last executing test programs: 2m46.846273382s ago: executing program 3 (id=426): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000200000000020000000000000502000000020000000000000e03"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)='T', 0x1}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3ff}]}}}]}, 0x44}}, 0x0) mkdir(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuacct'}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {0x0}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB], 0x22) syz_emit_vhci(0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611230000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', 'GPL\x00'}) 2m46.752516597s ago: executing program 3 (id=427): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) close_range(0xffffffffffffffff, r0, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x1}, {}]}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}}, &(0x7f00000010c0)=""/217, 0x52, 0xd9, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2m46.752203715s ago: executing program 3 (id=428): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x783f55280ea2c3f5}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x3}]}}]}, 0x40}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d00), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002500000005002b00060000000a0001007770616e3100000005002e"], 0x30}}, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xf9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) 2m45.823334391s ago: executing program 3 (id=436): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000040)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000000c0)) write$dsp(r5, &(0x7f00000001c0)="d1d669c10ab10de4d9f667fc4a299c794e7d7f10e7bcd821a58b563257998027500b36cc013c52493a8866d3e9c647ab77647297023cfcb44f10939f19abcb898f", 0x41) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x4010, r4, 0x0) close(r5) unlink(&(0x7f0000000280)='./file1\x00') lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0) mount$binderfs(&(0x7f0000000040), &(0x7f0000000140)='./binderfs\x00', &(0x7f0000000200), 0x40c80, &(0x7f0000000600)=ANY=[@ANYBLOB='max=01000000000000000000000,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000011,stats=global,stats=global,euid<', @ANYRESDEC=r1, @ANYBLOB=',dont_hash,fsname=bond\x00,dont_appraise,euid<', @ANYRESDEC=r2, @ANYBLOB="2c0308ddbd1c75fcf3d228c69125e6dd7ace294ecd", @ANYRESDEC=r3, @ANYBLOB=',\x00']) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000340)=0x15) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000002c0)=0x7e) 2m45.722607228s ago: executing program 3 (id=437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="240000001a005f0014f9e407000904000200000000f00000000e000008001b003a000000", 0x24) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x402) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) preadv(r5, &(0x7f0000001440)=[{0x0}, {&(0x7f0000000040)=""/4, 0x4}], 0x2, 0x83, 0x4) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x60, 0x7, 0x3, 0x8, 0xf4, 0x2007, &(0x7f0000000140)="6d8cb7cb7629550da33a8816058cda1fa729b0a93c010ead8bc2f1fefdcdc521890766ed47cddf4c4b603dca2d8f77994661adfb12fb5f266d3a32e9db55e101b74b90ea86b581a6f5e558976db18299fa397805d399a88b3643eea7aab560ab6c9dcf35da31d4085035e7f54e21c6895a4d077df680383fa16cdd10833c0f7c501e2c67294c1763c65c1e470c3658b35a6899864b06375e9c6bc6858b122e9d818acef061c950a3c44343689c358636f21258ef12a7d365fc14b9b77b500a901bab0c504b646a36ed76a1d996e3506a91af9cf71e4167c20ff7ad2e04dccb14590de7ddf5e6d9dbbc8470d80711b59200d6b0d2"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m45.54026786s ago: executing program 3 (id=441): r0 = io_uring_setup(0x1bfa, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x3}) syz_usb_connect(0x3, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='j', 0x1}], 0x1) close(0xffffffffffffffff) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xd, 0x1, 0x413}}}, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a010100000000000000810002200000000000000000000008000100ac1414bb"], 0x24}}, 0x0) 2m45.404575821s ago: executing program 32 (id=441): r0 = io_uring_setup(0x1bfa, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x3}) syz_usb_connect(0x3, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='j', 0x1}], 0x1) close(0xffffffffffffffff) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xd, 0x1, 0x413}}}, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a010100000000000000810002200000000000000000000008000100ac1414bb"], 0x24}}, 0x0) 2m39.322575757s ago: executing program 2 (id=507): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01ff01000000000000000100000100000000000001"], 0x20}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000080)=[{0x26, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000006740)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x7f]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffd}]}}]}, 0xa4}}, 0x0) 2m39.322113632s ago: executing program 2 (id=508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000082000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000040)="f30fbd4e610f01bf66b6bad104ec5f660f413881a133000f01c33e660f3a224941df66b8040000800f23d00f21f866350000000e0f23f80fc7f1660f38824c09", 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x3a) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x802240, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f00000003c0)=""/133, 0x85, 0x4c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x7c, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) 2m38.329527503s ago: executing program 2 (id=516): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = io_uring_setup(0x6e8f, &(0x7f0000000100)={0x0, 0xfffffffd, 0x400, 0xffffffff, 0x206}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x88d) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) close_range(r1, 0xffffffffffffffff, 0x0) 2m38.329208514s ago: executing program 2 (id=517): r0 = socket(0x400000000010, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) 2m38.190297992s ago: executing program 2 (id=518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x4000040) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14c8, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x149c, 0x3, 0x0, 0x1, [{0x1496, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY={0x1138, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3679bdfa5210b069}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "2da2d12ed85039ce998a3b29f506dfbc15e89e096af0ed50f94e4d9446600ca295f7c64c07dcab4958d7649c78176aac04ffff9a62c29c08d3dc3a0be827a6b93c897c117da32904d60ad0453a75c3a2041c1fc3c5c550c43016f61ccd6f85f9b7ca1ed7c634026a702a93218893242263f04726b5563fe2119a81e465f434375f0b50d6160a5dcd1537355ffa7beb492db0c0ca8f5145e81b4082d53c3c58919735a3c7ca"}]}, @NFTA_SET_ELEM_KEY_END={0x11c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x22, 0x1, "17f7911e19609e1b8650a0e65d1548ffe7d44441a1863b09764817348d6a"}, @NFTA_DATA_VALUE={0x95, 0x1, "6bde9e82f34182e90d453883e82dc115513596ffa626db3788e7ca3b86315a04c92bff2aadc32f70176139c62f2af4f65c09a9abdeff4984a6de82c3ba2e6f79b341c2dbc128faaecf0773b420a9a1c9a1abbca6657184133148ea41222c44292622545c37395a734fcbfb93b9fcb4e6042d182c22dfcda88e9bfa749c8ff70c034cc0f64a986979df17ee2b80fc725cb0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1442cb0410e5c2fd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb6, 0x1, "511ba64462f26aa63d594b77c437076c12cdad4055e12609ad9cca10350d570fab9269f38213610771eb0110b6546ccfc439270893cd50a7c9b9ff0601284a5a57cb6b03625a93d33f5a48b1746539bf80379e1171e81395480b4da80856de0332d0d1db8e4c193c165f3fa04b7293568e324027166ebdcf5c3d1a5a8086c25f80bfd403141f06dc4c9e09cfa7989d852c40377e1b7cadec646d5994e24ccb6fafd7292775cc6547d07ade40054a4fc1283c"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "9c4e5b097b0441f7667ff36e99e5e4afa8efa9ac3e7906ba35ad14965da64650e039daebc437e7003f694bb75161d6f3b424f39151c8c654028dacf47759ce88fa3ac83f0fd9685fbc85673cf2478311579f904f5431246fe509d659efd8509cc2a64b732543ccecdcc14836fa6b38c6f6646b96010682427546bf0b1d9f94f6393511f5fa5686e771111e18dc827b"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x14f0}}, 0x4010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000170a0101000000000000000000000000703fd2d9669d35f4ca99fd4822cc10f2f1a9611bc0116ffb9e45a815233a8d8da69aba0c153f9bf3fae34caa60af33387781dd50058e032def182315c359c1f603b8259a6cd53911f7b23a77b9b8d49cfa9e3593e3ba1206dd73a8c9d2e828b5c15ce95b0316306f5eeec07252de87387e01caaf49d7a79b902cd094c9f481ec72bc66abc3d5c2a729801f1e2155decc566e95f0de2075fe51373181bb0aa323c502de1f012dde73edc83168f88ce6100fa5678b5d428092468a6fab60850f2dbcd1613be8cc980be3386080e358a1c73d0a94ee17b820f41be8921b"], 0x14}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close(r6) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000080)={0x10000, 0x8000}) 2m37.877903956s ago: executing program 2 (id=523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000003c0)=0x7, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 2m37.864066883s ago: executing program 33 (id=523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000003c0)=0x7, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 1m47.545764317s ago: executing program 1 (id=889): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x0) 1m47.473906909s ago: executing program 1 (id=890): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x10) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000002540)) 1m47.473715573s ago: executing program 1 (id=891): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r1 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x78bf, 0x2000dbd3, 0x6, 0x0, 0x0) 1m47.473480433s ago: executing program 1 (id=892): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000009f18ef47244eba0a209c00"/25], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10) setrlimit(0x2, &(0x7f0000000040)={0x4000051, 0xfffffffa}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)}, 0x0) io_uring_setup(0x30d5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = epoll_create1(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006a0001050014000800000000000000000000000008000500", @ANYRES64, @ANYBLOB], 0x20}}, 0x0) 1m47.370600362s ago: executing program 1 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)={0x29, 0x4, 0x0, {0x1, 0xfffffffff0000000, 0x1, 0x0, [0x0]}}, 0x29) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, &(0x7f0000000300)={[{@mode}, {}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) 1m46.404451528s ago: executing program 1 (id=915): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m30.366635683s ago: executing program 34 (id=915): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.429381921s ago: executing program 4 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x426000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 36.27672167s ago: executing program 4 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x426000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 27.891361887s ago: executing program 4 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x426000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19.631482693s ago: executing program 4 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x426000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.103457052s ago: executing program 4 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x426000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.848508696s ago: executing program 0 (id=1708): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 3.763009686s ago: executing program 0 (id=1712): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x241, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 3.762706484s ago: executing program 0 (id=1715): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000", @ANYRES8], 0x0) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 3.44243574s ago: executing program 5 (id=1730): r0 = socket(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x40) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.388646244s ago: executing program 5 (id=1731): socket$nl_route(0x10, 0x3, 0x0) unshare(0x2000680) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) unshare(0x2000000) close_range(r1, 0xffffffffffffffff, 0x0) 3.388493435s ago: executing program 5 (id=1732): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) 3.388318873s ago: executing program 5 (id=1733): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 2.833326339s ago: executing program 0 (id=1734): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000890) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.833041544s ago: executing program 0 (id=1735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x1, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@udp={0x2, 0x6, "3d885d", 0x67, 0x11, 0x0, @empty, @mcast2, {[], {0x4e22, 0x4e21, 0x67, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}, "b728457b12eb228ed56a0c710bf155fc2c054279700adfa0bb06ea45566a91832f996cb1bcf2ee9f04abdca9a3efd0def6f750f0c483c07db77ad2c7b8dc6ef375691f3c8910cc61b673f8e972e3a1377fef2167461479"}}}}}}, 0x9d) 2.799632665s ago: executing program 4 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x426000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 713.173871ms ago: executing program 0 (id=1736): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) io_uring_setup(0x354a, &(0x7f0000000140)={0x0, 0x400004, 0x1}) close(0x3) syz_open_dev$sg(0x0, 0xf9ba, 0x143882) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) close(0x3) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1000000000000024, 0x0, 0x0) 712.623337ms ago: executing program 5 (id=1738): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x90}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xf000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='\b\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf2502000000080004000800000008000200030000000800030004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10008001}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x4e, 0x3a, 0x33, 0x2f]}}}, 0x4e}]}) socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) openat$cgroup_ro(r4, &(0x7f0000000440)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) io_setup(0x7, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000413) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000083b7e734e2a703010102000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x5) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 629.968869ms ago: executing program 6 (id=1739): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 629.602667ms ago: executing program 6 (id=1740): r0 = socket(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x40) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 512.406037ms ago: executing program 6 (id=1741): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 512.079863ms ago: executing program 5 (id=1742): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000"/51, @ANYRES8], 0x0) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 511.970908ms ago: executing program 6 (id=1743): io_uring_setup(0x4f01, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x396}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000400a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c01008006000500070000002400020086650b35f0b4c2dc04a95e352f55e8204db1e72262099a4daa6bd5d598d1ecdb24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e24ac1e000100000000000000000800030000000000"], 0x1d8}}, 0x0) 157.484µs ago: executing program 6 (id=1744): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x241, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 0s ago: executing program 6 (id=1745): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume', 0x201, 0x184) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) kernel console output (not intermixed with test programs): nd0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.785136][ T12] bond0 (unregistering): Released all slaves [ 163.826334][ T9894] netlink: 'syz.0.1050': attribute type 2 has an invalid length. [ 163.855735][ T9857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.872598][ T9857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.875886][ T9902] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1054'. [ 163.895829][ T9857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.934786][ T9857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.972216][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.980330][ T9857] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.984458][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.986653][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.991888][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.993887][ T7575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.122268][ T9857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.275826][ T12] hsr_slave_0: left promiscuous mode [ 164.280506][ T12] hsr_slave_1: left promiscuous mode [ 164.283487][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.286849][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.290897][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.293851][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.324445][ T12] veth1_macvtap: left promiscuous mode [ 164.326098][ T12] veth0_macvtap: left promiscuous mode [ 164.327922][ T12] veth1_vlan: left promiscuous mode [ 164.329397][ T12] veth0_vlan: left promiscuous mode [ 164.479266][ T5947] Bluetooth: hci3: command tx timeout [ 164.629545][ T9927] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.597624][ T12] team0 (unregistering): Port device team_slave_1 removed [ 165.757062][ T9945] netlink: 'syz.5.1069': attribute type 7 has an invalid length. [ 165.761391][ T9945] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1069'. [ 165.793995][ T12] team0 (unregistering): Port device team_slave_0 removed [ 165.856228][ T5947] Bluetooth: hci2: command tx timeout [ 166.697270][ T9857] veth0_vlan: entered promiscuous mode [ 166.701457][ T5947] Bluetooth: hci3: command tx timeout [ 166.704386][ T9857] veth1_vlan: entered promiscuous mode [ 166.729659][ T9857] veth0_macvtap: entered promiscuous mode [ 166.736339][ T9857] veth1_macvtap: entered promiscuous mode [ 166.746864][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.749647][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.752147][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.755247][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.757740][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.760344][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.763466][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.766651][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.769359][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.771752][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.774339][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.777088][ T9857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.779828][ T9857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.791093][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.807219][ T9857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.809909][ T9857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.812289][ T9857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.814564][ T9857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.905843][ T7574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.909693][ T7574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.931027][ T7574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.933248][ T7574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.146194][ T40] audit: type=1400 audit(1730934287.290:601): avc: denied { watch watch_reads } for pid=9959 comm="syz.6.1067" path="pipe:[37015]" dev="pipefs" ino=37015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 167.303017][ T9963] overlayfs: missing 'lowerdir' [ 167.383245][ T9971] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1073'. [ 167.402785][ T9973] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 167.404581][ T9973] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 167.408075][ T9973] vhci_hcd vhci_hcd.0: Device attached [ 167.510472][ T9984] usb usb1: usbfs: process 9984 (syz.5.1077) did not claim interface 0 before use [ 167.515583][ T9984] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.560999][ T9990] overlayfs: missing 'lowerdir' [ 167.598645][ T828] vhci_hcd: vhci_device speed not set [ 167.612794][ T9996] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1083'. [ 167.662715][ T828] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 167.789760][T10013] overlayfs: missing 'lowerdir' [ 167.819219][ T40] audit: type=1400 audit(1730934287.926:602): avc: denied { ioctl } for pid=10015 comm="syz.5.1092" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.030659][ T9974] vhci_hcd: connection reset by peer [ 168.034450][ T7574] vhci_hcd: stop threads [ 168.036287][ T7574] vhci_hcd: release socket [ 168.039307][ T7574] vhci_hcd: disconnect device [ 168.069028][ T5947] Bluetooth: hci2: command tx timeout [ 168.153339][T10036] overlayfs: missing 'workdir' [ 168.190954][ T7574] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.201121][T10038] netlink: 'syz.5.1102': attribute type 29 has an invalid length. [ 168.205213][T10038] netlink: 'syz.5.1102': attribute type 29 has an invalid length. [ 169.295957][T10045] overlayfs: missing 'lowerdir' [ 169.383725][ T7574] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.396574][T10058] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1110'. [ 169.432593][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.438755][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.441627][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.450926][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.454156][ T5955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.456109][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.852447][T10059] chnl_net:caif_netlink_parms(): no params data found [ 169.976058][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.978199][T10059] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.981016][T10059] bridge_slave_0: entered allmulticast mode [ 169.988695][T10059] bridge_slave_0: entered promiscuous mode [ 170.016521][ T7574] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.021564][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.025590][T10059] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.029257][T10059] bridge_slave_1: entered allmulticast mode [ 170.049955][T10059] bridge_slave_1: entered promiscuous mode [ 170.129449][ T7574] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.144865][T10059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.166472][T10059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.248758][T10059] team0: Port device team_slave_0 added [ 170.273415][T10059] team0: Port device team_slave_1 added [ 170.299974][T10059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.301810][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.308967][T10059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.311113][T10082] overlayfs: missing 'lowerdir' [ 170.325165][T10059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.326970][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.333546][T10059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.360992][T10087] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1117'. [ 170.366401][T10059] hsr_slave_0: entered promiscuous mode [ 170.368464][T10059] hsr_slave_1: entered promiscuous mode [ 170.370196][T10059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.372523][T10059] Cannot create hsr debugfs directory [ 170.381984][ T7574] bridge_slave_1: left allmulticast mode [ 170.383534][ T7574] bridge_slave_1: left promiscuous mode [ 170.385070][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.388400][ T7574] bridge_slave_0: left allmulticast mode [ 170.390117][ T7574] bridge_slave_0: left promiscuous mode [ 170.391644][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.666810][ T5985] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 170.729123][ T7574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.733492][ T7574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.737493][ T7574] bond0 (unregistering): Released all slaves [ 170.853462][ T5985] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 170.855882][ T5985] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.857736][ T5985] usb 10-1: Product: syz [ 170.858805][ T5985] usb 10-1: Manufacturer: syz [ 170.861245][ T5985] usb 10-1: SerialNumber: syz [ 170.863677][ T5985] usb 10-1: config 0 descriptor?? [ 171.083924][ T5985] usb 10-1: USB disconnect, device number 6 [ 171.181765][ T7574] hsr_slave_0: left promiscuous mode [ 171.184264][ T7574] hsr_slave_1: left promiscuous mode [ 171.186456][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.189072][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.193894][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.196486][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.219579][ T7574] veth1_macvtap: left promiscuous mode [ 171.221715][ T7574] veth0_macvtap: left promiscuous mode [ 171.223458][ T7574] veth1_vlan: left promiscuous mode [ 171.224944][ T7574] veth0_vlan: left promiscuous mode [ 171.471089][T10108] overlayfs: missing 'lowerdir' [ 171.652562][T10121] UBIFS error (pid: 10121): cannot open "/dev/sg0", error -22 [ 171.673962][ T5955] Bluetooth: hci3: command tx timeout [ 171.762538][ T40] audit: type=1400 audit(1730934291.603:603): avc: denied { read } for pid=10122 comm="syz.5.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.873733][T10131] overlayfs: missing 'lowerdir' [ 172.250766][ T7574] team0 (unregistering): Port device team_slave_1 removed [ 172.392417][ T7574] team0 (unregistering): Port device team_slave_0 removed [ 172.858936][T10152] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.125698][ T828] vhci_hcd: vhci_device speed not set [ 173.168129][T10160] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1147'. [ 173.177070][T10163] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 173.179618][T10163] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.231305][T10168] netlink: 'syz.5.1146': attribute type 7 has an invalid length. [ 173.233499][T10168] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1146'. [ 173.399708][T10059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.406379][T10059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.410314][T10059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.413983][T10059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.470238][T10059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.479531][T10059] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.484526][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.487050][ T7575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.511449][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.513300][ T7580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.564683][T10179] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 173.690928][T10059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.861247][T10059] veth0_vlan: entered promiscuous mode [ 173.866933][T10059] veth1_vlan: entered promiscuous mode [ 173.895747][ T5955] Bluetooth: hci3: command tx timeout [ 173.901917][T10059] veth0_macvtap: entered promiscuous mode [ 173.907142][T10059] veth1_macvtap: entered promiscuous mode [ 173.921327][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.924665][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.928213][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.930860][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.933539][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.936337][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.939717][T10059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.942682][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.945396][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.947997][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.950826][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.953322][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.956011][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.959159][T10059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.966116][T10059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.968530][T10059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.971164][T10059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.973428][T10059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.051286][ T7575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.054758][ T7575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.075755][ T7580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.080925][ T7580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.146969][T10201] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1158'. [ 174.217353][T10203] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 174.220536][T10203] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 174.317478][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1160'. [ 174.822743][T10221] netlink: 'syz.6.1164': attribute type 7 has an invalid length. [ 174.826354][T10221] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1164'. [ 174.976991][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'. [ 174.979434][T10231] netlink: 'syz.0.1169': attribute type 1 has an invalid length. [ 174.981992][T10231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1169'. [ 175.195897][T10247] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1177'. [ 176.217068][T10270] pim6reg1: entered promiscuous mode [ 176.218550][T10270] pim6reg1: entered allmulticast mode [ 176.311416][T10276] overlayfs: missing 'lowerdir' [ 176.400996][ T7574] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.556137][T10286] netlink: 'syz.0.1191': attribute type 7 has an invalid length. [ 176.559205][T10286] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1191'. [ 177.630236][T10291] netlink: 'syz.6.1195': attribute type 1 has an invalid length. [ 177.643227][T10294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10294 comm=syz.5.1196 [ 177.655683][T10291] bond1: entered promiscuous mode [ 177.657058][T10291] bond1: entered allmulticast mode [ 177.658922][T10291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.662004][T10294] netlink: 'syz.5.1196': attribute type 1 has an invalid length. [ 177.687116][T10294] bond1: entered promiscuous mode [ 177.687835][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.688615][T10294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.693648][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.696181][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.700531][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.703855][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 177.704319][T10294] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 177.706572][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.709534][T10294] bond1: (slave batadv1): making interface the new active one [ 177.715228][T10294] batadv1: entered promiscuous mode [ 177.717182][T10294] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 177.758316][T10300] usb usb1: usbfs: process 10300 (syz.6.1197) did not claim interface 0 before use [ 177.761816][T10300] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.774750][T10296] chnl_net:caif_netlink_parms(): no params data found [ 177.828424][T10312] overlayfs: missing 'lowerdir' [ 177.836599][T10314] UBIFS error (pid: 10314): cannot open "/dev/sg0", error -22 [ 177.864485][T10296] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.868492][T10296] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.870534][T10296] bridge_slave_0: entered allmulticast mode [ 177.876826][T10296] bridge_slave_0: entered promiscuous mode [ 177.885365][T10296] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.888594][T10296] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.894441][T10296] bridge_slave_1: entered allmulticast mode [ 177.898960][T10296] bridge_slave_1: entered promiscuous mode [ 177.937404][T10296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.941172][T10296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.980808][T10320] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 177.995860][T10296] team0: Port device team_slave_0 added [ 177.999464][T10296] team0: Port device team_slave_1 added [ 178.038489][T10296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.040666][T10296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.048330][T10296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.053755][T10296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.055772][T10296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.073378][T10296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.096178][T10324] netlink: 'syz.5.1205': attribute type 1 has an invalid length. [ 178.107703][T10324] bond2: entered promiscuous mode [ 178.109484][T10324] bond2: entered allmulticast mode [ 178.111348][T10324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.127078][T10296] hsr_slave_0: entered promiscuous mode [ 178.129847][T10296] hsr_slave_1: entered promiscuous mode [ 178.138818][T10296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.140856][T10296] Cannot create hsr debugfs directory [ 178.145432][ T5955] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 178.148266][T10333] overlayfs: missing 'lowerdir' [ 178.363080][T10353] syz.6.1218: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 178.367558][T10353] CPU: 1 UID: 0 PID: 10353 Comm: syz.6.1218 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 178.370308][T10353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.373103][T10353] Call Trace: [ 178.374006][T10353] [ 178.374794][T10353] dump_stack_lvl+0x16c/0x1f0 [ 178.376063][T10353] warn_alloc+0x24d/0x3a0 [ 178.376205][T10355] dccp_invalid_packet: P.Data Offset(0) too small [ 178.377186][T10353] ? __pfx_warn_alloc+0x10/0x10 [ 178.380208][T10353] ? __pfx_stack_trace_save+0x10/0x10 [ 178.381641][T10353] ? kasan_save_stack+0x42/0x60 [ 178.382925][T10353] ? kasan_save_stack+0x33/0x60 [ 178.384180][T10353] ? kasan_save_track+0x14/0x30 [ 178.385472][T10353] ? __kasan_kmalloc+0xaa/0xb0 [ 178.386737][T10353] ? xskq_create+0x52/0x1d0 [ 178.388082][T10353] ? do_sock_setsockopt+0x222/0x480 [ 178.389455][T10353] ? __sys_setsockopt+0x1a4/0x270 [ 178.390761][T10353] ? __x64_sys_setsockopt+0xbd/0x160 [ 178.392097][T10353] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 178.393605][T10353] ? xskq_create+0xfb/0x1d0 [ 178.394825][T10353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 178.396628][T10353] ? xskq_create+0xfb/0x1d0 [ 178.397884][T10353] vmalloc_user_noprof+0x6b/0x90 [ 178.399184][T10353] ? xskq_create+0xfb/0x1d0 [ 178.400397][T10353] xskq_create+0xfb/0x1d0 [ 178.401577][T10353] xsk_setsockopt+0x757/0xa10 [ 178.402801][T10353] ? __pfx_xsk_setsockopt+0x10/0x10 [ 178.403377][T10357] overlayfs: missing 'workdir' [ 178.404163][T10353] ? selinux_socket_setsockopt+0x6a/0x80 [ 178.404185][T10353] ? __pfx_xsk_setsockopt+0x10/0x10 [ 178.404202][T10353] do_sock_setsockopt+0x222/0x480 [ 178.410134][T10353] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 178.411691][T10353] ? fdget+0x176/0x210 [ 178.412806][T10353] __sys_setsockopt+0x1a4/0x270 [ 178.414156][T10353] ? __pfx___sys_setsockopt+0x10/0x10 [ 178.415677][T10353] ? rcu_is_watching+0x12/0xc0 [ 178.416976][T10353] __x64_sys_setsockopt+0xbd/0x160 [ 178.418350][T10353] ? do_syscall_64+0x91/0x250 [ 178.419669][T10353] ? lockdep_hardirqs_on+0x7c/0x110 [ 178.421095][T10353] do_syscall_64+0xcd/0x250 [ 178.422350][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.424023][T10353] RIP: 0033:0x7f6a4457e719 [ 178.425233][T10353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.430541][T10353] RSP: 002b:00007f6a45427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.432807][T10353] RAX: ffffffffffffffda RBX: 00007f6a44735f80 RCX: 00007f6a4457e719 [ 178.434958][T10353] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 178.437103][T10353] RBP: 00007f6a445f139e R08: 0000000000000020 R09: 0000000000000000 [ 178.439227][T10353] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 178.441365][T10353] R13: 0000000000000000 R14: 00007f6a44735f80 R15: 00007ffcc4bd61d8 [ 178.443536][T10353] [ 178.445010][ C1] hpet: Lost 4 RTC interrupts [ 178.447980][T10353] Mem-Info: [ 178.448883][T10353] active_anon:8498 inactive_anon:0 isolated_anon:0 [ 178.448883][T10353] active_file:4768 inactive_file:48672 isolated_file:0 [ 178.448883][T10353] unevictable:1768 dirty:154 writeback:0 [ 178.448883][T10353] slab_reclaimable:8565 slab_unreclaimable:75531 [ 178.448883][T10353] mapped:20324 shmem:5368 pagetables:909 [ 178.448883][T10353] sec_pagetables:314 bounce:0 [ 178.448883][T10353] kernel_misc_reclaimable:0 [ 178.448883][T10353] free:476761 free_pcp:1885 free_cma:0 [ 178.461394][T10353] Node 0 active_anon:33868kB inactive_anon:0kB active_file:19072kB inactive_file:194612kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:81296kB dirty:608kB writeback:0kB shmem:17936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13136kB pagetables:3636kB sec_pagetables:1256kB all_unreclaimable? no [ 178.470781][T10353] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 178.478758][T10353] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.486389][T10353] lowmem_reserve[]: 0 1214 0 0 0 [ 178.487804][T10353] Node 0 DMA32 free:298500kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:33868kB inactive_anon:0kB active_file:19072kB inactive_file:194612kB unevictable:3536kB writepending:540kB present:2080628kB managed:1272192kB mlocked:0kB bounce:0kB free_pcp:4412kB local_pcp:1920kB free_cma:0kB [ 178.496850][T10353] lowmem_reserve[]: 0 0 0 0 0 [ 178.498182][T10353] Node 1 Normal free:1592640kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:2804kB local_pcp:16kB free_cma:0kB [ 178.506231][T10353] lowmem_reserve[]: 0 0 0 0 0 [ 178.507568][T10353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 178.511385][T10353] Node 0 DMA32: 491*4kB (M) 204*8kB (ME) 112*16kB (UME) 298*32kB (UME) 183*64kB (UME) 75*128kB (UME) 35*256kB (UME) 16*512kB (UME) 13*1024kB (UM) 9*2048kB (UME) 52*4096kB (UM) = 298124kB [ 178.516709][T10353] Node 1 Normal: 2*4kB (ME) 7*8kB (UME) 22*16kB (UME) 145*32kB (UME) 58*64kB (UME) 24*128kB (UME) 9*256kB (U) 3*512kB (M) 2*1024kB (U) 3*2048kB (UE) 383*4096kB (M) = 1592640kB [ 178.522232][T10353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.527565][T10353] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 178.530007][T10353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.532484][T10353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 178.540821][T10353] 58529 total pagecache pages [ 178.542116][T10353] 0 pages in swap cache [ 178.543200][T10353] Free swap = 124024kB [ 178.544300][T10353] Total swap = 124996kB [ 178.545421][T10353] 1048443 pages RAM [ 178.546901][T10353] 0 pages HighMem/MovableOnly [ 178.548159][T10353] 281074 pages reserved [ 178.549250][T10353] 0 pages cma reserved [ 178.617787][ T7574] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.645362][T10376] overlayfs: missing 'workdir' [ 178.701912][ T7574] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.815203][ T7574] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.932093][ T40] audit: type=1400 audit(1730934298.319:604): avc: denied { listen } for pid=10379 comm="syz.6.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 179.089697][ T7574] bridge_slave_1: left allmulticast mode [ 179.091677][ T7574] bridge_slave_1: left promiscuous mode [ 179.093504][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.097488][ T7574] bridge_slave_0: left allmulticast mode [ 179.099115][ T7574] bridge_slave_0: left promiscuous mode [ 179.100676][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.438688][ T7574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.443958][ T7574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.448377][ T7574] bond0 (unregistering): Released all slaves [ 179.753438][ T40] audit: type=1400 audit(1730934299.086:605): avc: denied { append } for pid=10399 comm="syz.0.1238" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 179.885065][ T5955] Bluetooth: hci3: command tx timeout [ 180.286536][ T7574] hsr_slave_0: left promiscuous mode [ 180.288567][ T7574] hsr_slave_1: left promiscuous mode [ 180.290397][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.292578][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.295876][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.298738][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.336693][ T7574] veth1_macvtap: left promiscuous mode [ 180.338214][ T7574] veth0_macvtap: left promiscuous mode [ 180.340131][ T7574] veth1_vlan: left promiscuous mode [ 180.342545][ T7574] veth0_vlan: left promiscuous mode [ 180.443203][T10418] ceph: No mds server is up or the cluster is laggy [ 180.446609][ T62] libceph: connect (1)[c::]:6789 error -101 [ 180.464597][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 180.947694][T10432] usb usb1: usbfs: process 10432 (syz.0.1247) did not claim interface 0 before use [ 180.957927][T10432] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.023355][T10434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10434 comm=syz.0.1248 [ 181.934353][ T7574] team0 (unregistering): Port device team_slave_1 removed [ 182.071523][ T7574] team0 (unregistering): Port device team_slave_0 removed [ 182.111356][ T5955] Bluetooth: hci3: command tx timeout [ 182.995732][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1250'. [ 182.998027][T10440] netlink: 'syz.5.1250': attribute type 1 has an invalid length. [ 182.999984][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1250'. [ 183.042285][T10296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.045651][T10446] tipc: Started in network mode [ 183.047652][T10446] tipc: Node identity 00000073be0000000000000000000001, cluster identity 4711 [ 183.050718][T10446] tipc: Enabling of bearer rejected, failed to enable media [ 183.053367][T10296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.064498][T10296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.074378][T10296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.127130][T10296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.132615][T10452] usb usb1: usbfs: process 10452 (syz.5.1256) did not claim interface 0 before use [ 183.135513][T10452] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 183.137284][T10296] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.143914][ T7573] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.146194][ T7573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.149788][ T7573] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.152295][ T7573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.489329][T10469] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 183.723149][T10296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.020801][T10296] veth0_vlan: entered promiscuous mode [ 184.042706][T10296] veth1_vlan: entered promiscuous mode [ 184.090356][T10296] veth0_macvtap: entered promiscuous mode [ 184.094748][T10296] veth1_macvtap: entered promiscuous mode [ 184.101887][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.105199][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.107887][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.110553][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.113163][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.116353][ T2294] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 184.116785][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.122857][T10296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.129447][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.132946][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.136580][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.139423][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.142291][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.145736][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.150354][T10296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.154848][T10296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.157059][T10296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.159353][T10296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.161597][T10296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.220777][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.223172][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.226343][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1262'. [ 184.235243][T10481] netlink: 'syz.6.1262': attribute type 1 has an invalid length. [ 184.242897][T10481] netlink: 'syz.6.1262': attribute type 2 has an invalid length. [ 184.245515][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1262'. [ 184.260946][ T7573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.263038][ T7573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.277940][ T2294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.281853][ T2294] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.288660][ T2294] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.291070][ T2294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.293235][ T2294] usb 5-1: Product: syz [ 184.294609][ T2294] usb 5-1: Manufacturer: syz [ 184.296271][ T2294] usb 5-1: SerialNumber: syz [ 184.318819][ T5955] Bluetooth: hci3: command tx timeout [ 184.367075][T10491] usb usb1: usbfs: process 10491 (syz.5.1267) did not claim interface 0 before use [ 184.369996][T10491] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 184.508932][ T40] audit: type=1400 audit(1730934303.538:606): avc: denied { map } for pid=10496 comm="syz.6.1270" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 184.515829][ T40] audit: type=1400 audit(1730934303.538:607): avc: denied { execute } for pid=10496 comm="syz.6.1270" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 184.523131][T10502] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.1270'. [ 185.433354][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1275'. [ 185.436678][T10510] netlink: 'syz.5.1275': attribute type 1 has an invalid length. [ 185.439912][T10510] netlink: 'syz.5.1275': attribute type 2 has an invalid length. [ 185.443510][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1275'. [ 186.644899][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1284'. [ 186.647849][T10531] netlink: 'syz.5.1284': attribute type 1 has an invalid length. [ 186.650870][T10531] netlink: 'syz.5.1284': attribute type 2 has an invalid length. [ 186.653142][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1284'. [ 186.964643][ T2294] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 186.981715][ T2294] cdc_ncm 5-1:1.0: bind() failure [ 186.985009][ T2294] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 186.987094][ T2294] cdc_ncm 5-1:1.1: bind() failure [ 186.990579][ T2294] usb 5-1: USB disconnect, device number 10 [ 187.067302][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1294'. [ 187.069921][T10554] netlink: 'syz.5.1294': attribute type 1 has an invalid length. [ 187.072456][T10554] netlink: 'syz.5.1294': attribute type 2 has an invalid length. [ 187.483854][ T7573] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.858093][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.865643][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.869628][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.873139][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 188.877736][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 188.880201][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.899518][T10595] __nla_validate_parse: 1 callbacks suppressed [ 188.899530][T10595] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1311'. [ 189.046054][ T40] audit: type=1400 audit(1730934307.785:608): avc: denied { ioctl } for pid=10584 comm="syz.0.1308" path="socket:[40644]" dev="sockfs" ino=40644 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 189.086907][ T7573] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.338789][ T7573] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.422404][ T7573] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.613586][ T40] audit: type=1400 audit(1730934308.318:609): avc: denied { write } for pid=10605 comm="syz.5.1313" path="socket:[38323]" dev="sockfs" ino=38323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.692677][T10590] chnl_net:caif_netlink_parms(): no params data found [ 189.797802][ T40] audit: type=1326 audit(1730934308.487:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.0.1315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af937e719 code=0x7ffc0000 [ 189.807402][ T40] audit: type=1326 audit(1730934308.487:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.0.1315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af937e719 code=0x7ffc0000 [ 189.815908][ T40] audit: type=1326 audit(1730934308.487:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.0.1315" exe="/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f7af937e719 code=0x7ffc0000 [ 189.825080][ T40] audit: type=1326 audit(1730934308.487:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.0.1315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af937e719 code=0x7ffc0000 [ 189.833128][ T40] audit: type=1326 audit(1730934308.487:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10611 comm="syz.0.1315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af937e719 code=0x7ffc0000 [ 189.991525][T10590] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.993465][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.995521][T10590] bridge_slave_0: entered allmulticast mode [ 189.997642][T10590] bridge_slave_0: entered promiscuous mode [ 190.009130][T10590] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.011261][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.013193][T10590] bridge_slave_1: entered allmulticast mode [ 190.015829][T10590] bridge_slave_1: entered promiscuous mode [ 190.038637][ T7573] bridge_slave_1: left allmulticast mode [ 190.040201][ T7573] bridge_slave_1: left promiscuous mode [ 190.044514][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.050976][ T7573] bridge_slave_0: left allmulticast mode [ 190.052760][ T7573] bridge_slave_0: left promiscuous mode [ 190.054471][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.077627][T10630] tmpfs: Bad value for 'mpol' [ 190.083830][T10630] siw: device registration error -23 [ 190.093154][T10632] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1323'. [ 190.398410][ T7573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.403384][ T7573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.407743][ T7573] bond0 (unregistering): Released all slaves [ 190.423918][T10590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.427675][T10590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.460908][T10590] team0: Port device team_slave_0 added [ 190.498046][ T40] audit: type=1400 audit(1730934309.141:615): avc: denied { ioctl } for pid=10642 comm="syz.6.1328" path="socket:[39764]" dev="sockfs" ino=39764 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.498913][T10590] team0: Port device team_slave_1 added [ 190.535615][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1327'. [ 190.538384][T10641] netlink: 4640 bytes leftover after parsing attributes in process `syz.5.1327'. [ 190.599680][T10590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.601521][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.608684][T10590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.613596][T10590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.616570][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.627143][T10590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.673038][T10653] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1333'. [ 190.679836][T10590] hsr_slave_0: entered promiscuous mode [ 190.682330][T10590] hsr_slave_1: entered promiscuous mode [ 190.684470][T10590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.686996][T10590] Cannot create hsr debugfs directory [ 190.838547][ T7573] hsr_slave_0: left promiscuous mode [ 190.841196][ T7573] hsr_slave_1: left promiscuous mode [ 190.843862][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.846178][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.849288][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.851848][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.900954][ T7573] veth1_macvtap: left promiscuous mode [ 190.902632][ T7573] veth0_macvtap: left promiscuous mode [ 190.904557][ T7573] veth1_vlan: left promiscuous mode [ 190.906457][ T7573] veth0_vlan: left promiscuous mode [ 190.974613][ T40] audit: type=1400 audit(1730934309.581:616): avc: denied { view } for pid=10657 comm="syz.5.1335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 191.075138][ T5955] Bluetooth: hci3: command tx timeout [ 191.308801][T10677] netlink: 'syz.6.1341': attribute type 1 has an invalid length. [ 191.311746][T10677] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1341'. [ 192.028422][ T6337] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 192.171032][ T7573] team0 (unregistering): Port device team_slave_1 removed [ 192.212378][ T6337] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 192.216904][ T6337] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.222703][ T6337] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.226205][ T6337] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 192.232719][ T6337] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 192.235904][ T6337] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 192.238765][ T6337] usb 10-1: Manufacturer: syz [ 192.242196][ T6337] usb 10-1: config 0 descriptor?? [ 192.327941][ T7573] team0 (unregistering): Port device team_slave_0 removed [ 192.677041][ T6337] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 192.680746][ T6337] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 192.707996][ T6337] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 193.298768][ T5955] Bluetooth: hci3: command tx timeout [ 193.379385][T10706] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1354'. [ 193.409052][T10710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10710 comm=syz.6.1355 [ 193.413861][T10710] netlink: 'syz.6.1355': attribute type 1 has an invalid length. [ 193.431064][T10710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.452660][T10710] bond2: (slave bridge1): making interface the new active one [ 193.455221][T10710] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 193.468420][T10710] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 193.715872][T10590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.719142][T10590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.722888][T10590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.726571][T10590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.770679][T10590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.792479][T10590] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.797082][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.798947][ T7576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.817215][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.819560][ T7575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.822553][ T8] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 193.923814][T10590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.983092][ T8] usb 11-1: Using ep0 maxpacket: 16 [ 193.985883][ T8] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 193.989341][ T8] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 193.995093][ T8] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.999066][ T8] usb 11-1: config 0 descriptor?? [ 194.002670][ T8] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input16 [ 194.051039][T10590] veth0_vlan: entered promiscuous mode [ 194.055623][T10590] veth1_vlan: entered promiscuous mode [ 194.067945][T10590] veth0_macvtap: entered promiscuous mode [ 194.072337][T10590] veth1_macvtap: entered promiscuous mode [ 194.078602][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.081919][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.084478][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.087236][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.090012][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.092901][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.096520][T10590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.101590][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.104323][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.107006][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.109743][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.113446][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.116179][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.119417][T10590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.125062][T10590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.127564][T10590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.129744][T10590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.132039][T10590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.163808][ T7573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.166672][ T7573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.176619][ T7575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.182126][ T7575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.234817][ T5347] bcm5974 11-1:0.0: could not read from device [ 194.240535][ T8] bcm5974 11-1:0.0: could not read from device [ 194.247418][ T5347] bcm5974 11-1:0.0: could not read from device [ 194.253581][ T8] input: failed to attach handler mousedev to device input16, error: -5 [ 194.258539][ T8] usb 11-1: USB disconnect, device number 2 [ 194.260439][ T5347] bcm5974 11-1:0.0: could not read from device [ 194.333301][T10767] binder: 10763:10767 ioctl c0306201 20000680 returned -14 [ 195.125960][T10795] tmpfs: Bad value for 'mpol' [ 195.133495][T10795] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 195.205481][ T62] usb 10-1: USB disconnect, device number 7 [ 195.314444][ T40] audit: type=1400 audit(1730934313.641:617): avc: denied { read } for pid=10796 comm="syz.0.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 196.088887][T10818] netlink: 'syz.5.1397': attribute type 7 has an invalid length. [ 196.091484][T10818] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1397'. [ 196.529923][T10824] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 196.548085][T10824] bond2: entered promiscuous mode [ 196.549647][T10824] bond2: entered allmulticast mode [ 196.555701][T10824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.669227][T10831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10831 comm=syz.6.1404 [ 196.672903][T10831] netlink: 'syz.6.1404': attribute type 1 has an invalid length. [ 196.679829][T10831] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.699844][T10836] tmpfs: Bad value for 'mpol' [ 196.762477][T10844] netlink: 'syz.6.1410': attribute type 1 has an invalid length. [ 196.771413][T10844] bond4: entered promiscuous mode [ 196.772846][T10844] bond4: entered allmulticast mode [ 196.775663][T10844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.933081][ T7575] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.395315][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1416'. [ 198.475208][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.482321][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.493823][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.497701][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.501550][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 198.505545][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.592861][T10875] netlink: 'syz.0.1414': attribute type 7 has an invalid length. [ 198.593256][T10866] chnl_net:caif_netlink_parms(): no params data found [ 198.595549][T10875] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1414'. [ 198.654759][ T2294] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 198.663051][ T7575] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.667862][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.669949][T10866] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.671951][T10866] bridge_slave_0: entered allmulticast mode [ 198.674043][T10866] bridge_slave_0: entered promiscuous mode [ 198.677935][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.679880][T10866] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.681835][T10866] bridge_slave_1: entered allmulticast mode [ 198.684003][T10866] bridge_slave_1: entered promiscuous mode [ 198.707153][T10866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.711103][T10866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.734568][T10866] team0: Port device team_slave_0 added [ 198.737303][T10866] team0: Port device team_slave_1 added [ 198.760898][ T7575] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.781499][T10866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.783442][T10866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.789875][T10866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.801332][T10866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.803252][T10866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.810435][T10866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.835433][T10866] hsr_slave_0: entered promiscuous mode [ 198.839460][T10866] hsr_slave_1: entered promiscuous mode [ 198.841678][T10866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.843728][T10866] Cannot create hsr debugfs directory [ 198.847103][ T2294] usb 11-1: Using ep0 maxpacket: 16 [ 198.850255][ T2294] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 198.853844][ T2294] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 198.856440][ T2294] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.859464][ T2294] usb 11-1: config 0 descriptor?? [ 198.864272][ T7575] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.864341][ T2294] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input17 [ 198.992432][ T7575] bridge_slave_1: left allmulticast mode [ 198.994155][ T7575] bridge_slave_1: left promiscuous mode [ 198.996248][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.001427][ T7575] bridge_slave_0: left allmulticast mode [ 199.003056][ T7575] bridge_slave_0: left promiscuous mode [ 199.004675][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.093608][ T5347] bcm5974 11-1:0.0: could not read from device [ 199.095580][ T8] usb 11-1: USB disconnect, device number 3 [ 199.413898][ T7575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.418232][ T7575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.421959][ T7575] bond0 (unregistering): Released all slaves [ 199.612239][T10884] netlink: 'syz.5.1420': attribute type 1 has an invalid length. [ 199.622405][T10884] bond3: entered promiscuous mode [ 199.623876][T10884] bond3: entered allmulticast mode [ 199.625414][T10884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.863084][ T7575] hsr_slave_0: left promiscuous mode [ 199.865129][ T7575] hsr_slave_1: left promiscuous mode [ 199.867296][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.869349][ T7575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.872017][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.874712][ T7575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.901207][ T7575] veth1_macvtap: left promiscuous mode [ 199.902856][ T7575] veth0_macvtap: left promiscuous mode [ 199.904502][ T7575] veth1_vlan: left promiscuous mode [ 199.909466][ T7575] veth0_vlan: left promiscuous mode [ 200.365256][T10902] netlink: 'syz.0.1426': attribute type 7 has an invalid length. [ 200.367395][T10902] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1426'. [ 200.658361][ T5955] Bluetooth: hci3: command tx timeout [ 201.098972][ T7575] team0 (unregistering): Port device team_slave_1 removed [ 201.173703][T10911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10911 comm=syz.0.1428 [ 201.239380][ T7575] team0 (unregistering): Port device team_slave_0 removed [ 201.990184][T10911] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 202.019395][T10912] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 202.029817][T10912] bond3: (slave batadv4): making interface the new active one [ 202.032283][T10912] bond3: (slave batadv4): Enslaving as an active interface with an up link [ 202.103391][T10866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.106736][T10866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.111888][T10866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.118325][T10866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.176970][T10866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.204987][T10866] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.211476][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.213370][ T7576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.219955][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.221854][ T7576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.289486][ T6842] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 202.306554][T10866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.438576][T10866] veth0_vlan: entered promiscuous mode [ 202.448103][T10866] veth1_vlan: entered promiscuous mode [ 202.451303][ T6842] usb 11-1: Using ep0 maxpacket: 16 [ 202.455560][ T6842] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 202.459586][ T6842] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 202.462814][ T6842] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.465159][T10866] veth0_macvtap: entered promiscuous mode [ 202.466630][T10866] veth1_macvtap: entered promiscuous mode [ 202.467944][ T6842] usb 11-1: config 0 descriptor?? [ 202.471988][ T6842] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input18 [ 202.479171][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.485276][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.487691][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.490450][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.493293][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.496369][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.500101][T10866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.505972][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.508716][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.511319][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.514737][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.517324][T10866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.520029][T10866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.523313][T10866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.529146][T10866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.531421][T10866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.533792][T10866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.536449][T10866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.702331][ T5347] bcm5974 11-1:0.0: could not read from device [ 202.704471][ T2294] usb 11-1: USB disconnect, device number 4 [ 202.877661][ T5947] Bluetooth: hci3: command tx timeout [ 202.935388][T10919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.938182][T10919] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.939773][T10919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.941284][T10919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.943559][T10919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.947262][T10919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.949458][T10919] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.952158][T10919] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.974504][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.976394][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.984717][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.986607][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.199663][T10950] netlink: 'syz.5.1439': attribute type 29 has an invalid length. [ 203.340407][T10960] netlink: 'syz.0.1436': attribute type 7 has an invalid length. [ 203.342495][T10960] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1436'. [ 203.991538][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.140465][T10968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10968 comm=syz.0.1446 [ 204.461838][T10992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10992 comm=syz.6.1457 [ 204.588099][ T5947] Bluetooth: hci1: command 0x040f tx timeout [ 205.080275][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.101480][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.103955][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.656933][T11018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11018 comm=syz.0.1467 [ 206.687715][T11022] nvme_fabrics: unknown parameter or missing value '%' in ctrl creation request [ 206.726958][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.731045][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.736972][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.742208][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.748560][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 206.752072][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.758159][ T40] audit: type=1400 audit(1730934324.342:618): avc: denied { module_load } for pid=11029 comm="syz.0.1471" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=44134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 206.775984][T11030] Invalid ELF header magic: != ELF [ 206.827408][T11027] chnl_net:caif_netlink_parms(): no params data found [ 206.870790][T11027] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.872714][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.874801][T11027] bridge_slave_0: entered allmulticast mode [ 206.877476][T11027] bridge_slave_0: entered promiscuous mode [ 206.880499][T11027] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.882437][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.884424][T11027] bridge_slave_1: entered allmulticast mode [ 206.886693][T11027] bridge_slave_1: entered promiscuous mode [ 206.909095][T11027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.913004][T11027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.938805][T11027] team0: Port device team_slave_0 added [ 206.939857][ T40] audit: type=1400 audit(1730934324.519:619): avc: denied { setopt } for pid=11041 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.943445][T11027] team0: Port device team_slave_1 added [ 206.963432][T11027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.965420][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.972601][T11027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.976269][T11027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.978154][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.985156][T11027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.009536][T11027] hsr_slave_0: entered promiscuous mode [ 207.011727][T11027] hsr_slave_1: entered promiscuous mode [ 207.013855][T11027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.016478][T11027] Cannot create hsr debugfs directory [ 207.120243][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.236395][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.299088][T11050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1476'. [ 207.325519][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.328643][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.418629][ T68] bridge_slave_1: left allmulticast mode [ 207.422303][ T68] bridge_slave_1: left promiscuous mode [ 207.424758][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.430365][ T68] bridge_slave_0: left allmulticast mode [ 207.432982][ T68] bridge_slave_0: left promiscuous mode [ 207.434601][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.569692][T11054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11054 comm=syz.5.1478 [ 207.747412][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.751687][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.761976][ T68] bond0 (unregistering): Released all slaves [ 207.919675][ T40] audit: type=1400 audit(1730934325.436:620): avc: denied { getopt } for pid=11065 comm="syz.6.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.161116][ T68] hsr_slave_0: left promiscuous mode [ 208.163027][ T68] hsr_slave_1: left promiscuous mode [ 208.164928][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.166918][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.169497][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.171459][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.195203][ T68] veth1_macvtap: left promiscuous mode [ 208.196688][ T68] veth0_macvtap: left promiscuous mode [ 208.198214][ T68] veth1_vlan: left promiscuous mode [ 208.199621][ T68] veth0_vlan: left promiscuous mode [ 208.297596][ T6337] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 208.479330][ T6337] usb 5-1: Using ep0 maxpacket: 16 [ 208.483059][ T6337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 208.489687][ T6337] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 208.492590][ T6337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.509508][ T6337] usb 5-1: config 0 descriptor?? [ 208.525489][ T6337] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input19 [ 208.817264][T11083] tmpfs: Bad value for 'mpol' [ 208.820091][T11083] siw: device registration error -23 [ 208.965628][ T5947] Bluetooth: hci3: command tx timeout [ 209.100662][ T68] team0 (unregistering): Port device team_slave_1 removed [ 209.199772][ T68] team0 (unregistering): Port device team_slave_0 removed [ 209.549117][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.970350][T11091] vlan2: entered promiscuous mode [ 209.971845][T11091] vlan2: entered allmulticast mode [ 209.973209][T11091] hsr_slave_1: entered allmulticast mode [ 209.975204][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1493'. [ 209.993361][T11094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11094 comm=syz.5.1494 [ 210.096495][T11092] hsr_slave_1 (unregistering): left allmulticast mode [ 210.108603][T11092] hsr_slave_1 (unregistering): left promiscuous mode [ 210.176840][T11027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.180782][T11027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.187919][T11027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.191197][T11027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.205662][T11096] Invalid ELF header magic: != ELF [ 210.230413][T11027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.253444][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.258590][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.260887][ T7576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.268641][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.270558][ T7576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.447636][T11027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.651710][T11027] veth0_vlan: entered promiscuous mode [ 210.656752][T11027] veth1_vlan: entered promiscuous mode [ 210.680177][T11027] veth0_macvtap: entered promiscuous mode [ 210.685135][T11027] veth1_macvtap: entered promiscuous mode [ 210.690986][T11027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.694836][T11027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.697423][T11027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.700392][T11027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.703073][T11027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.705766][T11027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.709060][T11027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.715716][T11027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.718785][T11027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.721476][T11027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.724130][T11027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.728096][T11027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.731404][T11027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.734852][T11027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.739403][T11027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.741687][T11027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.744110][T11027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.747356][T11027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.934987][ T7576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.937111][ T7576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.947711][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.950090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.256195][ T6337] bcm5974 5-1:0.0: could not read from device [ 211.261603][ T5347] bcm5974 5-1:0.0: could not read from device [ 211.274708][ T6337] input: failed to attach handler mousedev to device input19, error: -5 [ 211.278659][ T5347] bcm5974 5-1:0.0: could not read from device [ 211.285348][ T5347] bcm5974 5-1:0.0: could not read from device [ 211.285952][ T6337] usb 5-1: USB disconnect, device number 11 [ 211.335878][T11127] fuse: Bad value for 'rootmode' [ 211.591015][T11127] trusted_key: encrypted_key: insufficient parameters specified [ 212.434900][T10765] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 212.595181][T10765] usb 10-1: Using ep0 maxpacket: 16 [ 212.598377][T10765] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 212.602729][T10765] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 212.606192][T10765] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.610129][T10765] usb 10-1: config 0 descriptor?? [ 212.613648][T10765] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input20 [ 213.199026][ T1224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.901870][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.906049][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.908566][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.911501][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.913568][ T5955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.915703][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.959176][T11177] tmpfs: Bad value for 'mpol' [ 214.978822][T11169] chnl_net:caif_netlink_parms(): no params data found [ 214.983578][T11182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11182 comm=syz.0.1525 [ 215.024940][T11169] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.027339][T11169] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.029255][T11169] bridge_slave_0: entered allmulticast mode [ 215.031301][T11169] bridge_slave_0: entered promiscuous mode [ 215.035578][T11169] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.037448][T11169] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.039338][T11169] bridge_slave_1: entered allmulticast mode [ 215.041369][T11169] bridge_slave_1: entered promiscuous mode [ 215.062964][T11169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.066747][T11169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.088487][T11169] team0: Port device team_slave_0 added [ 215.091583][T11169] team0: Port device team_slave_1 added [ 215.116147][T11169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.118003][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.126428][T11169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.130198][T11169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.132088][T11169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.141690][T11169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.167231][ T1224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.192679][T11169] hsr_slave_0: entered promiscuous mode [ 215.195298][T11169] hsr_slave_1: entered promiscuous mode [ 215.197311][T11169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.199453][T11169] Cannot create hsr debugfs directory [ 215.283392][ T1224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.363850][ T1224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.384256][T10765] bcm5974 10-1:0.0: could not read from device [ 215.391175][ T5347] bcm5974 10-1:0.0: could not read from device [ 215.394949][T10765] input: failed to attach handler mousedev to device input20, error: -5 [ 215.398212][T10765] usb 10-1: USB disconnect, device number 8 [ 215.471811][T11190] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1527'. [ 215.481443][ T1224] bridge_slave_1: left allmulticast mode [ 215.483089][ T1224] bridge_slave_1: left promiscuous mode [ 215.484626][ T1224] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.488877][ T1224] bridge_slave_0: left allmulticast mode [ 215.490380][ T1224] bridge_slave_0: left promiscuous mode [ 215.491986][ T1224] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.057958][ T1224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.060256][T11207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11207 comm=syz.0.1534 [ 216.069056][ T1224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.073549][ T1224] bond0 (unregistering): Released all slaves [ 216.181995][T11210] netlink: 'syz.5.1533': attribute type 7 has an invalid length. [ 216.184188][T11210] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1533'. [ 216.433477][ T1224] hsr_slave_0: left promiscuous mode [ 216.435607][ T1224] hsr_slave_1: left promiscuous mode [ 216.437603][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.439628][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.442012][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.444134][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.465553][ T1224] veth1_macvtap: left promiscuous mode [ 216.467592][ T1224] veth0_macvtap: left promiscuous mode [ 216.469590][ T1224] veth1_vlan: left promiscuous mode [ 216.471128][ T1224] veth0_vlan: left promiscuous mode [ 216.561470][ T6337] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 216.723453][ T6337] usb 5-1: Using ep0 maxpacket: 16 [ 216.726059][ T6337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 216.729431][ T6337] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 216.731775][ T6337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.735350][ T6337] usb 5-1: config 0 descriptor?? [ 216.771740][ T6337] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input21 [ 217.090830][ T5955] Bluetooth: hci3: command tx timeout [ 217.444658][ T1224] team0 (unregistering): Port device team_slave_1 removed [ 217.561610][ T1224] team0 (unregistering): Port device team_slave_0 removed [ 217.746393][T11229] fuse: Bad value for 'group_id' [ 217.748487][T11229] fuse: Bad value for 'group_id' [ 217.773831][T11231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11231 comm=syz.6.1543 [ 218.317376][T11169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.321665][T11169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.325425][T11169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.331265][T11169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.390778][T11169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.399108][T11169] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.404953][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.406841][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.416597][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.418546][ T7575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.550527][T11251] syzkaller1: entered promiscuous mode [ 218.552067][T11251] syzkaller1: entered allmulticast mode [ 218.582721][T11169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.677976][T11169] veth0_vlan: entered promiscuous mode [ 218.682789][T11169] veth1_vlan: entered promiscuous mode [ 218.695158][T11169] veth0_macvtap: entered promiscuous mode [ 218.698339][T11169] veth1_macvtap: entered promiscuous mode [ 218.707349][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.710688][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.713933][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.716640][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.719168][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.722470][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.725695][T11169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.728995][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.733223][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.735725][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.738428][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.741002][T11169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.744208][T11169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.747505][T11169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.753400][T11169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.755664][T11169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.757914][T11169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.760502][T11169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.787431][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.789491][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.807573][ T7573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.809646][ T7573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.839527][ T2177] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 218.998991][ T2177] usb 10-1: Using ep0 maxpacket: 8 [ 219.004573][ T2177] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 219.006982][ T2177] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.009816][ T2177] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.013037][ T2177] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.016107][ T2177] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.019847][ T2177] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.022536][ T2177] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.245296][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.247576][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.250337][ T2177] usb 10-1: usb_control_msg returned -32 [ 219.251967][ T2177] usbtmc 10-1:16.0: can't read capabilities [ 219.517588][ T5347] bcm5974 5-1:0.0: could not read from device [ 219.523669][ T6337] bcm5974 5-1:0.0: could not read from device [ 219.526247][ T5347] bcm5974 5-1:0.0: could not read from device [ 219.532846][ T6337] input: failed to attach handler mousedev to device input21, error: -5 [ 219.536522][ T6337] usb 5-1: USB disconnect, device number 12 [ 219.538452][ T5347] bcm5974 5-1:0.0: could not read from device [ 219.541230][ T5347] bcm5974 5-1:0.0: could not read from device [ 219.819968][T11276] ubi: mtd0 is already attached to ubi0 [ 220.078631][ T6337] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 220.260475][ T6337] usb 5-1: Using ep0 maxpacket: 16 [ 220.265360][ T6337] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 220.267798][ T6337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.269944][ T6337] usb 5-1: Product: syz [ 220.271398][ T6337] usb 5-1: Manufacturer: syz [ 220.272619][ T6337] usb 5-1: SerialNumber: syz [ 220.274697][ T6337] usb 5-1: config 0 descriptor?? [ 220.277838][ T6337] as10x_usb: device has been detected [ 220.279415][ T6337] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 220.287316][ T6337] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 220.300131][ T6337] as10x_usb: error during firmware upload part1 [ 220.301949][ T6337] Registered device Sky IT Digital Key (green led) [ 220.955727][T11283] syz.6.1559: attempt to access beyond end of device [ 220.955727][T11283] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 220.966182][T11283] trusted_key: encrypted_key: key user:syz not found [ 221.583160][ T1224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.781399][ T35] usb 10-1: USB disconnect, device number 9 [ 222.873316][ T2177] usb 5-1: USB disconnect, device number 13 [ 222.883315][ T2177] Unregistered device Sky IT Digital Key (green led) [ 222.884251][ T2177] as10x_usb: device has been disconnected [ 223.226339][ T1224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.350496][ T1224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.352059][T11289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11289 comm=syz.0.1560 [ 223.407472][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.413217][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.420740][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.423764][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.430152][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.435242][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.468663][ T1224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.547672][T11309] netlink: 'syz.6.1568': attribute type 11 has an invalid length. [ 223.575584][ T1224] bridge_slave_1: left allmulticast mode [ 223.577192][ T1224] bridge_slave_1: left promiscuous mode [ 223.578729][ T1224] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.581821][ T1224] bridge_slave_0: left allmulticast mode [ 223.583320][ T1224] bridge_slave_0: left promiscuous mode [ 223.584887][ T1224] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.595847][ T6337] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 223.756219][ T6337] usb 10-1: Using ep0 maxpacket: 16 [ 223.764805][ T6337] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 223.769712][ T6337] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 223.772570][ T6337] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.779264][ T6337] usb 10-1: config 0 descriptor?? [ 223.782489][ T6337] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input22 [ 223.939448][ T1224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.944158][ T1224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.949115][ T1224] bond0 (unregistering): Released all slaves [ 223.956217][T11294] chnl_net:caif_netlink_parms(): no params data found [ 224.037421][T11294] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.039575][T11294] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.041605][T11294] bridge_slave_0: entered allmulticast mode [ 224.043770][T11294] bridge_slave_0: entered promiscuous mode [ 224.071160][T11294] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.073472][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.075619][T11294] bridge_slave_1: entered allmulticast mode [ 224.078424][T11294] bridge_slave_1: entered promiscuous mode [ 224.103714][T11294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.107850][T11294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.166087][T11294] team0: Port device team_slave_0 added [ 224.193695][T11294] team0: Port device team_slave_1 added [ 224.211297][T11294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.213149][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.221624][T11294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.225300][T11294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.227665][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.234550][T11294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.271996][T11294] hsr_slave_0: entered promiscuous mode [ 224.274511][T11294] hsr_slave_1: entered promiscuous mode [ 224.276588][T11294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.278558][T11294] Cannot create hsr debugfs directory [ 224.324403][ T1224] hsr_slave_0: left promiscuous mode [ 224.326643][ T1224] hsr_slave_1: left promiscuous mode [ 224.328794][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.330890][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.334321][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.336348][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.366826][ T1224] veth1_macvtap: left promiscuous mode [ 224.368895][ T1224] veth0_macvtap: left promiscuous mode [ 224.371090][ T1224] veth1_vlan: left promiscuous mode [ 224.372992][ T1224] veth0_vlan: left promiscuous mode [ 225.351688][ T1224] team0 (unregistering): Port device team_slave_1 removed [ 225.484417][ T1224] team0 (unregistering): Port device team_slave_0 removed [ 225.628240][ T5955] Bluetooth: hci3: command tx timeout [ 226.362157][T11336] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1576'. [ 226.384500][T11336] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1576'. [ 226.396380][T11342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11342 comm=syz.0.1578 [ 226.533598][T11344] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.535518][T11344] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 226.546967][T11344] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.548577][T11344] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 226.552186][T11344] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.554071][T11344] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 226.556773][ T5347] bcm5974 10-1:0.0: could not read from device [ 226.557615][T11344] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.559948][T11344] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 226.567160][ T6337] bcm5974 10-1:0.0: could not read from device [ 226.589177][ T5347] bcm5974 10-1:0.0: could not read from device [ 226.594701][ T6337] input: failed to attach handler mousedev to device input22, error: -5 [ 226.618917][ T5347] bcm5974 10-1:0.0: could not read from device [ 226.622087][ T6337] usb 10-1: USB disconnect, device number 10 [ 226.644086][T11354] tmpfs: Bad value for 'mpol' [ 226.646218][T11354] siw: device registration error -23 [ 226.688016][ T40] audit: type=1400 audit(1730934342.994:621): avc: denied { write } for pid=11350 comm="syz.0.1582" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 226.805849][T11294] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.810676][T11294] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.813929][T11294] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.816975][T11294] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.920103][T11294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.941976][T11294] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.951310][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.953255][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.963808][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.965709][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.187398][T11294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.401452][T11294] veth0_vlan: entered promiscuous mode [ 227.418531][T11294] veth1_vlan: entered promiscuous mode [ 227.474775][T11379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11379 comm=syz.6.1588 [ 227.477838][T11294] veth0_macvtap: entered promiscuous mode [ 227.491460][T11294] veth1_macvtap: entered promiscuous mode [ 227.522921][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.525807][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.528606][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.531486][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.534004][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.536715][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.539985][T11294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.561726][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.564727][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.567237][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.569904][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.572667][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.575916][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.579732][T11294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.584987][T11294] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.588023][T11294] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.591095][T11294] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.593826][T11294] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.653123][ T6337] kernel write not supported for file /audio (pid: 6337 comm: kworker/3:3) [ 227.690099][T11383] tmpfs: Bad value for 'mpol' [ 227.694356][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.694690][T11383] siw: device registration error -23 [ 227.697036][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.715998][ T7576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.718029][ T7576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.939678][T11401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11401 comm=syz.6.1598 [ 228.032423][ T55] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 228.138058][T11397] netlink: 'syz.5.1592': attribute type 7 has an invalid length. [ 228.140284][T11397] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1592'. [ 228.192988][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 228.195659][ T55] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 228.199344][ T55] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 228.202123][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.205347][ T55] usb 5-1: config 0 descriptor?? [ 228.208315][ T55] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input23 [ 228.705674][T11411] tmpfs: Bad value for 'mpol' [ 228.709500][T11411] siw: device registration error -23 [ 228.993139][T11423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11423 comm=syz.5.1607 [ 229.216891][T11429] siw: device registration error -23 [ 229.622744][T11431] netlink: 'syz.5.1609': attribute type 7 has an invalid length. [ 229.625120][T11431] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1609'. [ 229.857424][ T7576] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.998992][ T5347] bcm5974 5-1:0.0: could not read from device [ 231.002571][ T55] bcm5974 5-1:0.0: could not read from device [ 231.007470][ T5347] bcm5974 5-1:0.0: could not read from device [ 231.009501][ T55] input: failed to attach handler mousedev to device input23, error: -5 [ 231.012878][ T5347] bcm5974 5-1:0.0: could not read from device [ 231.026302][ T5347] bcm5974 5-1:0.0: could not read from device [ 231.027440][ T55] usb 5-1: USB disconnect, device number 14 [ 231.740717][T11454] siw: device registration error -23 [ 231.743798][T11452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11452 comm=syz.5.1618 [ 231.771224][ T7576] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.795564][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.800500][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.804031][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.811750][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.814137][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 231.816296][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.820083][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.822195][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.825670][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.831148][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.833721][ T5955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 231.837155][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.856639][ T7576] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.977346][ T7576] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.115326][ T7576] bridge_slave_1: left allmulticast mode [ 232.117121][ T7576] bridge_slave_1: left promiscuous mode [ 232.118894][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.122411][ T7576] bridge_slave_0: left allmulticast mode [ 232.123932][ T7576] bridge_slave_0: left promiscuous mode [ 232.127356][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.206324][T10765] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 232.383440][T10765] usb 11-1: Using ep0 maxpacket: 16 [ 232.394358][T10765] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 232.398020][T10765] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 232.400436][T10765] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.403675][T10765] usb 11-1: config 0 descriptor?? [ 232.414421][T10765] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input24 [ 232.429872][ T7576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.437360][ T7576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.441342][ T7576] bond0 (unregistering): Released all slaves [ 232.453067][T11455] chnl_net:caif_netlink_parms(): no params data found [ 232.524614][T11455] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.526706][T11455] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.528648][T11455] bridge_slave_0: entered allmulticast mode [ 232.530674][T11455] bridge_slave_0: entered promiscuous mode [ 232.550682][T11455] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.552910][T11455] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.555558][T11455] bridge_slave_1: entered allmulticast mode [ 232.557886][T11455] bridge_slave_1: entered promiscuous mode [ 232.583542][T11455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.595066][T11455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.668920][T11455] team0: Port device team_slave_0 added [ 232.671594][T11455] team0: Port device team_slave_1 added [ 232.697454][T11484] netlink: 'syz.5.1624': attribute type 7 has an invalid length. [ 232.701116][T11484] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1624'. [ 232.726209][T11455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.728778][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.735449][T11455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.739861][T11455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.741749][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.753462][T11455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.809074][T11455] hsr_slave_0: entered promiscuous mode [ 232.811551][T11455] hsr_slave_1: entered promiscuous mode [ 232.813874][T11455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.816319][T11455] Cannot create hsr debugfs directory [ 232.820933][ T7576] hsr_slave_0: left promiscuous mode [ 232.823489][ T7576] hsr_slave_1: left promiscuous mode [ 232.825595][ T7576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.827710][ T7576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.830321][ T7576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.832263][ T7576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.852123][ T7576] veth1_macvtap: left promiscuous mode [ 232.853617][ T7576] veth0_macvtap: left promiscuous mode [ 232.855840][ T7576] veth1_vlan: left promiscuous mode [ 232.857238][ T7576] veth0_vlan: left promiscuous mode [ 233.261216][T11497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11497 comm=syz.5.1630 [ 233.716944][ T7576] team0 (unregistering): Port device team_slave_1 removed [ 233.824808][T11493] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.826429][T11493] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 233.847661][ T7576] team0 (unregistering): Port device team_slave_0 removed [ 233.899678][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 233.927590][T11504] fuse: Bad value for 'rootmode' [ 234.614153][T11497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1630'. [ 234.940662][T11518] netlink: 'syz.0.1638': attribute type 7 has an invalid length. [ 234.942819][T11518] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1638'. [ 235.061441][T11455] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.065152][T11455] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.069582][T11455] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.073067][T11455] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.111392][T11455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.118062][T11455] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.123300][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.125222][ T7577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.132106][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.133989][ T7577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.157218][T10765] bcm5974 11-1:0.0: could not read from device [ 235.160447][ T5347] bcm5974 11-1:0.0: could not read from device [ 235.166318][T10765] input: failed to attach handler mousedev to device input24, error: -5 [ 235.176671][T10765] usb 11-1: USB disconnect, device number 5 [ 235.184117][ T5347] bcm5974 11-1:0.0: could not read from device [ 235.249098][T11455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.407777][T11455] veth0_vlan: entered promiscuous mode [ 235.415503][T11455] veth1_vlan: entered promiscuous mode [ 235.433896][T11455] veth0_macvtap: entered promiscuous mode [ 235.438943][T11455] veth1_macvtap: entered promiscuous mode [ 235.451233][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.454731][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.458149][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.461445][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.466110][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.469725][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.474179][T11455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.478456][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.481679][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.485218][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.488111][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.490526][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.493255][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.497229][T11455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.501482][T11455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.503786][T11455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.506396][T11455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.508886][T11455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.543755][ T7577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.545861][ T7577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.554265][ T7574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.556518][ T7574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.691253][T11535] fuse: Bad value for 'rootmode' [ 236.125167][ T35] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 236.130237][ T40] audit: type=1400 audit(1730934351.824:622): avc: denied { setattr } for pid=11549 comm="syz.6.1649" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 236.261005][T11557] fuse: Bad value for 'rootmode' [ 236.296862][ T35] usb 10-1: Using ep0 maxpacket: 16 [ 236.300096][ T35] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 236.303609][ T35] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 236.306225][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.309942][ T35] usb 10-1: config 0 descriptor?? [ 236.313021][ T35] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input25 [ 236.366524][T11561] netlink: 'syz.6.1650': attribute type 7 has an invalid length. [ 236.368645][T11561] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1650'. [ 237.121066][T11567] netlink: 'syz.6.1656': attribute type 11 has an invalid length. [ 238.379760][ T7575] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.630259][T11588] netlink: 'syz.6.1663': attribute type 7 has an invalid length. [ 238.632367][T11588] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1663'. [ 239.044558][ T5347] bcm5974 10-1:0.0: could not read from device [ 239.046716][ T35] bcm5974 10-1:0.0: could not read from device [ 239.048965][ T5347] bcm5974 10-1:0.0: could not read from device [ 239.051409][ T35] input: failed to attach handler mousedev to device input25, error: -5 [ 239.056550][ T5347] bcm5974 10-1:0.0: could not read from device [ 239.056626][ T35] usb 10-1: USB disconnect, device number 11 [ 240.205410][ T7575] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.307762][ T7575] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.391564][ T7575] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.397192][T11595] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 240.404207][T11595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.467451][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.471891][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.477745][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.481492][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.484947][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 240.488028][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.580007][ T7575] bridge_slave_1: left allmulticast mode [ 240.581530][ T7575] bridge_slave_1: left promiscuous mode [ 240.587560][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.595982][ T7575] bridge_slave_0: left allmulticast mode [ 240.598127][ T7575] bridge_slave_0: left promiscuous mode [ 240.600184][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.920526][ T7575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.924742][ T7575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.928731][ T7575] bond0 (unregistering): Released all slaves [ 240.939885][T11601] chnl_net:caif_netlink_parms(): no params data found [ 240.981506][T11601] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.983434][T11601] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.985347][T11601] bridge_slave_0: entered allmulticast mode [ 240.987435][T11601] bridge_slave_0: entered promiscuous mode [ 240.990202][T11601] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.992078][T11601] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.994001][T11601] bridge_slave_1: entered allmulticast mode [ 240.996355][T11601] bridge_slave_1: entered promiscuous mode [ 241.019600][T11601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.023528][T11601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.064956][T11601] team0: Port device team_slave_0 added [ 241.068965][T11601] team0: Port device team_slave_1 added [ 241.089504][T11601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.092005][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.100912][T11601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.105485][T11601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.108133][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.116784][T11601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.163936][T11601] hsr_slave_0: entered promiscuous mode [ 241.166016][T11601] hsr_slave_1: entered promiscuous mode [ 241.167998][T11601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.169976][T11601] Cannot create hsr debugfs directory [ 241.219476][ T7575] hsr_slave_0: left promiscuous mode [ 241.221796][ T7575] hsr_slave_1: left promiscuous mode [ 241.224001][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.227968][ T7575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.230945][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.233432][ T7575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.254957][ T7575] veth1_macvtap: left promiscuous mode [ 241.257044][ T7575] veth0_macvtap: left promiscuous mode [ 241.258958][ T7575] veth1_vlan: left promiscuous mode [ 241.260769][ T7575] veth0_vlan: left promiscuous mode [ 241.450226][ T40] audit: type=1326 audit(1730934356.810:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.6.1674" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a4457e719 code=0x0 [ 241.739462][T11631] netlink: 'syz.0.1675': attribute type 7 has an invalid length. [ 241.741629][T11631] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1675'. [ 242.264547][ T7575] team0 (unregistering): Port device team_slave_1 removed [ 242.391541][ T7575] team0 (unregistering): Port device team_slave_0 removed [ 242.572191][ T5984] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 242.648055][ T5955] Bluetooth: hci3: command tx timeout [ 242.913757][ T5984] usb 10-1: Using ep0 maxpacket: 16 [ 242.916787][ T5984] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 242.921120][ T5984] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 242.924331][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.927875][ T5984] usb 10-1: config 0 descriptor?? [ 242.931458][ T5984] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input26 [ 243.799677][T11601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.803518][T11601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.806640][T11601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.810154][T11601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.839882][T11601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.847189][T11601] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.851074][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.853454][ T7575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.865437][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.867325][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.944931][T11601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.036460][T11601] veth0_vlan: entered promiscuous mode [ 244.040901][T11601] veth1_vlan: entered promiscuous mode [ 244.052892][T11601] veth0_macvtap: entered promiscuous mode [ 244.056702][T11601] veth1_macvtap: entered promiscuous mode [ 244.062894][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.065604][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.068851][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.071712][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.074430][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.077181][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.080468][T11601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.085556][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.088395][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.091980][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.094727][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.097307][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.100099][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.104482][T11601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.108882][T11601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.111713][T11601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.113997][T11601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.116374][T11601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.152665][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.154825][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.168521][ T7580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.170703][ T7580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.497400][T11702] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1701'. [ 245.518810][ T5984] bcm5974 10-1:0.0: could not read from device [ 245.524374][ T5984] input: failed to attach handler mousedev to device input26, error: -5 [ 245.530693][ T5347] bcm5974 10-1:0.0: could not read from device [ 245.533783][ T5347] bcm5974 10-1:0.0: could not read from device [ 245.545280][ T5984] usb 10-1: USB disconnect, device number 12 [ 245.679706][T11732] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1716'. [ 245.907486][T11755] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1727'. [ 245.930922][ T40] audit: type=1400 audit(1730934360.991:624): avc: denied { write } for pid=11756 comm="syz.5.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 245.975052][T11761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11761 comm=syz.5.1730 [ 246.672478][ T7573] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.628431][ T7573] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.711326][ T7573] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.734496][T11776] tmpfs: Bad value for 'mpol' [ 248.738581][T11776] siw: device registration error -23 [ 248.794444][ T7573] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.841669][T11784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11784 comm=syz.6.1740 [ 248.867753][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.872526][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.876709][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.889374][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.892498][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 248.895625][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.943902][ T7573] bridge_slave_1: left allmulticast mode [ 248.951106][ T7573] bridge_slave_1: left promiscuous mode [ 248.952837][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.959669][ T7573] bridge_slave_0: left allmulticast mode [ 248.961211][ T7573] bridge_slave_0: left promiscuous mode [ 248.962948][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.334286][ T7573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.342436][ T7573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.348767][ T7573] bond0 (unregistering): Released all slaves [ 249.360646][T11793] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1743'. [ 249.453100][T11785] chnl_net:caif_netlink_parms(): no params data found [ 249.515917][T11800] [ 249.516605][T11800] ====================================================== [ 249.518412][T11800] WARNING: possible circular locking dependency detected [ 249.520229][T11800] 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 Not tainted [ 249.522144][T11800] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 249.525743][T11800] syz.6.1745/11800 is trying to acquire lock: [ 249.527464][T11800] ffff88804e8abb38 (&ovl_i_mutex_dir_key[depth]){++++}-{3:3}, at: walk_component+0x342/0x5b0 [ 249.530117][T11800] [ 249.530117][T11800] but task is already holding lock: [ 249.532031][T11800] ffff888027847c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 249.534403][T11800] [ 249.534403][T11800] which lock already depends on the new lock. [ 249.534403][T11800] [ 249.537068][T11800] [ 249.537068][T11800] the existing dependency chain (in reverse order) is: [ 249.539385][T11800] [ 249.539385][T11800] -> #3 (&of->mutex){+.+.}-{3:3}: [ 249.541253][T11800] __mutex_lock+0x175/0x9c0 [ 249.542641][T11800] kernfs_fop_write_iter+0x27b/0x500 [ 249.544173][T11800] iter_file_splice_write+0x90f/0x10b0 [ 249.545868][T11800] do_splice+0x145c/0x1f60 [ 249.547179][T11800] __do_splice+0x327/0x360 [ 249.548476][T11800] __x64_sys_splice+0x1cd/0x270 [ 249.549872][T11800] do_syscall_64+0xcd/0x250 [ 249.551190][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.552859][T11800] [ 249.552859][T11800] -> #2 (&pipe->mutex){+.+.}-{3:3}: [ 249.554800][T11800] __mutex_lock+0x175/0x9c0 [ 249.556114][T11800] pipe_lock+0x64/0x80 [ 249.557373][T11800] iter_file_splice_write+0x1eb/0x10b0 [ 249.558946][T11800] do_splice+0x145c/0x1f60 [ 249.560248][T11800] __do_splice+0x327/0x360 [ 249.561543][T11800] __x64_sys_splice+0x1cd/0x270 [ 249.562949][T11800] do_syscall_64+0xcd/0x250 [ 249.564289][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.565971][T11800] [ 249.565971][T11800] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 249.567901][T11800] mnt_want_write+0x6f/0x450 [ 249.569238][T11800] ovl_create_object+0x12e/0x300 [ 249.570662][T11800] lookup_open.isra.0+0x1174/0x14c0 [ 249.572159][T11800] path_openat+0x904/0x2d60 [ 249.573523][T11800] do_filp_open+0x1dc/0x430 [ 249.574863][T11800] do_sys_openat2+0x17a/0x1e0 [ 249.576228][T11800] __x64_sys_creat+0xcd/0x120 [ 249.577594][T11800] do_syscall_64+0xcd/0x250 [ 249.578923][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.580606][T11800] [ 249.580606][T11800] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{3:3}: [ 249.582862][T11800] __lock_acquire+0x250b/0x3ce0 [ 249.584262][T11800] lock_acquire.part.0+0x11b/0x380 [ 249.585739][T11800] down_read+0x9a/0x330 [ 249.586978][T11800] walk_component+0x342/0x5b0 [ 249.588390][T11800] path_lookupat+0x17f/0x770 [ 249.589751][T11800] filename_lookup+0x1e5/0x5b0 [ 249.591150][T11800] kern_path+0x35/0x50 [ 249.592363][T11800] lookup_bdev+0xd9/0x280 [ 249.593646][T11800] resume_store+0x1d8/0x460 [ 249.594932][T11800] kobj_attr_store+0x55/0x80 [ 249.596231][T11800] sysfs_kf_write+0x117/0x170 [ 249.597597][T11800] kernfs_fop_write_iter+0x33d/0x500 [ 249.599085][T11800] vfs_write+0x5ae/0x1150 [ 249.600329][T11800] ksys_write+0x12f/0x260 [ 249.601617][T11800] do_syscall_64+0xcd/0x250 [ 249.602889][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.604600][T11800] [ 249.604600][T11800] other info that might help us debug this: [ 249.604600][T11800] [ 249.607170][T11800] Chain exists of: [ 249.607170][T11800] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 249.607170][T11800] [ 249.610441][T11800] Possible unsafe locking scenario: [ 249.610441][T11800] [ 249.612298][T11800] CPU0 CPU1 [ 249.613637][T11800] ---- ---- [ 249.614996][T11800] lock(&of->mutex); [ 249.616025][T11800] lock(&pipe->mutex); [ 249.617692][T11800] lock(&of->mutex); [ 249.619335][T11800] rlock(&ovl_i_mutex_dir_key[depth]); [ 249.620799][T11800] [ 249.620799][T11800] *** DEADLOCK *** [ 249.620799][T11800] [ 249.622884][T11800] 4 locks held by syz.6.1745/11800: [ 249.624230][T11800] #0: ffff888029f902b8 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24c/0x360 [ 249.626560][T11800] #1: ffff88802a7cc420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 249.628896][T11800] #2: ffff888027847c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 249.631407][T11800] #3: ffff88801bb0e698 (kn->active#61){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 249.633991][T11800] [ 249.633991][T11800] stack backtrace: [ 249.635566][T11800] CPU: 2 UID: 0 PID: 11800 Comm: syz.6.1745 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 249.638308][T11800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.641058][T11800] Call Trace: [ 249.641928][T11800] [ 249.642708][T11800] dump_stack_lvl+0x116/0x1f0 [ 249.643950][T11800] print_circular_bug+0x41c/0x610 [ 249.645263][T11800] check_noncircular+0x31a/0x400 [ 249.646556][T11800] ? stack_trace_save+0x95/0xd0 [ 249.647835][T11800] ? __pfx_check_noncircular+0x10/0x10 [ 249.649253][T11800] ? add_lock_to_list+0x17d/0x390 [ 249.650574][T11800] __lock_acquire+0x250b/0x3ce0 [ 249.651880][T11800] ? __pfx___lock_acquire+0x10/0x10 [ 249.653169][T11800] ? preempt_schedule_thunk+0x1a/0x30 [ 249.654520][T11800] lock_acquire.part.0+0x11b/0x380 [ 249.655809][T11800] ? walk_component+0x342/0x5b0 [ 249.657043][T11800] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 249.658446][T11800] ? rcu_is_watching+0x12/0xc0 [ 249.659693][T11800] ? trace_lock_acquire+0x14a/0x1d0 [ 249.660951][T11800] ? walk_component+0x342/0x5b0 [ 249.662143][T11800] ? lock_acquire+0x2f/0xb0 [ 249.663342][T11800] ? walk_component+0x342/0x5b0 [ 249.664621][T11800] down_read+0x9a/0x330 [ 249.665713][T11800] ? walk_component+0x342/0x5b0 [ 249.667032][T11800] ? __pfx_down_read+0x10/0x10 [ 249.668271][T11800] ? lookup_fast+0x155/0x540 [ 249.669480][T11800] walk_component+0x342/0x5b0 [ 249.670711][T11800] path_lookupat+0x17f/0x770 [ 249.671923][T11800] filename_lookup+0x1e5/0x5b0 [ 249.673185][T11800] ? __pfx_filename_lookup+0x10/0x10 [ 249.674594][T11800] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 249.676017][T11800] ? kmem_cache_alloc_noprof+0x174/0x2f0 [ 249.677480][T11800] ? getname_kernel+0x52/0x370 [ 249.678751][T11800] ? __asan_memcpy+0x3c/0x60 [ 249.679964][T11800] kern_path+0x35/0x50 [ 249.681035][T11800] lookup_bdev+0xd9/0x280 [ 249.682217][T11800] ? __pfx_lookup_bdev+0x10/0x10 [ 249.683524][T11800] ? __asan_memcpy+0x3c/0x60 [ 249.684746][T11800] resume_store+0x1d8/0x460 [ 249.685948][T11800] ? __pfx_resume_store+0x10/0x10 [ 249.687278][T11800] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 249.688749][T11800] ? rcu_is_watching+0x12/0xc0 [ 249.690012][T11800] ? trace_lock_acquire+0x14a/0x1d0 [ 249.691385][T11800] ? __pfx_resume_store+0x10/0x10 [ 249.692714][T11800] kobj_attr_store+0x55/0x80 [ 249.693942][T11800] ? __pfx_kobj_attr_store+0x10/0x10 [ 249.695342][T11800] sysfs_kf_write+0x117/0x170 [ 249.696589][T11800] kernfs_fop_write_iter+0x33d/0x500 [ 249.698052][T11800] ? __pfx_sysfs_kf_write+0x10/0x10 [ 249.699428][T11800] vfs_write+0x5ae/0x1150 [ 249.700572][T11800] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 249.702098][T11800] ? trace_lock_acquire+0x14a/0x1d0 [ 249.703470][T11800] ? __pfx_vfs_write+0x10/0x10 [ 249.704738][T11800] ? __pfx___mutex_lock+0x10/0x10 [ 249.706060][T11800] ksys_write+0x12f/0x260 [ 249.707213][T11800] ? __pfx_ksys_write+0x10/0x10 [ 249.708496][T11800] do_syscall_64+0xcd/0x250 [ 249.709697][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.711252][T11800] RIP: 0033:0x7f6a4457e719 [ 249.712427][T11800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.717454][T11800] RSP: 002b:00007f6a45427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.719631][T11800] RAX: ffffffffffffffda RBX: 00007f6a44735f80 RCX: 00007f6a4457e719 [ 249.721682][T11800] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000003 [ 249.723740][T11800] RBP: 00007f6a445f139e R08: 0000000000000000 R09: 0000000000000000 [ 249.725738][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.727814][T11800] R13: 0000000000000000 R14: 00007f6a44735f80 R15: 00007ffcc4bd61d8 [ 249.729857][T11800] [ 249.733105][T11800] block device autoloading is deprecated and will be removed. [ 249.735116][T11800] syz.6.1745: attempt to access beyond end of device [ 249.735116][T11800] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 249.738494][T11800] PM: Image not found (code -5) [ 249.881578][T11779] bond0: (slave syz_tun): Releasing backup interface [ 249.889815][ T7573] hsr_slave_0: left promiscuous mode [ 249.891433][ T7573] hsr_slave_1: left promiscuous mode [ 249.892998][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.895195][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.897282][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.899217][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.902380][ T7573] veth1_macvtap: left promiscuous mode [ 249.903856][ T7573] veth0_macvtap: left promiscuous mode [ 249.905374][ T7573] veth1_vlan: left promiscuous mode [ 249.906766][ T7573] veth0_vlan: left promiscuous mode [ 250.132693][ T7573] team0 (unregistering): Port device team_slave_1 removed [ 250.179530][ T7573] team0 (unregistering): Port device team_slave_0 removed [ 250.924890][ T7573] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.977441][ T7573] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.030528][ T7573] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.080401][ T7573] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.176966][ T7573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.265166][ T7573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.308484][ T7573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.956376][ T7573] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.029656][ T7573] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.094028][ T7573] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.136919][ T7573] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.198585][ T7573] bridge_slave_1: left allmulticast mode [ 253.200193][ T7573] bridge_slave_1: left promiscuous mode [ 253.201843][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.204554][ T7573] bridge_slave_0: left allmulticast mode [ 253.206193][ T7573] bridge_slave_0: left promiscuous mode [ 253.208271][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.215035][ T7573] bridge_slave_1: left allmulticast mode [ 253.217074][ T7573] bridge_slave_1: left promiscuous mode [ 253.218789][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.221572][ T7573] bridge_slave_0: left allmulticast mode [ 253.223117][ T7573] bridge_slave_0: left promiscuous mode [ 253.224650][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.851257][ T7573] bond2 (unregistering): (slave bridge1): Releasing active interface [ 253.853398][ T7573] bond2 (unregistering): (slave bridge1): the permanent HWaddr of slave - 3a:1d:f6:ee:4e:34 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 253.911518][ T7573] bond2 (unregistering): (slave bridge2): Releasing active interface [ 254.099235][ T7573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.102369][ T7573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.105650][ T7573] bond0 (unregistering): Released all slaves [ 254.110844][ T7573] bond1 (unregistering): (slave batadv1): Releasing active interface [ 254.112923][ T7573] batadv1: left promiscuous mode [ 254.115129][ T7573] bond1 (unregistering): Released all slaves [ 254.209234][ T7573] bond2 (unregistering): Released all slaves [ 254.302369][ T7573] bond3 (unregistering): Released all slaves [ 254.306984][ T7573] bond0 (unregistering): Released all slaves [ 254.314027][ T7573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.316974][ T7573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.319660][ T7573] bond0 (unregistering): Released all slaves [ 254.325532][ T7573] bond1 (unregistering): (slave batadv1): Releasing active interface [ 254.327792][ T7573] batadv1: left promiscuous mode [ 254.329178][ T7573] batadv1: left allmulticast mode [ 254.331428][ T7573] bond1 (unregistering): Released all slaves [ 254.418948][ T7573] bond2 (unregistering): Released all slaves [ 254.422180][ T7573] bond3 (unregistering): (slave batadv4): Releasing active interface [ 254.424933][ T7573] bond3 (unregistering): Released all slaves [ 254.509901][ T7573] bond4 (unregistering): Released all slaves [ 254.516690][ T7573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.520050][ T7573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.522872][ T7573] bond0 (unregistering): Released all slaves [ 254.617680][ T7573] bond1 (unregistering): Released all slaves [ 254.625791][ T7573] bond2 (unregistering): Released all slaves [ 254.736762][ T7573] bond3 (unregistering): Released all slaves [ 254.835769][ T7573] bond4 (unregistering): Released all slaves [ 254.998349][ T7573] tipc: Left network mode [ 255.034528][ T7573] IPVS: stopping master sync thread 7986 ... [ 255.565271][ T7573] hsr_slave_0: left promiscuous mode [ 255.567382][ T7573] hsr_slave_1: left promiscuous mode [ 255.569334][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.571594][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.574740][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.576693][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.581021][ T7573] hsr_slave_0: left promiscuous mode [ 255.583742][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.585707][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.587863][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.590232][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.593799][ T7573] hsr_slave_0: left promiscuous mode [ 255.595556][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.597486][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.599620][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.601547][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.607272][ T7573] veth1_macvtap: left promiscuous mode [ 255.608756][ T7573] veth0_macvtap: left promiscuous mode [ 255.610232][ T7573] veth1_vlan: left promiscuous mode [ 255.611768][ T7573] veth0_vlan: left promiscuous mode [ 255.613684][ T7573] hsr_slave_1: left allmulticast mode [ 255.615546][ T7573] hsr_slave_1: left promiscuous mode [ 255.617055][ T7573] veth1_macvtap: left promiscuous mode [ 255.618483][ T7573] veth0_macvtap: left promiscuous mode [ 255.620334][ T7573] veth1_vlan: left promiscuous mode [ 255.622286][ T7573] veth0_vlan: left promiscuous mode [ 255.624343][ T7573] veth1_macvtap: left promiscuous mode [ 255.625822][ T7573] veth0_macvtap: left promiscuous mode [ 255.627288][ T7573] veth1_vlan: left promiscuous mode [ 255.628652][ T7573] veth0_vlan: left promiscuous mode [ 255.878483][ T7573] team0 (unregistering): Port device team_slave_1 removed [ 255.928508][ T7573] team0 (unregistering): Port device team_slave_0 removed [ 256.923973][ T7573] team0 (unregistering): Port device team_slave_1 removed [ 256.975950][ T7573] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 23:40:27 Registers: info registers vcpu 0 CPU#0 RAX=00000000006a308c RBX=0000000000000000 RCX=ffffffff8b236439 RDX=ffffed100d4c7026 RSI=ffffffff8bd1b300 RDI=ffffffff816477bc RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5908 R15=0000000000000000 RIP=ffffffff8b23781f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f22975cc270 CR3=00000000436bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffff8000 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 37610fdfca2bed39 d98fd763332399c7 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5de8fc3b5ac38952 6e8995f57e2ad4dd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 910eb5f1884d1a63 5e3805a738e65bb5 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 25a3c64dda963f09 2346fc352184443b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005700 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 338e76e83640ff9a 0000009800000098 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3584c1a43698b8b2 375cbdf637133f42 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35e397dc00000098 0000009800000098 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009800000098 36e46f0200000098 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 83110d1b45be0a56 e43f3ce945222bd2 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a4b175b69ca1680 72090677af927c75 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6469726200307325 0073255f6f745f31 6874657600315f65 76616c735f732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 414c574700155600 0056005f4a515f14 4d51405300145f40 534449565f560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffc900037a74a0 RCX=0000000000000000 RDX=1ffff920006f4e9d RSI=0000000000000001 RDI=ffffc900037a74a0 RBP=ffffc900037a74e8 RSP=ffffc900037a7488 R8 =ffffc900037a74d4 R9 =ffffffff90f1aece R10=ffffc900037a74a0 R11=0000000000005009 R12=ffffffff817946c0 R13=ffffc900037a7560 R14=0000000000000000 R15=ffff888023bb2440 RIP=ffffffff813d485e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8c4ec67d60 CR3=000000000df7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c4e10c6a3 00007f8c4e10c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffce13e9b0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557536b498 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555753fb922 00005555753fb780 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555575373424 0000555575373420 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffce13ee24 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060601538224800c a400018003068804 0008820800068004 01c7100008002fb2 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0124100001800401 0000000806060153 8224800ca4000180 0306880400088208 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006800401c71000 08002fb2656d7573 65722f7265776f70 2f7379732f01ffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffdd08 0680030f80040201 02c0007375622f2e 01ffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fff3080f80031080 0400100002800403 80040010000a012c 8600020010e00358 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b8545 RDI=ffffffff9aaeac40 RBP=ffffffff9aaeac00 RSP=ffffc900042cef30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff850b84e0 R15=0000000000000000 RIP=ffffffff850b856f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6a454276c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c32c4d5 CR3=00000000554fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a445f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a445f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a445f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a445f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a445f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a445f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a4470c488 00007f6a4470c480 00007f6a4470c478 00007f6a4470c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a4526d100 00007f6a4470c440 00007f6a4470c458 00007f6a4470c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a4470c498 00007f6a4470c490 00007f6a4470c488 00007f6a4470c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000005af64c RBX=0000000000000003 RCX=ffffffff8b236439 RDX=ffffed100d527026 RSI=ffffffff8bd1b300 RDI=ffffffff816477bc RBP=ffffed1003bd8488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000001 R12=0000000000000003 R13=ffff88801dec2440 R14=ffffffff905f5908 R15=0000000000000000 RIP=ffffffff8b23781f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555592d99808 CR3=000000004cb94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7af93f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7af93f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7af93f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7af93f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7af93f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7af93f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7af950c488 00007f7af950c480 00007f7af950c478 00007f7af950c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7afa06d100 00007f7af950c440 00007f7af9500004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7af950c498 00007f7af950c490 00007f7af950c488 00007f7af950c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000008f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000