid=6231 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.294503][ T40] audit: type=1400 audit(1759389018.116:224): avc: denied { read write } for pid=6239 comm="syz.2.41" name="rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.302456][ T40] audit: type=1400 audit(1759389018.116:225): avc: denied { open } for pid=6239 comm="syz.2.41" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.310388][ T40] audit: type=1400 audit(1759389018.116:226): avc: denied { create } for pid=6239 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.455399][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.46'. [ 58.469140][ T6252] binder: Bad value for 'max' [ 58.835098][ T6287] Zero length message leads to an empty skb [ 59.268435][ T6309] syzkaller0: entered promiscuous mode [ 59.271273][ T6309] syzkaller0: entered allmulticast mode [ 59.616020][ T5952] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 59.693562][ T5952] Bluetooth: hci1: command 0x040f tx timeout [ 59.773110][ T5952] Bluetooth: hci3: command 0x040f tx timeout [ 59.773156][ T5945] Bluetooth: hci2: command 0x040f tx timeout [ 59.773324][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 60.012009][ T6319] netlink: 64 bytes leftover after parsing attributes in process `syz.0.67'. [ 60.326128][ T6340] netlink: 48 bytes leftover after parsing attributes in process `syz.0.74'. [ 60.446359][ T6344] bridge1: entered allmulticast mode [ 60.450151][ T6344] netlink: 76 bytes leftover after parsing attributes in process `syz.1.76'. [ 60.460428][ T6344] netlink: 'syz.1.76': attribute type 10 has an invalid length. [ 60.463718][ T6344] netlink: 2 bytes leftover after parsing attributes in process `syz.1.76'. [ 60.467339][ T6344] team0: entered promiscuous mode [ 60.469655][ T6344] team_slave_0: entered promiscuous mode [ 60.472943][ T6344] team_slave_1: entered promiscuous mode [ 60.476876][ T6344] bridge0: port 3(team0) entered blocking state [ 60.479554][ T6344] bridge0: port 3(team0) entered disabled state [ 60.482272][ T6344] team0: entered allmulticast mode [ 60.484459][ T6344] team_slave_0: entered allmulticast mode [ 60.486948][ T6344] team_slave_1: entered allmulticast mode [ 60.491810][ T6344] bridge0: port 3(team0) entered blocking state [ 60.494280][ T6344] bridge0: port 3(team0) entered forwarding state [ 60.504955][ T6350] netlink: 128 bytes leftover after parsing attributes in process `syz.0.77'. [ 60.755921][ T6374] Bluetooth: hci4: Frame reassembly failed (-84) [ 60.759938][ T223] Bluetooth: hci4: Frame reassembly failed (-84) [ 61.771326][ T5952] Bluetooth: hci1: command 0x040f tx timeout [ 61.851375][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 61.861262][ T5952] Bluetooth: hci2: command 0x040f tx timeout [ 61.861273][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 62.116986][ T6390] dlm: no local IP address has been set [ 62.120185][ T6390] dlm: cannot start dlm midcomms -107 [ 62.277209][ T6405] overlayfs: failed to resolve './file0': -2 [ 62.497922][ T6415] mmap: syz.0.95 (6415) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.524458][ T6419] overlay: Unknown parameter 'silent' [ 62.699255][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 62.705602][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 62.722131][ T6433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.102'. [ 62.800874][ T6435] Can't find a SQUASHFS superblock on nullb0 [ 62.811219][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 62.811358][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 62.816406][ T6440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.105'. [ 62.819298][ T6440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.105'. [ 62.836528][ T6440] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.856208][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 63.021351][ T6452] autofs: Unknown parameter 'xJÚ+r Fw<¬©vå ]+­3>¦çÁ$à y_ÿ©f›KÄa{¼’E.FI(ªènJ\£$ží6œb' [ 63.046864][ T40] kauditd_printk_skb: 163 callbacks suppressed [ 63.046875][ T40] audit: type=1400 audit(1759389022.866:390): avc: denied { ioctl } for pid=6451 comm="syz.1.108" path="socket:[11476]" dev="sockfs" ino=11476 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.048799][ T6452] netlink: 'syz.1.108': attribute type 11 has an invalid length. [ 63.104899][ T40] audit: type=1400 audit(1759389022.926:391): avc: denied { create } for pid=6456 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.111839][ T40] audit: type=1400 audit(1759389022.926:392): avc: denied { setopt } for pid=6456 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.118025][ T40] audit: type=1400 audit(1759389022.926:393): avc: denied { bind } for pid=6456 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.125850][ T40] audit: type=1400 audit(1759389022.926:394): avc: denied { accept } for pid=6456 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.133927][ T40] audit: type=1400 audit(1759389022.926:395): avc: denied { write } for pid=6456 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.141484][ T40] audit: type=1400 audit(1759389022.926:396): avc: denied { read } for pid=6456 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.162252][ T40] audit: type=1400 audit(1759389022.986:397): avc: denied { listen } for pid=6456 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.224833][ T40] audit: type=1400 audit(1759389023.046:398): avc: denied { read } for pid=6466 comm="syz.2.111" name="ndctl0" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 63.234424][ T40] audit: type=1400 audit(1759389023.046:399): avc: denied { open } for pid=6466 comm="syz.2.111" path="/dev/ndctl0" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 63.283643][ T6480] capability: warning: `syz.1.115' uses 32-bit capabilities (legacy support in use) [ 63.319517][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 63.418334][ T6490] /dev/nullb0: Can't open blockdev [ 63.627442][ T6500] random: crng reseeded on system resumption [ 63.692278][ T6503] SELinux: syz.2.121 (6503) set checkreqprot to 1. This is no longer supported. [ 63.696380][ T6503] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 63.772569][ T6515] comedi comedi0: board detection failed [ 63.861401][ T64] Bluetooth: hci1: command 0x040f tx timeout [ 63.902065][ T6531] overlayfs: missing 'lowerdir' [ 63.941306][ T64] Bluetooth: hci2: command 0x040f tx timeout [ 63.943403][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 63.945516][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 64.071222][ T4317] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.225413][ T4317] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.230012][ T4317] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 64.233920][ T4317] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 64.236943][ T4317] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.247524][ T6523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 64.256668][ T4317] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 64.261242][ T5944] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.302355][ T6585] input: syz0 as /devices/virtual/input/input12 [ 64.433508][ T5944] usb 5-1: config 0 has no interfaces? [ 64.437851][ T5944] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 64.442400][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.445026][ T5944] usb 5-1: Product: syz [ 64.446584][ T5944] usb 5-1: Manufacturer: syz [ 64.448296][ T5944] usb 5-1: SerialNumber: syz [ 64.453404][ T5944] usb 5-1: config 0 descriptor?? [ 64.467309][ T981] usb 8-1: USB disconnect, device number 2 [ 64.664240][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.669199][ T6543] batadv_slave_0: entered promiscuous mode [ 64.678706][ T4317] usb 5-1: USB disconnect, device number 2 [ 65.236496][ T4317] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 65.244352][ T4317] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 65.460124][ T6627] futex_wake_op: syz.0.157 tries to shift op by 32; fix this program [ 65.520760][ T6629] sg_write: data in/out 926365459/251 bytes for SCSI command 0x0-- guessing data in; [ 65.520760][ T6629] program syz.0.157 not setting count and/or reply_len properly [ 65.884860][ T6632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6632 comm=syz.3.158 [ 65.976940][ T6636] __nla_validate_parse: 6 callbacks suppressed [ 65.976951][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 65.986190][ T6636] vlan2: entered allmulticast mode [ 65.988164][ T6636] veth1: entered allmulticast mode [ 66.011458][ T5945] Bluetooth: hci0: command 0x040f tx timeout [ 66.012068][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 66.012339][ T5952] Bluetooth: hci2: command 0x040f tx timeout [ 66.189742][ T6623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.192261][ T6623] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.194561][ T6623] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.197000][ T6623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.231079][ T6649] ata1.00: invalid multi_count 1 ignored [ 66.249653][ T64] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 66.333605][ T6661] wg1: entered promiscuous mode [ 66.337827][ T6661] wg1: entered allmulticast mode [ 66.344571][ T6661] netlink: 'syz.3.166': attribute type 39 has an invalid length. [ 66.412516][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 66.493521][ T6676] hsr_slave_1 (unregistering): left promiscuous mode [ 66.510105][ T6681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.637903][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 66.642810][ T6704] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 66.769691][ T6733] trusted_key: encrypted_key: key trusted:syz not found [ 66.813380][ T6742] overlayfs: failed to resolve './bus/file0': -2 [ 67.051932][ T6774] netlink: 32 bytes leftover after parsing attributes in process `syz.2.186'. [ 67.156142][ T6783] tc_dump_action: action bad kind [ 67.158835][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 67.158971][ T6781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.189'. [ 67.161916][ T6783] openvswitch: netlink: nsh attr 8707 is out of range max 3 [ 67.170825][ T6783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.268019][ T6789] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 67.313715][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.317721][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.320971][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.322466][ T6789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.324523][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.326414][ T6789] bond1: (slave bond2): making interface the new active one [ 67.329101][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.330959][ T6789] bond1: (slave bond2): Enslaving as an active interface with an up link [ 67.345021][ T6800] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 67.362455][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 67.379407][ T6789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.410132][ T6810] netlink: 156 bytes leftover after parsing attributes in process `syz.1.195'. [ 67.462299][ T6810] team0: left allmulticast mode [ 67.463933][ T6810] team_slave_0: left allmulticast mode [ 67.465918][ T6810] team_slave_1: left allmulticast mode [ 67.468775][ T6810] bridge0: port 3(team0) entered disabled state [ 67.477249][ T6810] bridge_slave_0: left allmulticast mode [ 67.479117][ T6810] bridge_slave_0: left promiscuous mode [ 67.480988][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.488526][ T6810] bridge_slave_1: left allmulticast mode [ 67.490368][ T6810] bridge_slave_1: left promiscuous mode [ 67.495131][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.505081][ T6810] bond0: (slave bond_slave_0): Releasing backup interface [ 67.510545][ T6810] bond0: (slave bond_slave_1): Releasing backup interface [ 67.514935][ T6810] team_slave_0: left promiscuous mode [ 67.519790][ T6810] team0: Port device team_slave_0 removed [ 67.523923][ T6810] team_slave_1: left promiscuous mode [ 67.527926][ T6810] team0: Port device team_slave_1 removed [ 67.530478][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.534454][ T6810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.534947][ T5945] Bluetooth: hci1: command 0x040f tx timeout [ 67.541915][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.544355][ T6810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.552865][ T6815] vlan0: entered promiscuous mode [ 67.664772][ T6794] chnl_net:caif_netlink_parms(): no params data found [ 67.761773][ T6865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.201'. [ 67.765312][ T6838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.201'. [ 67.815952][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.818354][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.820899][ T6794] bridge_slave_0: entered allmulticast mode [ 67.825174][ T6794] bridge_slave_0: entered promiscuous mode [ 67.825787][ T6870] /dev/sg0: Can't lookup blockdev [ 67.829979][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.833643][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.836620][ T6794] bridge_slave_1: entered allmulticast mode [ 67.840162][ T6794] bridge_slave_1: entered promiscuous mode [ 67.879788][ T6873] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57344 sclass=netlink_xfrm_socket pid=6873 comm=syz.3.208 [ 67.909622][ T6794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.920334][ T6794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.982535][ T6794] team0: Port device team_slave_0 added [ 67.985971][ T6794] team0: Port device team_slave_1 added [ 68.020764][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.032332][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.040694][ T6794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.045479][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.048326][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.059607][ T6794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.059638][ T6888] tty tty1: ldisc open failed (-12), clearing slot 0 [ 68.096934][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 68.096946][ T40] audit: type=1400 audit(1759389027.916:478): avc: denied { read } for pid=6893 comm="syz.2.212" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.103653][ T6894] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 68.108230][ T40] audit: type=1400 audit(1759389027.926:479): avc: denied { open } for pid=6893 comm="syz.2.212" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.159165][ T6794] hsr_slave_0: entered promiscuous mode [ 68.161512][ T6794] hsr_slave_1: entered promiscuous mode [ 68.163847][ T6794] debugfs: 'hsr0' already exists in 'hsr' [ 68.165679][ T6794] Cannot create hsr debugfs directory [ 68.181159][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.262999][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 68.264995][ T5945] Bluetooth: hci2: command 0x040f tx timeout [ 68.292685][ T6908] warning: `syz.1.214' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.310879][ T40] audit: type=1400 audit(1759389028.126:480): avc: denied { getopt } for pid=6907 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.317180][ T6908] mkiss: ax0: crc mode is auto. [ 68.354432][ T60] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.357476][ T60] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 68.371322][ T60] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.376008][ T60] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 68.379395][ T6794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.384370][ T60] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 68.386156][ T6794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.392117][ T60] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.395229][ T60] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.397954][ T60] usb 8-1: Product: syz [ 68.399464][ T60] usb 8-1: Manufacturer: syz [ 68.407255][ T6794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.413060][ T60] cdc_wdm 8-1:1.0: skipping garbage [ 68.415072][ T60] cdc_wdm 8-1:1.0: skipping garbage [ 68.421946][ T60] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 68.424133][ T60] cdc_wdm 8-1:1.0: Unknown control protocol [ 68.443227][ T6794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.507030][ T40] audit: type=1400 audit(1759389028.326:481): avc: denied { read } for pid=6925 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.523194][ T6794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.536101][ T6794] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.542467][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.545076][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.554256][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.557104][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.567563][ T40] audit: type=1400 audit(1759389028.386:482): avc: denied { write } for pid=6925 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.577134][ T40] audit: type=1400 audit(1759389028.386:483): avc: denied { map } for pid=6925 comm="syz.1.216" path="/dev/nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.587080][ T40] audit: type=1400 audit(1759389028.386:484): avc: denied { execute } for pid=6925 comm="syz.1.216" path="/dev/nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.622650][ T40] audit: type=1400 audit(1759389028.436:485): avc: denied { read write } for pid=6871 comm="syz.3.208" name="cdc-wdm0" dev="devtmpfs" ino=2884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 68.638460][ T40] audit: type=1400 audit(1759389028.436:486): avc: denied { open } for pid=6871 comm="syz.3.208" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 68.653321][ T60] usb 8-1: USB disconnect, device number 3 [ 68.658983][ T40] audit: type=1400 audit(1759389028.436:487): avc: denied { associate } for pid=6871 comm="syz.3.208" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 68.715553][ T6794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.919185][ T6794] veth0_vlan: entered promiscuous mode [ 68.927363][ T6794] veth1_vlan: entered promiscuous mode [ 68.944105][ T6794] veth0_macvtap: entered promiscuous mode [ 68.949153][ T6794] veth1_macvtap: entered promiscuous mode [ 68.966526][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.980724][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.989794][ T219] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.994363][ T219] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.998217][ T219] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.001617][ T219] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.055592][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.063012][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.084025][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.086571][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.172545][ T6961] overlayfs: maximum fs stacking depth exceeded [ 69.382193][ T5945] Bluetooth: hci0: command tx timeout [ 69.611244][ T5945] Bluetooth: hci1: command 0x040f tx timeout [ 69.763119][ T5945] Bluetooth: hci0: hcon ffff88803599c000 sent 3 < count 2064 [ 69.821425][ T7010] openvswitch: netlink: Key 27 has unexpected len 0 expected 40 [ 69.870641][ T7012] mkiss: ax0: crc mode is auto. [ 69.933248][ T7012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.958984][ T7018] program syz.3.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.029859][ T7023] trusted_key: syz.3.239 sent an empty control message without MSG_MORE. [ 70.280683][ T7055] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 70.286193][ T7055] cramfs: wrong magic [ 70.288565][ T7055] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 70.292059][ T7055] cramfs: wrong magic [ 70.297395][ T7058] comedi comedi1: fl512: a I/O base address must be specified [ 70.313215][ T7060] netlink: 'syz.4.255': attribute type 1 has an invalid length. [ 70.338109][ T7060] veth3: entered promiscuous mode [ 70.354714][ T7069] Bluetooth: MGMT ver 1.23 [ 70.368321][ T7061] veth3: entered promiscuous mode [ 70.380767][ T7077] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 70.387227][ T7079] netlink: 'syz.2.257': attribute type 1 has an invalid length. [ 70.392873][ T7077] netlink: 'syz.3.256': attribute type 5 has an invalid length. [ 70.403173][ T7079] bond3: entered promiscuous mode [ 70.405028][ T7079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 70.416426][ T7079] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 70.420460][ T7079] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 70.424562][ T7079] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 70.532778][ T7087] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 70.542417][ T7089] bridge0: entered promiscuous mode [ 70.544341][ T7089] macsec1: entered promiscuous mode [ 71.075233][ T7110] __nla_validate_parse: 6 callbacks suppressed [ 71.075246][ T7110] netlink: 22 bytes leftover after parsing attributes in process `syz.2.268'. [ 71.108680][ T7112] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 71.162754][ T7116] netlink: 'syz.1.270': attribute type 8 has an invalid length. [ 71.167546][ T7118] ======================================================= [ 71.167546][ T7118] WARNING: The mand mount option has been deprecated and [ 71.167546][ T7118] and is ignored by this kernel. Remove the mand [ 71.167546][ T7118] option from the mount to silence this warning. [ 71.167546][ T7118] ======================================================= [ 71.359111][ T7133] tmpfs: User quota block hardlimit too large. [ 71.433760][ T7142] sctp: [Deprecated]: syz.3.280 (pid 7142) Use of int in max_burst socket option. [ 71.433760][ T7142] Use struct sctp_assoc_value instead [ 71.453075][ T5945] Bluetooth: hci0: command tx timeout [ 71.461428][ T6028] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.490483][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.284'. [ 71.540511][ T7147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.546369][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.284'. [ 71.574149][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 71.607950][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 71.611292][ T6028] usb 6-1: Using ep0 maxpacket: 16 [ 71.613205][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'. [ 71.613418][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 71.621403][ T6028] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 71.625330][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.627983][ T6028] usb 6-1: Product: syz [ 71.629299][ T6028] usb 6-1: Manufacturer: syz [ 71.630776][ T6028] usb 6-1: SerialNumber: syz [ 71.636402][ T6028] usb 6-1: config 0 descriptor?? [ 71.643211][ T6028] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 71.646298][ T6028] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 71.729906][ T5945] Bluetooth: hci0: hcon ffff88803599c000 sent 4 < count 2064 [ 71.921437][ T6028] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 71.985851][ T6028] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 71.988538][ T6028] em28xx 6-1:0.0: board has no eeprom [ 72.051281][ T6028] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 72.054937][ T6028] em28xx 6-1:0.0: dvb set to bulk mode. [ 72.057160][ T4317] em28xx 6-1:0.0: Binding DVB extension [ 72.080692][ T6028] usb 6-1: USB disconnect, device number 2 [ 72.083184][ T6028] em28xx 6-1:0.0: Disconnecting em28xx [ 72.103348][ T4317] em28xx 6-1:0.0: Registering input extension [ 72.106392][ T6028] em28xx 6-1:0.0: Closing input extension [ 72.119856][ T6028] em28xx 6-1:0.0: Freeing device [ 72.137411][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.175956][ T7193] 9p: Unknown uid 00000000004294967295 [ 72.225924][ T7194] netlink: 'syz.4.297': attribute type 11 has an invalid length. [ 72.228574][ T7194] netlink: 'syz.4.297': attribute type 4 has an invalid length. [ 72.232046][ T7194] netlink: 224 bytes leftover after parsing attributes in process `syz.4.297'. [ 72.629198][ T7211] macsec1: entered promiscuous mode [ 72.630964][ T7211] macsec1: entered allmulticast mode [ 72.715020][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 72.716159][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 72.727890][ T7223] vlan2: entered allmulticast mode [ 72.729613][ T7223] bond0: entered allmulticast mode [ 72.736814][ T7223] bond_slave_0: entered allmulticast mode [ 72.740980][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 72.741009][ T7223] bond_slave_1: entered allmulticast mode [ 72.878437][ T7244] syz_tun: entered allmulticast mode [ 72.883785][ T6028] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 72.891060][ T7244] nfs4: Unknown parameter '' [ 72.974727][ T7243] syz_tun: left allmulticast mode [ 73.035854][ T6028] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 73.039510][ T6028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.044542][ T6028] usb 7-1: Product: syz [ 73.046837][ T6028] usb 7-1: Manufacturer: syz [ 73.048701][ T6028] usb 7-1: SerialNumber: syz [ 73.053690][ T6028] usb 7-1: config 0 descriptor?? [ 73.134858][ T7262] loop3: detected capacity change from 0 to 7 [ 73.141992][ T6701] Dev loop3: unable to read RDB block 7 [ 73.144254][ T6701] loop3: unable to read partition table [ 73.146346][ T6701] loop3: partition table beyond EOD, truncated [ 73.153314][ T7262] Dev loop3: unable to read RDB block 7 [ 73.156098][ T7262] loop3: unable to read partition table [ 73.158715][ T7262] loop3: partition table beyond EOD, truncated [ 73.161304][ T7262] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 73.223468][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 73.223478][ T40] audit: type=1400 audit(1759389033.046:540): avc: denied { write } for pid=7269 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.234692][ T7273] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 73.235671][ T40] audit: type=1326 audit(1759389033.046:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.4.324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1f8eec9 code=0x7ffc0000 [ 73.249329][ T40] audit: type=1326 audit(1759389033.046:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.4.324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1f8eec9 code=0x7ffc0000 [ 73.260184][ T40] audit: type=1326 audit(1759389033.046:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.4.324" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb1f1f8eec9 code=0x7ffc0000 [ 73.269970][ T7213] bond0: option use_carrier: invalid value (47) [ 73.269982][ T40] audit: type=1326 audit(1759389033.046:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.4.324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1f8eec9 code=0x7ffc0000 [ 73.287961][ T40] audit: type=1326 audit(1759389033.046:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.4.324" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1f1f8eec9 code=0x7ffc0000 [ 73.297539][ T40] audit: type=1326 audit(1759389033.046:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.4.324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1f8eec9 code=0x7ffc0000 [ 73.299367][ T6007] usb 7-1: USB disconnect, device number 2 [ 73.307656][ T40] audit: type=1326 audit(1759389033.046:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.4.324" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1f1f8eec9 code=0x7ffc0000 [ 73.319953][ T40] audit: type=1326 audit(1759389033.046:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.4.324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f1f8eec9 code=0x7ffc0000 [ 73.329124][ T40] audit: type=1326 audit(1759389033.046:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.4.324" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1f1f8eec9 code=0x7ffc0000 [ 73.412553][ T7282] : entered promiscuous mode [ 73.526136][ T7297] netlink: 'syz.1.333': attribute type 11 has an invalid length. [ 73.531245][ T5945] Bluetooth: hci0: command tx timeout [ 73.798353][ T7328] binder: 7327:7328 ioctl 4601 200000000300 returned -22 [ 73.810858][ T7328] input: syz0 as /devices/virtual/input/input18 [ 73.857368][ T7336] netlink: 'syz.2.343': attribute type 11 has an invalid length. [ 73.877900][ T7340] fuse: Bad value for 'group_id' [ 73.878634][ T7338] can0: slcan on ttyprintk. [ 73.879640][ T7340] fuse: Bad value for 'group_id' [ 73.941424][ T7349] netlink: 'syz.4.346': attribute type 1 has an invalid length. [ 73.977450][ T7361] overlayfs: failed to resolve './file1/file0': -2 [ 73.982692][ T7337] can0 (unregistered): slcan off ttyprintk. [ 74.068701][ T7367] macsec2: entered promiscuous mode [ 74.106140][ T7364] comedi comedi1: comedi_config --init_data is deprecated [ 74.115520][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 74.290765][ T7386] netlink: 'syz.4.356': attribute type 11 has an invalid length. [ 74.514935][ T7310] ceph: No mds server is up or the cluster is laggy [ 74.810115][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.814601][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.819253][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.824218][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.933931][ T7418] gfs2: gfs2 mount does not exist [ 75.241259][ T6028] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 75.275795][ T7435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.278179][ T7435] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.280461][ T7435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.283247][ T7435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.285866][ T7435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.298196][ T7435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.411636][ T6028] usb 8-1: Using ep0 maxpacket: 32 [ 75.414864][ T6028] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.418806][ T6028] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.422687][ T6028] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 75.425520][ T6028] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.429622][ T6028] usb 8-1: config 0 descriptor?? [ 75.454106][ T7445] /dev/sr0: Can't open blockdev [ 75.849439][ T6028] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 76.006600][ T7493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7493 comm=syz.1.380 [ 76.010775][ T7493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7493 comm=syz.1.380 [ 76.016187][ T7493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7493 comm=syz.1.380 [ 76.021231][ T7493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7493 comm=syz.1.380 [ 76.026396][ T7493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7493 comm=syz.1.380 [ 76.031611][ T7493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7493 comm=syz.1.380 [ 76.035948][ T7493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7493 comm=syz.1.380 [ 76.040117][ T7493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7493 comm=syz.1.380 [ 76.044377][ T7493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7493 comm=syz.1.380 [ 76.048290][ T7493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7493 comm=syz.1.380 [ 76.161470][ T60] usb 8-1: USB disconnect, device number 4 [ 76.171643][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.173427][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 76.220874][ T7507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.417637][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.420553][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.568908][ T7530] __nla_validate_parse: 78 callbacks suppressed [ 76.568922][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 76.654704][ T7535] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 76.662214][ T6028] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 76.704740][ T7535] netlink: 44 bytes leftover after parsing attributes in process `syz.4.390'. [ 76.707668][ T7535] netlink: 43 bytes leftover after parsing attributes in process `syz.4.390'. [ 76.710496][ T7535] netlink: 'syz.4.390': attribute type 5 has an invalid length. [ 76.714009][ T7535] netlink: 43 bytes leftover after parsing attributes in process `syz.4.390'. [ 76.757264][ T7544] tipc: Enabling of bearer rejected, failed to enable media [ 76.841215][ T6028] usb 7-1: Using ep0 maxpacket: 8 [ 76.845431][ T6028] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 76.849067][ T6028] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 76.852462][ T6028] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.855552][ T6028] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.860220][ T6028] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.864010][ T6028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.980527][ T7550] bdev: Unknown parameter 'discard' [ 76.980630][ T7549] bdev: Unknown parameter 'discard' [ 77.045784][ T7554] 9pnet_virtio: no channels available for device syz [ 77.070887][ T6028] usb 7-1: GET_CAPABILITIES returned 0 [ 77.073395][ T6028] usbtmc 7-1:16.0: can't read capabilities [ 77.084455][ T60] usb 7-1: USB disconnect, device number 3 [ 77.174715][ T7566] netlink: 72 bytes leftover after parsing attributes in process `syz.1.400'. [ 77.292188][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 77.293366][ T64] Bluetooth: hci2: command 0x040f tx timeout [ 77.295065][ T5952] Bluetooth: hci1: command 0x040f tx timeout [ 77.301242][ T5952] Bluetooth: hci0: command 0x0405 tx timeout [ 77.429155][ T7587] capability: warning: `syz.1.404' uses deprecated v2 capabilities in a way that may be insecure [ 77.485607][ T7593] netlink: 10 bytes leftover after parsing attributes in process `syz.1.406'. [ 77.630700][ T7607] netlink: 'syz.2.411': attribute type 15 has an invalid length. [ 77.634438][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.411'. [ 77.683199][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 77.746313][ T7608] could not open pipe file descriptor [ 77.759512][ T7608] kvm: pic: non byte write [ 77.763714][ T7608] netlink: 'syz.3.413': attribute type 7 has an invalid length. [ 77.924274][ T7633] netlink: 'syz.3.423': attribute type 5 has an invalid length. [ 77.928763][ T7632] overlayfs: failed to resolve './file0': -2 [ 77.936648][ T5952] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 77.991061][ T7642] Bluetooth: MGMT ver 1.23 [ 78.034552][ T7652] netlink: 300 bytes leftover after parsing attributes in process `syz.4.429'. [ 78.146905][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 78.198567][ T7673] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 78.238729][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 78.238740][ T40] audit: type=1400 audit(1759389038.056:652): avc: denied { execute } for pid=7682 comm="syz.3.439" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 78.328624][ T40] audit: type=1400 audit(1759389038.146:653): avc: denied { setopt } for pid=7692 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.343772][ T7698] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 78.346670][ T5952] Bluetooth: hci3: unexpected event for opcode 0x041b [ 78.365587][ T40] audit: type=1400 audit(1759389038.186:654): avc: denied { listen } for pid=7702 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.373668][ T40] audit: type=1400 audit(1759389038.186:655): avc: denied { read } for pid=7702 comm="syz.3.446" path="socket:[16959]" dev="sockfs" ino=16959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.374703][ T7703] bridge0: entered promiscuous mode [ 78.385856][ T7703] macsec2: entered promiscuous mode [ 78.691175][ T6028] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 78.863030][ T6028] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.867834][ T6028] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.870769][ T6028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.873542][ T6028] usb 8-1: Product: syz [ 78.874979][ T6028] usb 8-1: Manufacturer: syz [ 78.876801][ T6028] usb 8-1: SerialNumber: syz [ 78.880433][ T6028] usb 8-1: config 0 descriptor?? [ 79.083705][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.087697][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.091020][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.094196][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.097145][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.099847][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.103087][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.103465][ T40] audit: type=1400 audit(1759389038.926:656): avc: denied { getopt } for pid=7712 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.105847][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.116142][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.118904][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.174550][ T40] audit: type=1400 audit(1759389038.996:657): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 79.207221][ T7717] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.208449][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.211550][ T40] audit: type=1400 audit(1759389039.026:658): avc: denied { getattr } for pid=7716 comm="syz.2.450" name="/" dev="9p" ino=71827649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.226756][ T40] audit: type=1400 audit(1759389039.046:659): avc: denied { create } for pid=7716 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.226775][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.234726][ T40] audit: type=1400 audit(1759389039.056:660): avc: denied { write } for pid=7721 comm="syz.4.452" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.243591][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.248395][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.254757][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.262536][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.274937][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.282664][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.286384][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.290534][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.295216][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.299824][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.304563][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.307956][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.311698][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.319430][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.322985][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.326828][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.330153][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.335163][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.342277][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.347128][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.352862][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.365710][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.371634][ T5952] Bluetooth: hci0: command 0x0405 tx timeout [ 79.373336][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.376832][ T7734] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.380022][ T7734] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 79.382254][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.383564][ T7734] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.387393][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.387417][ T7734] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 79.392041][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.397288][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.402608][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.406467][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.410474][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.413267][ T40] audit: type=1400 audit(1759389039.236:661): avc: denied { execute } for pid=7735 comm="syz.4.456" path="/dev/audio1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 79.417460][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.425777][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.431958][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.439786][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.446068][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.449900][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.454648][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.462926][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.470371][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.475096][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.479655][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.484840][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.489496][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.491495][ T7744] openvswitch: netlink: Unknown nsh attribute 0 [ 79.492948][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.493723][ T7744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.497348][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.503795][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.506829][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.510279][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.514735][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.519295][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.524555][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.528623][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.532551][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.536495][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.540415][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.543588][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.546467][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.549278][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.552463][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.555436][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.558780][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.563150][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 79.567797][ T7720] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 80.118962][ T7780] syzkaller1: entered promiscuous mode [ 80.120798][ T7780] syzkaller1: entered allmulticast mode [ 80.231353][ T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 80.238263][ T6007] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 80.243221][ T6007] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 80.396240][ T60] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 80.400179][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.405406][ T60] usb 6-1: Product: syz [ 80.407101][ T60] usb 6-1: Manufacturer: syz [ 80.408796][ T60] usb 6-1: SerialNumber: syz [ 80.419417][ T60] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 80.424692][ T7803] tmpfs: Unknown parameter '' [ 80.428130][ T7803] tmpfs: Unknown parameter '' [ 80.430494][ T7803] tmpfs: Unknown parameter '' [ 80.433347][ T7803] tmpfs: Unknown parameter '' [ 80.435622][ T7803] tmpfs: Unknown parameter '' [ 80.438107][ T7803] tmpfs: Unknown parameter '' [ 80.441751][ T7803] tmpfs: Unknown parameter '' [ 80.445061][ T7803] tmpfs: Unknown parameter '' [ 80.447579][ T7803] tmpfs: Unknown parameter '' [ 80.450235][ T7803] tmpfs: Unknown parameter '' [ 80.453126][ T7803] tmpfs: Unknown parameter '' [ 80.456733][ T6007] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 80.459772][ T7803] tmpfs: Unknown parameter '' [ 80.462713][ T7803] tmpfs: Unknown parameter '' [ 80.464957][ T7803] tmpfs: Unknown parameter '' [ 80.680230][ T6028] usb 6-1: USB disconnect, device number 3 [ 80.856882][ T7840] random: crng reseeded on system resumption [ 80.862680][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.864972][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.867498][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.869842][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.872331][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.874611][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.877346][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.880569][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.883749][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.886340][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.888927][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.891599][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897388][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897459][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897502][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897547][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897607][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897735][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897781][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897821][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897861][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897901][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897945][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.897988][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898072][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898113][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898151][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898190][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898230][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898268][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898306][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898344][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898382][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898420][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898461][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898501][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898540][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898579][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898627][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.898666][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.899759][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.899808][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.899846][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.899884][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.899921][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.899958][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.899995][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900032][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900068][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900106][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900145][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900182][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900219][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900257][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900293][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900329][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900365][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900401][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900438][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900474][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900510][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900549][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900586][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900715][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 80.900775][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 81.167178][ T7867] selinux_netlink_send: 37 callbacks suppressed [ 81.167192][ T7867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7867 comm=syz.2.492 [ 81.213775][ T7871] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.531756][ T6007] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 81.536190][ T6007] ath9k_htc: Failed to initialize the device [ 81.537041][ T24] cfg80211: failed to load regulatory.db [ 81.543525][ T6028] usb 6-1: ath9k_htc: USB layer deinitialized [ 81.573706][ T60] usb 8-1: USB disconnect, device number 5 [ 81.605205][ T7887] netlink: 'syz.4.500': attribute type 22 has an invalid length. [ 81.609044][ T7887] __nla_validate_parse: 28 callbacks suppressed [ 81.609060][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 81.627442][ T1144] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.627585][ T7887] netlink: 'syz.4.500': attribute type 22 has an invalid length. [ 81.633969][ T1144] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.634737][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 81.637348][ T1144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.643989][ T1144] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.978864][ T7907] overlayfs: conflicting options: userxattr,metacopy=on [ 81.983553][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 81.988659][ T7907] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 82.041372][ T60] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 82.070271][ T7910] netlink: 'syz.1.508': attribute type 19 has an invalid length. [ 82.073144][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 82.084004][ T219] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.084042][ T7910] netlink: 'syz.1.508': attribute type 19 has an invalid length. [ 82.088232][ T219] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.090317][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 82.092974][ T219] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.098554][ T219] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.176358][ T7920] sp0: Synchronizing with TNC [ 82.201291][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 82.202902][ T7904] /dev/sr0: Can't open blockdev [ 82.205161][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.209153][ T60] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.212547][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.216956][ T60] usb 8-1: config 0 descriptor?? [ 82.266835][ T5945] Bluetooth: hci1: Malformed Event: 0x02 [ 82.312734][ T7927] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 82.424580][ T60] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 82.665767][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'. [ 82.670822][ T7936] netlink: 1 bytes leftover after parsing attributes in process `syz.1.516'. [ 82.709610][ T7938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'. [ 82.844317][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.521'. [ 82.916491][ T7951] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 83.006383][ T7955] misc userio: Invalid payload size [ 83.056079][ T7964] netlink: 'syz.1.527': attribute type 3 has an invalid length. [ 83.058886][ T7964] netlink: 'syz.1.527': attribute type 3 has an invalid length. [ 83.062880][ T7964] netlink: 'syz.1.527': attribute type 3 has an invalid length. [ 83.066328][ T7964] netlink: 'syz.1.527': attribute type 3 has an invalid length. [ 83.070405][ T7964] netlink: 'syz.1.527': attribute type 3 has an invalid length. [ 83.174445][ T5945] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 83.290676][ T7971] syz.1.530: attempt to access beyond end of device [ 83.290676][ T7971] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 83.299235][ T7971] gfs2: error -5 reading superblock [ 83.345317][ T7973] tipc: Started in network mode [ 83.347426][ T7973] tipc: Node identity ba3c0b6ec518, cluster identity 4711 [ 83.350153][ T7973] tipc: Enabled bearer , priority 0 [ 83.358147][ T7972] tipc: Disabling bearer [ 83.500360][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 83.500373][ T40] audit: type=1326 audit(1759389043.316:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.1.533" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef4d78eec9 code=0x0 [ 83.602930][ T7980] tmpfs: Unknown parameter 'mp' [ 83.610191][ T40] audit: type=1400 audit(1759389043.426:682): avc: denied { append } for pid=7978 comm="syz.4.534" name="nbd4" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.618632][ T40] audit: type=1400 audit(1759389043.426:683): avc: denied { append } for pid=7978 comm="syz.4.534" name="nbd4" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.671226][ T7988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.675645][ T7988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.703396][ T7994] No control pipe specified [ 83.786728][ T7988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.790456][ T7988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.853347][ T7997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.857757][ T7997] loop3: detected capacity change from 0 to 7 [ 83.862212][ T7997] Dev loop3: unable to read RDB block 7 [ 83.864290][ T7997] loop3: unable to read partition table [ 83.867255][ T7997] loop3: partition table beyond EOD, truncated [ 83.869452][ T7997] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 83.892327][ T7988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.895982][ T7988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.020539][ T7988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.025860][ T7988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.033282][ T8001] netlink: 'syz.4.542': attribute type 11 has an invalid length. [ 84.108757][ T223] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.112289][ T223] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.125279][ T223] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.128154][ T223] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.139671][ T61] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.142747][ T61] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.152020][ T61] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.155144][ T61] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.159283][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 84.245956][ T40] audit: type=1400 audit(1759389044.066:684): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 84.282935][ T40] audit: type=1400 audit(1759389044.106:685): avc: denied { remount } for pid=8017 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.336426][ T8020] openvswitch: netlink: Duplicate or invalid key (type 0). [ 84.339407][ T8020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.515590][ T8025] block device autoloading is deprecated and will be removed. [ 84.744695][ T9] usb 8-1: USB disconnect, device number 6 [ 84.781414][ T8031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.793054][ T8031] geneve2: entered allmulticast mode [ 84.830557][ T40] audit: type=1400 audit(1759389044.646:686): avc: denied { connect } for pid=8032 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.865441][ T8038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.870867][ T8038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.874892][ T8042] fuse: Bad value for 'fd' [ 84.875091][ T8042] fuse: Bad value for 'fd' [ 84.879307][ T8042] fuse: Bad value for 'fd' [ 84.880781][ T8042] fuse: Bad value for 'fd' [ 84.883557][ T8042] fuse: Bad value for 'fd' [ 84.885783][ T8042] fuse: Bad value for 'fd' [ 84.887978][ T8042] fuse: Bad value for 'fd' [ 84.890178][ T8042] fuse: Bad value for 'fd' [ 84.893721][ T8042] fuse: Bad value for 'fd' [ 84.896049][ T8042] fuse: Bad value for 'fd' [ 84.898595][ T8042] fuse: Bad value for 'fd' [ 84.902727][ T8042] fuse: Bad value for 'fd' [ 84.905140][ T8042] fuse: Bad value for 'fd' [ 84.907328][ T8042] fuse: Bad value for 'fd' [ 84.909413][ T8042] fuse: Bad value for 'fd' [ 84.912216][ T8042] fuse: Bad value for 'fd' [ 84.914337][ T8042] fuse: Bad value for 'fd' [ 84.916472][ T8042] fuse: Bad value for 'fd' [ 84.918861][ T8042] fuse: Bad value for 'fd' [ 84.921579][ T8042] fuse: Bad value for 'fd' [ 84.924208][ T8042] fuse: Bad value for 'fd' [ 84.926069][ T8042] fuse: Bad value for 'fd' [ 84.987633][ T8050] syz.1.555 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 84.995714][ T8050] 9pnet_fd: p9_fd_create_tcp (8050): problem connecting socket to 127.0.0.1 [ 85.484951][ T8072] tipc: Started in network mode [ 85.486816][ T8072] tipc: Node identity 4, cluster identity 4711 [ 85.488837][ T8072] tipc: Node number set to 4 [ 85.493937][ T8070] input: syz0 as /devices/virtual/input/input21 [ 85.540726][ T8075] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.572900][ T40] audit: type=1400 audit(1759389045.396:687): avc: denied { read write } for pid=8079 comm="syz.4.565" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.583316][ T40] audit: type=1400 audit(1759389045.396:688): avc: denied { open } for pid=8079 comm="syz.4.565" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.616788][ T40] audit: type=1400 audit(1759389045.436:689): avc: denied { relabelfrom } for pid=8081 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 85.623902][ T40] audit: type=1400 audit(1759389045.446:690): avc: denied { relabelto } for pid=8081 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 85.954028][ T8122] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.958159][ T8122] block device autoloading is deprecated and will be removed. [ 86.005858][ T8133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.048123][ T8135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=8135 comm=syz.3.580 [ 86.098478][ T8137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.165768][ T8139] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 86.288583][ T8153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8153 comm=syz.2.586 [ 86.484474][ T8176] usb usb9: usbfs: process 8176 (syz.4.591) did not claim interface 48 before use [ 86.742358][ T8199] vxfs: WRONG superblock magic 00000000 at 1 [ 86.746100][ T8199] vxfs: WRONG superblock magic 00000000 at 8 [ 86.748217][ T8199] vxfs: can't find superblock. [ 86.752938][ T8200] macvlan0: entered promiscuous mode [ 86.754880][ T8200] macvlan0: entered allmulticast mode [ 86.756883][ T8200] veth1_vlan: entered allmulticast mode [ 86.805029][ T5945] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 86.829165][ T8209] __nla_validate_parse: 7 callbacks suppressed [ 86.829177][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 86.838044][ T8209] bridge_slave_1: left allmulticast mode [ 86.839964][ T8209] bridge_slave_1: left promiscuous mode [ 86.841986][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.848010][ T8209] bridge_slave_0: left allmulticast mode [ 86.849887][ T8209] bridge_slave_0: left promiscuous mode [ 86.852248][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.120759][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.606'. [ 87.120818][ T8230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.606'. [ 87.339859][ T8252] tls_set_device_offload: netdev not found [ 87.384120][ T6008] IPVS: starting estimator thread 0... [ 87.481670][ T8256] IPVS: using max 43 ests per chain, 103200 per kthread [ 87.783824][ T8277] validate_nla: 46 callbacks suppressed [ 87.783837][ T8277] netlink: 'syz.2.619': attribute type 142 has an invalid length. [ 87.820005][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'. [ 88.382063][ T8311] netlink: 'syz.4.627': attribute type 32 has an invalid length. [ 88.669805][ T8346] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 88.673053][ T8346] overlayfs: missing 'lowerdir' [ 88.742514][ T8353] tipc: Cannot configure node identity twice [ 88.745093][ T219] tipc: Subscription rejected, illegal request [ 88.767382][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 88.772145][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 88.772158][ T40] audit: type=1400 audit(1759389048.596:712): avc: denied { accept } for pid=8355 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.800641][ T40] audit: type=1400 audit(1759389048.616:713): avc: denied { read } for pid=8357 comm="syz.4.641" path="socket:[23602]" dev="sockfs" ino=23602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.809459][ T40] audit: type=1400 audit(1759389048.616:714): avc: denied { setattr } for pid=8357 comm="syz.4.641" path="socket:[23601]" dev="sockfs" ino=23601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.817574][ T40] audit: type=1400 audit(1759389048.616:715): avc: denied { ioctl } for pid=8357 comm="syz.4.641" path="socket:[23602]" dev="sockfs" ino=23602 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.881285][ T6956] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 89.025767][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 89.028631][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 89.032285][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 89.035931][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 89.040300][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 89.042868][ T6956] usb 8-1: config 0 has no interfaces? [ 89.049821][ T6956] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 89.052922][ T6956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.055823][ T6956] usb 8-1: Product: syz [ 89.057416][ T6956] usb 8-1: Manufacturer: syz [ 89.059444][ T6956] usb 8-1: SerialNumber: syz [ 89.064742][ T6956] usb 8-1: config 0 descriptor?? [ 89.112571][ T40] audit: type=1400 audit(1759389048.936:716): avc: denied { lock } for pid=8366 comm="syz.2.644" path="socket:[23660]" dev="sockfs" ino=23660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 89.305230][ T6956] usb 8-1: USB disconnect, device number 7 [ 89.316377][ T8378] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.319685][ T8378] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.364550][ T8378] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.368078][ T8378] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.425730][ T8378] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.429543][ T8378] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.496524][ T8378] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.500687][ T8378] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.578945][ T1144] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.582938][ T1144] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.596000][ T1144] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.599076][ T1144] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.608275][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.611418][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.620680][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.624324][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.679993][ T8380] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 89.681211][ T40] audit: type=1400 audit(1759389049.496:717): avc: denied { load_policy } for pid=8379 comm="syz.1.649" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.683353][ T8380] SELinux: failed to load policy [ 89.730334][ T40] audit: type=1404 audit(1759389049.546:718): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 89.747824][ T40] audit: type=1404 audit(1759389049.566:719): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 89.754905][ T40] audit: type=1400 audit(1759389049.576:720): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=41462 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 89.766680][ T40] audit: type=1400 audit(1759389049.576:721): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=41462 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 89.870535][ T8387] gtp0: entered promiscuous mode [ 90.279071][ T8405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.586508][ T8436] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.618513][ T8441] qnx6: unable to set blocksize [ 90.674648][ T8448] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 90.678386][ T8448] /dev/nullb0: Can't open blockdev [ 90.767577][ T8457] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 90.770775][ T8458] CIFS mount error: No usable UNC path provided in device string! [ 90.770775][ T8458] [ 90.783024][ T8457] CIFS mount error: No usable UNC path provided in device string! [ 90.783024][ T8457] [ 90.785800][ T8458] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 90.786395][ T8457] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 90.835270][ T8461] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 90.837857][ T8461] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.843101][ T8461] vhci_hcd vhci_hcd.0: Device attached [ 90.858848][ T8465] fuse: Bad value for 'fd' [ 90.872868][ T8462] vhci_hcd: connection closed [ 90.874437][ T219] vhci_hcd: stop threads [ 90.878248][ T219] vhci_hcd: release socket [ 90.879731][ T219] vhci_hcd: disconnect device [ 91.027488][ T8475] overlayfs: failed to clone upperpath [ 91.036111][ T8475] netlink: 'syz.4.674': attribute type 10 has an invalid length. [ 91.044388][ T8475] batman_adv: batadv0: Adding interface: team0 [ 91.047437][ T8475] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.058402][ T8475] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 91.098329][ T8477] fuse: Bad value for 'fd' [ 91.102693][ T8477] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 91.107737][ T8476] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 91.212539][ T8489] netlink: 'syz.3.677': attribute type 2 has an invalid length. [ 92.014682][ T8543] netlink: 'syz.4.691': attribute type 62 has an invalid length. [ 92.017196][ T8543] __nla_validate_parse: 67 callbacks suppressed [ 92.017204][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 92.023573][ T8543] netlink: 'syz.4.691': attribute type 4 has an invalid length. [ 92.026025][ T8543] netlink: 152 bytes leftover after parsing attributes in process `syz.4.691'. [ 92.029984][ T8543] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 92.155193][ T8556] netlink: 'syz.2.694': attribute type 8 has an invalid length. [ 92.173082][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.176008][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.425936][ T8591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 92.522535][ T8596] SELinux: security policydb version 17 (MLS) not backwards compatible [ 92.526747][ T8596] SELinux: failed to load policy [ 92.528428][ T8591] syz.2.701 (8591) used greatest stack depth: 17976 bytes left [ 92.544443][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 92.791183][ T60] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 92.951169][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'. [ 92.952685][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 92.954976][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.708'. [ 92.955005][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'. [ 92.964548][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 92.968061][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.973382][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 92.977155][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 92.985701][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 92.988093][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 92.991722][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.995344][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 92.998931][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.005439][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 93.008082][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.011676][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.015296][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 93.018948][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.022308][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'. [ 93.025123][ T60] usb 8-1: string descriptor 0 read error: -22 [ 93.025594][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.708'. [ 93.027736][ T60] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 93.030479][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'. [ 93.033384][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.047329][ T60] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 93.254858][ T8604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8604 comm=syz.3.704 [ 93.272467][ T9] usb 8-1: USB disconnect, device number 8 [ 93.711694][ T8675] binder: BINDER_SET_CONTEXT_MGR already set [ 93.713838][ T8675] binder: 8673:8675 ioctl 4018620d 2000000002c0 returned -16 [ 93.726834][ T8688] tmpfs: Bad value for 'mpol' [ 93.902960][ T8716] overlayfs: workdir and upperdir must be separate subtrees [ 94.699331][ T40] kauditd_printk_skb: 159 callbacks suppressed [ 94.699343][ T40] audit: type=1400 audit(1759389054.516:881): avc: denied { ioctl } for pid=8738 comm="syz.1.730" path="socket:[25003]" dev="sockfs" ino=25003 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.710349][ T40] audit: type=1400 audit(1759389054.516:882): avc: denied { read } for pid=8738 comm="syz.1.730" path="socket:[25003]" dev="sockfs" ino=25003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.713779][ T8745] fuse: Bad value for 'fd' [ 94.744784][ T8753] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 94.753421][ T40] audit: type=1400 audit(1759389054.576:883): avc: denied { ioctl } for pid=8754 comm="syz.3.734" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.817220][ T8766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=8766 comm=syz.1.737 [ 94.826898][ T8776] overlayfs: failed lookup in lower (newroot/130, name='bus', err=-40): overlapping layers [ 94.832523][ T40] audit: type=1400 audit(1759389054.656:884): avc: denied { write } for pid=8779 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 94.833329][ T8777] overlayfs: failed lookup in lower (newroot/130, name='file1', err=-40): overlapping layers [ 94.860669][ T40] audit: type=1400 audit(1759389054.676:885): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 94.872752][ T40] audit: type=1400 audit(1759389054.696:886): avc: denied { read write } for pid=8784 comm="syz.2.740" name="rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 94.880569][ T40] audit: type=1400 audit(1759389054.696:887): avc: denied { open } for pid=8784 comm="syz.2.740" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 94.893676][ T40] audit: type=1400 audit(1759389054.716:888): avc: denied { create } for pid=8784 comm="syz.2.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.903506][ T40] audit: type=1400 audit(1759389054.716:889): avc: denied { setopt } for pid=8784 comm="syz.2.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.934160][ T40] audit: type=1400 audit(1759389054.756:890): avc: denied { write } for pid=8799 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.962353][ T8808] program syz.1.742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.967983][ T8808] netlink: 'syz.1.742': attribute type 11 has an invalid length. [ 94.972209][ T8808] netlink: 'syz.1.742': attribute type 13 has an invalid length. [ 95.066327][ T8800] netlink: 'syz.2.744': attribute type 21 has an invalid length. [ 95.454129][ T8859] kvm: MONITOR instruction emulated as NOP! [ 95.530468][ T8866] loop4: detected capacity change from 0 to 7 [ 95.536364][ T8242] Dev loop4: unable to read RDB block 7 [ 95.538419][ T8242] loop4: unable to read partition table [ 95.540334][ T8242] loop4: partition table beyond EOD, truncated [ 95.545168][ T8866] Dev loop4: unable to read RDB block 7 [ 95.547220][ T8866] loop4: unable to read partition table [ 95.549318][ T8866] loop4: partition table beyond EOD, truncated [ 95.551675][ T8866] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.605232][ T8875] syz.2.755 (8875): /proc/8873/oom_adj is deprecated, please use /proc/8873/oom_score_adj instead. [ 95.686561][ T8890] vlan4: entered promiscuous mode [ 95.903452][ T8929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.909748][ T8930] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 95.910485][ T8930] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 95.948635][ T8975] bridge0: port 3(syz_tun) entered blocking state [ 95.948779][ T8975] bridge0: port 3(syz_tun) entered disabled state [ 95.949022][ T8975] syz_tun: entered allmulticast mode [ 95.950884][ T8975] syz_tun: entered promiscuous mode [ 95.961694][ T8975] bridge0: port 3(syz_tun) entered blocking state [ 95.964034][ T8975] bridge0: port 3(syz_tun) entered forwarding state [ 96.115229][ T5945] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 96.317544][ T9041] bridge0: port 3(syz_tun) entered disabled state [ 96.320274][ T9041] syz_tun: refused to change device tx_queue_len [ 96.424116][ T9057] bond2: entered promiscuous mode [ 96.427635][ T9057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.433305][ T9057] bond0: (slave bond2): Enslaving as an active interface with an up link [ 96.438049][ T9058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9058 comm=syz.4.782 [ 96.602728][ T9117] mkiss: ax0: crc mode is auto. [ 96.774606][ T9132] pimreg3: entered allmulticast mode [ 97.111261][ T4317] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 97.121704][ T9167] netlink: 'syz.4.796': attribute type 8 has an invalid length. [ 97.273629][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.277444][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.280794][ T4317] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.286139][ T4317] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.289248][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.297713][ T4317] usb 6-1: config 0 descriptor?? [ 97.323048][ T9179] __nla_validate_parse: 19 callbacks suppressed [ 97.323070][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 97.342975][ T9179] netlink: 60 bytes leftover after parsing attributes in process `syz.4.800'. [ 97.347382][ T9179] unsupported nlmsg_type 40 [ 97.504143][ T9146] dlm: no locking on control device [ 97.668478][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.806'. [ 97.674140][ T9209] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 97.711318][ T4317] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 97.712791][ T9214] nfs: Unknown parameter '/dev/video36' [ 97.741964][ T4317] plantronics 0003:047F:FFFF.0005: item fetching failed at offset 14/15 [ 97.749119][ T4317] plantronics 0003:047F:FFFF.0005: parse failed [ 97.751420][ T4317] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 97.782746][ T5945] Bluetooth: hci0: command 0x0405 tx timeout [ 97.806336][ T9224] vlan4: entered promiscuous mode [ 97.808006][ T9224] bridge0: entered promiscuous mode [ 97.820330][ T9227] mac80211_hwsim hwsim9 : renamed from wlan1 [ 97.839216][ T1183] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.860196][ T9235] delete_channel: no stack [ 97.860328][ T9235] delete_channel: no stack [ 97.913429][ T5944] usb 6-1: USB disconnect, device number 4 [ 97.932957][ T9255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.015224][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 98.018354][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.816'. [ 98.021407][ T9265] netlink: 'syz.4.816': attribute type 19 has an invalid length. [ 98.286820][ T5952] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 98.899724][ T9388] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 98.902776][ T9388] overlayfs: failed to set xattr on upper [ 98.904635][ T9388] overlayfs: ...falling back to redirect_dir=nofollow. [ 98.907767][ T9388] overlayfs: ...falling back to index=off. [ 98.907788][ T9388] overlayfs: ...falling back to uuid=null. [ 98.913501][ T9388] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 99.016990][ T9416] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 99.019480][ T9416] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.025387][ T9416] vhci_hcd vhci_hcd.0: Device attached [ 99.028013][ T9419] vhci_hcd: connection closed [ 99.028919][ T223] vhci_hcd: stop threads [ 99.036669][ T223] vhci_hcd: release socket [ 99.038241][ T223] vhci_hcd: disconnect device [ 99.243059][ T9435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1068 sclass=netlink_route_socket pid=9435 comm=syz.2.847 [ 99.597696][ T9448] delete_channel: no stack [ 99.729442][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 99.729453][ T40] audit: type=1800 audit(1759389059.546:1000): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.853" name="nullb0" dev="tmpfs" ino=1030 res=0 errno=0 [ 99.944956][ T40] audit: type=1400 audit(1759389059.766:1001): avc: denied { unlink } for pid=9481 comm="syz.1.857" name="file0" dev="9p" ino=71827671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.946479][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'. [ 100.006333][ T40] audit: type=1400 audit(1759389059.826:1002): avc: denied { add_name } for pid=9481 comm="syz.1.857" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.021630][ T40] audit: type=1400 audit(1759389059.826:1003): avc: denied { create } for pid=9481 comm="syz.1.857" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.036389][ T40] audit: type=1400 audit(1759389059.826:1004): avc: denied { associate } for pid=9481 comm="syz.1.857" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 100.075400][ T40] audit: type=1400 audit(1759389059.896:1005): avc: denied { listen } for pid=9509 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.083828][ T40] audit: type=1400 audit(1759389059.906:1006): avc: denied { ioctl } for pid=9509 comm="syz.3.865" path="socket:[26299]" dev="sockfs" ino=26299 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.185294][ T40] audit: type=1400 audit(1759389060.006:1007): avc: denied { ioctl } for pid=9528 comm="syz.3.869" path="/dev/ndctl0" dev="devtmpfs" ino=108 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.222472][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 100.225666][ T40] audit: type=1400 audit(1759389060.046:1008): avc: denied { write } for pid=9542 comm="syz.2.873" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.227665][ T9543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.873'. [ 100.242163][ T40] audit: type=1400 audit(1759389060.066:1009): avc: denied { listen } for pid=9544 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.311993][ T9540] team0 (unregistering): Port device team_slave_0 removed [ 100.316793][ T9540] team0 (unregistering): Port device team_slave_1 removed [ 100.362121][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 100.369045][ T9546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40262 sclass=netlink_audit_socket pid=9546 comm=syz.3.872 [ 100.466482][ T9655] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2212555115 (283207054720 ns) > initial count (181501907328 ns). Using initial count to start timer. [ 100.466683][ T9656] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 255 [ 100.476329][ T9656] binder: 9654:9656 ioctl 4018620d 200000000100 returned -1 [ 100.487028][ T9661] netlink: 'syz.4.877': attribute type 13 has an invalid length. [ 100.610114][ T9681] nfs: Unknown parameter '' [ 100.630389][ T9684] netlink: 'syz.2.882': attribute type 1 has an invalid length. [ 100.648648][ T9684] bond5: entered promiscuous mode [ 100.652721][ T9684] 8021q: adding VLAN 0 to HW filter on device bond5 [ 100.674352][ T9684] 8021q: adding VLAN 0 to HW filter on device bond6 [ 100.677738][ T9684] bond5: (slave bond6): making interface the new active one [ 100.680341][ T9684] bond6: entered promiscuous mode [ 100.683599][ T9684] bond5: (slave bond6): Enslaving as an active interface with an up link [ 100.707651][ T9760] batman_adv: batadv0: Adding interface: dummy0 [ 100.709877][ T9760] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.724145][ T9760] batman_adv: batadv0: Interface activated: dummy0 [ 100.732336][ T5945] Bluetooth: hci0: command 0x0405 tx timeout [ 100.781268][ T9767] bond3 (unregistering): Released all slaves [ 100.859768][ T9841] overlayfs: failed to clone lowerpath [ 100.860770][ T9857] overlayfs: failed to clone lowerpath [ 100.881368][ T9765] nbd0: detected capacity change from 0 to 127 [ 100.910678][ T5952] block nbd0: Receive control failed (result -104) [ 101.051727][ T9888] netlink: 'syz.4.894': attribute type 29 has an invalid length. [ 101.065298][ T9888] netlink: 'syz.4.894': attribute type 29 has an invalid length. [ 101.074688][ T9882] orangefs_mount: mount request failed with -4 [ 101.096420][ T9905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.899'. [ 101.279448][ T9934] netlink: 'syz.3.907': attribute type 3 has an invalid length. [ 101.464707][ T9947] exFAT-fs (nbd2): unable to read boot sector [ 101.467490][ T9947] exFAT-fs (nbd2): failed to read boot sector [ 101.469949][ T9947] exFAT-fs (nbd2): failed to recognize exfat type [ 101.833690][ T9967] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 101.843014][ T9966] delete_channel: no stack [ 101.934925][ T9986] netlink: 'syz.2.920': attribute type 10 has an invalid length. [ 101.946777][ T9986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.951825][ T9986] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 101.957340][ T9986] netlink: 'syz.2.920': attribute type 10 has an invalid length. [ 101.962106][ T9986] batadv0: entered promiscuous mode [ 101.964698][ T9986] batadv0: entered allmulticast mode [ 101.969723][ T9986] bond0: (slave batadv0): Releasing backup interface [ 101.976199][ T9986] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 102.007921][ T9993] netlink: 'syz.1.923': attribute type 2 has an invalid length. [ 102.811406][ T5952] Bluetooth: hci0: command 0x0405 tx timeout [ 102.980837][T10082] __nla_validate_parse: 35 callbacks suppressed [ 102.980849][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 103.076145][T10082] batman_adv: batadv0: Removing interface: team0 [ 103.083245][T10082] team0 (unregistering): Port device team_slave_0 removed [ 103.089087][T10082] team0 (unregistering): Port device team_slave_1 removed [ 103.128585][T10117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10117 comm=syz.1.944 [ 103.148567][T10053] ceph: No mds server is up or the cluster is laggy [ 103.150782][T10065] ceph: No mds server is up or the cluster is laggy [ 103.198670][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.946'. [ 103.203064][T10124] netem: invalid attributes len -22 [ 103.204691][T10124] netem: change failed [ 103.206208][T10128] netlink: 'syz.4.947': attribute type 10 has an invalid length. [ 103.251538][T10128] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 103.256400][T10128] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 103.262132][T10127] lo: entered promiscuous mode [ 103.311441][T10130] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 103.315238][T10130] overlayfs: missing 'lowerdir' [ 103.611488][ T6007] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 103.729236][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 103.763109][ T6007] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.767057][ T6007] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.770289][ T6007] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.775497][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.780074][T10161] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.784551][ T6007] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.949899][T10211] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 103.954823][T10211] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 103.959876][T10211] CPU: 3 UID: 0 PID: 10211 Comm: syz.3.959 Not tainted syzkaller #0 PREEMPT(full) [ 103.964128][T10211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 103.968498][T10211] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 103.970845][T10211] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 ea d0 84 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 103.980556][T10211] RSP: 0018:ffffc900245efbf0 EFLAGS: 00010293 [ 103.983144][T10211] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff883647ca [ 103.986355][T10211] RDX: ffff88802bd34900 RSI: ffffffff88364816 RDI: 0000000000000005 [ 103.989484][T10211] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 103.992668][T10211] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900245efd88 [ 103.995860][T10211] R13: ffffc900245efd88 R14: 0000000000000001 R15: ffff888047eeb000 [ 103.999061][T10211] FS: 00007f15095af6c0(0000) GS:ffff8880d7171000(0000) knlGS:0000000000000000 [ 104.002836][T10211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.005924][T10211] CR2: 00007f15095aef98 CR3: 0000000112575000 CR4: 0000000000352ef0 [ 104.009785][T10211] Call Trace: [ 104.011529][T10211] [ 104.012765][T10211] ? __pfx_bcsp_recv+0x10/0x10 [ 104.014765][T10211] hci_uart_tty_receive+0x254/0x7e0 [ 104.016886][T10211] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 104.019331][T10211] tty_ioctl+0x583/0x1680 [ 104.021153][T10211] ? __pfx_tty_ioctl+0x10/0x10 [ 104.023124][T10211] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.025861][T10211] ? hook_file_ioctl_common+0x145/0x410 [ 104.028327][T10211] ? selinux_file_ioctl+0x180/0x270 [ 104.030640][T10211] ? selinux_file_ioctl+0xb4/0x270 [ 104.032864][T10211] ? __pfx_tty_ioctl+0x10/0x10 [ 104.034925][T10211] __x64_sys_ioctl+0x18b/0x210 [ 104.036894][T10211] do_syscall_64+0xcd/0x4e0 [ 104.038804][T10211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.041147][T10211] RIP: 0033:0x7f150878eec9 [ 104.043058][T10211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.051115][T10211] RSP: 002b:00007f15095af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.054548][T10211] RAX: ffffffffffffffda RBX: 00007f15089e6180 RCX: 00007f150878eec9 [ 104.057922][T10211] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000007 [ 104.061300][T10211] RBP: 00007f1508811f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.064273][T10211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.067935][T10211] R13: 00007f15089e6218 R14: 00007f15089e6180 R15: 00007ffd8ec659a8 [ 104.071645][T10211] [ 104.073036][T10211] Modules linked in: [ 104.075305][T10211] ---[ end trace 0000000000000000 ]--- [ 104.081828][T10211] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 104.083630][T10211] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 ea d0 84 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 104.091838][T10211] RSP: 0018:ffffc900245efbf0 EFLAGS: 00010293 [ 104.094103][T10211] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff883647ca [ 104.097075][T10211] RDX: ffff88802bd34900 RSI: ffffffff88364816 RDI: 0000000000000005 [ 104.099503][T10211] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 104.102219][T10211] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900245efd88 [ 104.104704][T10211] R13: ffffc900245efd88 R14: 0000000000000001 R15: ffff888047eeb000 [ 104.107566][T10211] FS: 00007f15095af6c0(0000) GS:ffff8880d7171000(0000) knlGS:0000000000000000 [ 104.111048][T10211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.114308][T10211] CR2: 00007f15095aef98 CR3: 0000000112575000 CR4: 0000000000352ef0 [ 104.117237][T10211] Kernel panic - not syncing: Fatal exception [ 104.119665][T10211] Kernel Offset: disabled [ 104.120966][T10211] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:11:03 Registers: info registers vcpu 0 CPU#0 RAX=000000000007ee04 RBX=0000000000000000 RCX=ffffffff8b506f49 RDX=ffffed100d4c6656 RSI=ffffffff8bd00840 RDI=ffffffff8190b35d RBP=fffffbfff1bd2f00 RSP=ffffffff8de07e08 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97800 R14=ffffffff905f7890 R15=0000000000000000 RIP=ffffffff8b505a8f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e71000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555589c70808 CR3=0000000112575000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000002fefcf8 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ec65eb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ec65eb6 00007ffd8ec65ebc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150881305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150881313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15089b74a8 00007f15089b74a0 00007f15089b7498 00007f15089b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150951d100 00007f15089b7460 00007f15089b7478 00007f15089b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15089b74b8 00007f15089b74b0 00007f15089b74a8 00007f15089b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a941e60 RCX=ffffffff81af0c61 RDX=ffff8880219e0000 RSI=ffffffff81af0c3b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000adf938 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d5283cd R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81af0c3d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f71000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb10e95e73c CR3=00000000286e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800404a486080001 000002080606013b d2000400019db408 0008800401c70800 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0030e100009a003 0210000990030004 0009840304040009 8003081a8008051a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0140f81410001580 030980044c100001 0000000806060106 a200000008080609 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff04000300 10000c1000158004 03808a1000018080 10000fff8080040c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000010180a0a0 8410000004010000 020806060168e040 96a08a0800600300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000500300100040 03021000300301d8 1000069003048004 0680030680042003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e080010030fffff ffffffff04000300 10000c1000158004 03808a1000018080 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000fff8080040c 0140f81410001580 030980044c100001 0000000806060106 ZMM25=f5024ba4f5024ba4 f5024ba4f5024ba4 f5024ba4f5024ba4 f5024ba4f5024ba4 f5024ba4f5024ba4 f5024ba4f5024ba4 f5024ba4f5024ba4 f5024ba4f5024ba4 ZMM26=a9c14abfa9c14abf a9c14abfa9c14abf a9c14abfa9c14abf a9c14abfa9c14abf a9c14abfa9c14abf a9c14abfa9c14abf a9c14abfa9c14abf a9c14abfa9c14abf ZMM27=fd837e0bfd837e0b fd837e0bfd837e0b fd837e0bfd837e0b fd837e0bfd837e0b fd837e0bfd837e0b fd837e0bfd837e0b fd837e0bfd837e0b fd837e0bfd837e0b ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1305000013050000 1305000013050000 1305000013050000 1305000013050000 1305000013050000 1305000013050000 1305000013050000 1305000013050000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a941e40 RCX=ffffffff81af0c61 RDX=ffff88802aeba480 RSI=ffffffff81af0c3b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90024127318 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d5283c9 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81af0c42 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555589c70500 ffffffff 00c00000 GS =0000 ffff8880d7071000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd8ec64fc0 CR3=0000000112575000 CR4=00352ef0 DR0=00000000ffffffff DR1=0000000000000000 DR2=0000000000000007 DR3=fffffdfffffffffe DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ec65eb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ec65eb6 00007ffd8ec65ebc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150881305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150881313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15089b74a8 00007f15089b74a0 00007f15089b7498 00007f15089b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150951d100 00007f15089b7460 00007f15089b7478 00007f15089b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15089b74b8 00007f15089b74b0 00007f15089b74a8 00007f15089b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85200710 RDI=ffffffff9ab53ae0 RBP=ffffffff9ab53aa0 RSP=ffffc900245ef568 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=ffffffff9ab53af0 R14=ffffffff9ab53aa0 R15=ffffffff9ab53d60 RIP=ffffffff85200737 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f15095af6c0 ffffffff 00c00000 GS =0000 ffff8880d7171000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f15095aef98 CR3=0000000112575000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ec65eb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ec65eb6 00007ffd8ec65ebc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1508812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150881305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150881313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15089b74a8 00007f15089b74a0 00007f15089b7498 00007f15089b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150951d100 00007f15089b7460 00007f15089b7478 00007f15089b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15089b74b8 00007f15089b74b0 00007f15089b74a8 00007f15089b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000