last executing test programs: 28.818269269s ago: executing program 3 (id=118): getrandom(&(0x7f0000000040)=""/8, 0x8, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 28.542218615s ago: executing program 3 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2e90b3, &(0x7f0000000640)={[{@huge_advise}], [{@uid_gt}, {@dont_appraise}, {@dont_appraise}]}) r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x24008005) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async) write$nci(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="610501030203f502046b7f06beacfe46fd18176d06091f1f01ad"], 0x1a) (async) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="cc35bcfaa0338276643de3c70d9ad764ec0c297b690b70723eec58000916", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB=',allow_other,blksize=0x0000000000000000,smackfsfloor=tmpfs\x00,\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r2, @ANYBLOB="0000000000000000b70500000300000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x48) socketpair(0x1e, 0x1, 0x4, &(0x7f0000000000)={0x0, 0x0}) close(r12) (async) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100000000000000000080dcba2e", @ANYRES32=r15, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c000280080001000400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 24.693752585s ago: executing program 3 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2e90b3, &(0x7f0000000640)={[{@huge_advise}], [{@uid_gt}, {@dont_appraise}, {@dont_appraise}]}) r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x24008005) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async) write$nci(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="610501030203f502046b7f06beacfe46fd18176d06091f1f01ad"], 0x1a) (async) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="cc35bcfaa0338276643de3c70d9ad764ec0c297b690b70723eec58000916", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB=',allow_other,blksize=0x0000000000000000,smackfsfloor=tmpfs\x00,\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r2, @ANYBLOB="0000000000000000b70500000300000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x48) socketpair(0x1e, 0x1, 0x4, &(0x7f0000000000)={0x0, 0x0}) close(r12) (async) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100000000000000000080dcba2e", @ANYRES32=r15, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c000280080001000400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 17.829435696s ago: executing program 3 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2e90b3, &(0x7f0000000640)={[{@huge_advise}], [{@uid_gt}, {@dont_appraise}, {@dont_appraise}]}) r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x24008005) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async) write$nci(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="610501030203f502046b7f06beacfe46fd18176d06091f1f01ad"], 0x1a) (async) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="cc35bcfaa0338276643de3c70d9ad764ec0c297b690b70723eec58000916", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB=',allow_other,blksize=0x0000000000000000,smackfsfloor=tmpfs\x00,\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r2, @ANYBLOB="0000000000000000b70500000300000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x48) socketpair(0x1e, 0x1, 0x4, &(0x7f0000000000)={0x0, 0x0}) close(r12) (async) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100000000000000000080dcba2e", @ANYRES32=r15, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c000280080001000400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 11.296928261s ago: executing program 3 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2e90b3, &(0x7f0000000640)={[{@huge_advise}], [{@uid_gt}, {@dont_appraise}, {@dont_appraise}]}) r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x24008005) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async) write$nci(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="610501030203f502046b7f06beacfe46fd18176d06091f1f01ad"], 0x1a) (async) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="cc35bcfaa0338276643de3c70d9ad764ec0c297b690b70723eec58000916", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB=',allow_other,blksize=0x0000000000000000,smackfsfloor=tmpfs\x00,\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r2, @ANYBLOB="0000000000000000b70500000300000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x48) socketpair(0x1e, 0x1, 0x4, &(0x7f0000000000)={0x0, 0x0}) close(r12) (async) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100000000000000000080dcba2e", @ANYRES32=r15, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c000280080001000400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 9.942413331s ago: executing program 1 (id=304): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@migrate={0xffffffffffffffb5, 0x21, 0xd39, 0x70bd2d, 0x1, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in=@multicast1, 0x0, 0x0, 0x3, 0x80, 0x2, 0x0, 0x80, 0x2c, r1, r2}}, [@etimer_thresh={0x0, 0xc, 0x408}, @etimer_thresh={0x0, 0xc, 0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4a080}, 0x0) 9.882594752s ago: executing program 1 (id=305): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) write$sndseq(r0, &(0x7f0000000040)=[{0x6, 0x8, 0xf, 0x4, @time={0x541, 0x80}, {0x7f, 0x4}, {0x2, 0x8}, @queue={0x33, {0xaea, 0xffff9b1e}}}, {0x5, 0x1, 0x5, 0x1, @time={0x401, 0x5d474bf0}, {0x7, 0xa0}, {0x10, 0xc}, @connect={{0x6, 0x5}, {0x71, 0x9}}}, {0x7, 0x10, 0x7, 0x4, @tick=0xa, {0x0, 0xb}, {0x9, 0x1}, @queue={0x5, {0x7, 0xfff}}}, {0x1, 0xa2, 0x6, 0x0, @tick=0x3ff, {0x7d, 0x7f}, {0x7, 0x4}, @quote={{0xf7}, 0x8}}, {0x0, 0x2, 0x8, 0x40, @tick=0x1, {0x1, 0xc}, {0x6, 0x4}, @raw8={"8edf4f1dbc6df76b25a34e45"}}, {0xe6, 0x7, 0x7f, 0x4, @tick=0x6, {0xa, 0x5}, {}, @addr={0x7, 0x80}}], 0xa8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x400141, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x800, 0x154) r3 = open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x8100) read$char_usb(r3, &(0x7f00000001c0), 0x0) (async) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000200)) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) write$sndseq(r0, &(0x7f0000000240)=[{0x3, 0x10, 0x8, 0x5, @time={0x80, 0x2}, {0x81, 0x8}, {0x8, 0x40}, @time=@time={0x0, 0x8}}, {0x8, 0x81, 0x8, 0x2, @tick=0x8, {0x3, 0x6}, {0x7, 0xb}, @connect={{0xf8, 0x5}, {0x0, 0x2}}}, {0x1, 0xeb, 0x81, 0xa2, @tick=0x6, {0xd, 0x3}, {0x1, 0x14}, @control={0x3, 0x2, 0x7fff}}], 0x54) (async) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x7, 0x32cdc326, 0x0, 0x7, 0x3, 0x0, [{0x7fffffffffffffff, 0x7fff, 0x80000001, '\x00', 0x800}, {0xd, 0xfffffffffffffffd, 0x7fffffff, '\x00', 0x400}, {0x3, 0x3, 0x3, '\x00', 0x408}]}) (async) mkdirat(r3, &(0x7f00000003c0)='./file0\x00', 0x97) (async) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000400)) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000440)=0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000680)=0xe8) (async) r7 = getgid() mount$fuse(0x0, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500), 0x800000, &(0x7f00000006c0)={{'fd', 0x3d, r5}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}], [{@fowner_gt={'fowner>', 0xee01}}]}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000800)={0x0, 0x97, "75705f8f92cc0f4420517cf525daab66a8dd6c057808b8dd9ef2974e03d937453004e098f0f394fa4843a7b9d10129ecd10267b65b98554eb52a081fcd149a0fa2f0a67d60f15a6b86adf396c87da4d3ac7f0df4d9eeadfbe4a0d62960d43b67ffcf25ce51c0641f0b3a7668a00276235a7dda4f07484600f670bce1ed2818c71c2db6e6ce8b86c3e77209c092958834b44f47a8fcef7c"}, &(0x7f00000008c0)=0x9f) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000900)={r8, 0x15c}, 0x8) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000009c0)={0x8000, 0x8001, 0xbe0, 0xaad, 0x6, 0x200}) r9 = fsmount(r3, 0x1, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000a40)=0x16c0000000000) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000a80)={0x457, 0xfffffffe, 0x1, 'queue0\x00', 0x8a31}) (async) getsockopt$inet_udp_int(r3, 0x11, 0x6c, 0xffffffffffffffff, &(0x7f0000000b40)) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r9, {0x13}}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@cgroup=r10, 0x24, 0x0, 0x1, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0], &(0x7f0000000c80)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000d00)={r4, r9, 0x16, 0x0, @val=@tcx={@void, @value, @void, @void, r11}}, 0x1c) 9.882185674s ago: executing program 1 (id=306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getnexthop={0x17, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r2, 0x0, 0x0) 9.832201866s ago: executing program 1 (id=308): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 9.782085836s ago: executing program 1 (id=310): mount$afs(&(0x7f0000000040)=@cell={0x25, 'syz0:', 'syz0'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@flock_openafs}, {@flock_local}, {@flock_openafs}, {@flock_write}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/adsp1\x00'}}]}) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x109842, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) modify_ldt$read(0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000010c0)="ab", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000600)=0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x7ff, 0x620000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000240)={0x4, "17ed505e34885d195e261a21525277c7888788619b2a933723d863022aba1aa57ced0eceeef7c68680770c3754a5e06d91006964730d658bbd4d1a57eea0cadb", {0x8, 0x4}}) 9.781774143s ago: executing program 1 (id=311): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x0, 0x0, 0x3, 0x0, 0x2, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "13119f34dae3c090b3da2c64426a1d777a61e2fad4599fb11a71e149072d265bbcf090bd7bbe0e5d2de66213d88d7e773024ba3482c95f5dc6159186172ae22e0102b22fe03a13f573a7c2f0d185109a8457e43c5390e59a84747ee7b311ecc2f8bac84497d72789b0fa4ab2e321de479655bda89963ae5f37684f73a07ca9d223dfe04aae9e1ff7f8441133075f4355c81d80a33e4907edd482caff0200f27913b8cf68da47ea06d0d14fb5f2b61619e5e3b4b4090c77e69d028f41ab371e8c6bef4485fe557e260ff37e8f6a856e0b68694edcfea9a71953940f9d6ec1de1d4e2221adfd549d529a594013b2dcde2d070f6ba92fcbb700"}]}}]}, 0x14c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x0, 0x0, 0x3, 0x0, 0x2, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "13119f34dae3c090b3da2c64426a1d777a61e2fad4599fb11a71e149072d265bbcf090bd7bbe0e5d2de66213d88d7e773024ba3482c95f5dc6159186172ae22e0102b22fe03a13f573a7c2f0d185109a8457e43c5390e59a84747ee7b311ecc2f8bac84497d72789b0fa4ab2e321de479655bda89963ae5f37684f73a07ca9d223dfe04aae9e1ff7f8441133075f4355c81d80a33e4907edd482caff0200f27913b8cf68da47ea06d0d14fb5f2b61619e5e3b4b4090c77e69d028f41ab371e8c6bef4485fe557e260ff37e8f6a856e0b68694edcfea9a71953940f9d6ec1de1d4e2221adfd549d529a594013b2dcde2d070f6ba92fcbb700"}]}}]}, 0x14c}}, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) (async) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000140)=0x1) 9.722032717s ago: executing program 32 (id=311): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x0, 0x0, 0x3, 0x0, 0x2, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "13119f34dae3c090b3da2c64426a1d777a61e2fad4599fb11a71e149072d265bbcf090bd7bbe0e5d2de66213d88d7e773024ba3482c95f5dc6159186172ae22e0102b22fe03a13f573a7c2f0d185109a8457e43c5390e59a84747ee7b311ecc2f8bac84497d72789b0fa4ab2e321de479655bda89963ae5f37684f73a07ca9d223dfe04aae9e1ff7f8441133075f4355c81d80a33e4907edd482caff0200f27913b8cf68da47ea06d0d14fb5f2b61619e5e3b4b4090c77e69d028f41ab371e8c6bef4485fe557e260ff37e8f6a856e0b68694edcfea9a71953940f9d6ec1de1d4e2221adfd549d529a594013b2dcde2d070f6ba92fcbb700"}]}}]}, 0x14c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x0, 0x0, 0x3, 0x0, 0x2, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "13119f34dae3c090b3da2c64426a1d777a61e2fad4599fb11a71e149072d265bbcf090bd7bbe0e5d2de66213d88d7e773024ba3482c95f5dc6159186172ae22e0102b22fe03a13f573a7c2f0d185109a8457e43c5390e59a84747ee7b311ecc2f8bac84497d72789b0fa4ab2e321de479655bda89963ae5f37684f73a07ca9d223dfe04aae9e1ff7f8441133075f4355c81d80a33e4907edd482caff0200f27913b8cf68da47ea06d0d14fb5f2b61619e5e3b4b4090c77e69d028f41ab371e8c6bef4485fe557e260ff37e8f6a856e0b68694edcfea9a71953940f9d6ec1de1d4e2221adfd549d529a594013b2dcde2d070f6ba92fcbb700"}]}}]}, 0x14c}}, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) (async) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000140)=0x1) 8.888152445s ago: executing program 2 (id=332): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000801, 0xffffffffffffffff, &(0x7f0000000140)={0x3, 0x5, 0x81, 0x7, 0xa76, 0x8, 0x3ff, 0x8000000000000001, 0x8064}) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c000100000000000000006604000080140016"], 0x28}], 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r3) sendmmsg$alg(r3, &(0x7f0000006680)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c00)="26a60964098054208b7c49cb3e75f6292298fc26869b6861a5ef94200f3992333abc4deb6126d26ee2b4f9518dc629d177884fb62e871496817ef1766c8fb0dfcfe0afb104793f2ff734488146669b5c11c428e542346a859c72ddbfcb94f85fa03add13227d2c759b07dc6fa54c95867d2306e4edc33899527a263547345c1e", 0x80}], 0x1, 0x0, 0x0, 0x20040854}], 0x1, 0x40) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0xa, 0xffffffff, 0x0, 0x84800}) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) (async) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000801, 0xffffffffffffffff, &(0x7f0000000140)={0x3, 0x5, 0x81, 0x7, 0xa76, 0x8, 0x3ff, 0x8000000000000001, 0x8064}) (async) accept4(r0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c000100000000000000006604000080140016"], 0x28}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r3) (async) sendmmsg$alg(r3, &(0x7f0000006680)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c00)="26a60964098054208b7c49cb3e75f6292298fc26869b6861a5ef94200f3992333abc4deb6126d26ee2b4f9518dc629d177884fb62e871496817ef1766c8fb0dfcfe0afb104793f2ff734488146669b5c11c428e542346a859c72ddbfcb94f85fa03add13227d2c759b07dc6fa54c95867d2306e4edc33899527a263547345c1e", 0x80}], 0x1, 0x0, 0x0, 0x20040854}], 0x1, 0x40) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0xa, 0xffffffff, 0x0, 0x84800}) (async) 8.854269033s ago: executing program 2 (id=333): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) fremovexattr(r0, &(0x7f0000000800)=@known='trusted.syz\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x55, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000002000000000000000000000000000000000316da038a11e3367b6a9d5b9673ebcd61f1fc12d37c5f479aee1118f7a195477a1a24da2227b81f4b3f4d7a34e4dfd3dc89c58ae00cb85f103a55129e71e6073e1f2ded31d89bb289d6639234a34f3ede4758b27ff195ae97c4c7868723dfb072de138d11bb0fff0ac15ca8f73cdb3d5052", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000010000008001b0000000000"], 0x30}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in6=@loopback, 0x4e24, 0xa, 0x4e24, 0x101, 0x2, 0x0, 0x80, 0x61, r1, r3}, {0x2, 0x8, 0x1, 0x7, 0x3, 0x4, 0x6b1, 0x19}, {0xe4e, 0x9, 0x7, 0x5}, 0x80, 0x6e6bb2, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x34ff, 0x4, 0x0, 0x4, 0x1, 0x5, 0x800}}, 0xe8) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x550c, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xd611620a764cdfe0}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@bridge_delvlan={0x3c, 0x71, 0x100, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x6}}]}, 0x3c}}, 0x20048005) close(r5) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r5}, @jmp={0x5, 0x1, 0xa, 0x3, 0x5, 0x20, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x1, 0x3, 0x1, 0x5, 0x5, 0x6}, @alu={0x7, 0x0, 0xb, 0x2, 0xb, 0xffffffffffffffc0}, @call={0x85, 0x0, 0x0, 0x86}, @jmp={0x5, 0x1, 0x2, 0x2, 0x3, 0x20, 0xfffffffffffffffc}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @ldst={0x0, 0x2, 0x4, 0x6, 0x0, 0x30, 0xffffffffffffffff}], &(0x7f0000000440)='syzkaller\x00', 0x6, 0xc4, &(0x7f0000000480)=""/196, 0x40f00, 0x40, '\x00', r1, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0xc, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x2, 0x4, 0x5, 0x6}, {0x5, 0x4, 0x1}, {0x0, 0x1, 0xc, 0x9}, {0x0, 0x5, 0x6, 0x2}], 0x10, 0x7, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000007c0)={0x0, 0x0, 0x100800}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x145040, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r7, 0x0) 8.049823183s ago: executing program 2 (id=339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) dup(r1) socket$inet6(0xa, 0x80803, 0x87) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3, 0x0, &(0x7f00000001c0)) (async) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa87000000000000403b"], 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="650f011b0f20c035000001000f22c0650f784d5cb9b3020000b800000000ba008000000f300f009d76c3d364c4c26da73866ba430066edc4e168c2dc1cb805000000b972fb00000f01d9c4c2f1af6f00", 0x50}], 0x1, 0xa, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000, 0x1}) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.891874219s ago: executing program 2 (id=340): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "670133f12c963494", "2e1d976e9e21a1a47ac966c2d5becab4", "737b03b4", "e6ad56553919f15a"}, 0x28) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "670133f12c963494", "2e1d976e9e21a1a47ac966c2d5becab4", "737b03b4", "e6ad56553919f15a"}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x12) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x9, 0x8, 0x37a5, 0x7}) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x3, 0x3}}}}, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000280)={0xf000000, 0xbf2, 0x400, r3, 0x0, &(0x7f00000001c0)={0x9909d6, 0xdcea, '\x00', @value64=0x7ff}}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000280)={0xf000000, 0xbf2, 0x400, r3, 0x0, &(0x7f00000001c0)={0x9909d6, 0xdcea, '\x00', @value64=0x7ff}}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 7.032552723s ago: executing program 2 (id=341): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='dctcp-reno\x00', 0xb) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000100)) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 6.692610843s ago: executing program 2 (id=342): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x10) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x80, 0x0}, 0x5b4}], 0x1, 0x24040030) 6.67827128s ago: executing program 33 (id=342): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x10) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x80, 0x0}, 0x5b4}], 0x1, 0x24040030) 4.600710938s ago: executing program 3 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2e90b3, &(0x7f0000000640)={[{@huge_advise}], [{@uid_gt}, {@dont_appraise}, {@dont_appraise}]}) r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x24008005) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async) write$nci(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="610501030203f502046b7f06beacfe46fd18176d06091f1f01ad"], 0x1a) (async) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="cc35bcfaa0338276643de3c70d9ad764ec0c297b690b70723eec58000916", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB=',allow_other,blksize=0x0000000000000000,smackfsfloor=tmpfs\x00,\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r2, @ANYBLOB="0000000000000000b70500000300000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x48) socketpair(0x1e, 0x1, 0x4, &(0x7f0000000000)={0x0, 0x0}) close(r12) (async) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100000000000000000080dcba2e", @ANYRES32=r15, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c000280080001000400"], 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 3.372590217s ago: executing program 5 (id=381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='xen_mmu_flush_tlb_one_user\x00', r0, 0x0, 0x3}, 0x18) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) (async, rerun: 32) fcntl$setlease(r1, 0x400, 0x0) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x240200, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) (rerun: 32) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000380)={r3, 0x0, 0x0, 0x3, 0x400, 0xfff, 0x5, 0xca, 0x1, 0x5, 0x4, 0xb}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) close_range(r4, r4, 0x0) (async) accept4(r5, 0x0, 0x0, 0x0) (async, rerun: 64) write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef) (async, rerun: 64) write$cgroup_devices(r1, &(0x7f0000000000)={'b', ' *:* ', 'm\x00'}, 0x8) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.369740677s ago: executing program 5 (id=383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000740)={@host, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c298a289e47091", 0xd}], 0x2) 3.212393225s ago: executing program 5 (id=384): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$binfmt_misc(r1, &(0x7f0000000040)="ffaba5afa5e9de", 0xfffffffffffffeba) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) write$binfmt_misc(r1, &(0x7f0000000040)="ffaba5afa5e9de", 0xfffffffffffffeba) (async) 3.212136343s ago: executing program 5 (id=385): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00220f0000000bf896e404096592"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x101b42) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x4e496f8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='iso9660\x00', 0x2000400, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\xb6\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x17\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95\x95-\xebq\xbe\x06\x10?]\")\xb4\xe7TD6G\"<') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.002103214s ago: executing program 0 (id=400): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x52}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x27a) write$qrtrtun(r2, &(0x7f0000000180)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250a", 0x1f) write$FUSE_IOCTL(r2, &(0x7f0000000240)={0x20, 0xffffffffffffffda, 0x0, {0x18d, 0x0, 0x74, 0xfff}}, 0x20) write$binfmt_script(r2, &(0x7f0000000bc0)={'#! ', './file0', [{0x20, '(\xe3-'}, {0x20, '\x00'}, {0x20, '-\'\'%:{'}], 0xa, "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"}, 0x199) write$P9_RREADLINK(r2, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$qrtrtun(r2, &(0x7f00000003c0)="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", 0x277) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000040)=""/146) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.931853562s ago: executing program 0 (id=402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="d21c00000071f78a4d0e15264eb655e0e2d56c0001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, &(0x7f0000000380)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000100)=0x14) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/crash_elfcorehdr_size', 0x40000, 0x4f) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x3, 0x2, 0xfffff223, 0x3, 0x8000, r4, 0xc9, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x0, @value=r6, @void, @void, @value}, 0x50) 1.872538971s ago: executing program 0 (id=404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000180)="e2", 0xc, 0x1, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0x2, &(0x7f0000000600)=[{@none}, {}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000180)="e2", 0xc, 0x1, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0x2, &(0x7f0000000600)=[{@none}, {}]}) (async) 1.81158523s ago: executing program 0 (id=408): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup3(r0, r1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) memfd_secret(0x0) (async) write$cgroup_int(r3, &(0x7f0000000140)=0x400900, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000b000000000000b702000014000000b7030000000000008500000008f6ffffbe0900000000000055090100000000009500000000000000b7020000000000007b9af8ff00000000b5090c00000000007baaf0ff00000000bc8608000000000027080000f8ffffffbfa40000000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70c0000080000001600000007000000bf9110000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.732572776s ago: executing program 0 (id=409): r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./bus\x00', 0xf0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) finit_module(r1, 0x0, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000087"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount(0x0, 0x0, 0x0, 0x208000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x40, 0x258, 0x3c00, 0x4b0, 0x401, 0x4, 0x2, 0x0, {0x988, 0x8, 0x1}, {0x7, 0x8}, {0x4, 0xfffffffa, 0x1}, {0x2b6, 0x80000000}, 0x1, 0x10, 0xc, 0xfffffff8, 0x1, 0x10000, 0x7, 0x100, 0x8, 0x0, 0x9, 0x4, 0x10, 0x300, 0x0, 0x4}) mkdirat$cgroup(r8, &(0x7f0000000440)='syz1\x00', 0x1ff) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_crypto(r8, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=@upd={0x110, 0x12, 0x800, 0x70bd2c, 0x25dfdbff, {{'lrw(camellia-asm)\x00'}, '\x00', '\x00', 0x400, 0x2372fdf0c9fd3581}, [{0x8, 0x1, 0xb}, {0x8, 0x1, 0x51}, {0x8, 0x1, 0x8001}, {0x8, 0x1, 0xd4}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x7}]}, 0x110}, 0x1, 0x0, 0x0, 0x400c0}, 0x811) 1.572708454s ago: executing program 5 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/softnet_stat\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000280)={0x6, 'syz_tun\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth1_vlan\x00'}) 912.775748ms ago: executing program 4 (id=411): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0xee01, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x1dc}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) r0 = io_uring_setup(0x2a4f, &(0x7f0000000280)={0x0, 0xe8f6, 0x10, 0x2, 0x96}) r1 = syz_io_uring_setup(0x24f7, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xffffffff, 0x0, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000000)='bdev\x00', 0x0) connect$pppl2tp(r6, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}}, 0x32) getsockname(r6, 0x0, &(0x7f0000000000)) 482.13808ms ago: executing program 5 (id=412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(0x0, 0x84, 0x0) mq_notify(r1, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x4000080) setrlimit(0x1, &(0x7f0000000080)={0x0, 0x80000001}) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000180)="a3", 0xfffff, 0xfffffffffffffffc) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40040) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe04a10a0015c00200142603600e120800080024000000a86286cf6c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000400ad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000100)='./file0\x00', 0xa0600, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="83000021ff9b0db5e1d0d6a9bfe7eb11cd73185099f91ee68b81bceb5c7562f9c318e12d2043ba3a78adb0510d4adbb50e49a03b665b0dc2f6d7038ff17c0023f49bd16b4936cc6294d0c2ef1018ebb02bb1d632bc3f3fba453fc1e2e3fb158e91e35f65c5c06834a53cc496880906655b00188b3aeb6987c61c225e4dba9a", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="5900330080000000ffffffffffff0802110000005050505050500000000000000100010506f79296012d1a0800140800000000000000070009000200000000080900000007dd068b7668a21729dd0ad8a062cc132f8c370f25000000"], 0x78}, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r7, 0x0, 0x20000) 481.69942ms ago: executing program 4 (id=413): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x40000382, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x94, 0x10, 0x400, 0x0, 0x25dfdbfd, {0x5e}, [@typed={0x80, 0xd7, 0x0, 0x0, @str='V\x00b\xbf\xf4}\xf2\xfb\xf1y\xaeK51\x9f1\x9e\x18ll\xfdz\x91\x06\x92Y\x01H@\x8b8\xb1\x01 \t\xc5_\x7f\xc7\xea\x02\x95T\xbc\xdfN\x03\xc4*s28=\xd5\x0f\v\x91\xc8\x9a\xe1O*\x91~\xd6\xd0\x88\xe8\xaf\\\xb3\xa5\x19#\xe2\xad\xe3bNl\xd3}\xee\a\x9f\xa6\xe4F\x9bt\xa4p?\xed\xc0\x93\xe4\xfa\x028\xf1\x1f\xd6\x7fZ{0\x87\xa5\x18\x1bJ~\x85\x9ee\x10\xa4\x04\x95\x13\x83J\\'}]}, 0x94}}, 0x8004) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x94, 0x10, 0x400, 0x0, 0x25dfdbfd, {0x5e}, [@typed={0x80, 0xd7, 0x0, 0x0, @str='V\x00b\xbf\xf4}\xf2\xfb\xf1y\xaeK51\x9f1\x9e\x18ll\xfdz\x91\x06\x92Y\x01H@\x8b8\xb1\x01 \t\xc5_\x7f\xc7\xea\x02\x95T\xbc\xdfN\x03\xc4*s28=\xd5\x0f\v\x91\xc8\x9a\xe1O*\x91~\xd6\xd0\x88\xe8\xaf\\\xb3\xa5\x19#\xe2\xad\xe3bNl\xd3}\xee\a\x9f\xa6\xe4F\x9bt\xa4p?\xed\xc0\x93\xe4\xfa\x028\xf1\x1f\xd6\x7fZ{0\x87\xa5\x18\x1bJ~\x85\x9ee\x10\xa4\x04\x95\x13\x83J\\'}]}, 0x94}}, 0x8004) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) 332.141491ms ago: executing program 4 (id=414): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x6, 0x14f503) dup(r1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880100"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x188}}, 0x0) 272.806582ms ago: executing program 4 (id=415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000008, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f8c0000000c0a01010000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000100000000000050c0002400000000000000000200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0x110}}, 0x0) 52.211237ms ago: executing program 4 (id=416): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000600)=[@decrefs, @clear_death], 0x0, 0x0, 0x0}) 1.747519ms ago: executing program 4 (id=417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003540), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf25021aa967febc000030000180060002003a000000140003007f000001000000000000000000000000060004004e21000006000100"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8052) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x80, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000003d0001070000000000000000030000000c"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32=r6, @ANYBLOB="14000200776731"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x24, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000000), 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r10}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=0xc) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r11, &(0x7f0000000440)={0xffffffff, 0x8, 0x9a8d, 0xe6, 0xfffffffffffeffff, 0xb0, 0xfffffffffffffff1, 0x9, 0x4}) getpriority(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 0s ago: executing program 0 (id=418): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x0, 0x28}, &(0x7f0000000940)='./file0\x00', 0x18}) io_uring_enter(r0, 0xc4f, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r8, 0x0, 0x7e, 0x5, &(0x7f0000000700)="85653f4534", 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r9 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x8}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c884}, 0x24000004) syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000e40)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x0, 0x28}, &(0x7f0000000940)='./file0\x00', 0x18}) (async) io_uring_enter(r0, 0xc4f, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r8, 0x0, 0x7e, 0x5, &(0x7f0000000700)="85653f4534", 0x1}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) socket(0x11, 0x80a, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180), 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x8}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c884}, 0x24000004) (async) kernel console output (not intermixed with test programs): ridge0: port 1(bridge_slave_0) entered blocking state [ 46.421947][ T193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.425771][ T193] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.427768][ T193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.465602][ T39] audit: type=1400 audit(1733573102.245:114): avc: denied { sys_module } for pid=5932 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.467597][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.528090][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.554363][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.563798][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.577860][ T5932] veth0_vlan: entered promiscuous mode [ 46.587103][ T5932] veth1_vlan: entered promiscuous mode [ 46.608231][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.615266][ T5933] veth0_vlan: entered promiscuous mode [ 46.625161][ T5931] veth0_vlan: entered promiscuous mode [ 46.628319][ T5933] veth1_vlan: entered promiscuous mode [ 46.632819][ T5931] veth1_vlan: entered promiscuous mode [ 46.638194][ T5932] veth0_macvtap: entered promiscuous mode [ 46.650252][ T5932] veth1_macvtap: entered promiscuous mode [ 46.669946][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.672634][ T5931] veth0_macvtap: entered promiscuous mode [ 46.679082][ T5933] veth0_macvtap: entered promiscuous mode [ 46.681748][ T5933] veth1_macvtap: entered promiscuous mode [ 46.692113][ T5931] veth1_macvtap: entered promiscuous mode [ 46.699224][ T5943] veth0_vlan: entered promiscuous mode [ 46.702151][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.708601][ T5932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.711573][ T5932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.714459][ T5932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.717766][ T5932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.724225][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.727167][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.730150][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.739599][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.742217][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.745739][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.747840][ T5943] veth1_vlan: entered promiscuous mode [ 46.753330][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.757998][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.760414][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.763006][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.766317][ T5946] Bluetooth: hci2: command tx timeout [ 46.766323][ T5934] Bluetooth: hci1: command tx timeout [ 46.766326][ T5941] Bluetooth: hci0: command tx timeout [ 46.767047][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.769756][ T5933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.769786][ T5933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.775930][ T5934] Bluetooth: hci3: command tx timeout [ 46.778085][ T5933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.780981][ T5933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.790357][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.793486][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.797094][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.799714][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.802703][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.806616][ T5931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.809192][ T5931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.811769][ T5931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.814456][ T5931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.868227][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.870708][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.878780][ T5943] veth0_macvtap: entered promiscuous mode [ 46.883817][ T5943] veth1_macvtap: entered promiscuous mode [ 46.894597][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.897698][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.900768][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.903970][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.907154][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.910456][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.914801][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.921322][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.923356][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.931564][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.935027][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.939703][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.942957][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.946271][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.949568][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.954144][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.961368][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.964126][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.967113][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.969861][ T5943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.974291][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.976449][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.988738][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.990916][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.999039][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.001265][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.020595][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.022364][ T5932] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.022953][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.048420][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.051107][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.073926][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.076307][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.114936][ T5998] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 47.126406][ T5998] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 47.134630][ T5998] [U] J"—E:ÀÆ" [ 47.183384][ T6008] syzkaller0: refused to change device tx_queue_len [ 47.293672][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.385934][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.571862][ T8] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 47.574592][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.577136][ T8] usb 8-1: Product: syz [ 47.578178][ T8] usb 8-1: Manufacturer: syz [ 47.579341][ T8] usb 8-1: SerialNumber: syz [ 47.582241][ T8] usb 8-1: config 0 descriptor?? [ 47.585649][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 47.655600][ T833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.745635][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 47.748993][ T30] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 47.751248][ T30] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 47.754111][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 47.757069][ T30] usb 5-1: config 1 has no interface number 0 [ 47.759035][ T30] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.762365][ T30] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 47.765764][ T30] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 47.768054][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.773953][ T30] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 47.790279][ T5976] usb 8-1: USB disconnect, device number 2 [ 47.808804][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.811555][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.814009][ T833] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.818089][ T833] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.820308][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.823417][ T833] usb 6-1: config 0 descriptor?? [ 48.329634][ T30] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 48.451984][ T833] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.454730][ T833] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 48.461170][ T833] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 48.608803][ T6037] cdrom: dropping to single frame dma [ 48.846527][ T5934] Bluetooth: hci2: command tx timeout [ 48.846569][ T5934] Bluetooth: hci3: command tx timeout [ 48.846592][ T5934] Bluetooth: hci1: command tx timeout [ 48.846616][ T5946] Bluetooth: hci0: command tx timeout [ 48.898968][ T6047] tmpfs: Bad value for 'mpol' [ 48.942412][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 49.084746][ T6053] batman_adv: batadv0: Adding interface: dummy0 [ 49.086648][ T6053] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.093365][ T6053] batman_adv: batadv0: Interface activated: dummy0 [ 49.100409][ T6053] batadv0: mtu less than device minimum [ 49.103817][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.108824][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.113552][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.118278][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.122957][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.127725][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.132460][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.137214][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.142004][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.200443][ T6056] Zero length message leads to an empty skb [ 49.416590][ T5995] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 50.124113][ T39] kauditd_printk_skb: 78 callbacks suppressed [ 50.124124][ T39] audit: type=1400 audit(2000000001.399:193): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 50.157772][ T39] audit: type=1400 audit(2000000001.439:194): avc: denied { mounton } for pid=6060 comm="syz.3.21" path="/10/file0" dev="cgroup" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 50.207130][ T39] audit: type=1400 audit(2000000001.489:195): avc: denied { connect } for pid=6062 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.304655][ T39] audit: type=1400 audit(2000000001.579:196): avc: denied { setopt } for pid=6068 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.311022][ T39] audit: type=1400 audit(2000000001.579:197): avc: denied { bind } for pid=6068 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.317288][ T39] audit: type=1400 audit(2000000001.579:198): avc: denied { name_bind } for pid=6068 comm="syz.3.23" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.323235][ T6069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.324147][ T39] audit: type=1400 audit(2000000001.589:199): avc: denied { node_bind } for pid=6068 comm="syz.3.23" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 50.324201][ T39] audit: type=1400 audit(2000000001.589:200): avc: denied { write } for pid=6062 comm="syz.1.22" path="socket:[7837]" dev="sockfs" ino=7837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.350217][ T39] audit: type=1400 audit(2000000001.629:201): avc: denied { write } for pid=6062 comm="syz.1.22" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.351001][ T833] usb 5-1: USB disconnect, device number 2 [ 50.362138][ T833] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 50.388369][ T39] audit: type=1400 audit(2000000001.669:202): avc: denied { create } for pid=6075 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 50.457945][ T5976] usb 6-1: USB disconnect, device number 2 [ 50.580954][ T6095] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 50.588717][ T6097] 9p: Unknown Cache mode or invalid value mmap" [ 50.635029][ T6098] mmap: syz.3.30 (6098) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.925793][ T5941] Bluetooth: hci3: command tx timeout [ 50.936440][ T5941] Bluetooth: hci1: command tx timeout [ 50.936479][ T5934] Bluetooth: hci0: command tx timeout [ 50.936751][ T5946] Bluetooth: hci2: command tx timeout [ 50.975618][ T833] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.146956][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.150558][ T833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.153725][ T833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 51.157982][ T833] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.160779][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.167940][ T833] usb 5-1: config 0 descriptor?? [ 51.257986][ T6127] netlink: 'syz.1.40': attribute type 10 has an invalid length. [ 51.265809][ T6127] batman_adv: batadv0: Adding interface: team0 [ 51.268119][ T6127] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.276392][ T6127] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 51.281882][ T6127] netlink: 'syz.1.40': attribute type 10 has an invalid length. [ 51.284460][ T6127] netlink: 2 bytes leftover after parsing attributes in process `syz.1.40'. [ 51.287078][ T6127] team0: entered promiscuous mode [ 51.288400][ T6127] team_slave_0: entered promiscuous mode [ 51.289959][ T6127] team_slave_1: entered promiscuous mode [ 51.292256][ T6127] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.294073][ T6127] batman_adv: batadv0: Interface activated: team0 [ 51.296694][ T6127] batman_adv: batadv0: Interface deactivated: team0 [ 51.298376][ T6127] batman_adv: batadv0: Removing interface: team0 [ 51.300703][ T6127] bridge0: port 3(team0) entered blocking state [ 51.302352][ T6127] bridge0: port 3(team0) entered disabled state [ 51.304116][ T6127] team0: entered allmulticast mode [ 51.305403][ T6127] team_slave_0: entered allmulticast mode [ 51.307019][ T5976] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 51.307562][ T6127] team_slave_1: entered allmulticast mode [ 51.311676][ T6127] bridge0: port 3(team0) entered blocking state [ 51.313748][ T6127] bridge0: port 3(team0) entered forwarding state [ 51.319220][ T6127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.40'. [ 51.321861][ T6127] unsupported nlmsg_type 40 [ 51.364232][ T6129] netlink: 'syz.1.41': attribute type 11 has an invalid length. [ 51.444243][ T6032] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.446784][ T6032] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.450817][ T6032] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz1 [ 51.486979][ T5976] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 51.488803][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 51.491339][ T5976] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.494099][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 51.496892][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 51.500946][ T5976] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 51.503094][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 51.506228][ T5976] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.509829][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 51.512985][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 51.516846][ T5976] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 51.518622][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 51.521379][ T5976] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.524572][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 51.527413][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 51.532782][ T5976] usb 8-1: string descriptor 0 read error: -22 [ 51.534316][ T5976] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 51.536533][ T5976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.542245][ T5976] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 51.574549][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.576505][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.578319][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.580243][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.582087][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.582846][ T6133] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 51.583855][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.610659][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.612745][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.614537][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.616475][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.618326][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.620112][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.622024][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.623801][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.625659][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.627421][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.629197][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.630976][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.632831][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.634631][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.636753][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.639303][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.641092][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.642994][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.644773][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.647927][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.649847][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.651639][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.653464][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.655230][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.657054][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.658814][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.660561][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.662323][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.664216][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.666108][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.667884][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.669633][ T833] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 51.671605][ T833] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 51.675980][ T833] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 51.776787][ T6110] process 'syz.0.34' launched './file1' with NULL argv: empty string added [ 51.785304][ T6138] Bluetooth: MGMT ver 1.23 [ 51.796002][ T5697] usb 8-1: USB disconnect, device number 3 [ 51.808495][ T35] usb 5-1: USB disconnect, device number 3 [ 51.853435][ T6150] netlink: 'syz.1.47': attribute type 10 has an invalid length. [ 51.859265][ T6150] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 52.401673][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 52.442112][ T6186] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.550129][ T6191] netlink: 'syz.3.60': attribute type 39 has an invalid length. [ 52.601350][ T6190] netlink: 72 bytes leftover after parsing attributes in process `syz.3.60'. [ 52.619338][ T6188] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 52.835177][ T6202] kvm: emulating exchange as write [ 53.006505][ T5934] Bluetooth: hci1: command tx timeout [ 53.006651][ T5941] Bluetooth: hci2: command tx timeout [ 53.006722][ T65] Bluetooth: hci0: command tx timeout [ 53.006769][ T5946] Bluetooth: hci3: command 0x0419 tx timeout [ 53.114290][ T6206] FAT-fs (nullb0): bogus number of reserved sectors [ 53.116713][ T6206] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 53.296319][ T6208] cgroup: fork rejected by pids controller in /syz1 [ 53.463161][ T6242] binder: 6241:6242 unknown command 0 [ 53.465096][ T6242] binder: 6241:6242 ioctl c0306201 20000000 returned -22 [ 53.469856][ T6242] binder: 6241:6242 ioctl c0306201 20000580 returned -22 [ 53.524854][ T6245] binder: 6241:6245 ioctl c1105511 20000780 returned -22 [ 54.285733][ T63] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 54.301739][ T6265] loop2: detected capacity change from 0 to 7 [ 54.305124][ T6265] Dev loop2: unable to read RDB block 7 [ 54.307223][ T6265] loop2: unable to read partition table [ 54.308742][ T6265] loop2: partition table beyond EOD, truncated [ 54.310367][ T6265] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 54.390648][ T6269] hfsplus: unable to find HFS+ superblock [ 54.446567][ T63] usb 8-1: Using ep0 maxpacket: 8 [ 54.451870][ T63] usb 8-1: config 0 has no interfaces? [ 54.453508][ T63] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 54.456317][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.459834][ T63] usb 8-1: config 0 descriptor?? [ 54.580668][ T6276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6276 comm=syz.0.76 [ 54.584354][ T6276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6276 comm=syz.0.76 [ 54.588420][ T6276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=6276 comm=syz.0.76 [ 54.591983][ T6276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=6276 comm=syz.0.76 [ 54.595561][ T6276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6276 comm=syz.0.76 [ 54.599206][ T6276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6276 comm=syz.0.76 [ 54.602701][ T6276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6276 comm=syz.0.76 [ 54.680512][ T5975] usb 8-1: USB disconnect, device number 4 [ 54.700922][ T6283] rose0: renamed from bond0 (while UP) [ 54.876014][ T63] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.921784][ T6297] net_ratelimit: 11 callbacks suppressed [ 54.921795][ T6297] dccp_close: ABORT with 2 bytes unread [ 54.929684][ T5941] Bluetooth: hci1: SCO packet for unknown connection handle 100 [ 55.086417][ T5941] Bluetooth: hci3: command 0x0419 tx timeout [ 55.243912][ T39] kauditd_printk_skb: 96 callbacks suppressed [ 55.243927][ T39] audit: type=1400 audit(2000000006.519:299): avc: denied { create } for pid=6319 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.251668][ T39] audit: type=1400 audit(2000000006.519:300): avc: denied { write } for pid=6319 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.296029][ T6322] Invalid logical block size (585) [ 55.374709][ T6326] netlink: 'syz.2.91': attribute type 30 has an invalid length. [ 55.375638][ T39] audit: type=1400 audit(2000000006.649:301): avc: denied { setopt } for pid=6325 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 55.378584][ T6326] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 55.384943][ T6326] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 55.391228][ T39] audit: type=1400 audit(2000000006.679:302): avc: denied { read } for pid=6325 comm="syz.2.91" path="socket:[10148]" dev="sockfs" ino=10148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 55.513111][ T39] audit: type=1400 audit(2000000006.789:303): avc: denied { ioctl } for pid=6331 comm="syz.2.93" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.568869][ T39] audit: type=1400 audit(2000000006.849:304): avc: denied { ioctl } for pid=6339 comm="syz.2.95" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11874 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 55.699047][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 55.714420][ T39] audit: type=1400 audit(2000000006.989:305): avc: denied { mount } for pid=6355 comm="syz.1.101" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.746810][ T39] audit: type=1400 audit(2000000007.029:306): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.827680][ T39] audit: type=1400 audit(2000000007.109:307): avc: denied { create } for pid=6371 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.836106][ T39] audit: type=1400 audit(2000000007.109:308): avc: denied { bind } for pid=6371 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.871967][ T6374] netlink: 40 bytes leftover after parsing attributes in process `syz.2.104'. [ 55.954661][ T6385] 9pnet_fd: Insufficient options for proto=fd [ 55.972269][ T6381] program syz.1.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.978718][ T6389] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 56.245122][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 56.247831][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 56.705577][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.850868][ T6445] syz.2.125: attempt to access beyond end of device [ 56.850868][ T6445] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 56.854945][ T6445] vxfs: unable to read disk superblock at 1 [ 56.857260][ T6445] syz.2.125: attempt to access beyond end of device [ 56.857260][ T6445] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 56.861498][ T6445] vxfs: unable to read disk superblock at 8 [ 56.863457][ T6445] vxfs: can't find superblock. [ 56.867676][ T6444] syz.2.125: attempt to access beyond end of device [ 56.867676][ T6444] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 56.868928][ T35] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 56.871472][ T6444] vxfs: unable to read disk superblock at 1 [ 56.876259][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.876699][ T6444] syz.2.125: attempt to access beyond end of device [ 56.876699][ T6444] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 56.880549][ T35] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 56.883179][ T6444] vxfs: unable to read disk superblock at 8 [ 56.886217][ T35] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 56.886239][ T35] usb 6-1: Manufacturer: syz [ 56.894760][ T6444] vxfs: can't find superblock. [ 56.898151][ T35] usb 6-1: config 0 descriptor?? [ 56.923756][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.926548][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.928913][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.932326][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.938250][ T5946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.941027][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.955664][ T35] rc_core: IR keymap rc-hauppauge not found [ 56.957684][ T35] Registered IR keymap rc-empty [ 56.960156][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 56.965258][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 57.082371][ T6448] chnl_net:caif_netlink_parms(): no params data found [ 57.144024][ T6421] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.117'. [ 57.148234][ T6421] openvswitch: netlink: Missing key (keys=40, expected=80) [ 57.154503][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.157652][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.160362][ T6448] bridge_slave_0: entered allmulticast mode [ 57.167384][ T6448] bridge_slave_0: entered promiscuous mode [ 57.172607][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.175100][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.178222][ T6448] bridge_slave_1: entered allmulticast mode [ 57.181100][ T6448] bridge_slave_1: entered promiscuous mode [ 57.214586][ T6448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.219184][ T6448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.247622][ T6448] team0: Port device team_slave_0 added [ 57.250491][ T6448] team0: Port device team_slave_1 added [ 57.274900][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.276975][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.284966][ T6448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.289420][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.291513][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.298366][ T6448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.301796][ T5697] usb 6-1: USB disconnect, device number 3 [ 57.344707][ T6448] hsr_slave_0: entered promiscuous mode [ 57.348386][ T6448] hsr_slave_1: entered promiscuous mode [ 57.350402][ T6448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.352383][ T6448] Cannot create hsr debugfs directory [ 57.472892][ T6448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.504587][ T6474] xt_hashlimit: max too large, truncated to 1048576 [ 57.508643][ T6474] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 57.545712][ T6448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.619882][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 57.624720][ T6480] bridge_slave_0: default FDB implementation only supports local addresses [ 57.676994][ T6448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.725273][ T6487] devpts: called with bogus options [ 57.799026][ T6448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.804652][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 57.807696][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 57.883290][ T6448] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.906822][ T6448] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.910271][ T6448] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.914018][ T6448] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.960108][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.967823][ T6448] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.973391][ T193] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.975728][ T193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.978917][ T5697] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.987153][ T193] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.989529][ T193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.113114][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.125928][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 58.128946][ T5697] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 58.133129][ T6448] veth0_vlan: entered promiscuous mode [ 58.134070][ T5697] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 58.137953][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 58.138703][ T6448] veth1_vlan: entered promiscuous mode [ 58.140747][ T5697] usb 5-1: Product: syz [ 58.143775][ T5697] usb 5-1: Manufacturer: syz [ 58.145385][ T5697] usb 5-1: SerialNumber: syz [ 58.150142][ T5697] usb 5-1: config 0 descriptor?? [ 58.152578][ T6487] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.158389][ T6448] veth0_macvtap: entered promiscuous mode [ 58.161546][ T6448] veth1_macvtap: entered promiscuous mode [ 58.168390][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.171661][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.174051][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.177860][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.181294][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.184914][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.188614][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.192214][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.196734][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.203470][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.207112][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.210509][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.213829][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.218317][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.221274][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.224235][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.228546][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.232517][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.239255][ T6448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.241487][ T6448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.243653][ T6448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.246200][ T6448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.277689][ T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.279728][ T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.292625][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.294726][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.426274][ T35] usb 5-1: USB disconnect, device number 5 [ 58.730397][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'. [ 59.968391][ T6561] xt_hashlimit: size too large, truncated to 1048576 [ 60.630704][ T39] kauditd_printk_skb: 80 callbacks suppressed [ 60.630718][ T39] audit: type=1400 audit(2000000011.909:389): avc: denied { lock } for pid=6569 comm="syz.1.160" path="socket:[16486]" dev="sockfs" ino=16486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.659394][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.678946][ T6570] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 60.681488][ T6570] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.688585][ T6570] vhci_hcd vhci_hcd.0: Device attached [ 60.692715][ T6572] vhci_hcd: connection closed [ 60.698709][ T1144] vhci_hcd: stop threads [ 60.711253][ T1144] vhci_hcd: release socket [ 60.712590][ T1144] vhci_hcd: disconnect device [ 60.894123][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.908763][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.913583][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.928886][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.937796][ T5941] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.940274][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.515326][ T39] audit: type=1400 audit(2000000012.789:390): avc: denied { create } for pid=6581 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.520381][ T39] audit: type=1400 audit(2000000012.799:391): avc: denied { write } for pid=6581 comm="syz.1.163" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 61.526844][ T39] audit: type=1400 audit(2000000012.799:392): avc: denied { read } for pid=6581 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.980868][ T6587] tipc: Enabling not permitted [ 61.982476][ T6587] tipc: Enabling of bearer rejected, failed to enable media [ 61.987528][ T39] audit: type=1400 audit(2000000013.269:393): avc: denied { search } for pid=5333 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.092347][ T39] audit: type=1400 audit(2000000013.369:394): avc: denied { mounton } for pid=6597 comm="syz.0.167" path="/41/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.113139][ T6575] chnl_net:caif_netlink_parms(): no params data found [ 62.130655][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 62.183765][ T39] audit: type=1400 audit(2000000013.459:395): avc: denied { bind } for pid=6592 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.284521][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.292366][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.295111][ T6575] bridge_slave_0: entered allmulticast mode [ 62.298430][ T6575] bridge_slave_0: entered promiscuous mode [ 62.300884][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.302936][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.305274][ T6575] bridge_slave_1: entered allmulticast mode [ 62.308596][ T6575] bridge_slave_1: entered promiscuous mode [ 62.339398][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.342932][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.392504][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.401602][ T6575] team0: Port device team_slave_0 added [ 62.405247][ T6575] team0: Port device team_slave_1 added [ 62.433506][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.436190][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.442586][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.448156][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.450516][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.458506][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.490781][ T6575] hsr_slave_0: entered promiscuous mode [ 62.493279][ T6575] hsr_slave_1: entered promiscuous mode [ 62.495812][ T6575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.498154][ T6575] Cannot create hsr debugfs directory [ 62.543121][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.624835][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.651834][ T39] audit: type=1400 audit(2000000013.929:396): avc: denied { read } for pid=6619 comm="syz.0.171" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 62.658378][ T39] audit: type=1400 audit(2000000013.929:397): avc: denied { open } for pid=6619 comm="syz.0.171" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 62.710263][ T39] audit: type=1400 audit(2000000013.989:398): avc: denied { ioctl } for pid=6619 comm="syz.0.171" path="socket:[14894]" dev="sockfs" ino=14894 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.747981][ T11] bridge_slave_1: left allmulticast mode [ 62.749616][ T11] bridge_slave_1: left promiscuous mode [ 62.751767][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.769263][ T11] bridge_slave_0: left allmulticast mode [ 62.770955][ T11] bridge_slave_0: left promiscuous mode [ 62.785099][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.007818][ T5946] Bluetooth: hci2: command tx timeout [ 63.011548][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 63.134510][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 63.142245][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.147858][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.152570][ T11] bond0 (unregistering): Released all slaves [ 63.493209][ T11] hsr_slave_0: left promiscuous mode [ 63.495339][ T11] hsr_slave_1: left promiscuous mode [ 63.499615][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.501791][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.505259][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.507263][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.525547][ T11] veth1_macvtap: left promiscuous mode [ 63.527499][ T11] veth0_macvtap: left promiscuous mode [ 63.529160][ T11] veth1_vlan: left promiscuous mode [ 63.530970][ T11] veth0_vlan: left promiscuous mode [ 64.115402][ T11] team0 (unregistering): Port device team_slave_1 removed [ 64.175329][ T11] team0 (unregistering): Port device team_slave_0 removed [ 64.637180][ T6642] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 64.639493][ T6650] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 64.644700][ T6650] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 64.691861][ T6575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.698145][ T6575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.702900][ T6575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.724457][ T6660] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 64.733011][ T6660] CIFS mount error: No usable UNC path provided in device string! [ 64.733011][ T6660] [ 64.734506][ T6575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.736479][ T6660] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 64.815036][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.825094][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.836483][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.839137][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.846780][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.849220][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.931736][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 64.934647][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.961198][ T6575] veth0_vlan: entered promiscuous mode [ 64.968114][ T6575] veth1_vlan: entered promiscuous mode [ 64.981523][ T6575] veth0_macvtap: entered promiscuous mode [ 64.984468][ T6575] veth1_macvtap: entered promiscuous mode [ 64.990096][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.992772][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.995337][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.998157][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.001278][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.004787][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.009572][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.013125][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.017734][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.026129][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.029577][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.032744][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.037581][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.040218][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.042951][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.045570][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.048722][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.052076][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.059159][ T6575] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.061428][ T6575] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.063563][ T6575] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.065786][ T6575] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.087375][ T5946] Bluetooth: hci2: command tx timeout [ 65.103200][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.108192][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.119975][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.122786][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.684610][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 65.684627][ T39] audit: type=1400 audit(2000000016.959:420): avc: denied { write } for pid=6678 comm="syz.2.182" name="kcm" dev="proc" ino=4026533291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 65.692871][ T39] audit: type=1400 audit(2000000016.969:421): avc: denied { create } for pid=6678 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 65.965965][ T39] audit: type=1400 audit(2000000017.249:422): avc: denied { accept } for pid=6689 comm="syz.0.186" lport=32914 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.971801][ T39] audit: type=1400 audit(2000000017.249:423): avc: denied { write } for pid=6689 comm="syz.0.186" lport=32914 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 65.978526][ T39] audit: type=1400 audit(2000000017.249:424): avc: denied { getopt } for pid=6689 comm="syz.0.186" lport=32914 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 65.985233][ T39] audit: type=1400 audit(2000000017.249:425): avc: denied { map } for pid=6689 comm="syz.0.186" path="socket:[17937]" dev="sockfs" ino=17937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 65.994120][ T39] audit: type=1400 audit(2000000017.249:426): avc: denied { read } for pid=6689 comm="syz.0.186" path="socket:[17937]" dev="sockfs" ino=17937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 66.245550][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.290586][ T39] audit: type=1400 audit(2000000017.569:427): avc: denied { getopt } for pid=6696 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.369347][ T5946] Bluetooth: hci1: Malformed LE Event: 0x0b [ 66.396965][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.399972][ T8] usb 7-1: config 0 has no interfaces? [ 66.402975][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.405346][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.408322][ T8] usb 7-1: Product: syz [ 66.409500][ T8] usb 7-1: Manufacturer: syz [ 66.410716][ T8] usb 7-1: SerialNumber: syz [ 66.413238][ T8] usb 7-1: config 0 descriptor?? [ 66.636451][ T5976] usb 7-1: USB disconnect, device number 2 [ 66.642833][ T6709] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 66.650267][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 66.750283][ T39] audit: type=1400 audit(2000000018.029:428): avc: denied { create } for pid=6719 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 67.169277][ T39] audit: type=1400 audit(2000000018.449:429): avc: denied { listen } for pid=6735 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.216559][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 67.255854][ T63] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 67.351394][ T6742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6742 comm=syz.2.201 [ 67.418895][ T63] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 67.422798][ T63] usb 5-1: config 0 has no interface number 0 [ 67.424707][ T63] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.430095][ T63] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 67.433403][ T63] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 67.440486][ T63] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 67.446431][ T63] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 67.451420][ T63] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 67.455707][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.459198][ T63] usb 5-1: config 0 descriptor?? [ 67.462107][ T6734] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 67.471713][ T63] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 67.483940][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.490374][ T6745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6745 comm=syz.2.202 [ 67.612044][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.616616][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.620211][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.622835][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.625650][ T5941] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.628271][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.714439][ T6750] chnl_net:caif_netlink_parms(): no params data found [ 67.800434][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.808453][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.809588][ T8] usb 5-1: USB disconnect, device number 6 [ 67.810447][ T6750] bridge_slave_0: entered allmulticast mode [ 67.814332][ T8] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 67.818766][ T6750] bridge_slave_0: entered promiscuous mode [ 67.822303][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.824473][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.826856][ T6750] bridge_slave_1: entered allmulticast mode [ 67.829614][ T6750] bridge_slave_1: entered promiscuous mode [ 67.854669][ T6750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.859275][ T6750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.892475][ T6750] team0: Port device team_slave_0 added [ 67.897205][ T6750] team0: Port device team_slave_1 added [ 67.921134][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.923332][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.931833][ T6750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.935983][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.939601][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.946888][ T6750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.994598][ T6750] hsr_slave_0: entered promiscuous mode [ 68.006481][ T6750] hsr_slave_1: entered promiscuous mode [ 68.008409][ T6750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.010405][ T6750] Cannot create hsr debugfs directory [ 68.047167][ T6773] tipc: Failed to obtain node identity [ 68.048609][ T6773] tipc: Enabling of bearer rejected, failed to enable media [ 68.175775][ T6783] Cannot find add_set index 0 as target [ 68.478967][ T6810] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 68.964810][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.035905][ T6822] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.038461][ T6822] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.040592][ T6822] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.042709][ T6822] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.076991][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.112707][ T6827] ======================================================= [ 69.112707][ T6827] WARNING: The mand mount option has been deprecated and [ 69.112707][ T6827] and is ignored by this kernel. Remove the mand [ 69.112707][ T6827] option from the mount to silence this warning. [ 69.112707][ T6827] ======================================================= [ 69.145872][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.273391][ T6833] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.221'. [ 69.276527][ T6833] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 69.297445][ T1143] bridge_slave_1: left allmulticast mode [ 69.298966][ T1143] bridge_slave_1: left promiscuous mode [ 69.300525][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.303443][ T1143] bridge_slave_0: left allmulticast mode [ 69.305244][ T1143] bridge_slave_0: left promiscuous mode [ 69.307541][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.326553][ T6835] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 69.330090][ T6835] overlayfs: missing 'lowerdir' [ 69.441778][ T6838] set match dimension is over the limit! [ 69.581053][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.587109][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.591782][ T1143] bond0 (unregistering): Released all slaves [ 69.645796][ T5946] Bluetooth: hci2: command tx timeout [ 69.865107][ T6866] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 69.880543][ T1144] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.883221][ T6866] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 70.014260][ T1143] hsr_slave_0: left promiscuous mode [ 70.018976][ T1143] hsr_slave_1: left promiscuous mode [ 70.020876][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.022837][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.025067][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.026990][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.049117][ T1143] veth1_macvtap: left promiscuous mode [ 70.050617][ T1143] veth0_macvtap: left promiscuous mode [ 70.052044][ T1143] veth1_vlan: left promiscuous mode [ 70.053434][ T1143] veth0_vlan: left promiscuous mode [ 70.612393][ T6893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.234'. [ 70.614719][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.234'. [ 70.615975][ T6893] netlink: 44 bytes leftover after parsing attributes in process `syz.0.234'. [ 70.616012][ T6900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.234'. [ 70.689440][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 70.748790][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 71.091171][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.093406][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.253481][ T6750] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.257882][ T6750] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.261474][ T6750] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.265110][ T6750] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.311804][ T6750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.320946][ T6750] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.324911][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.326827][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.332410][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.334245][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.432817][ T6750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.447333][ T6750] veth0_vlan: entered promiscuous mode [ 71.451677][ T6750] veth1_vlan: entered promiscuous mode [ 71.459789][ T6750] veth0_macvtap: entered promiscuous mode [ 71.463008][ T6750] veth1_macvtap: entered promiscuous mode [ 71.470756][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.473520][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.476075][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.478674][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.481079][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.483913][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.486698][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.489460][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.493071][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.497154][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.499704][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.502173][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.504784][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.508212][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.510963][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.513399][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.516605][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.519705][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.523878][ T6750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.526711][ T6750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.528953][ T6750] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.531282][ T6750] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.560830][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.563495][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.574524][ T39] kauditd_printk_skb: 30 callbacks suppressed [ 71.574539][ T39] audit: type=1400 audit(2000000022.849:460): avc: denied { mount } for pid=6909 comm="syz.0.236" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.576160][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.577455][ T39] audit: type=1400 audit(2000000022.859:461): avc: denied { watch } for pid=6909 comm="syz.0.236" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.582389][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.596355][ T39] audit: type=1400 audit(2000000022.879:462): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.629305][ T6915] SELinux: syz.0.237 (6915) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 71.638574][ T39] audit: type=1400 audit(2000000022.919:463): avc: denied { remount } for pid=6914 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.643497][ T39] audit: type=1400 audit(2000000022.919:464): avc: denied { write } for pid=6914 comm="syz.0.237" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.732936][ T6920] netlink: 48 bytes leftover after parsing attributes in process `syz.0.238'. [ 71.743954][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 71.840418][ T6920] hsr_slave_1 (unregistering): left promiscuous mode [ 71.895576][ T5941] Bluetooth: hci4: command 0x1003 tx timeout [ 71.895738][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.963451][ T6928] XFS (nullb0): Invalid superblock magic number [ 71.984814][ T39] audit: type=1400 audit(2000000023.259:465): avc: denied { create } for pid=6927 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 71.989947][ T39] audit: type=1400 audit(2000000023.279:466): avc: denied { write } for pid=6927 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 71.995695][ T39] audit: type=1400 audit(2000000023.279:467): avc: denied { nlmsg_read } for pid=6927 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 72.027623][ T6935] SELinux: syz.0.241 (6935) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 72.057953][ T6940] netlink: 277 bytes leftover after parsing attributes in process `syz.0.243'. [ 72.063112][ T6941] netlink: 277 bytes leftover after parsing attributes in process `syz.0.243'. [ 72.067275][ T6940] cgroup: Bad value for 'name' [ 72.098743][ T6947] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 72.102063][ T39] audit: type=1400 audit(2000000023.379:468): avc: denied { append } for pid=6946 comm="syz.0.245" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.138873][ T39] audit: type=1400 audit(2000000023.419:469): avc: denied { read } for pid=6949 comm="syz.0.246" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.803311][ T6992] bond0: (slave syz_tun): Releasing backup interface [ 73.189739][ T7024] x_tables: duplicate underflow at hook 3 [ 73.254331][ T7030] __nla_validate_parse: 1 callbacks suppressed [ 73.254348][ T7030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.270'. [ 73.259134][ T7030] ÿÿÿÿ: renamed from gre0 (while UP) [ 73.279980][ T7032] syz.2.271: attempt to access beyond end of device [ 73.279980][ T7032] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 73.284458][ T7032] gfs2: error -5 reading superblock [ 73.352496][ T7040] vlan2: entered allmulticast mode [ 73.354201][ T7040] bond0: entered allmulticast mode [ 73.355965][ T7040] bond_slave_0: entered allmulticast mode [ 73.357515][ T7040] bond_slave_1: entered allmulticast mode [ 73.360200][ T7040] bond0: left allmulticast mode [ 73.361494][ T7040] bond_slave_0: left allmulticast mode [ 73.362913][ T7040] bond_slave_1: left allmulticast mode [ 73.504499][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'. [ 73.548911][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 73.630454][ T7060] netlink: 'syz.0.280': attribute type 10 has an invalid length. [ 73.638664][ T7060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.642668][ T7060] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 73.999520][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.185544][ T63] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.335580][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 74.338220][ T63] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 74.340254][ T63] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 74.342323][ T63] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 74.344819][ T63] usb 7-1: config 250 has no interface number 0 [ 74.346603][ T63] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 74.349461][ T63] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 74.352005][ T63] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.354533][ T63] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.357640][ T63] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 74.361484][ T63] usb 7-1: config 250 interface 228 has no altsetting 0 [ 74.364520][ T63] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 74.366961][ T63] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 74.369078][ T63] usb 7-1: Product: syz [ 74.370212][ T63] usb 7-1: SerialNumber: syz [ 74.374251][ T63] hub 7-1:250.228: bad descriptor, ignoring hub [ 74.376378][ T63] hub 7-1:250.228: probe with driver hub failed with error -5 [ 74.560024][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.563201][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.568830][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.572289][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.574466][ T5941] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.577214][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.577742][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.293'. [ 74.595173][ T63] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 74.627599][ T63] usb 7-1: USB disconnect, device number 3 [ 74.631590][ T63] usblp0: removed [ 74.675710][ T7118] chnl_net:caif_netlink_parms(): no params data found [ 74.727255][ T7118] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.729442][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.731325][ T7118] bridge_slave_0: entered allmulticast mode [ 74.733449][ T7118] bridge_slave_0: entered promiscuous mode [ 74.736669][ T7118] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.738859][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.740639][ T7118] bridge_slave_1: entered allmulticast mode [ 74.742576][ T7118] bridge_slave_1: entered promiscuous mode [ 74.765008][ T7118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.769024][ T7118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.798201][ T7118] team0: Port device team_slave_0 added [ 74.804210][ T7118] team0: Port device team_slave_1 added [ 74.822338][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.824128][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.830477][ T7118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.834750][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.837087][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.843374][ T7118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.868267][ T7118] hsr_slave_0: entered promiscuous mode [ 74.870127][ T7118] hsr_slave_1: entered promiscuous mode [ 74.871921][ T7118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.873852][ T7118] Cannot create hsr debugfs directory [ 74.975663][ T6032] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.135536][ T6032] usb 5-1: Using ep0 maxpacket: 32 [ 75.138732][ T6032] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.141928][ T6032] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.144314][ T6032] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 75.148186][ T6032] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 75.150374][ T6032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.153358][ T6032] usb 5-1: config 0 descriptor?? [ 75.256201][ T7143] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 75.399958][ T6032] usbhid 5-1:0.0: can't add hid device: -71 [ 75.401571][ T6032] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 75.404522][ T6032] usb 5-1: USB disconnect, device number 7 [ 75.466208][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 75.601640][ T7165] netfs: Couldn't get user pages (rc=-14) [ 75.670195][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.674172][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.678127][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.681567][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.683526][ T5946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.685562][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.692696][ T7169] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 75.734919][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.777850][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 75.807960][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.857589][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.859442][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.861225][ T7166] bridge_slave_0: entered allmulticast mode [ 75.863523][ T7166] bridge_slave_0: entered promiscuous mode [ 75.872646][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.881179][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.883713][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.885860][ T7166] bridge_slave_1: entered allmulticast mode [ 75.888640][ T7166] bridge_slave_1: entered promiscuous mode [ 75.908418][ T7190] xt_bpf: check failed: parse error [ 75.922841][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.927446][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.958267][ T7166] team0: Port device team_slave_0 added [ 75.961116][ T7166] team0: Port device team_slave_1 added [ 75.968775][ T7194] Bluetooth: MGMT ver 1.23 [ 76.005010][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.006673][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.012647][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.015867][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.017423][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.023040][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.031234][ T7201] (syz.2.324,7201,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "usrquotaªªªªª [ 76.031234][ T7201] lo" or missing value [ 76.035662][ T7201] (syz.2.324,7201,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 76.086499][ T7166] hsr_slave_0: entered promiscuous mode [ 76.088622][ T7166] hsr_slave_1: entered promiscuous mode [ 76.093476][ T7166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.095386][ T7166] Cannot create hsr debugfs directory [ 76.097206][ T1143] bridge_slave_1: left allmulticast mode [ 76.098689][ T1143] bridge_slave_1: left promiscuous mode [ 76.100433][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.104399][ T1143] bridge_slave_0: left allmulticast mode [ 76.107262][ T1143] bridge_slave_0: left promiscuous mode [ 76.108960][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.171337][ T7222] overlayfs: failed to resolve './file0/file0': -2 [ 76.219502][ T834] cfg80211: failed to load regulatory.db [ 76.325847][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.331713][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.331886][ T7238] netlink: 'syz.2.332': attribute type 11 has an invalid length. [ 76.338373][ T1143] bond0 (unregistering): Released all slaves [ 76.605624][ T5946] Bluetooth: hci2: command tx timeout [ 76.733167][ T1143] hsr_slave_0: left promiscuous mode [ 76.734948][ T1143] hsr_slave_1: left promiscuous mode [ 76.740111][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.742018][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.744242][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.747512][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.772345][ T1143] veth1_macvtap: left promiscuous mode [ 76.773844][ T1143] veth0_macvtap: left promiscuous mode [ 76.775236][ T1143] veth1_vlan: left promiscuous mode [ 76.776635][ T1143] veth0_vlan: left promiscuous mode [ 77.335315][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 77.362089][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 77.362101][ T39] audit: type=1400 audit(2000000028.639:498): avc: denied { mounton } for pid=7279 comm="syz.2.340" path="/84/file1" dev="autofs" ino=22529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 77.423070][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 77.737692][ T5946] Bluetooth: hci0: command tx timeout [ 78.016554][ T7118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.020819][ T7118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.024399][ T7118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.046693][ T7118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.066900][ T7166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.072307][ T7166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.076488][ T7166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.081142][ T7166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.118012][ T7118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.148832][ T7118] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.166376][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.168777][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.174315][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.177550][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.180052][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.197011][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.204007][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.206777][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.216028][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.217917][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.233790][ T7166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.236940][ T7166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.328318][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.373892][ T7118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.397499][ T7118] veth0_vlan: entered promiscuous mode [ 78.403318][ T7118] veth1_vlan: entered promiscuous mode [ 78.420559][ T7118] veth0_macvtap: entered promiscuous mode [ 78.426073][ T7118] veth1_macvtap: entered promiscuous mode [ 78.440265][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.443522][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.446403][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.448935][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.451304][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.453972][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.457087][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.459630][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.463044][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.470050][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.472655][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.475098][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.478194][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.480585][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.483172][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.485686][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.488209][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.491170][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.494307][ T7118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.496602][ T7118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.498759][ T7118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.500910][ T7118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.510448][ T7166] veth0_vlan: entered promiscuous mode [ 78.533316][ T7166] veth1_vlan: entered promiscuous mode [ 78.551976][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.553984][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.562071][ T7166] veth0_macvtap: entered promiscuous mode [ 78.571595][ T7166] veth1_macvtap: entered promiscuous mode [ 78.574210][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.577556][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.582326][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.584974][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.588381][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.590968][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.593421][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.596248][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.598679][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.601392][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.603791][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.606699][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.609971][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.619168][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.621774][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.624135][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.627026][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.629516][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.632068][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.635157][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.639171][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.641679][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.644397][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.648852][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.653644][ T7166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.656405][ T7166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.658544][ T7166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.660709][ T7166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.697024][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.700287][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.703703][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.712744][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.714886][ T5941] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.717882][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.731074][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.733015][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.739770][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.741786][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.806982][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 78.849840][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.851853][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.853650][ T7298] bridge_slave_0: entered allmulticast mode [ 78.855628][ T7298] bridge_slave_0: entered promiscuous mode [ 78.859032][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.860815][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.862591][ T7298] bridge_slave_1: entered allmulticast mode [ 78.864526][ T7298] bridge_slave_1: entered promiscuous mode [ 78.886071][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.889781][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.911361][ T7298] team0: Port device team_slave_0 added [ 78.917388][ T7298] team0: Port device team_slave_1 added [ 78.942521][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.944307][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.951365][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.957405][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.959708][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.968575][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.000968][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 79.003452][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 79.015924][ T7298] hsr_slave_0: entered promiscuous mode [ 79.016464][ T6032] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 79.021035][ T7298] hsr_slave_1: entered promiscuous mode [ 79.023324][ T7298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.025625][ T7298] Cannot create hsr debugfs directory [ 79.116219][ T7298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.116722][ T39] audit: type=1400 audit(2000000030.399:499): avc: denied { mounton } for pid=7309 comm="syz.0.344" path="/121/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 79.126008][ T7298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.128874][ T7298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.131793][ T7298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.160245][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.170211][ T6032] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 79.170659][ T7298] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.173494][ T6032] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.177847][ T193] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.179967][ T193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.181246][ T6032] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.184474][ T6032] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 79.186837][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.189446][ T6032] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 79.190296][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.192847][ T6032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.197793][ T6032] usb 9-1: config 0 descriptor?? [ 79.219124][ T39] audit: type=1326 audit(2000000030.499:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.0.345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e157fed9 code=0x7ffc0000 [ 79.225247][ T39] audit: type=1326 audit(2000000030.499:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.0.345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e157fed9 code=0x7ffc0000 [ 79.233224][ T39] audit: type=1326 audit(2000000030.499:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.0.345" exe="/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fb5e157fed9 code=0x7ffc0000 [ 79.240117][ T39] audit: type=1326 audit(2000000030.499:503): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.0.345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e157fed9 code=0x7ffc0000 [ 79.246353][ T39] audit: type=1326 audit(2000000030.499:504): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.0.345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e157fed9 code=0x7ffc0000 [ 79.252433][ T39] audit: type=1326 audit(2000000030.499:505): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.0.345" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb5e157fed9 code=0x7ffc0000 [ 79.259169][ T39] audit: type=1326 audit(2000000030.499:506): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.0.345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e157fed9 code=0x7ffc0000 [ 79.264435][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'. [ 79.264983][ T39] audit: type=1326 audit(2000000030.499:507): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7313 comm="syz.0.345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e157fed9 code=0x7ffc0000 [ 79.311149][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.402663][ T7304] warning: `syz.4.312' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.406982][ T7303] binder: BINDER_SET_CONTEXT_MGR already set [ 79.408865][ T7303] binder: 7302:7303 ioctl 4018620d 20000100 returned -16 [ 79.414666][ T7303] binder: 7302:7303 ioctl c018620c 20000040 returned -22 [ 79.421593][ T6032] usbhid 9-1:0.0: can't add hid device: -71 [ 79.423114][ T6032] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 79.426357][ T6032] usb 9-1: USB disconnect, device number 2 [ 79.428164][ T7298] veth0_vlan: entered promiscuous mode [ 79.436565][ T7298] veth1_vlan: entered promiscuous mode [ 79.447559][ T7337] netlink: 96 bytes leftover after parsing attributes in process `syz.0.348'. [ 79.450637][ T7298] veth0_macvtap: entered promiscuous mode [ 79.453681][ T7298] veth1_macvtap: entered promiscuous mode [ 79.461555][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.464590][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.467587][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.470771][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.473363][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.476412][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.478901][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.481507][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.483909][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.487009][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.489452][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.492062][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.495262][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.500349][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.503517][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.507681][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.511404][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.514670][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.519386][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.522226][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.525239][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.529128][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.532628][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.535422][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.538078][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.541042][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.546620][ T7298] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.549524][ T7298] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.552393][ T7298] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.555222][ T7298] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.561564][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 79.600317][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.603052][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.620790][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.622769][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.760440][ T7349] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 79.805740][ T5941] Bluetooth: hci0: command tx timeout [ 80.004309][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.545680][ T5975] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 80.696809][ T5975] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 80.705622][ T5975] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 80.708766][ T5975] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.710315][ T193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.712078][ T5975] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 80.718868][ T5975] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 80.722736][ T5975] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 80.724947][ T5975] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 80.729486][ T5975] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.732778][ T5975] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 80.736025][ T5975] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 80.739967][ T5975] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 80.742190][ T5975] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 80.745293][ T5975] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.748848][ T5975] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 80.752117][ T5975] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 80.764212][ T5975] usb 10-1: string descriptor 0 read error: -22 [ 80.766035][ T5975] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 80.768284][ T5975] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.773267][ T5975] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 80.775785][ T5941] Bluetooth: hci2: command tx timeout [ 81.024381][ T30] usb 10-1: USB disconnect, device number 2 [ 81.052383][ T7381] netlink: 'syz.5.360': attribute type 5 has an invalid length. [ 81.333434][ T7394] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.365' sets config #0 [ 81.403085][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.407960][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.411922][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.416273][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.426814][ T5946] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.430423][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.443457][ T7423] netlink: 'syz.4.370': attribute type 10 has an invalid length. [ 81.452090][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 81.455080][ T7423] batman_adv: batadv0: Adding interface: team0 [ 81.456904][ T7423] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.463263][ T7423] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 81.467192][ T7423] netlink: 'syz.4.370': attribute type 10 has an invalid length. [ 81.469834][ T7423] netlink: 2 bytes leftover after parsing attributes in process `syz.4.370'. [ 81.470315][ T7425] devpts: called with bogus options [ 81.484232][ T7423] team0: entered promiscuous mode [ 81.485881][ T7423] team_slave_0: entered promiscuous mode [ 81.487469][ T7423] team_slave_1: entered promiscuous mode [ 81.490386][ T7423] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.492926][ T7423] batman_adv: batadv0: Interface activated: team0 [ 81.495334][ T7423] batman_adv: batadv0: Interface deactivated: team0 [ 81.498216][ T7423] batman_adv: batadv0: Removing interface: team0 [ 81.500752][ T7423] bridge0: port 3(team0) entered blocking state [ 81.502577][ T7423] bridge0: port 3(team0) entered disabled state [ 81.504401][ T7423] team0: entered allmulticast mode [ 81.506031][ T7423] team_slave_0: entered allmulticast mode [ 81.507534][ T7423] team_slave_1: entered allmulticast mode [ 81.512913][ T7423] bridge0: port 3(team0) entered blocking state [ 81.515227][ T7423] bridge0: port 3(team0) entered forwarding state [ 81.582317][ T7416] chnl_net:caif_netlink_parms(): no params data found [ 81.642048][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.375'. [ 81.650913][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.652888][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.654918][ T7416] bridge_slave_0: entered allmulticast mode [ 81.658743][ T7416] bridge_slave_0: entered promiscuous mode [ 81.665168][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.667929][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.670065][ T7416] bridge_slave_1: entered allmulticast mode [ 81.673141][ T7416] bridge_slave_1: entered promiscuous mode [ 81.697756][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.701646][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.736243][ T7416] team0: Port device team_slave_0 added [ 81.739813][ T7416] team0: Port device team_slave_1 added [ 81.774039][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.776018][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.783813][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.788436][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.790469][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.796669][ T7460] netlink: 'syz.4.379': attribute type 2 has an invalid length. [ 81.798868][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.826395][ T7416] hsr_slave_0: entered promiscuous mode [ 81.828559][ T7416] hsr_slave_1: entered promiscuous mode [ 81.831054][ T7416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.833653][ T7416] Cannot create hsr debugfs directory [ 81.885681][ T5934] Bluetooth: hci0: command tx timeout [ 82.103485][ T7482] binder_alloc: binder_alloc_mmap_handler: 7471 20ffc000-20ffe000 already mapped failed -16 [ 82.112821][ T7481] ax25_connect(): syz.4.382 uses autobind, please contact jreuter@yaina.de [ 82.295593][ T834] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 82.446943][ T834] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.449929][ T834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.452732][ T834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.455205][ T834] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.458530][ T834] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.460867][ T834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.463936][ T834] usb 10-1: config 0 descriptor?? [ 82.537608][ T193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.600863][ T193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.671485][ T193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.798075][ T193] bridge_slave_1: left allmulticast mode [ 82.799698][ T193] bridge_slave_1: left promiscuous mode [ 82.802204][ T193] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.805148][ T193] bridge_slave_0: left allmulticast mode [ 82.807357][ T193] bridge_slave_0: left promiscuous mode [ 82.809171][ T193] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.859401][ T5934] Bluetooth: hci2: command tx timeout [ 82.887939][ T834] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.890640][ T834] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.892624][ T834] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.894538][ T834] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.900137][ T834] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 82.904252][ T834] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 82.909044][ T834] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 82.978848][ T7513] input: syz0 as /devices/virtual/input/input12 [ 83.025763][ T39] kauditd_printk_skb: 35 callbacks suppressed [ 83.025775][ T39] audit: type=1400 audit(2000000034.309:543): avc: denied { getopt } for pid=7511 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.138771][ T39] audit: type=1400 audit(2000000034.419:544): avc: denied { execute } for pid=7518 comm="syz.4.396" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 83.139030][ T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.139083][ T6032] usb 10-1: USB disconnect, device number 3 [ 83.151472][ T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.156937][ T193] bond0 (unregistering): Released all slaves [ 83.164177][ T7500] syz_tun: entered promiscuous mode [ 83.175983][ T7500] batadv_slave_0: entered promiscuous mode [ 83.179405][ T7500] hsr1: entered allmulticast mode [ 83.180704][ T7500] syz_tun: entered allmulticast mode [ 83.182104][ T7500] batadv_slave_0: entered allmulticast mode [ 83.202107][ T7525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.398'. [ 83.271509][ T7531] input: syz0 as /devices/virtual/input/input13 [ 83.299255][ T7535] netlink: 'syz.4.401': attribute type 21 has an invalid length. [ 83.301375][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 83.317655][ T39] audit: type=1400 audit(2000000034.599:545): avc: denied { read } for pid=7540 comm="syz.0.402" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.323644][ T39] audit: type=1400 audit(2000000034.599:546): avc: denied { open } for pid=7540 comm="syz.0.402" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.333691][ T39] audit: type=1400 audit(2000000034.599:547): avc: denied { ioctl } for pid=7540 comm="syz.0.402" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.360725][ T39] audit: type=1400 audit(2000000034.639:548): avc: denied { write } for pid=7544 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.480565][ T193] hsr_slave_0: left promiscuous mode [ 83.482878][ T193] hsr_slave_1: left promiscuous mode [ 83.484564][ T193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.489128][ T193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.492078][ T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.493921][ T193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.520553][ T193] veth1_macvtap: left promiscuous mode [ 83.522007][ T193] veth0_macvtap: left promiscuous mode [ 83.523438][ T193] veth1_vlan: left promiscuous mode [ 83.524761][ T193] veth0_vlan: left promiscuous mode [ 83.677176][ T7576] program syz.5.410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.965937][ T5934] Bluetooth: hci0: command tx timeout [ 84.155206][ T193] team0 (unregistering): Port device team_slave_1 removed [ 84.227175][ T193] team0 (unregistering): Port device team_slave_0 removed [ 84.392436][ T39] audit: type=1400 audit(2000000035.669:549): avc: denied { module_request } for pid=7580 comm="syz.4.411" kmod="fs-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 84.685794][ T7570] netlink: 10 bytes leftover after parsing attributes in process `syz.0.409'. [ 84.711057][ T7572] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.725608][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.411'. [ 84.761558][ T7416] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.772924][ T7586] netlink: 168 bytes leftover after parsing attributes in process `syz.5.412'. [ 84.772996][ T7416] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.782197][ T7416] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.788887][ T7416] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.814717][ T7572] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.867464][ T7572] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.874407][ T7416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.883960][ T7416] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.888358][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.890667][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.894874][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.897106][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.911759][ T7416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.914678][ T7416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.925587][ T5934] Bluetooth: hci2: command 0x040f tx timeout [ 84.929465][ T7594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7594 comm=syz.4.414 [ 84.973077][ T39] audit: type=1326 audit(2000000036.249:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.4.415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b377fed9 code=0x7ffc0000 [ 84.980694][ T7572] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.985158][ T39] audit: type=1326 audit(2000000036.249:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.4.415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b377fed9 code=0x7ffc0000 [ 84.991070][ T39] audit: type=1326 audit(2000000036.249:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.4.415" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff1b377fed9 code=0x7ffc0000 [ 85.026805][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.047326][ T7416] veth0_vlan: entered promiscuous mode [ 85.052780][ T7416] veth1_vlan: entered promiscuous mode [ 85.069653][ T7416] veth0_macvtap: entered promiscuous mode [ 85.073535][ T7416] veth1_macvtap: entered promiscuous mode [ 85.083226][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.088053][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.091069][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.094268][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.097748][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.101045][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.104098][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.107448][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.110521][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.113752][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.116885][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.120084][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.124043][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.136063][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.139352][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.142420][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.155399][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.158382][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.161062][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.163771][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.166626][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.169442][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.172040][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.174633][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.177335][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.180278][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.194000][ T7416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.196353][ T7416] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.199397][ T7416] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.201614][ T7416] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.218845][ T7572] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.235310][ T7572] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.249749][ T7572] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.262571][ T7572] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.268593][ T7606] netlink: 48 bytes leftover after parsing attributes in process `syz.4.417'. [ 85.270395][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.271974][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 85.273231][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.288550][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.290685][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.319536][ T7416] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000020: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 85.322748][ T7416] KASAN: maybe wild-memory-access in range [0xdead000000000100-0xdead000000000107] [ 85.326064][ T7416] CPU: 1 UID: 0 PID: 7416 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00316-gb5f217084ab3 #0 [ 85.329394][ T7416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.332066][ T7416] RIP: 0010:l2cap_conn_del+0x3dd/0x730 [ 85.333485][ T7416] Code: 8b 40 20 48 89 df ff d0 0f 1f 00 4c 89 f7 e8 ca 2f fb 00 4d 8d b4 24 80 04 00 00 48 89 df e8 8a 42 ff ff 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 0f 85 24 02 00 00 49 8b 84 24 80 04 00 00 4c 89 e3 [ 85.338307][ T7416] RSP: 0018:ffffc9000371fad8 EFLAGS: 00010a02 [ 85.339817][ T7416] RAX: 1bd5a00000000020 RBX: ffff88804aaa6000 RCX: ffffffff8a2f4f3e [ 85.341799][ T7416] RDX: ffff888020602440 RSI: ffffffff8a300c56 RDI: 0000000000000005 [ 85.343714][ T7416] RBP: ffff8880341df800 R08: 0000000000000005 R09: 0000000000000001 [ 85.345653][ T7416] R10: 0000000000000002 R11: 0000000000000000 R12: deacfffffffffc80 [ 85.347528][ T7416] R13: dffffc0000000000 R14: dead000000000100 R15: 0000000000000067 [ 85.349450][ T7416] FS: 0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 85.351591][ T7416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.353221][ T7416] CR2: 00007ffcd90480a0 CR3: 000000000df7e000 CR4: 0000000000352ef0 [ 85.355200][ T7416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.357159][ T7416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.359160][ T7416] Call Trace: [ 85.360009][ T7416] [ 85.360757][ T7416] ? die_addr+0x3b/0xa0 [ 85.361831][ T7416] ? exc_general_protection+0x155/0x230 [ 85.363216][ T7416] ? asm_exc_general_protection+0x26/0x30 [ 85.364633][ T7416] ? l2cap_chan_put+0x5e/0x2c0 [ 85.365846][ T7416] ? l2cap_conn_del+0x3d6/0x730 [ 85.367044][ T7416] ? l2cap_conn_del+0x3dd/0x730 [ 85.368257][ T7416] ? l2cap_conn_del+0x3d6/0x730 [ 85.369470][ T7416] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 85.370804][ T7416] l2cap_disconn_cfm+0x96/0xd0 [ 85.372008][ T7416] hci_conn_hash_flush+0x10b/0x260 [ 85.373277][ T7416] hci_dev_close_sync+0x603/0x11a0 [ 85.374571][ T7416] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 85.375950][ T7416] ? up_write+0x1b2/0x520 [ 85.377023][ T7416] ? rcu_is_watching+0x12/0xc0 [ 85.378230][ T7416] hci_dev_do_close+0x2e/0x90 [ 85.379419][ T7416] hci_unregister_dev+0x213/0x620 [ 85.380683][ T7416] ? __pfx_vhci_release+0x10/0x10 [ 85.381980][ T7416] vhci_release+0x79/0xf0 [ 85.383061][ T7416] __fput+0x3f8/0xb60 [ 85.384089][ T7416] task_work_run+0x14e/0x250 [ 85.385286][ T7416] ? __pfx_task_work_run+0x10/0x10 [ 85.386564][ T7416] do_exit+0xadd/0x2d70 [ 85.387631][ T7416] ? do_group_exit+0x1c3/0x2a0 [ 85.388864][ T7416] ? __pfx_lock_release+0x10/0x10 [ 85.390139][ T7416] ? do_raw_spin_lock+0x12d/0x2c0 [ 85.391436][ T7416] ? __pfx_do_exit+0x10/0x10 [ 85.392601][ T7416] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.393964][ T7416] do_group_exit+0xd3/0x2a0 [ 85.395113][ T7416] __x64_sys_exit_group+0x3e/0x50 [ 85.396372][ T7416] x64_sys_call+0x151f/0x1720 [ 85.397539][ T7416] do_syscall_64+0xcd/0x250 [ 85.398693][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.400173][ T7416] RIP: 0033:0x7f5ad877fed9 [ 85.401331][ T7416] Code: Unable to access opcode bytes at 0x7f5ad877feaf. [ 85.403057][ T7416] RSP: 002b:00007ffcd904a1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 85.405147][ T7416] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ad877fed9 [ 85.407160][ T7416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 85.409139][ T7416] RBP: 00007f5ad87e0840 R08: 00007ffcd9047f57 R09: 0000000000000003 [ 85.411117][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.413193][ T7416] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffcd904a360 [ 85.415200][ T7416] [ 85.415982][ T7416] Modules linked in: [ 85.417058][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.419190][ T7416] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 85.423063][ T7621] base_sock_release(ffff88804f0eda00) sk=ffff888020336000 [ 85.423150][ T7416] RIP: 0010:l2cap_conn_del+0x3dd/0x730 [ 85.426974][ T7416] Code: 8b 40 20 48 89 df ff d0 0f 1f 00 4c 89 f7 e8 ca 2f fb 00 4d 8d b4 24 80 04 00 00 48 89 df e8 8a 42 ff ff 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 0f 85 24 02 00 00 49 8b 84 24 80 04 00 00 4c 89 e3 [ 85.435712][ T7416] RSP: 0018:ffffc9000371fad8 EFLAGS: 00010a02 [ 85.437346][ T7416] RAX: 1bd5a00000000020 RBX: ffff88804aaa6000 RCX: ffffffff8a2f4f3e [ 85.439475][ T7416] RDX: ffff888020602440 RSI: ffffffff8a300c56 RDI: 0000000000000005 [ 85.441476][ T7416] RBP: ffff8880341df800 R08: 0000000000000005 R09: 0000000000000001 [ 85.443502][ T7416] R10: 0000000000000002 R11: 0000000000000000 R12: deacfffffffffc80 [ 85.445550][ T7416] R13: dffffc0000000000 R14: dead000000000100 R15: 0000000000000067 [ 85.447470][ T7416] FS: 0000000000000000(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 85.449686][ T7416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.451326][ T7416] CR2: 00007fb5df3d4fb8 CR3: 00000000506a0000 CR4: 0000000000352ef0 [ 85.453331][ T7416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.455341][ T7416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.457698][ T7416] Kernel panic - not syncing: Fatal exception [ 85.459837][ T7416] Kernel Offset: disabled [ 85.460937][ T7416] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:05:41 Registers: info registers vcpu 0 CPU#0 RAX=000000000009c7d4 RBX=0000000000000000 RCX=ffffffff8b29f759 RDX=ffffed100d4c6fee RSI=ffffffff8bd1b460 RDI=ffffffff817086b9 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f0e10 R15=0000000000000000 RIP=ffffffff8b2a0b3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc5c55cbfc CR3=00000000325f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c63fad0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c63e087 000055555c63de20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c648698 000055555c648630 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c63a940 000055555c648700 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c63a980 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01080004004fe000 7370756f72677465 7301ffffffffffff ffffeb080a800306 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0304100010030610 00000300100005b9 fc10000100000008 0606012ac00a8004 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010004108384d0d6 0800010000000806 06010cd200100050 030a100040030180 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100030030e100020 0304100010030610 00000300100005b9 fc10000100000008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6261746265203a4c 4941465a59530a37 3620737574617473 2068746977206465 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a37362073757461 7473206874697720 6465746978652070 6f6f6c0a29646574 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74696d7265702074 6f6e206e6f697461 7265704f203a3120 6f6e72726528200a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 295043545f4f544f 52505049202c4d41 455254535f4b434f 53202c54454e495f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46412874656b636f 73203a746e696f70 6b6365686320656c 6261746265203a4c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c99d5 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc9000371f4b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6d203a4e4153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff851c9970 R15=0000000000000000 RIP=ffffffff851c99ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcd90480a0 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ad89106a3 00007f5ad89106a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64657474696d7265 7020746f6e206e6f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd904a456 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd904a456 00007ffcd904a45c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ad87f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ad87f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ad87f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ad87f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ad87f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ad87f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000682b4 RBX=0000000000000002 RCX=ffffffff8b29f759 RDX=ffffed100d506fee RSI=ffffffff8bd1b460 RDI=ffffffff817086b9 RBP=ffffed1003ad2000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d690000 R14=ffffffff905f0e10 R15=0000000000000000 RIP=ffffffff8b2a0b3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005914a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000300080000003b 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f088aff4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f088aff4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f088aff4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f088aff4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f088aff4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f088aff4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800000000020009 0007000000000000 00081400081a2d01 9692f70605010001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000250f378c2f 13cc62a0d80add29 17a268768b060004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000900070000 0000000000081400 081a2d019692f706 0501000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01970e37434b9592 2a45933defede4d6 0dd4cce65deecb9e 2ab4e0ecff0bed81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cecae1d509d89abb e35c211f9563dfdc 06e06756d90a4000 000001b70d36009e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cacc25507ab5db4e eb5a3f68a4160d73 75879f7cfe22d3d9 e1df30d9d6141bce ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e45e3a6491b71f00 000009f4cea7e52e 4ceccb1780ceba6b e07c271685a952ef ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=8000000049515007 RCX=ffffffff81e393eb RDX=ffff888030b20000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900057a7730 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=00000000000a4001 R12=1ffff92000af4ee7 R13=ffff888028185000 R14=00007fb5dfff0000 R15=0000000000000000 RIP=ffffffff819a06d1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555c54e500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb5e22756c0 CR3=000000002fe3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9eb59630 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5e15f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5e15f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5e15f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5e15f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5e15f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5e15f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000