last executing test programs: 52.803986562s ago: executing program 2 (id=3214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000003c0)="66ba4100b80d000000ef0f01d10f22d1b805000000b9234000000f01d946d03867f3f0819cc904000000e5720000c44179114e1264660f3882328365a8c5c4229daa30", 0x43}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) close(r4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @local, {[@hopopts={0x6c}]}}}}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000040)={r5, 0xffffffffffffffff, 0xff80, 0x0, 0x0, 0xe, 0x1, 0xea8, 0x8, 0x1, 0x3, 0x6, 'syz1\x00'}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) close_range(r7, 0xffffffffffffffff, 0x0) 52.513300571s ago: executing program 2 (id=3218): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000b40)=@disckey={0x2, 0x2, "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"}) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) 52.331427348s ago: executing program 2 (id=3220): r0 = socket$kcm(0x10, 0x2, 0x10) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040effff2820"], 0x7) acct(0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) r4 = eventfd(0xfffffc6f) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x3, r4}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000001c0)={0x3, r3}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x10, 0x700, 0xd3b, 0x5, {{0x45, 0x4, 0x1, 0x28, 0x114, 0x66, 0xf893, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x44, 0xc8, 0x1, 0x6, [{@rand_addr=0x64010102, 0x2}, {@private=0xa010102, 0x4}, {@remote, 0x1}, {@broadcast, 0x5}, {@multicast1, 0x40}, {@empty, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@loopback, 0x7}]}, @timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ec}, {@multicast1, 0x8}, {@empty, 0xffffffff}]}, @lsrr={0x83, 0x13, 0x5a, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote]}, @generic={0x89, 0x11, "526acb8c25b6622a9f8e0407cbe801"}, @lsrr={0x83, 0x7, 0x4e, [@multicast1]}, @timestamp={0x44, 0x24, 0xce, 0x0, 0x0, [0x6, 0x0, 0x6, 0x1, 0x9, 0x693, 0x1e9, 0x5]}, @timestamp_prespec={0x44, 0x2c, 0x3b, 0x3, 0xa, [{@local, 0xd437}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@private=0xa010101, 0x4}, {@private=0xa010100, 0x7}]}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x2, 0x8, "238e072b883a"}, {0x1, 0x9, "3be615c897cc62"}, {0x0, 0xd, "52a47f1fd08be348193b09"}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@deltclass={0x44, 0x29, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xa, 0x4}, {0xf, 0xffe0}, {0x3, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x77, 0x3}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0xc, 0xf}}, @tclass_kind_options=@c_red={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000080)={0x5, 0x1, 0x1, "3a8e07ca5de21f00000000000000000000004b5c00", 0x33424752}) write$tun(r6, &(0x7f00000003c0)={@void, @val={0x3, 0x3, 0x8, 0x6ed, 0x19, 0xc}, @ipv4=@generic={{0x6, 0x4, 0x1, 0xb, 0x27, 0x64, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @remote, {[@timestamp_prespec={0x44, 0x4, 0x7e, 0x3, 0x2}]}}, "8b0414fa85ba06175fe851a81e5c3b"}}, 0x31) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 52.183158943s ago: executing program 2 (id=3224): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$VIDIOC_QBUF(r2, 0xc058ff0b, &(0x7f0000000200)=@mmap={0xe3, 0x9, 0x4, 0x2, 0x6, {}, {0x3, 0x8, 0x5a, 0x4f, 0x6, 0x2, "947dd3c0"}, 0x1, 0x1, {}, 0x7, 0x0, r3}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@hyper}, {@any, 0x5}, 0x400, "884fbe2726aa0a32f3e65f908292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd16864207309a23cf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0329afcfb8410cd1fa5acd080993d2d084213130a9b8d010000001e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cf8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f303000000a640f1b038a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400f95902c607000000000000008e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411da80e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e699a142b9466bc0cbef1536519ca409876268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3006972397e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8e0002000068f606f16fcb00000000000000008a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65107b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c90000000000000100"}, 0x418, 0xd82a}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000040)='./file0/file0/file0\x00', r4, &(0x7f0000000240)='./file0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000002180)='coredump_filter\x00') read$FUSE(r5, 0x0, 0x0) unshare(0x26020480) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {0x1}, 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x0, 'bridge_slave_0\x00', {0x400004}, 0x8000}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r10}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 50.889930279s ago: executing program 2 (id=3237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000edffff0e0000000a000300", @ANYRES32], 0x64}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth0_to_bridge\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800", @ANYRESOCT], 0x0, 0x8000, 0x0, 0x0, 0x41100}, 0x94) r6 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x26, 0x2f, 0x0, @multicast2, @empty}}}}) r8 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcb, 0x1, 0x2, 0x3b6}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r8, 0x3b3d, 0x75d1, 0x40, 0x0, 0x0) io_uring_enter(r8, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r7, 0x4, 0x9, 0x41, 0xfffff758, 0x0, @mcast2, @private1, 0x40, 0x7, 0x6, 0x3}}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000edffff0e0000000a000300", @ANYRES32], 0x64}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth0_to_bridge\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800", @ANYRESOCT], 0x0, 0x8000, 0x0, 0x0, 0x41100}, 0x94) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x26, 0x2f, 0x0, @multicast2, @empty}}}}) (async) syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcb, 0x1, 0x2, 0x3b6}, &(0x7f00000000c0), &(0x7f0000000380)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) (async) io_uring_enter(r8, 0x3b3d, 0x75d1, 0x40, 0x0, 0x0) (async) io_uring_enter(r8, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r7, 0x4, 0x9, 0x41, 0xfffff758, 0x0, @mcast2, @private1, 0x40, 0x7, 0x6, 0x3}}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) 50.654837034s ago: executing program 2 (id=3239): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r1 = socket(0x2, 0x80805, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7a, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7a, 0x0, &(0x7f0000000000)) write$nbd(r2, 0x0, 0x1010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbff, {0x2, 0x0, 0x10, 0x0, 0xfe, 0xf02df5dd77965274, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 50.594752573s ago: executing program 32 (id=3239): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r1 = socket(0x2, 0x80805, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7a, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7a, 0x0, &(0x7f0000000000)) write$nbd(r2, 0x0, 0x1010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbff, {0x2, 0x0, 0x10, 0x0, 0xfe, 0xf02df5dd77965274, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.145493036s ago: executing program 4 (id=3826): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000010500fdbbe0741d14ec92f14eda7ae33bfc8300"/47], 0x50) (async) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x3}, 0x28) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000780)={@rc={0x1f, @any, 0xe6}, {&(0x7f0000000600)=""/209, 0xd1}, &(0x7f0000000700), 0x1}, 0xa0) (async) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000200)=0x12) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000000)="5552cc", 0x3}], 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x100, 0xac}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8}, 0x94) (async) r10 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) ppoll(&(0x7f0000001340)=[{r10, 0x4480}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6_vti0\x00', r6, 0x4, 0xf3, 0x0, 0xfb60, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x40, 0x101, 0xf}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000000100)='GPL\x00', 0xa, 0x2b, &(0x7f0000000140)=""/43, 0x0, 0x18, '\x00', r11, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xc, 0x9, 0x7fffffff}, 0x10, r9, r10, 0x4, 0x0, &(0x7f0000000340)=[{0x1, 0x4, 0x9, 0x7}, {0x5, 0x4, 0x7, 0x6}, {0x2, 0x2, 0x0, 0xa}, {0x2, 0x5, 0xa, 0x3}], 0x10, 0x4}, 0x94) 426.770898ms ago: executing program 1 (id=3851): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000027c0)={0x30, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0xb, 0x1, 'exthdr\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000084c}, 0x2080044) prctl$PR_SET_SECUREBITS(0x1c, 0x20) setuid(0xee00) syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x38, 0x3a, 0x1, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "29e50e", 0x0, 0x2b, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, [], "0a06efb2988b900b"}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="030704ab21d308cebfd017"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0xd) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, r4, &(0x7f00000001c0)) open(&(0x7f0000000080)='./bus\x00', 0x200400, 0x0) 365.516623ms ago: executing program 1 (id=3853): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "048f9e5384f6eb5e03c3caa57100f78a"}, 0x20) r1 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0x8c68, 0x18, 0x2, 0x263}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000000)={0x2, 0x0, [{0x80000000, 0xff, 0x3, 0x3, 0x8, 0xffff}, {0x40000001, 0x7ff, 0x5, 0x4, 0x1, 0x2}]}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$selinux_load(r0, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "048f9e5384f6eb5e03c3caa57100f78a"}, 0x20) (async) io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0x8c68, 0x18, 0x2, 0x263}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000000)={0x2, 0x0, [{0x80000000, 0xff, 0x3, 0x3, 0x8, 0xffff}, {0x40000001, 0x7ff, 0x5, 0x4, 0x1, 0x2}]}) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) (async) 363.638172ms ago: executing program 1 (id=3856): mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ncpfs\x00', 0x204001, 0x0) 300.949114ms ago: executing program 1 (id=3859): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x8) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) fdatasync(0xffffffffffffffff) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'hash\x00'}, {0x20, '/dev/adsp1\x00'}], 0xa, "fef70d505a9048ab75cf7750f6692ae69dfb3a98bbba4daa67acf8daad09d9db8b7fb2b59a962cb80e63ecfbbfc15ff3272dc99c1650a8f82b44afce012923fb1bcf486fd988807a78d5a2b78f6d6cd3dcf5ec27b9391d4d5174cd065a012897e9fc8c0e270b5e931a38384f862b4345b9a3764bdefe26c2b69b35ce56336db8175f6c6479ba3070a3946736685a186acfc76dd246cbe6b58ce4558db628958cc6bd56add8a612eedb0f31758efef2e034b3f226fbe669cdefbeb932119e"}, 0xdb) sendmmsg$alg(r1, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="d306c5", 0x3}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x20040005) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) 300.738832ms ago: executing program 3 (id=3860): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) syz_usbip_server_init(0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) creat(&(0x7f00000001c0)='./file0\x00', 0x1) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) (async) syz_usbip_server_init(0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) (async) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) (async) 300.40128ms ago: executing program 1 (id=3861): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x4, {0x7, 0x0, 0x0, r1, 0xa006}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x513}]}}]}]}, 0x3f}}, 0x0) 298.804407ms ago: executing program 3 (id=3862): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@local, 0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) (async) syz_emit_ethernet(0x22, &(0x7f0000000040)={@random="e33110495bfd", @broadcast, @val={@void, {0x8100, 0x7, 0x1}}, {@can={0xc, {{0x4}, 0x5, 0x0, 0x0, 0x0, "99d4cd7e4c0ddeb8"}}}}, 0x0) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in6=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) 298.610789ms ago: executing program 1 (id=3863): r0 = syz_clone(0x23140400, 0x0, 0x31, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902"], 0x0) syz_emit_ethernet(0xca, &(0x7f0000000640)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x90, 0x3a, 0xff, @remote, @remote, {[], @time_exceed={0x3, 0x1, 0x0, 0x6, '\x00', {0xf, 0x6, "d86998", 0x6, 0x1, 0x1, @private0, @private2, [@dstopts={0x29, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @pad1, @generic={0x3, 0xf, "8b36922880cebba14dd778e7fe268a"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @hao={0xc9, 0x10, @loopback}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1e}}, @enc_lim={0x4, 0x1, 0x4}]}]}}}}}}}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x5c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x3c2}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x4, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x12, 0xf5, 0x7}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x1, 0x8, 0x20, 0x4}, 0x43, &(0x7f0000000100)={0x5, 0xf, 0x43, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x7, 0xe5, 0x7, 0xff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x14, 0x37, 0x2, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x2, 0xf9a}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x4d, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b2c7e86237b951744e2924d1b7c48635"}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44a}}, {0x3e, &(0x7f00000001c0)=@string={0x3e, 0x3, "04a08ba6df44c61c5798d9acf97285e7b9cec99428f6af3b898b64fcef7f1848cad4b8ff3e257f62f83f22d58ffe195a1ce8350b398c497f45c85fcb"}}, {0xeb, &(0x7f0000000300)=@string={0xeb, 0x3, "64170e4b5b042a5a19fabe730d3550e69d8f8bcb71f86ade97544ad8eff2a94818a74f31d1611273509345b39bb1496fd2cd60cb6fab4bb5538b85e1a6654ab5643ada2d0d22f1e16b1d605778bb9566cfc9729177235fe7213058e1f51d8860f1a194ab783c3ca35f7ac6e81fbf826621607f28903301d111a9a1bbdf3951d98fcbe45bb8b0249275f1d03c6d5abd95854ebb399c2959a886c3777d3159629dd99c68c3ce61f090de8127a1eeb5ef5a156769be195409c5302060c4dcb4f2576d8e0428ade1fbf84a32f0fa7dd70f7c4f9991a0917c9f017154c429098040adfaf97d1e980f9a3b4a"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1442}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}]}) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000600)='ns/pid_for_children\x00') r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)={0x100, 0x99, 0x1}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xe3, 0xe9a, 0x0, 0x8000008, 0x5, 0x4, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x66a9, 0xb, 0x8007, 0x80a, 0x558}) mkdirat(r1, &(0x7f0000000500)='./file0\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x521a, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) shmctl$IPC_RMID(0x0, 0x0) 237.43939ms ago: executing program 3 (id=3864): r0 = socket$inet6(0xa, 0x3, 0x5) clock_getres(0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) ioctl$FICLONE(r2, 0x40049409, r1) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x1, 0xc040) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 236.20825ms ago: executing program 3 (id=3865): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000004c0)={0x0, 0x5, 0xff, 0x8, 0x8, 0x8, 0x2}) 235.26319ms ago: executing program 4 (id=3866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) (async) read$midi(r1, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) (async) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) 234.281891ms ago: executing program 3 (id=3867): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000200)) 161.459734ms ago: executing program 4 (id=3869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x6, @sliced={0x4, [0x2, 0xb, 0xed80, 0x7, 0x649, 0xd, 0x3, 0xa, 0x6, 0x5, 0x1ff, 0x9a85, 0x6, 0x7, 0x1ff, 0x9, 0x8, 0x7f, 0x9, 0x1, 0xed7c, 0x9, 0x101, 0x1, 0x6, 0x5, 0x2, 0x401, 0x4, 0xffff, 0x5, 0x9, 0x2, 0xddc, 0x6, 0x8000, 0x8, 0xa4b1, 0x1, 0x8001, 0x5, 0x4, 0x7, 0xb, 0x3ff, 0x8, 0xfff9, 0x4], 0xe}}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000100008000040000", @ANYRES32=0x1, @ANYBLOB="010400"/20, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="04000000050000000500"/28], 0x50) r13 = socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000040)=[{r13, 0x80cd}], 0x1, 0x7) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r13, 0x8010671f, &(0x7f0000000100)={&(0x7f00000000c0)=""/19, 0x13}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e5ffffffffffffff00006b00000008000300", @ANYRES32=r14], 0x28}}, 0x0) 160.901573ms ago: executing program 4 (id=3871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000280)={0x10002, 0x4, 0x80a0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x5, r7}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$TIOCGPGRP(r3, 0x80186803, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffff"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) pipe(&(0x7f0000000080)) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000280)={0x10002, 0x4, 0x80a0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x5, r7}) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async) ioctl$TIOCGPGRP(r3, 0x80186803, &(0x7f0000000100)) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffff"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 160.146775ms ago: executing program 0 (id=3872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = open(0x0, 0x60840, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082dbd7000fddbdf2510000000080007000400000092c141c050ab08000900000000000800080001000000080006000700000008000800018605000800"], 0x44}, 0x1, 0x0, 0x0, 0x4085}, 0x0) fcntl$setsig(r2, 0xa, 0x13) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0xb, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) close_range(r1, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 97.511008ms ago: executing program 4 (id=3873): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2}, 0x48) r1 = openat$pmem0(0xffffff9c, &(0x7f0000000000), 0x20140, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, 0x0) (async) lseek(r1, 0x2804000000, 0x3) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', r2}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) 96.644613ms ago: executing program 0 (id=3874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000027f2cc304d8da531fb402c57874e1582760a35e2216732d0aea32c2dc7c7f81e3ac40d711cdcebf43b21ba075f0d64cda6cc7eade9a8edb1e2bef24542e561760877703b9d6c3dc6125e209de641824d8cc9b1cd2e97a5de3f5c32e9842132aeff3df1bb3266f5aa7d5277d1ea6bd590b8e38b93efc6ee861b1558fb30f1a0e19e1652bd0f29a25410c25dc741f1ad0f4a9a90a9f436c4bfbf6fbda1e208831b7db2ceb0db7c51fee137e9c27ad942e46cd56e0a53dbc3d96093b177270fa4220e9a973734096f2a13f58a24646fb76f38096a7102252946352071f423879239bcbc1d62357be0096aad1119406870651373e50790d5b5e29cccba7855e4b3e5450745cb200", @ANYRES32, @ANYBLOB="0000000300000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x1}) r4 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='soxrce=\x9d\vZ\xe6\x9d,H\xac\x82\xec\x13z^D\xe2/d\xdbI:\x8e\xdbn\xb9K{H\xa1\x9eW2Fh\xf3\n\xe5U\x84\x7f\xa9\xee\x14\xec\vK\xd7\x16\xe4;\xa0/\a\xe6\x04\xea\xbd\n4h\xach\xce\x8d=\xec\xa7\x7f\xbd\"\x9f\xb6\x9c\xa5\x12\x96\xb5\xe7v\x95+4\xb9m\xb9f\xf4', &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8f\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\xea-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae\x00'/144, 0xfeffffff00000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000009, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x800) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f00000002c0)="23000000010006", 0x7) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000002090101000000000000000000000001090000100000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) 96.408021ms ago: executing program 3 (id=3875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_DATA={0x14, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "0f3b6331bda2bde1ba9d8782"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) 95.354792ms ago: executing program 4 (id=3876): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000100013040000000000000000ac14140f00000000000000000000000020010000000000000000000000000000000000004e240000020000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f0000010000000000000000000000000000000032000000ac14140f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000700000000000000000000000000000000000000000000000400000000000000cc000000000000000000000000000000bf0e4a35000000000400000000000000000000000a00000100000000000000004c00120067636d286165732900000000000000000000000000000041000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000080)=0xe7e, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r7, 0x932, 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)=@delchain={0x34, 0x65, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xffee, 0xa}, {0x8, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x5df}, @TCA_RATE={0x6, 0x5, {0xaf, 0x80}}]}, 0x34}}, 0x11) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@broadcast, @in=@multicast1, 0x4e21, 0x198, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0xc, r5, r10}, {0x8, 0x401, 0x7, 0x2, 0x800, 0xa2, 0x100000001, 0x8c}, {0x6e, 0xda44, 0x3, 0x1}, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d2, 0xff}, 0xa, @in6=@empty, 0x3501, 0x2, 0x0, 0x3, 0x7, 0x1ff, 0xa}}, 0xe8) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3d, &(0x7f0000000080), 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) 95.2045ms ago: executing program 0 (id=3877): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) tkill(r1, 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x0, 0x8, 0x4}}]}]}}}]}, 0x64}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 644.956µs ago: executing program 0 (id=3878): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000001c20200009"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x2}], 0x1}, 0x480c0) 329.959µs ago: executing program 0 (id=3879): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x84, 0x2, 0x9d746ff65d696b36, 0x7, 0xfff, 0x8, 0x100, 0x6, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r1, 0x4) syz_open_pts(r0, 0x20080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/net\x00') ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r4, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x3}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005050}, 0x20000000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xd}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0xe3e11fd48dbcbaaa}, 0x20011) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x5, 0xe0a, 0xfff6, 0xf001, 0x29, 0x8, 0x3, 0x3, 0xff, 0x7, 0x1, 0x9, 0x74, 0x7, 0xffff, 0xa]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x1, 0x0, {0xfffffffffffffffc, 0x5, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x2, 0x6}}]}, 0x60}, 0x1, 0x0, 0x0, 0x884}, 0x40800) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x100, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r8, 0x100, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000840)={r2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000880)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0\x00'}) ioctl$PPPIOCGIDLE64(r7, 0x8010743f, &(0x7f00000008c0)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) sendmsg$AUDIT_LIST_RULES(r9, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x10, 0x3f5, 0x10, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8001}, 0x80) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r10, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r11, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x1c}}, 0x50) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r9) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r12, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008844}, 0x4000) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000801, 0xee00, &(0x7f0000000dc0)={0x3, 0x6, 0x10, 0x40b, 0x100000000, 0x80, 0x0, 0xcee, 0x6}) 0s ago: executing program 0 (id=3880): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = dup(r1) unshare(0x28000600) ftruncate(r1, 0xdcb) copy_file_range(r1, &(0x7f0000000100)=0xb76, r2, 0x0, 0x2aad109b, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0405470cf75d97dfbbbbac51b27f3971a59c2a15e0a56b1a4792143553dc2e9b63bdea9cbf7b9b8cd70610f9754f06ceab6ff4314d0cc6a61f4f3664e27894843619b4dd0ad75d8a8101603fe3da018b18beb561201e0dd303630fbfe4db667c3dc8b9c4aded475006ff5940211c00"/124], 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) kernel console output (not intermixed with test programs): `syz.2.2766'. [ 255.966159][T18196] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.969664][T18196] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.972137][T18196] bridge_slave_0: entered allmulticast mode [ 255.975875][T18196] bridge_slave_0: entered promiscuous mode [ 255.979205][T18196] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.981500][T18196] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.984374][T18196] bridge_slave_1: entered allmulticast mode [ 255.986980][T18196] bridge_slave_1: entered promiscuous mode [ 256.023964][T18523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2768'. [ 256.031359][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2768'. [ 256.042220][T18196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.062514][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.066008][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.076410][T18196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.091534][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 256.123253][T18196] team0: Port device team_slave_0 added [ 256.127716][T18196] team0: Port device team_slave_1 added [ 256.165048][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2772'. [ 256.188810][T18196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.191087][T18196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.199571][T18196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.221600][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.226169][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.234452][T18196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.236652][T18196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.244961][T18196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.254257][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.259400][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.265842][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.268735][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.274781][T18290] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.279169][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.309784][T18196] hsr_slave_0: entered promiscuous mode [ 256.312052][T18196] hsr_slave_1: entered promiscuous mode [ 256.315392][T18196] debugfs: 'hsr0' already exists in 'hsr' [ 256.317210][T18196] Cannot create hsr debugfs directory [ 256.327986][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.331305][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.429491][ T1145] team0: Port device netdevsim0 removed [ 256.435359][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.438660][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.495015][ T6742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.522519][T19258] XFS (nullb0): Invalid superblock magic number [ 256.576801][T18300] input: syz0 as /devices/virtual/input/input38 [ 256.603541][T19282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 256.609927][ T1145] bridge_slave_1: left allmulticast mode [ 256.611808][ T1145] bridge_slave_1: left promiscuous mode [ 256.615675][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.621019][ T1145] bridge_slave_0: left allmulticast mode [ 256.622882][ T1145] bridge_slave_0: left promiscuous mode [ 256.624909][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.666448][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'. [ 256.669630][T19288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2776'. [ 256.701133][T15703] usb 6-1: USB disconnect, device number 31 [ 256.790179][ T1145] bond4 (unregistering): (slave geneve3): Releasing active interface [ 256.987771][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 257.092358][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.096817][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.100052][ T1145] bond0 (unregistering): Released all slaves [ 257.184777][ T1145] bond1 (unregistering): Released all slaves [ 257.278181][ T1145] bond2 (unregistering): Released all slaves [ 257.366240][ T1145] bond3 (unregistering): Released all slaves [ 257.439914][ T1145] bond4 (unregistering): Released all slaves [ 257.522726][ T1145] bond5 (unregistering): Released all slaves [ 257.611756][T19328] mkiss: ax0: crc mode is auto. [ 257.632794][ T1145] tipc: Left network mode [ 257.931337][ T5985] Bluetooth: hci2: command tx timeout [ 258.099536][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 258.636580][T19354] netlink: 'syz.1.2783': attribute type 5 has an invalid length. [ 258.788463][ T5982] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 258.789199][ T5985] Bluetooth: hci5: command 0x0c1a tx timeout [ 258.790483][ T5982] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 258.894938][T19358] tipc: Started in network mode [ 258.896552][T19358] tipc: Node identity 324a74619337, cluster identity 4711 [ 258.898849][T19358] tipc: Enabled bearer , priority 0 [ 258.901307][T19362] syzkaller0: entered promiscuous mode [ 258.903050][T19362] syzkaller0: entered allmulticast mode [ 258.919797][T19356] tipc: Resetting bearer [ 258.923742][T19355] tipc: Resetting bearer [ 258.936650][T19355] tipc: Disabling bearer [ 259.066001][T19390] netlink: 'syz.3.2787': attribute type 22 has an invalid length. [ 259.072987][T19390] bridge0: entered promiscuous mode [ 259.074801][T19390] macsec1: entered promiscuous mode [ 259.077462][T19390] bridge0: port 4(macsec1) entered blocking state [ 259.080269][T19390] bridge0: port 4(macsec1) entered disabled state [ 259.083300][T19390] macsec1: entered allmulticast mode [ 259.085501][T19390] bridge0: entered allmulticast mode [ 259.089700][T19390] macsec1: left allmulticast mode [ 259.091902][T19390] bridge0: left allmulticast mode [ 259.096616][T19390] bridge0: left promiscuous mode [ 259.177455][T18196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 259.188692][T18196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.198367][T18196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.205341][T18196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.211415][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 259.246905][T18196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.248095][T19435] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 259.256576][T19435] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 259.257746][T18196] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.266162][T19435] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 259.266980][ T9777] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.273035][ T9777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.279436][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.281670][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.387421][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 259.387431][ T40] audit: type=1400 audit(1756289109.848:72911): avc: denied { setopt } for pid=19445 comm="syz.3.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.388357][T19446] netlink: 'syz.3.2796': attribute type 1 has an invalid length. [ 259.407626][T18196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.429451][T18196] veth0_vlan: entered promiscuous mode [ 259.434220][T18196] veth1_vlan: entered promiscuous mode [ 259.449427][T18196] veth0_macvtap: entered promiscuous mode [ 259.453172][T18196] veth1_macvtap: entered promiscuous mode [ 259.461603][T18196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.468032][T18196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.475643][ T84] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.478440][ T84] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.484565][ T84] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.487324][ T84] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.630428][T19469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=19469 comm=syz.3.2800 [ 260.152302][ T5985] Bluetooth: hci2: command tx timeout [ 260.323183][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 260.932591][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.092883][ T5985] Bluetooth: hci0: command 0x0c1a tx timeout [ 261.094966][ T5982] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 261.096865][ T5982] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 261.435033][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 262.375857][ T5985] Bluetooth: hci2: command tx timeout [ 262.546955][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 263.317427][ T5982] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 263.319312][ T5982] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 263.363251][T19532] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 263.365088][T19535] __nla_validate_parse: 4 callbacks suppressed [ 263.365098][T19535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 263.370933][ T6749] Bluetooth: hci1: Frame reassembly failed (-84) [ 263.372974][ T6749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.375436][ T6749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.393781][T19546] netlink: 'syz.2.2808': attribute type 12 has an invalid length. [ 263.397928][T17686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.400381][T17686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.439095][ T40] audit: type=1326 audit(1756289113.637:72912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.1.2810" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f028278ebe9 code=0x0 [ 263.669333][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 263.715325][ T1145] hsr_slave_0: left promiscuous mode [ 263.722912][ T6018] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 263.883994][ T6018] usb 5-1: Using ep0 maxpacket: 8 [ 263.888157][ T6018] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 263.890796][ T6018] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.894126][ T6018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.897120][ T6018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.900070][ T6018] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.903999][ T6018] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 263.907586][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.128289][ T6018] usb 5-1: GET_CAPABILITIES returned 0 [ 264.130121][ T6018] usbtmc 5-1:16.0: can't read capabilities [ 264.253000][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 264.329735][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 264.343883][T19561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.355255][T19561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.366514][ T6018] usb 5-1: USB disconnect, device number 39 [ 264.773594][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 265.070137][ T40] audit: type=1400 audit(1756289115.161:72913): avc: denied { setattr } for pid=19678 comm="syz.2.2823" name="CAN_RAW" dev="sockfs" ino=68830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.074922][T19680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=19680 comm=syz.2.2823 [ 265.172210][T19704] FAULT_INJECTION: forcing a failure. [ 265.172210][T19704] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 265.178524][T19704] CPU: 2 UID: 0 PID: 19704 Comm: syz.0.2824 Not tainted syzkaller #0 PREEMPT(full) [ 265.178547][T19704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.178557][T19704] Call Trace: [ 265.178563][T19704] [ 265.178569][T19704] dump_stack_lvl+0x16c/0x1f0 [ 265.178612][T19704] should_fail_ex+0x512/0x640 [ 265.178643][T19704] _copy_to_user+0x32/0xd0 [ 265.178666][T19704] simple_read_from_buffer+0xcb/0x170 [ 265.178685][T19704] proc_fail_nth_read+0x197/0x240 [ 265.178703][T19704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.178722][T19704] ? rw_verify_area+0xcf/0x6c0 [ 265.178746][T19704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.178765][T19704] vfs_read+0x1e4/0xcf0 [ 265.178785][T19704] ? __pfx___mutex_lock+0x10/0x10 [ 265.178811][T19704] ? __pfx_vfs_read+0x10/0x10 [ 265.178849][T19704] ? __fget_files+0x20e/0x3c0 [ 265.178876][T19704] ksys_read+0x12a/0x250 [ 265.178892][T19704] ? __pfx_ksys_read+0x10/0x10 [ 265.178916][T19704] do_syscall_64+0xcd/0x4c0 [ 265.178936][T19704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.178954][T19704] RIP: 0033:0x7f20bb78d5fc [ 265.178966][T19704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 265.178980][T19704] RSP: 002b:00007f20bc6ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.178996][T19704] RAX: ffffffffffffffda RBX: 00007f20bb9b6090 RCX: 00007f20bb78d5fc [ 265.179007][T19704] RDX: 000000000000000f RSI: 00007f20bc6ae0a0 RDI: 0000000000000006 [ 265.179017][T19704] RBP: 00007f20bc6ae090 R08: 0000000000000000 R09: 0000000000000000 [ 265.179026][T19704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.179036][T19704] R13: 00007f20bb9b6128 R14: 00007f20bb9b6090 R15: 00007ffeff9bcb28 [ 265.179055][T19704] [ 265.256727][ C2] vkms_vblank_simulate: vblank timer overrun [ 265.335644][ T1145] IPVS: stop unused estimator thread 0... [ 265.490373][T19727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2831'. [ 265.540300][ T5976] Bluetooth: hci1: command 0x1003 tx timeout [ 265.540752][ T5985] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 265.551107][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 265.641528][ T40] audit: type=1400 audit(1756289115.694:72914): avc: denied { watch_sb } for pid=19736 comm="syz.3.2834" path="/56" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 265.643826][T19737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19737 comm=syz.3.2834 [ 265.732573][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 265.744863][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 265.746994][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 265.749733][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.753695][ T9] usb 7-1: config 0 descriptor?? [ 265.892989][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 265.990743][T19754] kvm: Disabled LAPIC found during irq injection [ 266.023908][T19708] openvswitch: netlink: Message has 24 unknown bytes. [ 266.026070][T19708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.037850][T19775] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 266.044582][ T40] audit: type=1400 audit(1756289116.069:72915): avc: denied { relabelto } for pid=19774 comm="syz.0.2844" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_auth_t:s0" [ 266.048785][T19775] binder: 19774:19775 unknown command 0 [ 266.052813][ T40] audit: type=1400 audit(1756289116.078:72916): avc: denied { associate } for pid=19774 comm="syz.0.2844" name="cgroup.procs" dev="cgroup" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_auth_t:s0" [ 266.063957][T19775] binder: 19774:19775 ioctl c0306201 200000000080 returned -22 [ 266.094290][T19777] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 266.190389][ T40] audit: type=1400 audit(1756289116.209:72917): avc: denied { listen } for pid=19791 comm="syz.0.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 266.196651][ T40] audit: type=1400 audit(1756289116.209:72918): avc: denied { setopt } for pid=19791 comm="syz.0.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 266.267123][ T5982] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 266.433086][ T5982] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 266.436411][ T5982] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.440286][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.443647][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 266.446983][ T5982] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.451130][ T5982] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.453986][ T5982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.457854][ T5982] usb 8-1: config 0 descriptor?? [ 266.460270][T19770] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 266.474670][T19708] program syz.2.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.484056][T19708] can0: slcan on ptm1. [ 266.489950][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 266.491959][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 266.495612][ T9] usb 7-1: USB disconnect, device number 14 [ 266.577995][T19706] can0 (unregistered): slcan off ptm1. [ 266.893645][ T5982] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 266.902999][ T5982] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 266.994080][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 267.161836][ T40] audit: type=1400 audit(1756289117.116:72919): avc: denied { listen } for pid=19844 comm="syz.2.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 267.173902][ T40] audit: type=1400 audit(1756289117.126:72920): avc: denied { accept } for pid=19844 comm="syz.2.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 267.187881][ T981] usb 8-1: USB disconnect, device number 49 [ 267.436728][ T40] audit: type=1400 audit(1756289117.378:72921): avc: denied { read } for pid=19868 comm="syz.1.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 267.519720][ T1425] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 267.523836][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.746752][T19873] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2859'. [ 267.873924][T19882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2861'. [ 268.105994][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 268.199857][ T40] audit: type=1400 audit(1756289118.089:72922): avc: denied { unmount } for pid=12480 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 268.354281][T19916] delete_channel: no stack [ 269.228441][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 269.440267][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2876'. [ 269.443758][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2876'. [ 269.495295][T19956] kvm: kvm [19955]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 269.499304][T19956] kvm: kvm [19955]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 269.537061][T19961] loop2: detected capacity change from 0 to 7 [ 269.553052][T19961] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 269.555426][T19961] loop2: partition table partially beyond EOD, truncated [ 269.558273][T19961] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 269.574153][T19971] netlink: 'syz.1.2881': attribute type 3 has an invalid length. [ 269.577640][T19971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2881'. [ 269.873853][T20001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.877875][T20001] block device autoloading is deprecated and will be removed. [ 269.908027][T20006] 9pnet_fd: p9_fd_create_unix (20006): problem connecting socket: ./file0: -111 [ 269.914743][T20006] vcan1: entered allmulticast mode [ 269.952816][T20013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2893'. [ 269.957019][T20013] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2893'. [ 269.961590][T20013] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2893'. [ 269.999906][T20021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2896'. [ 270.110043][T20033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2899'. [ 270.111826][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2899'. [ 270.116042][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2899'. [ 270.122871][T20035] erspan0: entered promiscuous mode [ 270.125159][T20035] batadv_slave_1: entered promiscuous mode [ 270.244174][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 270.329530][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.081247][T20056] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 271.154121][T20056] erofs (device nbd0): cannot find valid erofs superblock [ 271.192239][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 271.192251][ T40] audit: type=1400 audit(1756289120.886:72927): avc: denied { bind } for pid=20066 comm="syz.1.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.441389][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.486761][T20084] netlink: 'syz.1.2913': attribute type 10 has an invalid length. [ 271.498569][T20084] team0: Cannot enslave team device to itself [ 271.528915][T20087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=20087 comm=syz.1.2914 [ 271.680892][T20092] binder: 20091:20092 ioctl c0306201 200000000080 returned -14 [ 271.689334][T20092] Invalid logical block size (2) [ 271.949035][T20117] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 272.001799][T20119] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.003343][T20116] kvm: user requested TSC rate below hardware speed [ 272.009880][T20115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2564721145 (5129442290 ns) > initial count (4299905928 ns). Using initial count to start timer. [ 272.038475][T20128] overlayfs: workdir and upperdir must reside under the same mount [ 272.062790][ T40] audit: type=1400 audit(1756289121.709:72928): avc: denied { accept } for pid=20130 comm="syz.2.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.244282][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 272.246253][T20152] binder: 20149:20152 ioctl 4018620d 200000000040 returned -16 [ 272.274025][T20158] sp0: Synchronizing with TNC [ 272.297643][T20168] bond0: option mode: unable to set because the bond device has slaves [ 272.301514][T20168] program syz.2.2930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.480599][T20190] CIFS mount error: No usable UNC path provided in device string! [ 272.480599][T20190] [ 272.483834][T20190] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 272.553252][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.641684][T20207] fuse: Unknown parameter 'default_perm' [ 273.072976][T20226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.079452][T20226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.676775][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.817180][ T40] audit: type=1400 audit(1756289123.346:72929): avc: denied { map } for pid=20255 comm="syz.3.2955" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 273.824494][ T40] audit: type=1400 audit(1756289123.346:72930): avc: denied { execute } for pid=20255 comm="syz.3.2955" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 273.825162][T20256] input: syz1 as /devices/virtual/input/input43 [ 274.148901][T20293] SELinux: syz.2.2963 (20293) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 274.184600][ T40] audit: type=1400 audit(1756289123.683:72931): avc: denied { execute } for pid=20296 comm="syz.1.2964" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 274.211966][T20299] fuse: Bad value for 'fd' [ 274.345270][T20307] tmpfs: Unknown parameter 'mpkl' [ 274.358466][T20311] SELinux: truncated policydb string identifier [ 274.361148][T20311] SELinux: failed to load policy [ 274.787538][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 275.212999][T20322] __nla_validate_parse: 4 callbacks suppressed [ 275.213014][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2971'. [ 275.357973][T20365] IPv6: NLM_F_CREATE should be specified when creating new route [ 275.369770][T20365] block nbd1: Attempted send on invalid socket [ 275.371772][T20365] blk_print_req_error: 20 callbacks suppressed [ 275.371781][T20365] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.378240][T20365] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 275.745668][T20507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2980'. [ 275.807428][T20513] fuse: Bad value for 'fd' [ 275.820074][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'. [ 275.823033][T20515] netlink: 'syz.1.2983': attribute type 30 has an invalid length. [ 275.830870][ T1145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.834094][ T6750] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.836870][ T6750] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.839504][ T6750] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.888719][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 276.081150][ T53] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 276.243685][ T53] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.247021][ T53] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.252186][ T53] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.255095][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.475863][ T53] usb 6-1: usb_control_msg returned -32 [ 276.477349][ T40] audit: type=1400 audit(1756289125.825:72932): avc: denied { read } for pid=20514 comm="syz.1.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 276.478393][ T53] usbtmc 6-1:16.0: can't read capabilities [ 276.533027][ T40] audit: type=1400 audit(1756289125.890:72933): avc: denied { setopt } for pid=20514 comm="syz.1.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 276.539648][T20515] netlink: 'syz.1.2983': attribute type 21 has an invalid length. [ 276.650664][T20552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20552 comm=syz.3.2987 [ 276.779346][T20562] netlink: 'syz.3.2990': attribute type 2 has an invalid length. [ 276.796640][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'. [ 276.802435][T20561] netlink: 'syz.0.2989': attribute type 30 has an invalid length. [ 276.814351][ T6750] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.817552][ T6750] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.821573][ T6750] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.824505][ T6750] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.853070][T20569] wg2: entered promiscuous mode [ 276.855220][T20569] wg2: entered allmulticast mode [ 276.920977][T20546] tipc: Enabled bearer , priority 10 [ 276.922002][T20580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.923263][T20546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=20546 comm=syz.1.2983 [ 276.925376][T20580] IPv6: NLM_F_CREATE should be set when creating new route [ 276.931659][T20580] IPv6: NLM_F_CREATE should be set when creating new route [ 276.935851][T20580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.000525][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 277.152905][ T24] IPVS: starting estimator thread 0... [ 277.204184][T20609] CIFS mount error: No usable UNC path provided in device string! [ 277.204184][T20609] [ 277.207348][T20609] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 277.257234][T20601] IPVS: using max 45 ests per chain, 108000 per kthread [ 277.542717][ T40] audit: type=1400 audit(1756289126.826:72934): avc: denied { setopt } for pid=20649 comm="syz.3.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 277.599717][T20653] kvm: user requested TSC rate below hardware speed [ 277.605021][T20653] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2564721145 (5129442290 ns) > initial count (4299905928 ns). Using initial count to start timer. [ 277.611000][ T40] audit: type=1400 audit(1756289126.900:72935): avc: denied { execute } for pid=20652 comm="syz.3.3010" path="/dev/dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.706284][ T53] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 277.728682][T20651] delete_channel: no stack [ 277.868737][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.873120][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.877302][ T53] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.882296][ T53] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.885088][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.891375][ T53] usb 5-1: config 0 descriptor?? [ 277.994721][ T5982] tipc: Node number set to 2709353569 [ 278.112291][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.118465][ T53] usbhid 5-1:0.0: can't add hid device: -71 [ 278.120449][ T53] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 278.125613][ T53] usb 5-1: USB disconnect, device number 40 [ 278.362143][T20686] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20686 comm=syz.0.3017 [ 278.367213][T20686] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20686 comm=syz.0.3017 [ 278.534670][T20709] netlink: 'syz.0.3023': attribute type 10 has an invalid length. [ 278.541237][T20709] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 278.574211][ T40] audit: type=1400 audit(1756289127.798:72936): avc: denied { getopt } for pid=20710 comm="syz.0.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 278.603103][ T40] audit: type=1400 audit(1756289127.817:72937): avc: denied { read } for pid=20714 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.610944][ T40] audit: type=1400 audit(1756289127.827:72938): avc: denied { mounton } for pid=20714 comm="syz.0.3025" path="/proc/217/cgroup" dev="proc" ino=74368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 278.640656][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3026'. [ 278.643668][T20721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3026'. [ 278.771980][T20731] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 279.039162][ T53] usb 6-1: USB disconnect, device number 32 [ 279.058688][T20743] tipc: Enabled bearer , priority 0 [ 279.063059][T20748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'. [ 279.063193][T20745] tipc: Resetting bearer [ 279.224221][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.283230][T20748] tipc: Disabling bearer [ 279.398937][ T40] audit: type=1326 audit(1756289128.565:72939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20706 comm="syz.3.3022" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857118ebe9 code=0x7fc00000 [ 279.448487][ T40] audit: type=1400 audit(1756289128.603:72940): avc: denied { create } for pid=20786 comm="syz.3.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 279.480007][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3035'. [ 279.489176][T20792] block nbd0: Attempted send on invalid socket [ 279.493868][T20792] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 279.496928][T20792] XFS (nbd0): SB validate failed with error -5. [ 279.650596][T20814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.654765][T20814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.657536][T20823] program syz.2.3040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.680157][T20830] binder: Binderfs stats mode cannot be changed during a remount [ 279.763175][ T40] audit: type=1400 audit(1756289128.912:72941): avc: denied { read } for pid=20841 comm="syz.1.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 279.763665][T20835] overlayfs: invalid origin (0000) [ 279.777671][T20842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'. [ 279.791190][T15703] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 279.808365][T20846] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3045'. [ 279.940477][T15703] usb 5-1: device descriptor read/64, error -71 [ 280.050247][T20869] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 280.057154][T20869] bridge0: port 1() entered disabled state [ 280.086362][ T40] audit: type=1400 audit(1756289129.211:72942): avc: denied { ioctl } for pid=20880 comm="syz.3.3054" path="socket:[76970]" dev="sockfs" ino=76970 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 280.096519][ T40] audit: type=1326 audit(1756289129.211:72943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.3.3054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857118ebe9 code=0x7ffc0000 [ 280.172455][T20889] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 280.172476][T20887] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 280.218465][T15703] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 280.319304][T20889] /dev/sr0: Can't open blockdev [ 280.346696][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 280.358561][T15703] usb 5-1: device descriptor read/64, error -71 [ 280.408990][T20912] tipc: Started in network mode [ 280.410666][T20912] tipc: Node identity 7f000001, cluster identity 4711 [ 280.414054][T20912] tipc: Enabled bearer , priority 10 [ 280.418240][T20912] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 280.421563][T20912] tipc: Enabled bearer , priority 10 [ 280.475192][T15703] usb usb5-port1: attempt power cycle [ 280.553350][T20991] binder: 20989:20991 ioctl c0306201 200000000080 returned -14 [ 280.572542][T20984] __nla_validate_parse: 3 callbacks suppressed [ 280.572560][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3060'. [ 280.681835][T21004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.691530][T21004] IPVS: length: 139 != 8 [ 280.757368][T21009] sp0: Synchronizing with TNC [ 280.758466][T21011] netlink: 'syz.2.3072': attribute type 5 has an invalid length. [ 280.761300][T21011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3072'. [ 280.838600][T15703] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 280.845786][T21018] sysfs: Unknown parameter 'usrquota' [ 280.860982][T15703] usb 5-1: device descriptor read/8, error -71 [ 281.127130][T15703] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 281.148968][T15703] usb 5-1: device descriptor read/8, error -71 [ 281.266741][T15703] usb usb5-port1: unable to enumerate USB device [ 281.447872][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 281.491883][T15703] tipc: Node number set to 2130706433 [ 281.559360][T21020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.802278][T21045] input: syz0 as /devices/virtual/input/input45 [ 281.861191][T21060] input input46: cannot allocate more than FF_MAX_EFFECTS effects [ 281.872063][T21060] macvtap0: entered promiscuous mode [ 281.874506][T21060] macvtap0: entered allmulticast mode [ 281.877776][T21060] veth0_macvtap: entered allmulticast mode [ 282.032128][T21068] kvm: pic: non byte write [ 282.189487][T21080] libceph: resolve '40' (ret=-3): failed [ 282.270475][T21090] netlink: 'syz.3.3089': attribute type 1 has an invalid length. [ 282.273566][T21090] netlink: 600 bytes leftover after parsing attributes in process `syz.3.3089'. [ 282.311780][T21100] syzkaller1: entered promiscuous mode [ 282.313594][T21100] syzkaller1: entered allmulticast mode [ 282.559765][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.750549][T21155] 9pnet_fd: Insufficient options for proto=fd [ 282.789709][T21160] trusted_key: encrypted_key: insufficient parameters specified [ 282.799590][T21160] binder: 21158:21160 ioctl c0306201 200000000240 returned -11 [ 282.802644][T21160] trusted_key: encrypted_key: insufficient parameters specified [ 282.828295][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'. [ 282.896837][T21175] netlink: 'syz.3.3108': attribute type 5 has an invalid length. [ 282.899792][T21175] netlink: 'syz.3.3108': attribute type 7 has an invalid length. [ 282.911587][T21175] : entered promiscuous mode [ 283.043206][T21184] hid-generic 0003:0627:0001.0001: pid 21184 passed too large report [ 283.072920][ T5982] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 283.168700][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 283.168711][ T40] audit: type=1400 audit(1756289132.083:72957): avc: denied { connect } for pid=21206 comm="syz.0.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 283.172112][T21207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3116'. [ 283.183879][T21207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21207 comm=syz.0.3116 [ 283.234197][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'. [ 283.234933][ T5982] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.240490][ T5982] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.243667][ T5982] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.248699][ T5982] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.252124][ T5982] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.258360][ T5982] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.261601][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.264340][ T5982] usb 7-1: Product: syz [ 283.266097][ T5982] usb 7-1: Manufacturer: syz [ 283.270449][ T5982] cdc_wdm 7-1:1.0: skipping garbage [ 283.272101][ T5982] cdc_wdm 7-1:1.0: skipping garbage [ 283.274458][ T5982] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 283.276704][ T5982] cdc_wdm 7-1:1.0: Unknown control protocol [ 283.430488][T21253] affs: No valid root block on device loop3 [ 283.485229][ T5982] usb 7-1: USB disconnect, device number 15 [ 283.512492][ T40] audit: type=1400 audit(1756289132.419:72958): avc: denied { mounton } for pid=21275 comm="syz.3.3128" path="/148/file1" dev="autofs" ino=77559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 283.546458][ T40] audit: type=1400 audit(1756289132.447:72959): avc: denied { map } for pid=21281 comm="syz.3.3130" path="socket:[77571]" dev="sockfs" ino=77571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 283.554908][ T40] audit: type=1400 audit(1756289132.447:72960): avc: denied { read } for pid=21281 comm="syz.3.3130" path="socket:[77571]" dev="sockfs" ino=77571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 283.561438][T21287] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 283.612344][T21299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21299 comm=syz.0.3133 [ 283.615446][T21301] netlink: 'syz.0.3133': attribute type 22 has an invalid length. [ 283.619329][T21301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 283.671535][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.672769][T21301] netlink: 'syz.0.3133': attribute type 22 has an invalid length. [ 283.676729][T21301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 283.860789][T21333] fuse: Unknown parameter 'r$:(>mo[sT00000000000000000003' [ 283.866548][T21333] overlay: Unknown parameter './file1' [ 283.910929][T21337] exFAT-fs (md0): mounting with "discard" option, but the device does not support discard [ 283.914980][T21337] exFAT-fs (md0): unable to read boot sector [ 283.916969][T21337] exFAT-fs (md0): failed to read boot sector [ 283.918957][T21337] exFAT-fs (md0): failed to recognize exfat type [ 284.001176][T21351] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 284.005872][T21351] bridge0: port 3(dummy0) entered disabled state [ 284.008040][T21351] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.010920][T21351] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.048276][T21362] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3144'. [ 284.048284][T21363] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3144'. [ 284.280822][ T9] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 284.327593][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.331654][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.336029][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.340025][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.343993][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.348202][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.352172][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.356476][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.360967][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.364915][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.369243][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.373117][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.377357][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.381374][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.385387][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.389632][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.393608][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.397778][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.401811][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.405875][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.410060][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.413986][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.418378][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.422419][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.426450][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.430495][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.434636][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.439500][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.444617][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.449537][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.454789][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.458863][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.463268][T21396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.468598][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 284.476320][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.478883][ T9] usb 8-1: Product: syz [ 284.480231][ T9] usb 8-1: Manufacturer: syz [ 284.481737][ T9] usb 8-1: SerialNumber: syz [ 284.783305][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.924204][T21352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.927017][T21352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.998757][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 285.002584][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 285.005881][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 285.012170][ T9] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 285.017057][ T9] usb 8-1: USB disconnect, device number 50 [ 285.023187][T21450] chnl_net:caif_netlink_parms(): no params data found [ 285.157488][ T6039] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 285.296648][ T6039] usb 7-1: device descriptor read/64, error -71 [ 285.331674][ T40] audit: type=1400 audit(1756289134.112:72961): avc: denied { create } for pid=21465 comm="syz.0.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 285.574872][ T6039] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 285.725418][ T6039] usb 7-1: device descriptor read/64, error -71 [ 285.856811][T21506] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 285.861636][ T40] audit: type=1400 audit(1756289134.608:72962): avc: denied { relabelto } for pid=21504 comm="syz.0.3172" name="file0" dev="tmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 285.871556][ T40] audit: type=1400 audit(1756289134.608:72963): avc: denied { associate } for pid=21504 comm="syz.0.3172" name="file0" dev="tmpfs" ino=531 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 285.872550][ T6039] usb usb7-port1: attempt power cycle [ 285.895175][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.237306][ T6039] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 286.259003][ T6039] usb 7-1: device descriptor read/8, error -71 [ 286.515178][ T6039] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 286.537266][ T6039] usb 7-1: device descriptor read/8, error -71 [ 286.654555][ T6039] usb usb7-port1: unable to enumerate USB device [ 286.802963][T21528] __nla_validate_parse: 2 callbacks suppressed [ 286.802976][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3177'. [ 286.859973][T21528] netlink: 'syz.3.3177': attribute type 178 has an invalid length. [ 287.017569][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.176368][T21548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3181'. [ 287.180794][T21548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3181'. [ 287.244564][T21554] IPVS: length: 184 != 24 [ 287.282741][ T40] audit: type=1400 audit(1756289135.936:72964): avc: denied { map } for pid=21555 comm="syz.3.3184" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 287.292076][ T40] audit: type=1400 audit(1756289135.936:72965): avc: denied { execute } for pid=21555 comm="syz.3.3184" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 287.534929][T21571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3187'. [ 287.812070][T21581] trusted_key: encrypted_key: insufficient parameters specified [ 287.905607][ T40] audit: type=1400 audit(1756289136.516:72966): avc: denied { setattr } for pid=21586 comm="syz.1.3193" name="UDP-Lite" dev="sockfs" ino=79243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.937333][T21596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3194'. [ 288.017565][T21608] binder: 21607:21608 ioctl c0306201 200000000480 returned -14 [ 288.035740][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 288.129398][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 288.155701][T21638] random: crng reseeded on system resumption [ 288.238990][T21655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3204'. [ 288.266352][T21660] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3205'. [ 288.294900][T21664] tmpfs: Bad value for 'mpol' [ 288.321685][T21666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3207'. [ 288.364601][ T981] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 288.465461][T21691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3213'. [ 288.538658][ T981] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 288.541575][ T981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.544060][ T981] usb 8-1: Product: syz [ 288.545429][ T981] usb 8-1: Manufacturer: syz [ 288.547492][ T981] usb 8-1: SerialNumber: syz [ 288.552276][ T981] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 288.566044][ T981] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 288.653360][ T5982] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 288.825242][ T5982] usb 5-1: Using ep0 maxpacket: 32 [ 288.836273][ T5982] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1015 [ 288.839450][ T5982] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 288.846975][ T5982] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.849862][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.852362][ T5982] usb 5-1: Product: 廟虝໋䦏杯ɖ颪耦䣊뒬ᐐ苨☸ᮃ뮹䝉䌫⮣Ѝ꜐甄術뇖즸㲘佩ꚓ䄾념䑝㇩࿳㎾騲ẽ꺚覬紝Lj౺鴛젲憶楾৲阱栨৬ꅑ踎떰싒큃ִ鑍箙᱀ћᑜ弟薰㓰琄涡➖귻䒜渣臯Ⅴ쎘⚡븓柖鐛麚뮁▌෧ᨃꣀ䎊⒉㩍鄭鼋 [ 288.861717][ T5982] usb 5-1: Manufacturer: Ъ [ 288.863199][ T5982] usb 5-1: SerialNumber: Х [ 288.956570][T21728] netlink: 205912 bytes leftover after parsing attributes in process `syz.2.3220'. [ 289.084010][T21682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.086904][T21682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.092560][T21682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.095634][T21682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.102019][T21682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.105092][T21682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.128644][T21755] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 289.132038][ T40] audit: type=1400 audit(1756289137.667:72967): avc: denied { read } for pid=21754 comm="syz.1.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.230625][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 289.401849][ T60] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 289.493483][T21780] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 289.497999][T21780] overlayfs: overlapping lowerdir path [ 289.555260][ T40] audit: type=1400 audit(1756289138.069:72968): avc: denied { setopt } for pid=21782 comm="syz.1.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 289.575227][ T60] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.578179][ T60] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 289.581440][ T60] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.584903][ T60] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 289.588410][ T60] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 289.593347][ T60] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 289.596279][ T60] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.598872][ T60] usb 7-1: Product: syz [ 289.600237][ T60] usb 7-1: Manufacturer: syz [ 289.605180][ T60] cdc_wdm 7-1:1.0: skipping garbage [ 289.606912][ T60] cdc_wdm 7-1:1.0: skipping garbage [ 289.610647][ T60] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 289.612539][ T60] cdc_wdm 7-1:1.0: Unknown control protocol [ 289.669094][ T981] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 289.671608][ T981] ath9k_htc: Failed to initialize the device [ 289.694621][ T981] usb 8-1: ath9k_htc: USB layer deinitialized [ 289.707968][ T40] audit: type=1400 audit(1756289138.209:72969): avc: denied { accept } for pid=21796 comm="syz.1.3232" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 289.825350][ T6039] usb 7-1: USB disconnect, device number 20 [ 290.342369][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 290.699213][ T9777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.806752][ T9777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.896418][ T9777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.899475][ T5976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.906124][ T5976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.909862][ T5976] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.914303][ T5976] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.917299][ T5976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.958977][ T9777] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.090116][T21835] chnl_net:caif_netlink_parms(): no params data found [ 291.159952][ T9777] bridge_slave_1: left allmulticast mode [ 291.161811][ T9777] bridge_slave_1: left promiscuous mode [ 291.163888][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.170362][ T9777] bridge_slave_0: left allmulticast mode [ 291.172218][ T9777] bridge_slave_0: left promiscuous mode [ 291.174125][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.258664][ T9777] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 291.267992][ T59] usb 8-1: USB disconnect, device number 51 [ 291.349789][T22031] netlink: 'syz.3.3243': attribute type 10 has an invalid length. [ 291.455951][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 291.584862][ T9777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.590675][ T9777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.596610][ T9777] bond0 (unregistering): Released all slaves [ 291.622675][ T5982] cdc_ncm 5-1:1.0: bind() failure [ 291.626735][ T5982] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 291.628941][ T5982] cdc_ncm 5-1:1.1: bind() failure [ 291.640209][ T5982] usb 5-1: USB disconnect, device number 45 [ 291.695304][ T9777] bond1 (unregistering): Released all slaves [ 291.701852][ T9777] bond2 (unregistering): Released all slaves [ 291.708065][ T9777] bond3 (unregistering): Released all slaves [ 291.805847][ T9777] bond4 (unregistering): Released all slaves [ 291.983054][ T9777] tipc: Disabling bearer [ 291.984909][ T9777] tipc: Left network mode [ 292.015608][T22185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.021756][T22185] batadv_slave_0: entered promiscuous mode [ 292.023660][T22185] batadv_slave_0: entered allmulticast mode [ 292.047823][T21835] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.050458][T21835] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.055487][T21835] bridge_slave_0: entered allmulticast mode [ 292.058271][T21835] bridge_slave_0: entered promiscuous mode [ 292.075984][T21835] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.078991][T21835] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.082064][T21835] bridge_slave_1: entered allmulticast mode [ 292.085881][T21835] bridge_slave_1: entered promiscuous mode [ 292.139921][T21835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.154104][T21835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.197625][T21835] team0: Port device team_slave_0 added [ 292.201021][T21835] team0: Port device team_slave_1 added [ 292.248837][ T9777] hsr_slave_0: left promiscuous mode [ 292.251135][ T9777] hsr_slave_1: left promiscuous mode [ 292.277558][ T9777] veth1_macvtap: left promiscuous mode [ 292.279939][ T9777] veth0_macvtap: left allmulticast mode [ 292.281837][ T9777] veth0_macvtap: left promiscuous mode [ 292.283626][ T9777] veth1_vlan: left promiscuous mode [ 292.352242][ T53] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 292.512762][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 292.517026][ T53] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 292.519673][ T53] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.522766][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.525937][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.529007][ T53] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.533056][ T53] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.536097][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.755824][ T53] usb 8-1: GET_CAPABILITIES returned 0 [ 292.757689][ T53] usbtmc 8-1:16.0: can't read capabilities [ 292.946577][ T9777] team0 (unregistering): Port device team_slave_1 removed [ 292.970288][T15703] usb 8-1: USB disconnect, device number 52 [ 293.034759][ T9777] team0 (unregistering): Port device team_slave_0 removed [ 293.081662][ T5976] Bluetooth: hci1: command tx timeout [ 293.093795][T22605] 9pnet_fd: p9_fd_create_tcp (22605): problem connecting socket to 127.0.0.1 [ 293.542061][T22589] Process accounting resumed [ 293.694152][T21835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.696361][T21835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.705575][T21835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.711934][T21835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.714861][T21835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.725256][T21835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.739921][T22619] @: renamed from vlan0 (while UP) [ 293.804553][T21835] hsr_slave_0: entered promiscuous mode [ 293.809312][T21835] hsr_slave_1: entered promiscuous mode [ 294.026093][T21835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.027192][ T9777] IPVS: stop unused estimator thread 0... [ 294.036091][T21835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.040152][T21835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.044880][T21835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 294.091462][T21835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.112015][T21835] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.120578][ T9777] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.123596][ T9777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.130119][ T9777] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.132840][ T9777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.249298][T21835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.410562][T21835] veth0_vlan: entered promiscuous mode [ 294.416754][T21835] veth1_vlan: entered promiscuous mode [ 294.430521][T21835] veth0_macvtap: entered promiscuous mode [ 294.434344][T21835] veth1_macvtap: entered promiscuous mode [ 294.444088][T21835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.450572][T21835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.456317][ T9742] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.459563][ T9753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.463215][ T9753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.466063][ T9753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.509478][ T9772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.512840][ T9772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.538060][ T9772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.541215][ T9772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.663479][T23030] __nla_validate_parse: 4 callbacks suppressed [ 294.663490][T23030] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3275'. [ 294.766299][ T40] audit: type=1400 audit(1756289142.933:72970): avc: denied { watch } for pid=23036 comm="syz.3.3278" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 294.775815][ T40] audit: type=1400 audit(1756289142.933:72971): avc: denied { watch } for pid=23036 comm="syz.3.3278" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 294.849605][T23047] netlink: 'syz.3.3281': attribute type 1 has an invalid length. [ 294.852332][T23047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 294.855852][T23048] netlink: 'syz.3.3281': attribute type 1 has an invalid length. [ 294.858312][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 294.862047][T23047] block nbd3: NBD_DISCONNECT [ 295.204552][T23066] bridge0: port 1() entered blocking state [ 295.206684][T23066] bridge0: port 1() entered forwarding state [ 295.221290][T23066] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.226578][T23066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.235529][T23066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.245943][T23066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.254102][T23066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.262388][T23066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.271372][T23066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.284352][T23066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.293136][T23066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.301003][T23066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.306630][ T5985] Bluetooth: hci1: command tx timeout [ 295.310083][T23066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.590756][ T40] audit: type=1400 audit(1756289143.710:72972): avc: denied { append } for pid=23088 comm="syz.3.3296" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 295.599635][T23089] block nbd3: Attempted send on invalid socket [ 295.603623][T23089] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.607701][T23089] exFAT-fs (nbd3): unable to read boot sector [ 295.610025][T23089] exFAT-fs (nbd3): failed to read boot sector [ 295.612031][T23089] exFAT-fs (nbd3): failed to recognize exfat type [ 295.998077][ T5976] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 295.998524][ T5985] Bluetooth: hci3: command 0x1003 tx timeout [ 296.007591][T22627] mkiss: ax0: crc mode is auto. [ 296.405805][T23114] netlink: 'syz.1.3301': attribute type 1 has an invalid length. [ 296.408320][T23114] netlink: 'syz.1.3301': attribute type 2 has an invalid length. [ 296.440563][T23116] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3302'. [ 296.480625][ T40] audit: type=1400 audit(1756289144.551:72973): avc: denied { listen } for pid=23117 comm="syz.1.3303" path=2F3232372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 296.524211][T23120] 9pnet_fd: Insufficient options for proto=fd [ 296.738814][T23131] kvm: kvm [23130]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 296.742095][T23131] kvm: kvm [23130]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 296.773471][T23131] kvm: kvm [23130]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 296.798721][T23131] kvm: kvm [23130]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 296.803210][T23131] kvm: kvm [23130]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 296.854731][T23150] sctp: [Deprecated]: syz.3.3311 (pid 23150) Use of int in max_burst socket option. [ 296.854731][T23150] Use struct sctp_assoc_value instead [ 296.906491][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3312'. [ 296.910147][T23152] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3312'. [ 297.043082][T23170] veth0_to_bond: entered allmulticast mode [ 297.049879][T23170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=23170 comm=syz.3.3318 [ 297.056845][T23170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3318'. [ 297.094837][ T40] audit: type=1326 audit(1756289145.113:72974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23167 comm="syz.0.3317" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20bb78ebe9 code=0x0 [ 297.116465][ T40] audit: type=1400 audit(1756289145.141:72975): avc: denied { mount } for pid=23173 comm="syz.3.3320" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 297.398205][ T5982] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 297.526828][ T5976] Bluetooth: hci1: command tx timeout [ 297.579934][ T5982] usb 8-1: Using ep0 maxpacket: 32 [ 297.581099][T23189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18459 sclass=netlink_route_socket pid=23189 comm=syz.1.3323 [ 297.583164][ T5982] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 297.589018][ T5982] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.592323][ T5982] usb 8-1: config 0 has no interface number 0 [ 297.594451][ T5982] usb 8-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.600322][ T5982] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 297.603204][ T5982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.605778][ T5982] usb 8-1: Product: syz [ 297.607310][ T5982] usb 8-1: Manufacturer: syz [ 297.608753][ T5982] usb 8-1: SerialNumber: syz [ 297.612015][ T5982] usb 8-1: config 0 descriptor?? [ 297.614928][ T5982] smsc95xx v2.0.0 [ 297.616103][ T5982] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 297.619284][ T5982] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 297.626087][ T40] audit: type=1400 audit(1756289145.618:72976): avc: denied { module_load } for pid=23192 comm="syz.1.3324" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=82968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 297.748349][T23209] fuse: Bad value for 'fd' [ 297.763696][ T40] audit: type=1400 audit(1756289145.749:72977): avc: denied { read write } for pid=23208 comm="syz.1.3328" name="file0" dev="tmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 297.770900][ T40] audit: type=1400 audit(1756289145.749:72978): avc: denied { open } for pid=23208 comm="syz.1.3328" path="/235/file0" dev="tmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 297.960809][ T40] audit: type=1400 audit(1756289145.927:72979): avc: denied { setattr } for pid=23232 comm="syz.0.3336" name="NETLINK" dev="sockfs" ino=80509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.995849][T23248] overlayfs: failed to resolve './file1/file0': -2 [ 298.142024][T23271] sg_write: 23 callbacks suppressed [ 298.142035][T23271] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 298.142035][T23271] program syz.0.3347 not setting count and/or reply_len properly [ 298.317642][ T838] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 298.480907][ T838] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 298.483582][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.488391][ T838] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 298.491629][ T838] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 298.494198][ T838] usb 9-1: Manufacturer: syz [ 298.497383][ T838] usb 9-1: config 0 descriptor?? [ 298.553113][ T838] rc_core: IR keymap rc-hauppauge not found [ 298.555285][ T838] Registered IR keymap rc-empty [ 298.559622][ T838] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 298.566637][ T838] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input50 [ 298.717768][ C0] igorplugusb 9-1:0.0: Error: urb status = -32 [ 298.809609][ T6018] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 298.971687][ T6018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 298.975486][ T6018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.978600][ T6018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 298.982457][ T6018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 298.987252][ T6018] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 298.990420][ T6018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.995243][ T6018] usb 5-1: Product: syz [ 298.996596][ T6018] usb 5-1: Manufacturer: syz [ 298.998252][ T6018] usb 5-1: SerialNumber: syz [ 299.001288][ T6018] usb 5-1: config 0 descriptor?? [ 299.107147][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'. [ 299.220255][ T6018] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 299.289412][ T6018] usb 9-1: USB disconnect, device number 2 [ 299.490678][T23395] fuse: Bad value for 'user_id' [ 299.492298][T23395] fuse: Bad value for 'user_id' [ 299.549353][ T24] usb 5-1: USB disconnect, device number 46 [ 299.574001][T23414] vxcan1 speed is unknown, defaulting to 1000 [ 299.576833][T23414] vxcan1 speed is unknown, defaulting to 1000 [ 299.581333][T23414] vxcan1 speed is unknown, defaulting to 1000 [ 299.653906][ T6018] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 299.673455][T23414] infiniband syz2: set active [ 299.675005][T23414] infiniband syz2: added vxcan1 [ 299.676970][ T5982] vxcan1 speed is unknown, defaulting to 1000 [ 299.693958][T23414] RDS/IB: syz2: added [ 299.695376][T23414] smc: adding ib device syz2 with port count 1 [ 299.699022][T23414] smc: ib device syz2 port 1 has pnetid [ 299.700967][ T59] vxcan1 speed is unknown, defaulting to 1000 [ 299.703385][T23414] vxcan1 speed is unknown, defaulting to 1000 [ 299.762000][ T5976] Bluetooth: hci1: command tx timeout [ 299.792900][ T6018] usb 9-1: device descriptor read/64, error -71 [ 299.796454][T23414] vxcan1 speed is unknown, defaulting to 1000 [ 299.900454][T23414] vxcan1 speed is unknown, defaulting to 1000 [ 299.981512][T23414] vxcan1 speed is unknown, defaulting to 1000 [ 300.049591][ T6018] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 300.088748][T23414] vxcan1 speed is unknown, defaulting to 1000 [ 300.135587][T23422] tipc: Started in network mode [ 300.137167][T23422] tipc: Node identity 6af7afc9c5a7, cluster identity 4711 [ 300.139353][T23422] tipc: Enabled bearer , priority 0 [ 300.193319][T23414] vxcan1 speed is unknown, defaulting to 1000 [ 300.199155][ T6018] usb 9-1: device descriptor read/64, error -71 [ 300.319764][ T6018] usb usb9-port1: attempt power cycle [ 300.368181][ T53] usb 8-1: USB disconnect, device number 53 [ 300.584080][ T24] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 300.669292][T23474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23474 comm=syz.1.3382 [ 300.675700][T23474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23474 comm=syz.1.3382 [ 300.682420][T23474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3382'. [ 300.712774][ T6018] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 300.745498][ T6018] usb 9-1: device descriptor read/8, error -71 [ 300.746541][ T24] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 300.750842][ T24] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 300.753515][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 300.758235][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 300.762226][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 300.765607][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 300.772015][ T24] usb 5-1: string descriptor 0 read error: -22 [ 300.774023][ T24] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 300.778517][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.782305][ T24] usb 5-1: config 0 descriptor?? [ 300.784381][T23433] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 300.788672][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 300.790695][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 300.794384][ T24] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input51 [ 300.839501][T23481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3385'. [ 300.865686][ T53] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 300.908078][T23496] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3387'. [ 301.004888][T23433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3374'. [ 301.008110][ T40] audit: type=1400 audit(1756289148.779:72980): avc: denied { append } for pid=23432 comm="syz.0.3374" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 301.017293][ T6018] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 301.050659][T23506] overlayfs: failed to resolve './file1': -2 [ 301.055477][ T6018] usb 9-1: device descriptor read/8, error -71 [ 301.059459][ T53] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.063455][ T53] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 301.067229][ T53] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 301.070193][ T53] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.073641][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.082531][ T29] usb 5-1: USB disconnect, device number 47 [ 301.086688][ T53] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.127741][ T53] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 301.188621][ T6018] usb usb9-port1: unable to enumerate USB device [ 301.214757][ T6018] tipc: Node number set to 2941300681 [ 301.285410][T23550] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3393'. [ 301.312335][T23554] netlink: 'syz.1.3394': attribute type 4 has an invalid length. [ 301.320764][T23554] netlink: 'syz.1.3394': attribute type 4 has an invalid length. [ 301.355233][ T6018] usb 8-1: USB disconnect, device number 54 [ 301.662241][T23571] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 301.672660][T23571] netlink: 'syz.0.3396': attribute type 10 has an invalid length. [ 301.676711][T23571] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 301.772106][T23581] tmpfs: Bad value for 'mpol' [ 301.808690][T23585] /dev/sg0: Can't lookup blockdev [ 302.267197][ T59] IPVS: starting estimator thread 0... [ 302.322880][T23673] vlan2: entered promiscuous mode [ 302.324683][T23673] vlan2: entered allmulticast mode [ 302.326390][T23673] hsr_slave_1: entered allmulticast mode [ 302.336552][T23673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3414'. [ 302.357244][T23670] netlink: 'syz.1.3413': attribute type 4 has an invalid length. [ 302.359962][T23670] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3413'. [ 302.362934][T23664] IPVS: using max 32 ests per chain, 76800 per kthread [ 302.484140][T23670] net_ratelimit: 24 callbacks suppressed [ 302.484151][T23670] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 302.515795][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 302.519206][T23690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3415'. [ 302.630193][ T40] audit: type=1400 audit(1756289150.295:72981): avc: denied { read } for pid=23703 comm="syz.4.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 302.647003][T23711] dummy0: left allmulticast mode [ 302.648968][T23711] bridge0: port 3(dummy0) entered disabled state [ 302.661173][T23711] bridge_slave_0: left allmulticast mode [ 302.663197][T23711] bridge_slave_0: left promiscuous mode [ 302.665385][T23711] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.674171][T23711] bridge_slave_1: left allmulticast mode [ 302.676090][T23711] bridge_slave_1: left promiscuous mode [ 302.678528][T23711] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.691754][T23711] bond0: (slave bond_slave_0): Releasing backup interface [ 302.698566][T23718] netlink: 'syz.3.3418': attribute type 10 has an invalid length. [ 302.703026][T23711] bond0: (slave bond_slave_1): Releasing backup interface [ 302.720671][T23711] team0: Port device team_slave_0 removed [ 302.732457][T23711] team0: Port device team_slave_1 removed [ 302.735679][T23711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.738012][T23711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.742613][T23711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.745594][T23711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.820095][T23711] block nbd3: Attempted send on invalid socket [ 302.821308][T23729] IPv6: NLM_F_CREATE should be specified when creating new route [ 302.822100][T23711] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 302.828584][T23718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.835401][T23718] team0: Port device bond0 added [ 302.838612][T23711] vxfs: unable to read disk superblock at 1 [ 302.846131][T23711] block nbd3: Attempted send on invalid socket [ 302.848392][T23711] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 302.851464][T23711] vxfs: unable to read disk superblock at 8 [ 302.853354][T23711] vxfs: can't find superblock. [ 302.888485][T23732] netlink: 'syz.4.3426': attribute type 4 has an invalid length. [ 302.898955][T23732] NILFS (nbd4): device size too small [ 302.972209][T23747] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3432'. [ 302.975063][T23747] netlink: zone id is out of range [ 302.976697][T23747] netlink: get zone limit has 8 unknown bytes [ 302.981668][ T9774] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.987237][ T9774] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.992421][ T9774] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.995185][ T9774] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.033363][T23762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.046590][T23762] bond3: (slave batadv1): Opening slave failed [ 303.123837][T23817] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 303.234941][T23832] netlink: 'syz.0.3445': attribute type 12 has an invalid length. [ 303.263719][T23839] comedi comedi4: bad chanlist[0]=0x04000008 chan=8 range length=2 [ 303.285185][T23844] input: syz1 as /devices/virtual/input/input52 [ 303.404109][T23864] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 303.527119][ T838] vxcan1 speed is unknown, defaulting to 1000 [ 303.581799][T23917] openvswitch: netlink: IP tunnel dst address not specified [ 303.632395][ T40] audit: type=1400 audit(1756289151.230:72982): avc: denied { bind } for pid=23928 comm="syz.3.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 303.701310][T23947] ipvlan2: entered promiscuous mode [ 303.703948][T23947] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 303.706921][T23947] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 303.788472][T23965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.792439][T23965] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 303.795636][ T40] audit: type=1400 audit(1756289151.389:72983): avc: denied { lock } for pid=23962 comm="syz.4.3472" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=82388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 303.803903][ T40] audit: type=1400 audit(1756289151.389:72984): avc: denied { open } for pid=23962 comm="syz.4.3472" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=82388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 303.925029][T23989] binder: 23988:23989 ioctl c0306201 200000000640 returned -22 [ 304.017222][T24007] vxfs: WRONG superblock magic 00000000 at 1 [ 304.020159][T24007] vxfs: WRONG superblock magic 00000000 at 8 [ 304.022470][T24007] vxfs: can't find superblock. [ 304.064921][T24017] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 304.067040][T24017] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 304.071809][T24017] vhci_hcd vhci_hcd.0: Device attached [ 304.075854][T24018] usbip_core: unknown command [ 304.077404][T24018] vhci_hcd: unknown pdu 0 [ 304.078776][T24018] usbip_core: unknown command [ 304.082915][ T9774] vhci_hcd: stop threads [ 304.084724][ T9774] vhci_hcd: release socket [ 304.086541][ T9774] vhci_hcd: disconnect device [ 304.184630][T24030] IPVS: Error connecting to the multicast addr [ 304.317874][T24090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24090 comm=syz.1.3494 [ 304.335406][T24034] IPv6: addrconf: prefix option has invalid lifetime [ 304.617331][T24108] netfs: Couldn't get user pages (rc=-14) [ 304.659262][T24115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.729982][T24115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.837648][T24134] netlink: 'syz.1.3503': attribute type 16 has an invalid length. [ 304.838180][T24138] netlink: 'syz.1.3503': attribute type 16 has an invalid length. [ 304.842721][T24134] netlink: 'syz.1.3503': attribute type 17 has an invalid length. [ 304.870414][ T40] audit: type=1326 audit(1756289152.390:72985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24142 comm="syz.3.3505" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f857118ebe9 code=0x0 [ 304.871473][T24134] bridge0: port 1() entered disabled state [ 304.931429][T24150] ata1.00: invalid multi_count 1 ignored [ 304.943194][T24134] batadv_slave_0: left promiscuous mode [ 304.945048][T24134] batadv_slave_0: left allmulticast mode [ 304.949718][T24134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.009386][T24134] vcan1: left allmulticast mode [ 305.019849][ T59] vxcan1 speed is unknown, defaulting to 1000 [ 305.025535][ T59] syz2: Port: 1 Link DOWN [ 305.026195][ T1174] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.035725][ T1174] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.044161][ T1174] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.047008][ T1174] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.051997][ T59] vxcan1 speed is unknown, defaulting to 1000 [ 305.060572][T24147] dvmrp1: entered allmulticast mode [ 305.062556][ T1174] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.066521][ T1174] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.069619][ T1174] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.072876][ T1174] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.166386][T24171] devpts: Bad value for 'max' [ 305.372894][T24197] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.376985][T24197] block device autoloading is deprecated and will be removed. [ 305.392279][T24194] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 305.395135][T24203] ocfs2: Unknown parameter 'grpquotaedi4' [ 305.747630][ T59] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 305.908711][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 305.911740][ T59] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 305.914374][ T59] usb 9-1: config 179 has no interface number 0 [ 305.916405][ T59] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 305.920594][ T59] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 305.924077][ T59] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 305.927545][ T59] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 305.932049][ T59] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 305.934831][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.939112][T24216] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 306.069231][ T6039] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 306.089671][ T838] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 306.228668][ T6039] usb 8-1: Using ep0 maxpacket: 16 [ 306.232191][ T6039] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 306.236036][ T6039] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 306.239593][ T6039] usb 8-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.243743][ T6039] usb 8-1: config 1 interface 0 has no altsetting 0 [ 306.247904][ T6039] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 306.251010][ T6039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.253680][ T6039] usb 8-1: Product: syz [ 306.255079][ T6039] usb 8-1: Manufacturer: syz [ 306.256600][ T6039] usb 8-1: SerialNumber: syz [ 306.260907][ T838] usb 5-1: Using ep0 maxpacket: 8 [ 306.264026][ T838] usb 5-1: config 0 interface 0 has no altsetting 0 [ 306.266090][ T838] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 306.269103][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.273014][ T838] usb 5-1: config 0 descriptor?? [ 306.479968][ T6039] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 306.707346][T24237] validate_nla: 1 callbacks suppressed [ 306.707423][T24237] netlink: 'syz.0.3526': attribute type 3 has an invalid length. [ 306.712020][T24237] __nla_validate_parse: 18 callbacks suppressed [ 306.712035][T24237] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3526'. [ 306.721241][ T838] mcp2221 0003:04D8:00DD.0009: item fetching failed at offset 3/5 [ 306.724089][ T838] mcp2221 0003:04D8:00DD.0009: can't parse reports [ 306.726203][ T838] mcp2221 0003:04D8:00DD.0009: probe with driver mcp2221 failed with error -22 [ 306.936875][ T838] usb 5-1: USB disconnect, device number 49 [ 307.125060][T24289] binder: 24231:24289 ioctl c0306201 200000000380 returned -22 [ 307.629149][ T5976] Bluetooth: hci1: command tx timeout [ 307.646709][T24296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.695151][T24298] usb usb8: usbfs: process 24298 (syz.0.3537) did not claim interface 0 before use [ 307.833389][T24305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'. [ 307.839339][T24305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3539'. [ 307.996441][T24318] IPv6: NLM_F_CREATE should be specified when creating new route [ 308.019226][T24318] 9pnet: Could not find request transport: vs4 [ 308.223113][T24341] fuse: Unknown parameter 'user_iD' [ 308.654240][ T838] usb 9-1: USB disconnect, device number 7 [ 308.654298][ C3] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 308.658985][ C3] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 309.028831][ T6018] usb 8-1: USB disconnect, device number 55 [ 309.033095][ T6018] usblp0: removed [ 313.605193][ T59] page_pool_release_retry() stalled pool shutdown: id 65, 1 inflight 60 sec [ 319.851240][ T6018] page_pool_release_retry() stalled pool shutdown: id 25, 3329 inflight 241 sec [ 323.810896][T24359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3552'. [ 323.816271][T24359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3552'. [ 323.848395][T24372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3554'. [ 323.951605][ T40] audit: type=1107 audit(1756289170.238:72986): pid=24386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 323.953539][ T40] audit: type=1107 audit(1756289170.238:72987): pid=24386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 324.048637][T24395] netlink: 'syz.4.3561': attribute type 1 has an invalid length. [ 324.080478][T24395] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3561'. [ 324.258820][T24402] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3563'. [ 324.394170][T24402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.401919][T24402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.407140][T24402] bond0 (unregistering): Released all slaves [ 324.504531][T24452] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 324.507217][T24452] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 324.579906][T24466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3566'. [ 324.611829][T24469] openvswitch: netlink: IPv6 tunnel dst address is zero [ 324.703066][T24477] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3571'. [ 324.707344][T24477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3571'. [ 324.813017][ T5976] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 324.813071][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.818847][ T5976] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 324.818874][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.825352][ T5976] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 324.825373][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.829486][ T5976] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 324.829507][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.834324][ T5976] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 324.834341][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.838304][ T5976] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 324.838357][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.843406][ T5976] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 324.843428][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.849018][ T5976] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 324.849039][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.854719][ T5976] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 324.854749][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.861328][ T5976] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 324.861359][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.867104][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.869713][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.872328][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.873075][ T40] audit: type=1400 audit(1756289171.098:72988): avc: denied { map } for pid=24532 comm="syz.1.3579" path="socket:[84822]" dev="sockfs" ino=84822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 324.879444][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.883431][ T40] audit: type=1400 audit(1756289171.098:72989): avc: denied { accept } for pid=24532 comm="syz.1.3579" path="socket:[84822]" dev="sockfs" ino=84822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 324.885988][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.896414][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.898998][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.901599][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.904070][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.907080][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.909664][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.913602][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.916233][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.918936][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.921411][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.926086][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.928677][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.931156][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.933758][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.936551][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.938131][T24544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3582'. [ 324.939826][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.944832][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.947628][ T5976] Bluetooth: hci1: Malformed LE Event: 0x02 [ 324.956332][T24540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.960534][T24540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.977568][ T40] audit: type=1326 audit(1756289171.201:72990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24548 comm="syz.1.3583" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f028278ebe9 code=0x0 [ 325.034489][T24550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3583'. [ 325.053197][T24540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.056631][T24540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.065552][T15703] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 325.125081][T24540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.128454][T24540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.225203][T24540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.228691][T24540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.239479][T15703] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.242770][T15703] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 325.245542][T15703] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 325.249000][T15703] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.252773][T15703] usb 9-1: config 0 descriptor?? [ 325.256372][T15703] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 325.259446][T15703] dvb-usb: bulk message failed: -22 (3/0) [ 325.268432][T15703] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 325.271597][T15703] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 325.274100][T15703] usb 9-1: media controller created [ 325.277608][T15703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.289784][T15703] dvb-usb: bulk message failed: -22 (6/0) [ 325.293235][T15703] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 325.296907][T15703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input56 [ 325.301313][T15703] dvb-usb: schedule remote query interval to 150 msecs. [ 325.303536][T15703] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 325.304029][ T9753] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.308736][ T9753] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.320343][ T1174] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.323123][ T1174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.330574][ T1174] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.333390][ T1174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.342462][ T1174] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.345226][ T1174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.474168][ T59] usb 9-1: USB disconnect, device number 8 [ 325.474651][T15703] dvb-usb: bulk message failed: -22 (1/0) [ 325.478297][T15703] dvb-usb: error while querying for an remote control event. [ 325.493841][ T59] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 325.664517][ T60] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 325.822701][ T40] audit: type=1400 audit(1756289171.987:72991): avc: denied { watch } for pid=24629 comm="syz.0.3592" path="/196/file0/file0" dev="afs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 325.847174][ T60] usb 8-1: config index 0 descriptor too short (expected 64667, got 45) [ 325.851581][ T60] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 325.854437][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.857035][ T60] usb 8-1: Product: syz [ 325.858432][ T60] usb 8-1: Manufacturer: syz [ 325.859917][ T60] usb 8-1: SerialNumber: syz [ 325.988168][T24644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56319 sclass=netlink_route_socket pid=24644 comm=syz.0.3594 [ 326.108714][ T60] rtl8150 8-1:1.0: couldn't reset the device [ 326.113305][ T60] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 326.118256][ T60] usb 8-1: USB disconnect, device number 56 [ 326.335559][T24726] netlink: 'syz.1.3612': attribute type 32 has an invalid length. [ 326.541952][ T5903] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 326.704945][ T5903] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 326.707734][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.710303][ T5903] usb 5-1: Product: syz [ 326.711635][ T5903] usb 5-1: Manufacturer: syz [ 326.713283][ T5903] usb 5-1: SerialNumber: syz [ 326.994264][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 326.997968][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 327.001524][ T5903] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 327.005952][ T5903] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 327.011278][ T5903] usb 5-1: USB disconnect, device number 50 [ 327.476480][T24811] syzkaller0: entered promiscuous mode [ 327.478331][T24811] syzkaller0: entered allmulticast mode [ 327.569899][T24829] bridge4: entered promiscuous mode [ 327.631724][ T5985] Bluetooth: hci1: command 0x0405 tx timeout [ 327.985075][ T40] audit: type=1400 audit(1756289174.017:72992): avc: denied { read } for pid=24863 comm="syz.1.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 327.991429][ T40] audit: type=1400 audit(1756289174.017:72993): avc: denied { create } for pid=24863 comm="syz.1.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 328.093596][ T40] audit: type=1400 audit(1756289174.119:72994): avc: denied { accept } for pid=24880 comm="syz.3.3638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 328.345190][T24900] netlink: 'syz.3.3643': attribute type 3 has an invalid length. [ 328.502985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.506394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.581522][ T5903] hid-generic 0005:16C0:05DF.000A: item fetching failed at offset 0/1 [ 328.584917][ T5903] hid-generic 0005:16C0:05DF.000A: probe with driver hid-generic failed with error -22 [ 328.841276][ T40] audit: type=1400 audit(1756289174.821:72995): avc: denied { ioctl } for pid=24924 comm="syz.0.3651" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 329.249982][T24957] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 329.310255][T24958] __nla_validate_parse: 14 callbacks suppressed [ 329.310305][T24958] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3659'. [ 329.687811][T24963] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3661'. [ 329.707962][T24964] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3661'. [ 329.762349][T24985] block nbd4: Attempted send on invalid socket [ 329.764630][T24985] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 329.768276][T24985] XFS (nbd4): SB validate failed with error -5. [ 329.875855][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 329.875866][ T40] audit: type=1400 audit(1756289175.775:72997): avc: denied { connect } for pid=24999 comm="syz.4.3665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.906094][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3666'. [ 330.075813][T25010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3667'. [ 330.108850][T25017] loop6: detected capacity change from 0 to 7 [ 330.114711][T25017] Dev loop6: unable to read RDB block 7 [ 330.116636][T25017] loop6: unable to read partition table [ 330.118540][T25017] loop6: partition table beyond EOD, truncated [ 330.120521][T25017] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 330.125270][T25017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3668'. [ 330.153578][T25028] sp0: Synchronizing with TNC [ 330.252893][T25049] netlink: 'syz.4.3675': attribute type 1 has an invalid length. [ 330.255367][T25049] netlink: 'syz.4.3675': attribute type 3 has an invalid length. [ 330.257756][T25049] netlink: 'syz.4.3675': attribute type 3 has an invalid length. [ 330.302551][T25093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3678'. [ 330.316269][T25095] tipc: Enabling of bearer rejected, failed to enable media [ 330.400288][ T60] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 330.562112][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 330.565885][ T60] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 330.569268][ T60] usb 8-1: config 179 has no interface number 0 [ 330.571904][ T60] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 330.576031][ T60] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 330.581296][ T60] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 330.586116][ T60] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 330.590845][ T60] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 330.593541][ T40] audit: type=1400 audit(1756289176.458:72998): avc: denied { getopt } for pid=25109 comm="syz.1.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 330.596225][ T60] usb 8-1: config 179 interface 65 has no altsetting 0 [ 330.606809][ T60] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 330.610435][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.626082][ T60] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input57 [ 330.667711][ T5367] input input57: unable to receive magic message: -110 [ 330.671541][ T5367] input input57: unable to receive magic message: -32 [ 331.264278][T25122] kvm: kvm [25121]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 331.383685][ T6018] usb 8-1: USB disconnect, device number 57 [ 331.383761][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 331.450687][ T40] audit: type=1400 audit(1756289177.253:72999): avc: denied { execute } for pid=25139 comm="syz.3.3686" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=87464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 331.459328][ T40] audit: type=1800 audit(1756289177.253:73000): pid=25140 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3686" name="secretmem" dev="secretmem" ino=87464 res=0 errno=0 [ 331.543843][ T40] audit: type=1400 audit(1756289177.337:73001): avc: denied { connect } for pid=25163 comm="syz.4.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 331.579736][T25156] overlayfs: failed to resolve './bus/file0': -2 [ 331.581869][ T40] audit: type=1400 audit(1756289177.375:73002): avc: denied { mounton } for pid=25155 comm="syz.1.3692" path="/bus" dev="bpf" ino=88344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 331.668689][T25180] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 331.676091][T25181] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 331.732217][ T40] audit: type=1400 audit(1756289177.515:73003): avc: denied { nlmsg_read } for pid=25189 comm="syz.3.3702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 331.986683][T25219] netlink: 'syz.1.3710': attribute type 13 has an invalid length. [ 332.005103][T25220] netlink: 'syz.3.3709': attribute type 2 has an invalid length. [ 332.007585][T25220] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3709'. [ 332.010521][T25220] nbd: must specify a device to reconfigure [ 332.083424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.086172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.550174][T25228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3713'. [ 332.553834][T25228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3713'. [ 332.557640][T25228] netlink: 'syz.1.3713': attribute type 11 has an invalid length. [ 332.689596][T25239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=25239 comm=syz.1.3716 [ 333.204459][ T1425] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 333.209026][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.564686][T25272] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 334.566522][T25272] PKCS7: Only support pkcs7_signedData type [ 334.634728][T25281] loop6: detected capacity change from 0 to 7 [ 334.637031][ T40] audit: type=1800 audit(1756289180.237:73004): pid=25283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3730" name="nullb0" dev="tmpfs" ino=2157 res=0 errno=0 [ 334.648517][ T40] audit: type=1400 audit(1756289180.246:73005): avc: denied { getopt } for pid=25271 comm="syz.3.3725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 334.746839][T25281] Dev loop6: unable to read RDB block 7 [ 334.748676][T25281] loop6: unable to read partition table [ 334.750550][T25281] loop6: partition table beyond EOD, truncated [ 334.753494][T25281] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 335.634114][T25329] __nla_validate_parse: 8 callbacks suppressed [ 335.634133][T25329] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3742'. [ 335.639706][T25329] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3742'. [ 335.642814][T25329] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3742'. [ 335.645576][T25329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3742'. [ 335.972490][T25346] overlayfs: failed to clone upperpath [ 336.005803][T25350] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3749'. [ 336.054241][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'. [ 336.210516][T25368] netlink: 'syz.1.3755': attribute type 1 has an invalid length. [ 336.284761][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.539160][T25415] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3759'. [ 336.544011][T25417] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3759'. [ 336.707715][ T40] audit: type=1400 audit(1756289182.173:73006): avc: denied { remount } for pid=25429 comm="syz.1.3763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 336.833289][ T40] audit: type=1400 audit(1756289182.286:73007): avc: denied { listen } for pid=25434 comm="syz.1.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 336.891408][T25438] cgroup: noprefix used incorrectly [ 337.048506][T25458] netlink: 'syz.1.3770': attribute type 12 has an invalid length. [ 337.051242][T25458] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3770'. [ 337.285098][T25475] overlayfs: failed to clone upperpath [ 338.042032][T25496] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 338.058810][T25496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.067323][T25496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3780'. [ 338.187058][ T40] audit: type=1400 audit(1756289183.558:73008): avc: denied { setopt } for pid=25538 comm="syz.3.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 338.247371][ T40] audit: type=1404 audit(1756289183.614:73009): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 338.259731][ T40] audit: type=1400 audit(1756289183.623:73010): avc: denied { read } for pid=25538 comm="syz.3.3785" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0 [ 338.267324][ T40] audit: type=1400 audit(1756289183.623:73011): avc: denied { read } for pid=25538 comm="syz.3.3785" dev="nsfs" ino=4026533017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 338.274772][ T40] audit: type=1400 audit(1756289183.623:73012): avc: denied { getopt } for pid=25538 comm="syz.3.3785" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 338.316146][ T40] audit: type=1400 audit(1756289183.679:73013): avc: denied { getopt } for pid=25538 comm="syz.3.3785" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 338.903303][ T40] audit: type=1400 audit(1756289184.231:73014): avc: denied { create } for pid=25541 comm="syz.1.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 338.910091][ T40] audit: type=1400 audit(1756289184.231:73015): avc: denied { create } for pid=25541 comm="syz.1.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 339.181809][T25568] vxcan1 speed is unknown, defaulting to 1000 [ 339.655042][T25658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.664453][T25659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.764034][T25665] bond3 (unregistering): Released all slaves [ 340.096018][T25765] netem: unknown loss type 12 [ 340.103917][T25765] netem: change failed [ 340.579411][T25759] syz.3.3822 (25759): drop_caches: 1 [ 340.616635][T25759] syz.3.3822 (25759): drop_caches: 1 [ 340.833269][T25869] pim6reg1: entered promiscuous mode [ 340.837169][T25869] pim6reg1: entered allmulticast mode [ 340.988676][T25912] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 340.990784][T25912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.993255][T25912] vhci_hcd vhci_hcd.0: Device attached [ 341.009139][T25913] vhci_hcd: connection closed [ 341.009374][ T1174] vhci_hcd: stop threads [ 341.012232][ T1174] vhci_hcd: release socket [ 341.013712][ T1174] vhci_hcd: disconnect device [ 341.153872][T25957] __nla_validate_parse: 8 callbacks suppressed [ 341.153883][T25957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3872'. [ 341.219709][T25973] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 341.235732][T25977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3877'. [ 341.327362][T25989] ------------[ cut here ]------------ [ 341.329899][T25989] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 341.332612][T25989] WARNING: CPU: 0 PID: 25989 at net/mac80211/main.c:425 ieee80211_link_info_change_notify+0x349/0x3f0 [ 341.336176][T25989] Modules linked in: [ 341.338858][T25989] CPU: 0 UID: 0 PID: 25989 Comm: syz.0.3880 Not tainted syzkaller #0 PREEMPT(full) [ 341.343449][T25989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 341.346793][T25989] RIP: 0010:ieee80211_link_info_change_notify+0x349/0x3f0 [ 341.349280][T25989] Code: 74 24 08 48 81 c6 20 01 00 00 48 89 74 24 08 e8 7d ac bb f6 8b 54 24 04 48 8b 74 24 08 48 c7 c7 a0 74 08 8d e8 28 52 7a f6 90 <0f> 0b 90 90 e9 0b fe ff ff e8 59 ac bb f6 90 0f 0b 90 e9 21 fd ff [ 341.355317][T25989] RSP: 0018:ffffc90003b57b30 EFLAGS: 00010282 [ 341.357260][T25989] RAX: 0000000000000000 RBX: ffff8880551bcd80 RCX: ffffc900285d0000 [ 341.360040][T25989] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 341.362512][T25989] RBP: 0000000000040000 R08: 0000000000000001 R09: 0000000000000000 [ 341.365016][T25989] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880551bd728 [ 341.367508][T25989] R13: ffff8880551be500 R14: 0000000000000000 R15: ffff88801b698e40 [ 341.370320][T25989] FS: 00007f20bc6cf6c0(0000) GS:ffff8880d66b9000(0000) knlGS:0000000000000000 [ 341.373157][T25989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.375270][T25989] CR2: 000000110c2f8e6a CR3: 000000003691c000 CR4: 0000000000352ef0 [ 341.377783][T25989] Call Trace: [ 341.378998][T25989] [ 341.380063][T25989] ieee80211_recalc_txpower+0xe4/0x110 [ 341.381848][T25989] ieee80211_set_tx_power+0x2b8/0x10d0 [ 341.383575][T25989] cfg80211_wext_siwtxpower+0x30e/0x680 [ 341.385333][T25989] ? full_name_hash+0xbc/0x110 [ 341.386868][T25989] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 341.388798][T25989] ioctl_standard_call+0xb2/0x1d0 [ 341.390480][T25989] ? __pfx_ioctl_standard_call+0x10/0x10 [ 341.392250][T25989] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 341.394191][T25989] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 341.396226][T25989] wext_handle_ioctl+0x226/0x2a0 [ 341.397824][T25989] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 341.399571][T25989] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 341.401395][T25989] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 341.403552][T25989] sock_ioctl+0x3a1/0x6b0 [ 341.404949][T25989] ? __pfx_sock_ioctl+0x10/0x10 [ 341.406510][T25989] ? hook_file_ioctl_common+0x145/0x410 [ 341.408257][T25989] ? selinux_file_ioctl+0x180/0x270 [ 341.409954][T25989] ? selinux_file_ioctl+0xb4/0x270 [ 341.411654][T25989] ? __pfx_sock_ioctl+0x10/0x10 [ 341.413250][T25989] __x64_sys_ioctl+0x18b/0x210 [ 341.414900][T25989] do_syscall_64+0xcd/0x4c0 [ 341.416364][T25989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.418237][T25989] RIP: 0033:0x7f20bb78ebe9 [ 341.419680][T25989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.425748][T25989] RSP: 002b:00007f20bc6cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.428381][T25989] RAX: ffffffffffffffda RBX: 00007f20bb9b5fa0 RCX: 00007f20bb78ebe9 [ 341.430878][T25989] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000006 [ 341.433462][T25989] RBP: 00007f20bb811e19 R08: 0000000000000000 R09: 0000000000000000 [ 341.436131][T25989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.438642][T25989] R13: 00007f20bb9b6038 R14: 00007f20bb9b5fa0 R15: 00007ffeff9bcb28 [ 341.441249][T25989] [ 341.442309][T25989] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 341.444621][T25989] CPU: 0 UID: 0 PID: 25989 Comm: syz.0.3880 Not tainted syzkaller #0 PREEMPT(full) [ 341.447653][T25989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 341.451058][T25989] Call Trace: [ 341.452147][T25989] [ 341.453138][T25989] dump_stack_lvl+0x3d/0x1f0 [ 341.454630][T25989] vpanic+0x6e8/0x7a0 [ 341.455919][T25989] ? __pfx_vpanic+0x10/0x10 [ 341.457387][T25989] ? ieee80211_link_info_change_notify+0x349/0x3f0 [ 341.459437][T25989] panic+0xca/0xd0 [ 341.460679][T25989] ? __pfx_panic+0x10/0x10 [ 341.462110][T25989] check_panic_on_warn+0xab/0xb0 [ 341.463684][T25989] __warn+0xf6/0x3c0 [ 341.464943][T25989] ? preempt_schedule_notrace+0x62/0xe0 [ 341.466687][T25989] ? ieee80211_link_info_change_notify+0x349/0x3f0 [ 341.468734][T25989] report_bug+0x3c3/0x580 [ 341.470128][T25989] ? ieee80211_link_info_change_notify+0x349/0x3f0 [ 341.472166][T25989] handle_bug+0x184/0x210 [ 341.473560][T25989] exc_invalid_op+0x17/0x50 [ 341.475002][T25989] asm_exc_invalid_op+0x1a/0x20 [ 341.476554][T25989] RIP: 0010:ieee80211_link_info_change_notify+0x349/0x3f0 [ 341.478778][T25989] Code: 74 24 08 48 81 c6 20 01 00 00 48 89 74 24 08 e8 7d ac bb f6 8b 54 24 04 48 8b 74 24 08 48 c7 c7 a0 74 08 8d e8 28 52 7a f6 90 <0f> 0b 90 90 e9 0b fe ff ff e8 59 ac bb f6 90 0f 0b 90 e9 21 fd ff [ 341.484816][T25989] RSP: 0018:ffffc90003b57b30 EFLAGS: 00010282 [ 341.486780][T25989] RAX: 0000000000000000 RBX: ffff8880551bcd80 RCX: ffffc900285d0000 [ 341.489275][T25989] RDX: 0000000000080000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 341.491790][T25989] RBP: 0000000000040000 R08: 0000000000000001 R09: 0000000000000000 [ 341.494514][T25989] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880551bd728 [ 341.497534][T25989] R13: ffff8880551be500 R14: 0000000000000000 R15: ffff88801b698e40 [ 341.500662][T25989] ? __warn_printk+0x1a5/0x350 [ 341.502475][T25989] ieee80211_recalc_txpower+0xe4/0x110 [ 341.504643][T25989] ieee80211_set_tx_power+0x2b8/0x10d0 [ 341.506729][T25989] cfg80211_wext_siwtxpower+0x30e/0x680 [ 341.508843][T25989] ? full_name_hash+0xbc/0x110 [ 341.510808][T25989] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 341.513139][T25989] ioctl_standard_call+0xb2/0x1d0 [ 341.515170][T25989] ? __pfx_ioctl_standard_call+0x10/0x10 [ 341.517179][T25989] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 341.519576][T25989] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 341.521949][T25989] wext_handle_ioctl+0x226/0x2a0 [ 341.523972][T25989] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 341.526148][T25989] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 341.527962][T25989] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 341.530690][T25989] sock_ioctl+0x3a1/0x6b0 [ 341.532325][T25989] ? __pfx_sock_ioctl+0x10/0x10 [ 341.534317][T25989] ? hook_file_ioctl_common+0x145/0x410 [ 341.536407][T25989] ? selinux_file_ioctl+0x180/0x270 [ 341.538418][T25989] ? selinux_file_ioctl+0xb4/0x270 [ 341.540451][T25989] ? __pfx_sock_ioctl+0x10/0x10 [ 341.542426][T25989] __x64_sys_ioctl+0x18b/0x210 [ 341.544383][T25989] do_syscall_64+0xcd/0x4c0 [ 341.546145][T25989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.548511][T25989] RIP: 0033:0x7f20bb78ebe9 [ 341.550239][T25989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.557556][T25989] RSP: 002b:00007f20bc6cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.560817][T25989] RAX: ffffffffffffffda RBX: 00007f20bb9b5fa0 RCX: 00007f20bb78ebe9 [ 341.563903][T25989] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000006 [ 341.566971][T25989] RBP: 00007f20bb811e19 R08: 0000000000000000 R09: 0000000000000000 [ 341.570010][T25989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.572867][T25989] R13: 00007f20bb9b6038 R14: 00007f20bb9b5fa0 R15: 00007ffeff9bcb28 [ 341.575923][T25989] [ 341.578009][T25989] Kernel Offset: disabled [ 341.579790][T25989] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:06:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000009 RCX=ffffffff95dde540 RDX=9ff29ed9623ffe00 RSI=ffff88804756d460 RDI=ffff88804756c880 RBP=ffffc90000007880 RSP=ffffc900000077e0 R8 =0000000000000000 R9 =0000000000000000 R10=00000000000000f0 R11=0000000000000001 R12=ffff88804756d460 R13=0000000000000200 R14=0000000000000006 R15=ffff88804756c880 RIP=ffffffff81979946 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f20bc6cf6c0 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2f8e6a CR3=000000003691c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeff9bceb0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeff9bd036 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeff9bd036 00007ffeff9bd03c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20bb812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20bb812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20bb812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20bb812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20bb812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20bb812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000318d71 RBX=0000000000000001 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50218 RDI=ffffffff8c162900 RBP=ffffed1003bd2488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801de92440 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f81eb5b7dac CR3=00000000455c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0df9dc06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0df9dc06 00007ffd0df9dc0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81eb412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81eb412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81eb412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81eb412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81eb412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81eb412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81eb5874a8 00007f81eb5874a0 00007f81eb587498 00007f81eb587470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81ec0ed100 00007f81eb587460 00007f81eb587478 00007f81eb5874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81eb5874b8 00007f81eb5874b0 00007f81eb5874a8 00007f81eb5874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff85155af5 RDX=ffff88802ac92440 RSI=ffffffff85155b03 RDI=0000000000000007 RBP=ffff8880484e7c08 RSP=ffffc90003746b60 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=000000000005d680 R13=0000000000000200 R14=0000000000000080 R15=0000000000001a4d RIP=ffffffff81bb8c10 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f02835a36c0 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555569b44808 CR3=00000000660da000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000e58e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000f8000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebb8dce80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebb8dd006 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebb8dd006 00007ffebb8dd00c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8571212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8571212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8571212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8571212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8571212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8571212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e5c1220 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e5c1220 RBP=0000000000000002 RSP=ffffc90003c4f3e0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000003 R11=00000000000a9350 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8197a150 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f81ec2016c0 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c250518 CR3=00000000455c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555584444e00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555584431e9f 0000555584431b50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555844469f2 0000555584446160 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080004800401 c71000080049c600 2e01ffffffffffff fffffb0804800334 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 028004060275b400 2367732f7665642f 01ffffffffffffff ffed080280030004 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a5dd70addb41936 849478e264364f1f a6c60c4d31f46fab 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5047edadc4b9c83d 7c66dbe4bf0f6303 d30d1e2061b5be18 8b01dae33f600181 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080171f00e100004 8004040172de0000 0000000000000000 00001c214059ff06 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010a800404accc08 0001000006080606 0123cc0000000000 0001ffffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff3080aa00300 0000000000000000 0000316e616c7701 ffffffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 df080a8003083180 0605318004000800 0210000210000801 71f00e1000048004 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040172de00000000 0000000000000000 1c214059ff065047 edadc4b9c83d7c66 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 900300080001edf4 880300080001edf4 800303fffe080001 edf3f80308080001 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03b4be080001edf4 a8030c080001edf4 a00302080001edf4 980304080001edf4 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 edf4c80306080001 edf4c0031fffffff fe080001edf4b803 0e080001edf4b003 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ee91a8031fffff fff4080001ee91a0 0302080001ee9198 0304080001ee9190 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee91c8030a080001 ee91c0030a080001 ee91b80304820800 01ee91b003000800 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82080001ee91e003 04080001ee91d803 06080001ee91d003 1080808080080001 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800302f8080001ee 91f80303be080001 ee91f00300080001 ee91e80310808080