last executing test programs: 59.872441853s ago: executing program 3 (id=16): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000280)={0x7fffffff, 0x4, {}, {0xffffffffffffffff}, 0xfffffffffffffe00, 0xe}) mount$overlay(0x0, &(0x7f00000000c0)='\x00', &(0x7f0000000100), 0x2480, &(0x7f00000002c0)={[{@metacopy_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir_on}, {@uuid_null}, {@volatile}, {@verity_require}, {@redirect_dir_off}], [{@fsmagic={'fsmagic', 0x3d, 0x10000}}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_lt={'euid<', r2}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, 'E'}}, {@hash}, {@fowner_gt={'fowner>', r3}}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'syz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x50, 0x46, 0x46]}, 0x32) 59.525828961s ago: executing program 3 (id=19): r0 = syz_io_uring_setup(0x24f8, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000140)) dup2(r3, r0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e23, 0x0, @dev, 0xfffffffc}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 59.523033935s ago: executing program 3 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x8800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="0f013d0f01c40f3026f3a50f3066b91e0b00000f32f40f01dc0f01b50d000f01ca"}], 0x44, 0x49, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000154000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2, 0xbb, 0x0, 0xc, 0x4}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 58.485966546s ago: executing program 3 (id=45): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x7ac}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 58.42462657s ago: executing program 3 (id=49): r0 = socket$inet(0x2, 0x3, 0x82) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x30, r1, 0x1, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @private}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0) 56.866016507s ago: executing program 3 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x14, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x2, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x9, {0x1a9}}}}]}]}, 0x68}}, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000400)={0x9, 0xe0, "a9d337aa03b1f7c1ce7d145e390f36503767bc8d5d8868ff", {0x3, 0xd}, 0xc2}) 56.840408004s ago: executing program 32 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x14, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x2, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x9, {0x1a9}}}}]}]}, 0x68}}, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000400)={0x9, 0xe0, "a9d337aa03b1f7c1ce7d145e390f36503767bc8d5d8868ff", {0x3, 0xd}, 0xc2}) 22.708829089s ago: executing program 4 (id=429): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600", [0x2]}}) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/51, 0x33}], 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 22.603081404s ago: executing program 4 (id=430): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="80003792a88f13ce", 0x8, 0x20004014, &(0x7f0000000180)={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) fanotify_init(0x4, 0x800) write$hidraw(r1, &(0x7f0000000040)="24c8d8a5f8", 0x5) 22.601945985s ago: executing program 4 (id=432): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x4b, 0x71, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x4b, 0x71, 0x0, 0x0) memfd_create(&(0x7f0000000640)='@&)#\n*)\\\x00', 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000240)) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x6, 0x9, {0xffffffffffffffff}, {0xee00}, 0x1b4dd92, 0xe1d6}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x6, 0x9, {0xffffffffffffffff}, {0xee00}, 0x1b4dd92, 0xe1d6}) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @generic="80e2e23a"]}, 0x18}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @generic="80e2e23a"]}, 0x18}], 0x1}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000210400"/20, @ANYRES16=0x0, @ANYRESDEC=r4, @ANYRES32=r8, @ANYBLOB="4317a90016b2d79d53bc2f5258a738fcd57bf559b1567e86dd049b1becb9a1498d0f52be4ea7b71ea0e7d5ae6ba056a8e68ecfaf528bab002b17fc532e9bb4fdb3a3074f73007b31682391addbd12460a94180d27b914e1cc91b9160336ab133b68b48f44b9d31186e1f1cd5ce60c74103abff5bdff986eecc1d73e97968a32d36b85747b8dc2f25512d012865de09bb1ba13e3cba3bf01d8ed46c98de3b43fe30dd7076faac8c5312b898a422"], 0x4c}}, 0x0) 22.295289001s ago: executing program 4 (id=433): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', &(0x7f0000000240), 0x808400, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) (async) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', &(0x7f0000000240), 0x808400, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) 22.286517594s ago: executing program 4 (id=434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}}, {0x0, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "a29005d8a541e19d9a6c4d819c40fd3ca7a7c4c9bae26794c7153071d199a096", "b55d79a0122be6d7f56ab5825b66da22148668447deb46bb2c84be446ea718b84aa47137db8eb8f51f7e41798c9ed8b3", "ce106cdae276ddbda043c14291721ef618b37801664f6275afef0920", {"d78a9b76ba2951251d315ecd8b0745bf", "79dfcd7d28d6cd867ff10bee8aa70950"}}}}}}}}, 0xc6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x5, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x28, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x4}, 0x8) r8 = socket$kcm(0x21, 0x7, 0x2) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x7fffffff) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0xcca, @dev={0xfe, 0x80, '\x00', 0x27}, 0xd0338390}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 22.221541105s ago: executing program 4 (id=435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206010200000000000000000000000105000100070000000900020073797a30000000000c0007800500150001002623575a22ea9c36000011000300686173683a69702c706f727400000000050005000a000000"], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @rose}, [@null, @rose, @netrom, @netrom, @remote, @rose, @default, @rose]}, &(0x7f0000000180)=0x48) syz_emit_ethernet(0x72, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "8b1a14005c00f71244c85425"}}}}}}}, 0x0) r2 = accept$ax25(r1, &(0x7f0000000080)={{0x3, @null}, [@null, @default, @rose, @rose, @netrom, @default, @null, @default]}, &(0x7f0000000000)=0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000640)="45ae1a14655dfe5f3bcd7ad4455523c31193921c2000954071b67abb356e5406fbef63430f0314ac8f77b5ee989bae4b3881f491af55adbdb591ffc04f019ca63eff3ea68d91de4dd642de83911b6615f0113b82d600d6f438dc187f071cb893defef8c07c4917f5465ceba0196ea5a4af29245b37ed19610b0ade72a6c47a0ce664a396c1d24a48ae1baeef7dd47e10100298075f358f100fa94e67139e6905cfbc11e22917cb612e4925c56826aa7a010abeb37dbd432bd20286ac09053cad8f61d653deb6c1e493aace16310526138d9443739b6929dff0caa9") sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000012000006c00128009000100766c616e000000005c0002800c000200540a00001800000006000100000000001c0004800c000100000000006a0000000c0001008000000000000000280003800c00010002000000070000000c00010000000000890300000c000100020000000004000008000500", @ANYRES32=r5, @ANYBLOB="69ed6808332626c0e6af9aa628f1f5c10c9eb4ad643298b3922bd4f39041435d041fad79dbe3cf4e8332ced4fd13f0ad7a3ed06d8a37625edac41f90790580c51195fe1983d1ca8a94e0a2150cf907f2bc223e1dd662d737c595b8bdd7a1c85280e8f69171e205793b8bf8b09a1df0efb700f977820c5b61e0ffbd5116055b8ea6ce327e44106b9f21b7488cce19648adc6e7133e4dfd7d30458c3b000aa3766eefea0aa6f2f01d47770eb741f8548362b57db7d9563ec1c9a158efb6177094673fa554cfa9b02e2a3523ebcb81c415c573e4806627d64162a73a5f7f5eb8f5e13c71ceb0194f830422f008be102"], 0x94}, 0x1, 0xba01}, 0x810) r6 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r8, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) semget$private(0x0, 0x2, 0x140) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) read$hiddev(r9, &(0x7f0000001100)=""/234, 0xea) shmctl$SHM_LOCK(r6, 0xb) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100)=0x381, 0x4) 22.211905948s ago: executing program 33 (id=435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206010200000000000000000000000105000100070000000900020073797a30000000000c0007800500150001002623575a22ea9c36000011000300686173683a69702c706f727400000000050005000a000000"], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @rose}, [@null, @rose, @netrom, @netrom, @remote, @rose, @default, @rose]}, &(0x7f0000000180)=0x48) syz_emit_ethernet(0x72, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "8b1a14005c00f71244c85425"}}}}}}}, 0x0) r2 = accept$ax25(r1, &(0x7f0000000080)={{0x3, @null}, [@null, @default, @rose, @rose, @netrom, @default, @null, @default]}, &(0x7f0000000000)=0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000640)="45ae1a14655dfe5f3bcd7ad4455523c31193921c2000954071b67abb356e5406fbef63430f0314ac8f77b5ee989bae4b3881f491af55adbdb591ffc04f019ca63eff3ea68d91de4dd642de83911b6615f0113b82d600d6f438dc187f071cb893defef8c07c4917f5465ceba0196ea5a4af29245b37ed19610b0ade72a6c47a0ce664a396c1d24a48ae1baeef7dd47e10100298075f358f100fa94e67139e6905cfbc11e22917cb612e4925c56826aa7a010abeb37dbd432bd20286ac09053cad8f61d653deb6c1e493aace16310526138d9443739b6929dff0caa9") sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000012000006c00128009000100766c616e000000005c0002800c000200540a00001800000006000100000000001c0004800c000100000000006a0000000c0001008000000000000000280003800c00010002000000070000000c00010000000000890300000c000100020000000004000008000500", @ANYRES32=r5, @ANYBLOB="69ed6808332626c0e6af9aa628f1f5c10c9eb4ad643298b3922bd4f39041435d041fad79dbe3cf4e8332ced4fd13f0ad7a3ed06d8a37625edac41f90790580c51195fe1983d1ca8a94e0a2150cf907f2bc223e1dd662d737c595b8bdd7a1c85280e8f69171e205793b8bf8b09a1df0efb700f977820c5b61e0ffbd5116055b8ea6ce327e44106b9f21b7488cce19648adc6e7133e4dfd7d30458c3b000aa3766eefea0aa6f2f01d47770eb741f8548362b57db7d9563ec1c9a158efb6177094673fa554cfa9b02e2a3523ebcb81c415c573e4806627d64162a73a5f7f5eb8f5e13c71ceb0194f830422f008be102"], 0x94}, 0x1, 0xba01}, 0x810) r6 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r8, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) semget$private(0x0, 0x2, 0x140) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) read$hiddev(r9, &(0x7f0000001100)=""/234, 0xea) shmctl$SHM_LOCK(r6, 0xb) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100)=0x381, 0x4) 1.817150693s ago: executing program 1 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x8, 0x7f, 0xb5c}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007, 0x12, r1, 0x100000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r0, @ANYRESDEC=r0], 0x24}}, 0x0) 1.732746865s ago: executing program 1 (id=658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000500)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1000, 0x2}, 0xb) ioprio_set$pid(0x1, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0, @ANYBLOB="bc7c3e802343e88d9ff23b28e737749cd5a888fbf216e4026c2d257b9d1538bb475eaae7f82f5e59a26a0cdeae3cf5427ec8ed841ffea554875257d74bfe95a3e95af30b75a5fc6545effcdbd5d1d43a42f801fb40a2a0cf5135a7396a937fea407c8960052a62f8c815afc7f0f99f57642554f02839be5476c63c2fc72c6eefdeaf8d42cd8b0dfdc5b01cb2713b68d765632a745a4d9b5061f0176f440ba53237a181f60cc7f2f7d6369583fe39971349d1c62e1a8cf0a3102ecef609e103bf", @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=r1, @ANYRES8=0x0, @ANYRESHEX=0x0], 0x28}}, 0x0) ioctl$KDSKBLED(r4, 0x4b65, 0xffffffffffffff94) 1.732514219s ago: executing program 1 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010300000ae6f720ffa003"], 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) close_range(r1, r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010300000ae6f720ffa003"], 0x3c}}, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) (async) close_range(r1, r1, 0x2) (async) 1.667512157s ago: executing program 1 (id=661): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x240bf, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x80) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) (async) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x240bf, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x80) (async) 1.57346568s ago: executing program 1 (id=662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) (async) chdir(&(0x7f0000000200)='./file0\x00') (async) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x140) getdents(r1, &(0x7f0000000240)=""/125, 0x7d) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1000, 0x80) (async) keyctl$set_reqkey_keyring(0xe, 0x5) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.570776224s ago: executing program 1 (id=664): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaad288a800008100400086dd61c313a00048110000000000000000000000ffffac1e0001ff0200000000000000000000000000014e234e24004890"], 0x8a) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000022000000000000030202000900010073797a3100000000"], 0x20}, 0x1, 0x40030000000000}, 0x0) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f1ffffff210000400000000009"]) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) 1.424519658s ago: executing program 0 (id=667): modify_ldt$write(0x1, &(0x7f0000000040)={0x1000, 0x0, 0x1000}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) syz_clone(0x27800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.423152237s ago: executing program 0 (id=668): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0xfffffffc, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xffff}]}}]}, 0x44}}, 0x20000000) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe2, '\x00', 0x6}, {0xf9, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe2, '\x00', 0x6}, {0xf9, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={r3, r4, r5, 0x0, 0x80000001, 0x80000001, 0x0, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={r3, r4, r5, 0x0, 0x80000001, 0x80000001, 0x0, 0x0, 0x3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)) pipe2$9p(&(0x7f0000000240), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) socket$inet6(0xa, 0x2, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x2400a800, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) writev(r10, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) (async) writev(r10, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) sendmmsg$inet6(r9, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000000200000008"], 0x1c}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000000200000008"], 0x1c}}, 0x0) sendto$inet6(r11, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @loopback, 0xcf}, 0x1c) 1.092907584s ago: executing program 5 (id=674): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x10b003) ioctl$CDROMVOLCTRL(r2, 0x31f, &(0x7f0000000080)={0x7, 0x1e, 0x6, 0x5}) 882.395076ms ago: executing program 5 (id=679): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 446.61649ms ago: executing program 0 (id=689): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2800, 0x7, 0x4, 0xd9, 0x3}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 351.064909ms ago: executing program 2 (id=690): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89b1, &(0x7f0000001640)={'macvlan0\x00', @ifru_map={0xffffffffffffff80, 0x7fff, 0x10, 0xd, 0x1, 0xa}}) write$cgroup_pressure(r1, &(0x7f0000000100)={'full', 0x20, 0x4400000000000007, 0x20, 0xffffa}, 0x2f) close(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000002e0efc247520d20060f0"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 350.470342ms ago: executing program 0 (id=691): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') (async) io_uring_setup(0x1b94, &(0x7f0000000000)) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xfffffffffffffffd, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) (async, rerun: 32) getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c) (async, rerun: 32) getdents64(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 296.82234ms ago: executing program 2 (id=692): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0xf22c, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0xff7, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x80000001, 0x326, 0x5, 0xff}}]}]}}}]}, 0x64}}, 0x4048804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000500)={0x55, 0x80, 0x101, {0xc, 0x6}, {0x1, 0x2e}, @rumble={0x0, 0x3}}) 295.409203ms ago: executing program 0 (id=693): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async, rerun: 32) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async, rerun: 64) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async, rerun: 64) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (async, rerun: 64) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) (rerun: 32) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) (async) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x280, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x81, 0x17}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8844) (async, rerun: 32) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) (rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r11, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 180.894036ms ago: executing program 2 (id=694): r0 = syz_open_pts(0xffffffffffffffff, 0x200440) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1) ioctl$TIOCCONS(r0, 0x541d) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x742, 0x1d2, 0x1, 0x5, 0x0, "3c8564d397057d8fd15751aafc9c15b4c425d9"}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x0, 0x0, {0xc65d, 0x3}, {0xff, 0x9}, @const={0x3b, {0x1, 0x3, 0x3, 0x600}}}) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f00000000c0)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000500)={0x0, 0x1, 0x1e, 0x5, 0x155, &(0x7f0000000100)="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"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000540)={0xf, 0x1ff, 0x4, 0x9, 0x10, "96d78bfff9b19773b594309fa4e7e9c0990657"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000580)={0xfffff000, 0x646, 0x4}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000600)={0x8001, 0x0, 'client0\x00', 0x0, "5b61bb16392bfd9d", "010f813d861b9d4abcbb68e6437917de1512cd952ae957acf2b18f8704377416", 0xf6, 0x9}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x2, 0x1, 0x9, @remote, @private1, 0x8, 0x41, 0x6, 0x9}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000880)={@broadcast, @broadcast, 0x0}, &(0x7f00000008c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @initdev}, &(0x7f0000000940)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000980)={0x674, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x240, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5, 0x5, "8b"}, @ETHTOOL_A_BITSET_VALUE={0xe4, 0x4, "d444f8529844a8591948cac053ec9d63c5fea80984c74dd4e958bfbbd0fe980d474dae249d879ddeba23eac2f066a6462e8548a81f33c2cfa69a555f2187e340ac100fef1a345589cd24ea901a0ce36e0c119904ebf2bab59f97e99077674536ca0b2387f33d45e4c94e92a2b53e3430e169f726f69ac386845db2bf8f9c4f80493975788e9d879cc91b79ba5d1ef50fedb99193c551fe9f990210d327300bfcd0c59d082f997951f75b39c6aa304eadebd1dddabe2bb1b6a31d08e22d68ce1f925af28b9b073549d410a6e172f39f362ee37d4981513972d81279487dd3d6b7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, "77b2"}, @ETHTOOL_A_BITSET_MASK={0xca, 0x5, "adeac3583745ece2580218485b7501e4b7cdc7663636cca5049112c86131a206d4f05079b698e18659862f8b60c6ddd384764ceeb449fd7c66c48a4cb3940722198861160e46d6fdeb0a6e7ef3121106346ef2dd924fca46238ccd4415c37649c04382a0b388e1ddc8769e0baba2d5b918b155814189d18cb79fcc6a049891c2238f58bb74cad942d0ebded2ccab8020c5a3ace5701cc39922e44617a1e69451081b9b14688c2999b9c50a5235b24a245c1376edf19f71919849716ffc1567fc13278d3460ec"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe40}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5f, 0x5, "928cbb9cdec450e9ba734d39df70c50d26887cc8e22091b0e179681c4d60b8ddf6569972e2d7f0168da088bcdd65dccd42edd05343ebe99dcea004de8424065fe13428ee496ee98358839cee13a9661348c5da10ee6536ce624cfc"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x258, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "acc7fc1a13b4516217d4dec04f66d18c57b95f4eb6bc9de53b68a9e98b754d998ac31da99c415b83877aea10c34d30492a7297d2d53f4331f077d3e525151324cb5392c92aad1a9552bc837dfcedc2e6dfd6a993c897768a29a6072ff5df1b8dd94f06a8b384a5e0f46ed084d02dd928f0900825620890a6dea6c279b26895f2b02a8397853ff3ef89ed09bdd484c30c3d7726a5386df8541637ba421260a3d7ac902b559eee977719c56f1d"}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b39}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\/\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xc1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/snd/seq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/snd/seq\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "c3ea40a2741bd09972f0d758a5f3f7cf67966fe102b19329e45be10e07e6c7a544d45dff136db684c552ab71daa4681b1d74f6a3543579112a3e5872a47a48a3ef18b494575b8e7117471ff76bd80efba40e36a61643adf5ab5de8c8dd4a4e5c1a0f0abd079afdd0949e704bee282d0c661801f0b57a6fa3d459203c890602a2005a74660118ce8360bfd763adce1764cae38555e243ffef"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "578d4c62fb580e4021a97a35be49c0a52d55f4432fcaa3ea9501a8cea8bcc0c4fa227ada179eead482d9067a6ba3f8dbcc7a469de5896d8e5c89b5d6d5d552870f1bd696e4690233b362f46811e075412087305d5f4b0fe76f2fe1585aa8495d1f5322281559f1bc99fd8ff32b0159ddf0cdf7b355d966e06045afb0"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-$^/#)\xae\'n%'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/snd/seq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'client0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'client0\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x674}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), 0xffffffffffffffff) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x0, 0x186) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x80, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r11}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r12}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r9) sendmsg$NL80211_CMD_SET_MAC_ACL(r12, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xd0, r13, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4b}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8041}, 0x20000910) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), r9) sendmsg$IPVS_CMD_DEL_SERVICE(r9, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x13c, r14, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8810) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r12, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x50, 0x140f, 0x400, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 180.601272ms ago: executing program 0 (id=695): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000000)={"ffffffff", 0x200, 0x5, 0x3, 0x5, 0x6d, '\x00\x00\x00\x00\x00@\x00', "2f2c30e1", "39ad577c", "f119ab00", ["5d08ffff840200731c55f35c", "749e9fffef9ad43460f115b1", "681218fcfcdc175ade9e1fc0", "f6c7fdde06da7e1e2f071a04"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000540)={0x1, 0xc, 0x7, 0x8, 0x409, 0x3fe, "a2a0069f416af72504d1690ea4e6e0ef", 0x3, 0xe, 0x2, 0x9, 0x6, 0xf4, 0x8}) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x8804) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r2, &(0x7f000000c940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="740000000301010800000000000000000100000154010f8008000240000000cd08000240ffffba720800034000000006080001400000004008000340800000df0800024000000003080003400000000b080003400000000384a00ffdde9e5fff0800034000000e4708000140000000080c000f80"], 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) r4 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}]}}}]}}]}}, 0x0) syz_usb_ep_write(r4, 0x82, 0x0, 0x0) syz_usb_disconnect(r4) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001680)={&(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x5080}, 0x5536995dd0ef0b0c) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_loaded', 0x400141, 0x8) r6 = socket(0x18, 0x0, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x4c040) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x81, @media='ib\x00'}}}, ["", "", ""]}, 0x68}}, 0x10) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl(r8, 0x8, &(0x7f0000000200)="0e961e4cb0f27dfd68d82cfd4e1aa09b66a8e95018fafd4780e241a3f92dc5bd912779201a029ae88d9d68be8389cf1a5575ad9093a351acf00e74ba38b1fb5a3fc63beaf0bc5d60cd82c347f5e1ce12edc021536b14ddca8067187431512ad1923add13e9fd4ad3593d8e80892b6dae8e386f9758caf5e656df65cf4040d5e2ffaade35944d15c4f34315686508dc889cd75afa13f53cbf41ba7c3430c5673439c2653370d4") ioctl$HIDIOCGUSAGE(r8, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x20000000, 0x89c4675}) 175.872561ms ago: executing program 5 (id=696): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x5, 0x5, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) (async) accept4(r2, 0x0, 0x0, 0x800) 174.906834ms ago: executing program 2 (id=697): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0c007d800500000002"], 0x28}}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0x2f) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) splice(r3, &(0x7f00000000c0)=0xffffffffffffffff, r3, &(0x7f0000000100)=0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) lseek(r6, 0x43d0, 0x0) getdents(r6, 0x0, 0x0) getdents64(r6, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000000)=0xc) 174.690803ms ago: executing program 5 (id=698): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x34, r3, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7}]}, 0x34}}, 0xc084) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000140)={0x20, r5, 0x43, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000300)=0x0) r7 = fcntl$getown(r2, 0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r9, 0x114, 0x2, &(0x7f0000000080)={{0x0}, 0x0}, 0x20) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000002480)={0x3820ca000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x9}, &(0x7f00000001c0)=""/126, 0x7e, &(0x7f0000000240)=""/175, &(0x7f0000000340)=[r6, r7, 0x0, r8], 0x4, {r10}}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r0) (async) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x34, r3, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7}]}, 0x34}}, 0xc084) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000140)={0x20, r5, 0x43, 0x0, 0x0}) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000300)) (async) fcntl$getown(r2, 0x9) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$RDS_GET_MR(r9, 0x114, 0x2, &(0x7f0000000080)={{0x0}, 0x0}, 0x20) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) (async) syz_clone3(&(0x7f0000002480)={0x3820ca000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x9}, &(0x7f00000001c0)=""/126, 0x7e, &(0x7f0000000240)=""/175, &(0x7f0000000340)=[r6, r7, 0x0, r8], 0x4, {r10}}, 0x58) (async) 74.493489ms ago: executing program 2 (id=699): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a1870", 0x11}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200080000000000000000000000001701000003000000010000"], 0x60, 0x4044811}], 0x1, 0x8001) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80, 0x0) (async) recvmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/133, 0x85}], 0x1}, 0x6b9}], 0x1, 0x40, 0x0) 74.006541ms ago: executing program 5 (id=700): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0xc0045002, &(0x7f0000000100)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}}, 0x0) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@migrate={0xe8, 0x21, 0x8, 0x70bd2d, 0x25dfdbfb, {{@in6=@mcast1, @in6=@loopback, 0x4e20, 0xe9, 0x4e24, 0x6, 0x2, 0x0, 0x0, 0x87, r5, r6}, 0x6e6bbf}, [@coaddr={0x14, 0xe, @in6=@empty}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2a, 0x1ff}}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@mcast2, 0x2, 0x7, 0x8}}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0xc0}}]}, 0xe8}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d80080003000000003a"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r11 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f00001ef000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, 0x0, 0x1, 0x16, 0x0, 0x55}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001400010400000000000000000ad8ee74", @ANYRES32=r10, @ANYBLOB="140001"], 0x2c}}, 0x0) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$XDP_STATISTICS(r12, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x30) 408.577µs ago: executing program 5 (id=701): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="09000000010000", 0x7) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x7}}, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x7, 0xe, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x40, 0x7800, 0x6, 0x95}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r2, 0x25, 0x8, @void}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) getrandom(0x0, 0x0, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000020b301000000000007000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000000)={0x51, 0x50c5, 0x7e, {0x3, 0xac5}, {0x2, 0x1}, @period={0x5a, 0xfffe, 0x0, 0x5, 0x2000, {0xc2c2, 0x0, 0x8, 0x9}, 0x0, 0x0}}) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 0s ago: executing program 2 (id=702): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000001b40)) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000001b40)) (async) kernel console output (not intermixed with test programs): [ 37.838793][ T5925] bridge_slave_0: entered allmulticast mode [ 37.841132][ T5925] bridge_slave_0: entered promiscuous mode [ 37.844673][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.846654][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.848622][ T5925] bridge_slave_1: entered allmulticast mode [ 37.850688][ T5925] bridge_slave_1: entered promiscuous mode [ 37.875945][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 37.894055][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.913931][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.931009][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.936565][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.940715][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.003311][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.011322][ T5933] team0: Port device team_slave_0 added [ 38.045796][ T5933] team0: Port device team_slave_1 added [ 38.049926][ T5938] team0: Port device team_slave_0 added [ 38.075928][ T5938] team0: Port device team_slave_1 added [ 38.079178][ T5925] team0: Port device team_slave_0 added [ 38.119753][ T5925] team0: Port device team_slave_1 added [ 38.121918][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.123922][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.125862][ T5926] bridge_slave_0: entered allmulticast mode [ 38.127960][ T5926] bridge_slave_0: entered promiscuous mode [ 38.132339][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.134942][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.137561][ T5926] bridge_slave_1: entered allmulticast mode [ 38.141155][ T5926] bridge_slave_1: entered promiscuous mode [ 38.144310][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.146209][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.152935][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.193165][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.195002][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.201941][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.206611][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.208918][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.218244][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.223043][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.225343][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.234085][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.238336][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.241015][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.248547][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.253814][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.262779][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.264650][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.271707][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.275739][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.297785][ T5926] team0: Port device team_slave_0 added [ 38.302922][ T5926] team0: Port device team_slave_1 added [ 38.353355][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.355227][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.361819][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.367863][ T5933] hsr_slave_0: entered promiscuous mode [ 38.370096][ T5933] hsr_slave_1: entered promiscuous mode [ 38.393230][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.395090][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.401625][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.410519][ T5938] hsr_slave_0: entered promiscuous mode [ 38.413105][ T5938] hsr_slave_1: entered promiscuous mode [ 38.415336][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.418054][ T5938] Cannot create hsr debugfs directory [ 38.434740][ T5925] hsr_slave_0: entered promiscuous mode [ 38.437476][ T5925] hsr_slave_1: entered promiscuous mode [ 38.440344][ T5925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.442971][ T5925] Cannot create hsr debugfs directory [ 38.492261][ T5926] hsr_slave_0: entered promiscuous mode [ 38.494814][ T5926] hsr_slave_1: entered promiscuous mode [ 38.497290][ T5926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.500112][ T5926] Cannot create hsr debugfs directory [ 38.765182][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.772450][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.776575][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.786880][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.808662][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.812619][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.815592][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.820153][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.850907][ T5925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.855872][ T5925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.862210][ T5925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.867559][ T5925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.899413][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.905206][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.910561][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.915829][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.956230][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.962897][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.984265][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.998674][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.003509][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.005614][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.010670][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.017056][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.018899][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.026439][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.028307][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.045326][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.047204][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.052484][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.067469][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.069395][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.072628][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.074476][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.083707][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.092859][ T5938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.095595][ T5938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.123489][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.128014][ T5925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.133376][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.135243][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.143623][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.145727][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.188961][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.215940][ T5938] veth0_vlan: entered promiscuous mode [ 39.223017][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.227898][ T5938] veth1_vlan: entered promiscuous mode [ 39.243689][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.258921][ T5933] veth0_vlan: entered promiscuous mode [ 39.270249][ T5933] veth1_vlan: entered promiscuous mode [ 39.281528][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.290413][ T5938] veth0_macvtap: entered promiscuous mode [ 39.294681][ T5938] veth1_macvtap: entered promiscuous mode [ 39.303720][ T5925] veth0_vlan: entered promiscuous mode [ 39.317657][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.322078][ T5925] veth1_vlan: entered promiscuous mode [ 39.326324][ T5933] veth0_macvtap: entered promiscuous mode [ 39.331762][ T5933] veth1_macvtap: entered promiscuous mode [ 39.335608][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.345108][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.348725][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.353149][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.356839][ T5938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.360242][ T5938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.362690][ T5938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.364970][ T5938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.371791][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.375301][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.379360][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.388152][ T5933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.391971][ T5934] Bluetooth: hci1: command tx timeout [ 39.392105][ T5933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.396651][ T5933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.400291][ T5933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.403753][ T64] Bluetooth: hci0: command tx timeout [ 39.403765][ T5937] Bluetooth: hci3: command tx timeout [ 39.404348][ T5934] Bluetooth: hci2: command tx timeout [ 39.420308][ T5926] veth0_vlan: entered promiscuous mode [ 39.424048][ T5926] veth1_vlan: entered promiscuous mode [ 39.445469][ T5925] veth0_macvtap: entered promiscuous mode [ 39.457711][ T5926] veth0_macvtap: entered promiscuous mode [ 39.469797][ T5926] veth1_macvtap: entered promiscuous mode [ 39.472318][ T5925] veth1_macvtap: entered promiscuous mode [ 39.481145][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.483440][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.493862][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.497551][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.501835][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.505517][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.510149][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.512426][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.515303][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.518048][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.521436][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.524801][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.528150][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.531496][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.538008][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.541172][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.543800][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.546546][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.550390][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.559986][ T5926] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.562271][ T5926] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.564594][ T5926] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.566990][ T5926] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.573868][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.575149][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.576011][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.580395][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.584589][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.587454][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.590981][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.594191][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.597225][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.614487][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.615033][ T5925] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.617302][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.620818][ T5925] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.625662][ T5925] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.628437][ T5925] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.653311][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.656822][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.696408][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.696422][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.696440][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.719108][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.721922][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.741756][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.743727][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.754533][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.756593][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.785050][ T5992] can: request_module (can-proto-0) failed. [ 39.814840][ T6000] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 39.905894][ T6012] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9'. [ 39.952376][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.083693][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 40.086622][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 40.119294][ T1467] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 40.154442][ T6022] xt_hashlimit: size too large, truncated to 1048576 [ 40.279963][ T1467] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 40.282780][ T1467] usb 6-1: config 0 has no interface number 0 [ 40.284909][ T1467] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 40.288592][ T1467] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 40.293654][ T1467] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 40.297419][ T1467] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 40.301135][ T1467] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 40.305568][ T1467] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 40.308554][ T1467] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.315430][ T1467] usb 6-1: config 0 descriptor?? [ 40.325641][ T1467] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 40.522644][ T6009] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 40.527174][ T832] usb 6-1: USB disconnect, device number 2 [ 40.533204][ T832] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 40.897205][ T6042] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 41.069183][ T6039] binfmt_misc: register: failed to install interpreter file ./file0 [ 41.070759][ T6046] RDS: rds_bind could not find a transport for fe80::41, load rds_tcp or rds_rdma? [ 41.233947][ T6056] SELinux: policydb string does not match my string SE Linux [ 41.236160][ T6056] SELinux: failed to load policy [ 41.238755][ T6056] netlink: 'syz.0.22': attribute type 3 has an invalid length. [ 41.241818][ T6056] netlink: 558 bytes leftover after parsing attributes in process `syz.0.22'. [ 41.305712][ T6061] overlayfs: overlapping lowerdir path [ 41.445121][ T6079] raw_sendmsg: syz.1.30 forgot to set AF_INET. Fix it! [ 41.445453][ T6083] tmpfs: Bad value for 'mpol' [ 41.450988][ T6083] netem: incorrect gi model size [ 41.452416][ T6083] netem: change failed [ 41.471100][ T64] Bluetooth: hci0: command tx timeout [ 41.480347][ T64] Bluetooth: hci3: command tx timeout [ 41.481518][ T5937] Bluetooth: hci2: command tx timeout [ 41.481974][ T64] Bluetooth: hci1: command tx timeout [ 41.502178][ T6090] netlink: 84 bytes leftover after parsing attributes in process `syz.1.32'. [ 41.506233][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.32'. [ 41.550861][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 41.579455][ T6100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.38'. [ 41.603748][ T6089] netlink: 64 bytes leftover after parsing attributes in process `syz.0.33'. [ 41.607890][ T6099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6099 comm=syz.2.38 [ 41.611697][ T6099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.38'. [ 41.758896][ T6111] kvm: emulating exchange as write [ 41.934858][ T6124] netlink: ct family unspecified [ 41.936746][ T6124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 42.165706][ T39] kauditd_printk_skb: 121 callbacks suppressed [ 42.165722][ T39] audit: type=1400 audit(1733473269.702:236): avc: denied { ioctl } for pid=6128 comm="syz.3.45" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8969 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.182959][ T6133] dccp_v6_rcv: dropped packet with invalid checksum [ 42.268290][ T39] audit: type=1400 audit(1733473269.802:237): avc: denied { append } for pid=6142 comm="syz.2.51" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.358426][ T6157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6157 comm=syz.2.55 [ 42.420569][ T39] audit: type=1400 audit(1733473269.952:238): avc: denied { write } for pid=6156 comm="syz.0.56" name="/" dev="9p" ino=37617878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.426419][ T39] audit: type=1400 audit(1733473269.962:239): avc: denied { add_name } for pid=6156 comm="syz.0.56" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.427288][ T6148] geneve2: entered promiscuous mode [ 42.432051][ T39] audit: type=1400 audit(1733473269.962:240): avc: denied { create } for pid=6156 comm="syz.0.56" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.432070][ T39] audit: type=1400 audit(1733473269.962:241): avc: denied { associate } for pid=6156 comm="syz.0.56" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 42.432086][ T39] audit: type=1400 audit(1733473269.962:242): avc: denied { map } for pid=6161 comm="syz.2.57" path="socket:[10375]" dev="sockfs" ino=10375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 42.432101][ T39] audit: type=1400 audit(1733473269.962:243): avc: denied { create } for pid=6161 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 42.436407][ T39] audit: type=1400 audit(1733473269.982:244): avc: denied { setattr } for pid=6156 comm="syz.0.56" name="bus" dev="9p" ino=37618140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.471756][ T39] audit: type=1400 audit(1733473270.012:245): avc: denied { create } for pid=6156 comm="syz.0.56" name="blkio.bfq.sectors" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.613069][ T6169] Dead loop on virtual device ip6_vti0, fix it urgently! [ 42.616671][ T6169] Zero length message leads to an empty skb [ 42.663474][ T56] IPVS: starting estimator thread 0... [ 42.673566][ T6179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.749296][ T6177] IPVS: using max 39 ests per chain, 93600 per kthread [ 42.979217][ T832] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 43.139182][ T832] usb 5-1: Using ep0 maxpacket: 8 [ 43.142395][ T832] usb 5-1: config index 0 descriptor too short (expected 64, got 45) [ 43.144355][ T832] usb 5-1: config 15 has an invalid descriptor of length 199, skipping remainder of the config [ 43.146881][ T832] usb 5-1: config 15 has no interfaces? [ 43.148456][ T832] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 43.152054][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.549976][ T64] Bluetooth: hci3: command 0x040f tx timeout [ 43.550065][ T5289] Bluetooth: hci1: command tx timeout [ 43.553782][ T5289] Bluetooth: hci0: command tx timeout [ 43.633735][ T6196] netlink: 'syz.2.66': attribute type 15 has an invalid length. [ 43.780672][ T1154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.797555][ T6201] sp0: Synchronizing with TNC [ 43.848222][ T1154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.909821][ T6204] overlayfs: missing 'workdir' [ 43.940078][ T1154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.955985][ T5289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.960074][ T5289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.962834][ T5289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.966034][ T5289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.970472][ T5289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.973493][ T5289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.988050][ T1154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.065655][ T6209] chnl_net:caif_netlink_parms(): no params data found [ 44.116242][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.118424][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.120500][ T6209] bridge_slave_0: entered allmulticast mode [ 44.122937][ T6209] bridge_slave_0: entered promiscuous mode [ 44.125394][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.127210][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.129114][ T6209] bridge_slave_1: entered allmulticast mode [ 44.131006][ T6209] bridge_slave_1: entered promiscuous mode [ 44.148414][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.163867][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.203143][ T6209] team0: Port device team_slave_0 added [ 44.209351][ T6209] team0: Port device team_slave_1 added [ 44.211764][ T1154] bridge_slave_1: left allmulticast mode [ 44.213384][ T1154] bridge_slave_1: left promiscuous mode [ 44.215496][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.220973][ T1154] bridge_slave_0: left allmulticast mode [ 44.222434][ T1154] bridge_slave_0: left promiscuous mode [ 44.224173][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.434908][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.440485][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.444561][ T1154] bond0 (unregistering): Released all slaves [ 44.487094][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.490124][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.498418][ T6209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.506056][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.508396][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.517597][ T6209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.550472][ T6209] hsr_slave_0: entered promiscuous mode [ 44.553577][ T6209] hsr_slave_1: entered promiscuous mode [ 44.555669][ T6209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.557688][ T6209] Cannot create hsr debugfs directory [ 44.651979][ T6209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.658830][ T6209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.666250][ T6209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.692367][ T6209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.703227][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.705636][ T6209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.707996][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.709993][ T6209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.747141][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.753596][ T1154] hsr_slave_0: left promiscuous mode [ 44.755560][ T1154] hsr_slave_1: left promiscuous mode [ 44.758068][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.761428][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.764241][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.766240][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.784017][ T1154] veth1_macvtap: left promiscuous mode [ 44.785706][ T1154] veth0_macvtap: left promiscuous mode [ 44.787177][ T1154] veth1_vlan: left promiscuous mode [ 44.788620][ T1154] veth0_vlan: left promiscuous mode [ 45.253506][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 45.311926][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 45.629407][ T5934] Bluetooth: hci3: command 0x040f tx timeout [ 45.631076][ T5934] Bluetooth: hci1: command tx timeout [ 45.631134][ T5937] Bluetooth: hci0: command tx timeout [ 45.698087][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.701335][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.724080][ T6209] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.726242][ T832] usb 5-1: string descriptor 0 read error: -71 [ 45.730770][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.732592][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.735432][ T832] usb 5-1: USB disconnect, device number 2 [ 45.738686][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.740756][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.763597][ T6209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.850332][ T6209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.954539][ T6209] veth0_vlan: entered promiscuous mode [ 45.971154][ T6209] veth1_vlan: entered promiscuous mode [ 45.987989][ T6209] veth0_macvtap: entered promiscuous mode [ 45.990963][ T6209] veth1_macvtap: entered promiscuous mode [ 45.995911][ T6209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.998826][ T6209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.001933][ T6209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.004872][ T6209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.007270][ T6209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.010691][ T6209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.013890][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.023999][ T6267] ALSA: mixer_oss: invalid OSS volume '' [ 46.029928][ T6238] __nla_validate_parse: 6 callbacks suppressed [ 46.029938][ T6238] netlink: 48 bytes leftover after parsing attributes in process `syz.2.75'. [ 46.033070][ T6209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.036091][ T6209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.038772][ T6209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.039140][ T5934] Bluetooth: hci2: command tx timeout [ 46.039503][ T6240] netlink: 48 bytes leftover after parsing attributes in process `syz.2.75'. [ 46.042627][ T6209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.047957][ T6209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.053046][ T6209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.056834][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.063302][ T6209] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.065632][ T6209] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.067880][ T6209] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.076414][ T6209] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.081000][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 46.129115][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.131231][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.143231][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.145415][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.594305][ T6368] can0: slcan on ttynull. [ 46.659772][ T6369] can0 (unregistered): slcan off ttynull. [ 46.679374][ T35] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 46.749474][ T62] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 46.801516][ T6396] xt_hashlimit: size too large, truncated to 1048576 [ 46.804783][ T6396] syz.2.99: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 46.810913][ T6396] CPU: 2 UID: 0 PID: 6396 Comm: syz.2.99 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 46.813649][ T6396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.816392][ T6396] Call Trace: [ 46.817278][ T6396] [ 46.818051][ T6396] dump_stack_lvl+0x16c/0x1f0 [ 46.819218][ T6396] warn_alloc+0x24d/0x3a0 [ 46.820363][ T6396] ? __pfx_warn_alloc+0x10/0x10 [ 46.821642][ T6396] ? __get_vm_area_node+0x1b0/0x2f0 [ 46.822986][ T6396] ? __get_vm_area_node+0x1dc/0x2f0 [ 46.824338][ T6396] __vmalloc_node_range_noprof+0x1105/0x1530 [ 46.825884][ T6396] ? __pfx___lock_acquire+0x10/0x10 [ 46.827224][ T6396] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 46.828756][ T6396] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 46.830381][ T6396] ? __pfx_lock_release+0x10/0x10 [ 46.831702][ T6396] ? trace_lock_acquire+0x14e/0x1f0 [ 46.833054][ T6396] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 46.834589][ T6396] vmalloc_noprof+0x6b/0x90 [ 46.835771][ T6396] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 46.837308][ T6396] hashlimit_mt_check_common+0x8b0/0x1450 [ 46.838803][ T6396] hashlimit_mt_check+0x71/0x90 [ 46.840079][ T6396] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 46.841520][ T6396] xt_check_match+0x284/0xa50 [ 46.842752][ T6396] ? __wait_for_common+0x312/0x600 [ 46.844096][ T6396] ? __pfx_xt_check_match+0x10/0x10 [ 46.845459][ T6396] ? xt_find_target+0x1ee/0x290 [ 46.846737][ T6396] ? xt_find_match+0x1f2/0x290 [ 46.847988][ T6396] find_check_entry.constprop.0+0x34d/0xa20 [ 46.849540][ T6396] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 46.851204][ T6396] ? kvfree+0x47/0x50 [ 46.852252][ T6396] translate_table+0xd06/0x17b0 [ 46.853548][ T6396] ? __pfx_translate_table+0x10/0x10 [ 46.854927][ T6396] ? __might_fault+0xe3/0x190 [ 46.856159][ T6396] do_ip6t_set_ctl+0x605/0xc40 [ 46.857419][ T6396] ? __mutex_lock+0x1cc/0xa60 [ 46.858657][ T6396] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 46.860098][ T6396] ? __mutex_unlock_slowpath+0x164/0x690 [ 46.861570][ T6396] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 46.862664][ T35] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 46.863120][ T6396] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 46.865485][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.867023][ T6396] nf_setsockopt+0x8a/0xf0 [ 46.870439][ T6396] ipv6_setsockopt+0x135/0x170 [ 46.871714][ T6396] rawv6_setsockopt+0xd7/0x680 [ 46.871741][ T35] usb 5-1: Product: syz [ 46.872961][ T6396] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 46.874155][ T35] usb 5-1: Manufacturer: syz [ 46.875518][ T6396] ? selinux_socket_setsockopt+0x6a/0x80 [ 46.876733][ T35] usb 5-1: SerialNumber: syz [ 46.878149][ T6396] ? sock_common_setsockopt+0x2e/0xf0 [ 46.880778][ T6396] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 46.882321][ T6396] do_sock_setsockopt+0x222/0x480 [ 46.883633][ T6396] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 46.884380][ T35] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 46.885058][ T6396] ? lock_acquire+0x2f/0xb0 [ 46.888346][ T6396] __sys_setsockopt+0x1a0/0x230 [ 46.889627][ T6396] __x64_sys_setsockopt+0xbd/0x160 [ 46.891045][ T6396] ? do_syscall_64+0x91/0x250 [ 46.892270][ T6396] ? lockdep_hardirqs_on+0x7c/0x110 [ 46.893634][ T6396] do_syscall_64+0xcd/0x250 [ 46.894840][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.896493][ T6396] RIP: 0033:0x7f4c6137ff19 [ 46.897670][ T6396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.902632][ T6396] RSP: 002b:00007f4c6212f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 46.904782][ T6396] RAX: ffffffffffffffda RBX: 00007f4c61545fa0 RCX: 00007f4c6137ff19 [ 46.906811][ T6396] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 46.908787][ T6396] RBP: 00007f4c613f3986 R08: 0000000000000588 R09: 0000000000000000 [ 46.910774][ T6396] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 46.912768][ T6396] R13: 0000000000000000 R14: 00007f4c61545fa0 R15: 00007ffe46cb55a8 [ 46.914846][ T6396] [ 46.918456][ T6396] Mem-Info: [ 46.919488][ T6396] active_anon:5952 inactive_anon:0 isolated_anon:0 [ 46.919488][ T6396] active_file:1164 inactive_file:38336 isolated_file:0 [ 46.919488][ T6396] unevictable:1768 dirty:21 writeback:0 [ 46.919488][ T6396] slab_reclaimable:11221 slab_unreclaimable:71441 [ 46.919488][ T6396] mapped:23635 shmem:2487 pagetables:735 [ 46.919488][ T6396] sec_pagetables:301 bounce:0 [ 46.919488][ T6396] kernel_misc_reclaimable:0 [ 46.919488][ T6396] free:487139 free_pcp:1332 free_cma:0 [ 46.935517][ T6396] Node 0 active_anon:23808kB inactive_anon:0kB active_file:4656kB inactive_file:153272kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94540kB dirty:84kB writeback:0kB shmem:6412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11856kB pagetables:2940kB sec_pagetables:1204kB all_unreclaimable? no [ 46.943974][ T6396] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 46.947499][ T5988] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 46.951655][ T6396] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 46.961259][ T6396] lowmem_reserve[]: 0 1212 0 0 0 [ 46.962579][ T6396] Node 0 DMA32 free:342672kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:23808kB inactive_anon:0kB active_file:4656kB inactive_file:153272kB unevictable:3536kB writepending:84kB present:2080628kB managed:1269936kB mlocked:0kB bounce:0kB free_pcp:3232kB local_pcp:580kB free_cma:0kB [ 46.970415][ T6396] lowmem_reserve[]: 0 0 0 0 0 [ 46.972525][ T6396] Node 1 Normal free:1589804kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:1996kB local_pcp:192kB free_cma:0kB [ 46.980427][ T6396] lowmem_reserve[]: 0 0 0 0 0 [ 46.981960][ T6396] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 46.985472][ T6396] Node 0 DMA32: 5*4kB (ME) 66*8kB (UME) 37*16kB (UME) 26*32kB (UE) 11*64kB (UME) 8*128kB (UME) 7*256kB (UME) 8*512kB (M) 4*1024kB (M) 7*2048kB (UME) 77*4096kB (UM) = 343412kB [ 46.991810][ T6396] Node 1 Normal: 19*4kB (UME) 12*8kB (UME) 15*16kB (UME) 95*32kB (UME) 51*64kB (UME) 16*128kB (UME) 4*256kB (UE) 6*512kB (UME) 2*1024kB (E) 5*2048kB (UME) 382*4096kB (M) = 1589820kB [ 46.996574][ T6396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 46.996584][ T6396] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 46.996592][ T6396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 46.996600][ T6396] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 46.996607][ T6396] 41987 total pagecache pages [ 46.996611][ T6396] 0 pages in swap cache [ 46.996616][ T6396] Free swap = 124736kB [ 46.996620][ T6396] Total swap = 124996kB [ 46.996624][ T6396] 1048443 pages RAM [ 46.996628][ T6396] 0 pages HighMem/MovableOnly [ 46.996631][ T6396] 281638 pages reserved [ 46.996635][ T6396] 0 pages cma reserved [ 47.005213][ T62] usb 9-1: config 0 has no interfaces? [ 47.018788][ T62] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.018802][ T62] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.020943][ T62] usb 9-1: config 0 descriptor?? [ 47.076817][ T6413] xt_hashlimit: size too large, truncated to 1048576 [ 47.141034][ T6419] netlink: 'syz.2.104': attribute type 8 has an invalid length. [ 47.143293][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 47.148562][ T6419] xt_HMARK: spi-set and port-set can't be combined [ 47.234879][ T35] usb 9-1: USB disconnect, device number 2 [ 47.288885][ T39] kauditd_printk_skb: 72 callbacks suppressed [ 47.288895][ T39] audit: type=1400 audit(1733473274.822:318): avc: denied { create } for pid=6421 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.295873][ T39] audit: type=1400 audit(1733473274.832:319): avc: denied { connect } for pid=6421 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.300996][ T39] audit: type=1400 audit(1733473274.832:320): avc: denied { read } for pid=6421 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.334436][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 47.336854][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'. [ 47.342718][ T6427] tipc: Started in network mode [ 47.344083][ T6427] tipc: Node identity 0ed7460163e5, cluster identity 4711 [ 47.346041][ T6427] tipc: Enabled bearer , priority 7 [ 47.391483][ T39] audit: type=1400 audit(1733473274.932:321): avc: denied { write } for pid=6426 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.396726][ T6427] : renamed from syzkaller0 [ 47.400155][ T6427] tipc: Disabling bearer [ 47.505037][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.507418][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.513994][ T39] audit: type=1400 audit(1733473275.042:322): avc: denied { read write } for pid=6346 comm="syz.0.93" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.520967][ T39] audit: type=1400 audit(1733473275.042:323): avc: denied { open } for pid=6346 comm="syz.0.93" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.659256][ T39] audit: type=1400 audit(1733473275.202:324): avc: denied { read } for pid=6446 comm="syz.2.112" name="file0" dev="9p" ino=37617903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.671012][ T39] audit: type=1400 audit(1733473275.212:325): avc: denied { write } for pid=6446 comm="syz.2.112" name="file0" dev="9p" ino=37617903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.673478][ T6447] netlink: 'syz.2.112': attribute type 1 has an invalid length. [ 47.680859][ T39] audit: type=1400 audit(1733473275.222:326): avc: denied { rename } for pid=5330 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.685774][ T6447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.686971][ T39] audit: type=1400 audit(1733473275.222:327): avc: denied { unlink } for pid=5330 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.694750][ T6447] bond1: (slave gretap1): making interface the new active one [ 47.697085][ T6447] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 47.709456][ T5934] Bluetooth: hci3: command 0x040f tx timeout [ 47.762024][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 47.788865][ T6454] team0: Device wg2 is of different type [ 47.841342][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 47.901054][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 47.903350][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 47.905654][ T6465] netlink: 'syz.4.119': attribute type 7 has an invalid length. [ 47.947236][ T6472] netlink: 'syz.4.121': attribute type 32 has an invalid length. [ 48.004378][ T6481] tls_set_device_offload: netdev not found [ 48.030075][ T5988] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 48.032357][ T5988] ath9k_htc: Failed to initialize the device [ 48.050144][ T62] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.052569][ T5988] usb 5-1: ath9k_htc: USB layer deinitialized [ 48.109109][ T5934] Bluetooth: hci2: command tx timeout [ 48.164336][ T6507] : renamed from bridge_slave_0 (while UP) [ 48.199161][ T62] usb 7-1: Using ep0 maxpacket: 16 [ 48.201682][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.204486][ T62] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.208272][ T62] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 48.211052][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.214044][ T62] usb 7-1: config 0 descriptor?? [ 48.429209][ T3306] hid (null): invalid report_size 48347 [ 48.436136][ T3306] hid-generic 0209:0007:0007.0002: invalid report_size 48347 [ 48.438740][ T3306] hid-generic 0209:0007:0007.0002: item 0 2 1 7 parsing failed [ 48.442072][ T6525] overlayfs: failed to resolve './file1': -2 [ 48.443959][ T3306] hid-generic 0209:0007:0007.0002: probe with driver hid-generic failed with error -22 [ 48.466275][ T6527] capability: warning: `syz.1.131' uses deprecated v2 capabilities in a way that may be insecure [ 48.541635][ T6531] syz.4.132 uses obsolete (PF_INET,SOCK_PACKET) [ 48.543932][ T6531] syzkaller1: entered promiscuous mode [ 48.545943][ T6531] syzkaller1: entered allmulticast mode [ 48.562652][ T6456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.566866][ T6456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.694263][ T62] usbhid 7-1:0.0: can't add hid device: -71 [ 48.696076][ T62] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 48.699378][ T62] usb 7-1: USB disconnect, device number 2 [ 49.092297][ T6537] mmap: syz.4.134 (6537) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.443280][ T832] usb 5-1: USB disconnect, device number 3 [ 50.189343][ T5934] Bluetooth: hci2: command tx timeout [ 52.269151][ T5934] Bluetooth: hci2: command tx timeout [ 60.262811][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 60.262821][ T39] audit: type=1400 audit(1733473287.802:354): avc: denied { map } for pid=6598 comm="syz.4.138" path="socket:[13695]" dev="sockfs" ino=13695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.272053][ T39] audit: type=1400 audit(1733473287.812:355): avc: denied { read } for pid=6598 comm="syz.4.138" path="socket:[13695]" dev="sockfs" ino=13695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.319772][ T39] audit: type=1400 audit(1733473287.852:356): avc: denied { name_bind } for pid=6598 comm="syz.4.138" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.331692][ T39] audit: type=1400 audit(1733473287.862:357): avc: denied { node_bind } for pid=6598 comm="syz.4.138" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 60.333443][ T6600] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 60.342500][ T39] audit: type=1400 audit(1733473287.872:358): avc: denied { getopt } for pid=6599 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.362471][ T6617] xt_hashlimit: size too large, truncated to 1048576 [ 60.458320][ T39] audit: type=1400 audit(1733473287.992:359): avc: denied { shutdown } for pid=6624 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 60.480191][ T39] audit: type=1400 audit(1733473288.022:360): avc: denied { search } for pid=5330 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.622084][ T39] audit: type=1400 audit(1733473288.162:361): avc: denied { write } for pid=6629 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.622289][ T6632] macsec0: entered promiscuous mode [ 60.724616][ T6602] syz.1.136 (6602): drop_caches: 2 [ 60.821878][ T39] audit: type=1400 audit(1733473288.362:362): avc: denied { sqpoll } for pid=6635 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.978123][ T6639] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 61.079873][ T6639] /dev/sr0: Can't open blockdev [ 61.109270][ T62] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.208690][ T6651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6651 comm=syz.0.148 [ 61.276936][ T39] audit: type=1400 audit(1733473288.812:363): avc: denied { getopt } for pid=6652 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.279142][ T62] usb 6-1: Using ep0 maxpacket: 8 [ 61.291063][ T62] usb 6-1: config index 0 descriptor too short (expected 28277, got 45) [ 61.293334][ T62] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.295953][ T62] usb 6-1: config 0 has no interfaces? [ 61.297431][ T62] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 61.300932][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.305290][ T62] usb 6-1: config 0 descriptor?? [ 61.470439][ T6629] macsec0: left promiscuous mode [ 61.518739][ T5988] usb 6-1: USB disconnect, device number 3 [ 61.791452][ T6689] netlink: 7840 bytes leftover after parsing attributes in process `syz.2.159'. [ 61.945966][ T6696] befs: (nullb0): No write support. Marking filesystem read-only [ 61.949553][ T6696] befs: (nullb0): invalid magic header [ 62.062794][ T6705] Bluetooth: MGMT ver 1.23 [ 62.113421][ T6707] netlink: 'syz.0.165': attribute type 10 has an invalid length. [ 62.124329][ T6707] team0: Device ipvlan1 failed to register rx_handler [ 62.269989][ T6719] ISOFS: Unable to identify CD-ROM format. [ 62.307820][ T6729] overlayfs: failed to resolve './file0': -2 [ 62.321933][ T6724] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.325454][ T6724] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.327590][ T6724] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.330076][ T6724] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.371648][ T6734] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 62.405739][ T6740] overlayfs: workdir and upperdir must be separate subtrees [ 62.412003][ T6734] ubi0: attaching mtd0 [ 62.414419][ T6734] ubi0: scanning is finished [ 62.415642][ T6734] ubi0: empty MTD device detected [ 62.452738][ T6742] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 62.487891][ T6747] warning: `syz.4.177' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.495793][ T6747] cgroup: No subsys list or none specified [ 62.572234][ T6734] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 62.574238][ T6734] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 62.579669][ T6734] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 62.589123][ T6734] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 62.591067][ T6734] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 62.592954][ T6734] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 62.595030][ T6734] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1631958170 [ 62.601072][ T6734] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 62.608599][ T6758] ubi0: background thread "ubi_bgt0d" started, PID 6758 [ 62.611027][ T6734] syz.0.172 (6734) used greatest stack depth: 20432 bytes left [ 62.695970][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 62.702900][ T6772] geneve2: entered promiscuous mode [ 62.717446][ T6778] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 62.720112][ T6778] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 62.723226][ T6778] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 62.725747][ T6778] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 62.735467][ T6778] team0: Port device vlan2 added [ 63.000802][ T6793] syzkaller1: entered promiscuous mode [ 63.002589][ T6793] syzkaller1: entered allmulticast mode [ 63.177967][ T6801] block nbd2: not configured, cannot reconfigure [ 63.244124][ T6806] netlink: 80 bytes leftover after parsing attributes in process `syz.1.191'. [ 63.430840][ T6816] process 'syz.1.195' launched './file2' with NULL argv: empty string added [ 63.660469][ T6820] tipc: Enabling not permitted [ 63.661857][ T6820] tipc: Enabling of bearer rejected, failed to enable media [ 63.755495][ T6824] tmpfs: Bad value for 'gid' [ 63.756719][ T6824] tmpfs: Bad value for 'gid' [ 63.758614][ T6824] netlink: 'syz.0.197': attribute type 3 has an invalid length. [ 63.760754][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 64.014650][ T6842] fuse: Bad value for 'fd' [ 64.057211][ T6842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.204'. [ 64.089219][ T74] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.109145][ T5934] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 64.112252][ T5289] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.168128][ T6855] netlink: 260 bytes leftover after parsing attributes in process `syz.2.208'. [ 64.239115][ T74] usb 5-1: Using ep0 maxpacket: 16 [ 64.242873][ T74] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.245828][ T74] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 64.248025][ T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.251712][ T74] usb 5-1: config 0 descriptor?? [ 64.255699][ T74] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input6 [ 64.463282][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.214'. [ 64.519251][ T5333] bcm5974 5-1:0.0: could not read from device [ 64.528173][ T6861] bcm5974 5-1:0.0: could not read from device [ 64.531095][ T74] usb 5-1: USB disconnect, device number 4 [ 64.532980][ T5333] bcm5974 5-1:0.0: could not read from device [ 64.769236][ T56] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 64.919264][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 64.923456][ T56] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 64.926917][ T56] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 64.930208][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.934181][ T56] usb 9-1: config 0 descriptor?? [ 65.142526][ T56] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 65.322829][ T6911] sp0: Synchronizing with TNC [ 65.385989][ T39] kauditd_printk_skb: 47 callbacks suppressed [ 65.385999][ T39] audit: type=1400 audit(1733473292.922:411): avc: denied { watch watch_reads } for pid=6910 comm="syz.2.227" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.493716][ T39] audit: type=1400 audit(1733473293.032:412): avc: denied { write } for pid=6914 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 65.500587][ T39] audit: type=1400 audit(1733473293.032:413): avc: denied { create } for pid=6914 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.665938][ T832] usb 9-1: USB disconnect, device number 3 [ 65.717454][ T6925] batadv0: entered promiscuous mode [ 65.785041][ T6931] trusted_key: syz.2.232 sent an empty control message without MSG_MORE. [ 65.818163][ T39] audit: type=1404 audit(1733473293.352:414): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 65.830100][ T39] audit: type=1400 audit(1733473293.372:415): avc: denied { read } for pid=6941 comm="syz.0.235" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 65.835082][ T6942] netlink: zone id is out of range [ 65.835104][ T39] audit: type=1400 audit(1733473293.372:416): avc: denied { read } for pid=6941 comm="syz.0.235" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 65.836837][ T6942] netlink: zone id is out of range [ 65.842785][ T39] audit: type=1400 audit(1733473293.372:417): avc: denied { create } for pid=6941 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 65.844634][ T6942] netlink: zone id is out of range [ 65.844641][ T6942] netlink: zone id is out of range [ 65.844645][ T6942] netlink: zone id is out of range [ 65.844648][ T6942] netlink: zone id is out of range [ 65.844652][ T6942] netlink: zone id is out of range [ 65.844655][ T6942] netlink: zone id is out of range [ 65.844659][ T6942] netlink: zone id is out of range [ 65.844662][ T6942] netlink: zone id is out of range [ 65.859986][ T39] audit: type=1404 audit(1733473293.372:418): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 65.866357][ T39] audit: type=1400 audit(1733473293.372:419): avc: denied { create } for pid=6941 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.871422][ T39] audit: type=1400 audit(1733473293.372:420): avc: denied { write } for pid=6941 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.271536][ T6969] binder: 6961:6969 ioctl c0502100 20000b80 returned -22 [ 66.273548][ T6969] binder: 6961:6969 ioctl 40182103 20000c00 returned -22 [ 66.275969][ T6969] binder_alloc: 6961: binder_alloc_buf, no vma [ 66.337363][ T6979] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 66.340491][ T6977] hugetlbfs: syz.0.244 (6977): Using mlock ulimits for SHM_HUGETLB is obsolete [ 66.390820][ T6983] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 66.392617][ T6986] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 66.393862][ T6983] overlayfs: missing 'lowerdir' [ 66.469123][ T74] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 66.478724][ T6988] syz.0.248: attempt to access beyond end of device [ 66.478724][ T6988] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 66.482279][ T6988] XFS (nbd0): SB validate failed with error -5. [ 66.589931][ T5289] Bluetooth: hci2: command tx timeout [ 66.629110][ T74] usb 9-1: Using ep0 maxpacket: 8 [ 66.635978][ T74] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 66.638651][ T74] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 66.642462][ T74] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.644928][ T74] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.647951][ T74] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.650370][ T74] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.689450][ T7015] netlink: 100 bytes leftover after parsing attributes in process `syz.2.255'. [ 66.729226][ T7018] netlink: 52 bytes leftover after parsing attributes in process `syz.2.256'. [ 66.732695][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 66.735029][ T7018] tipc: MTU too low for tipc bearer [ 66.737316][ T7020] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 66.855803][ T74] usb 9-1: GET_CAPABILITIES returned 0 [ 66.857193][ T74] usbtmc 9-1:16.0: can't read capabilities [ 66.999628][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 67.061775][ C2] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 67.067914][ T5994] usb 9-1: USB disconnect, device number 4 [ 67.123975][ T7036] delete_channel: no stack [ 67.149195][ T9] usb 5-1: device descriptor read/64, error -71 [ 67.163026][ T7039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7039 comm=syz.2.265 [ 67.166383][ T7039] netlink: 'syz.2.265': attribute type 4 has an invalid length. [ 67.266622][ T7047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.267'. [ 67.270412][ T7047] nfs4: Unknown parameter 'PL' [ 67.365115][ T7057] ======================================================= [ 67.365115][ T7057] WARNING: The mand mount option has been deprecated and [ 67.365115][ T7057] and is ignored by this kernel. Remove the mand [ 67.365115][ T7057] option from the mount to silence this warning. [ 67.365115][ T7057] ======================================================= [ 67.374923][ T7057] 9pnet_virtio: no channels available for device syz [ 67.389461][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 67.519297][ T9] usb 5-1: device descriptor read/64, error -71 [ 67.630933][ T9] usb usb5-port1: attempt power cycle [ 67.717450][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.807449][ T7076] affs: No valid root block on device nullb0 [ 67.999436][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 68.029802][ T9] usb 5-1: device descriptor read/8, error -71 [ 68.269240][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 68.289519][ T9] usb 5-1: device descriptor read/8, error -71 [ 68.409158][ T9] usb usb5-port1: unable to enumerate USB device [ 68.644697][ T7086] ptrace attach of "/syz-executor exec"[7087] was attempted by "/syz-executor exec"[7086] [ 68.885692][ T7101] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7101 comm: syz.4.283) [ 70.063892][ T7151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7151 comm=syz.0.295 [ 70.131234][ T7155] netlink: 'syz.2.296': attribute type 3 has an invalid length. [ 70.134750][ T7155] 9pnet_virtio: no channels available for device syz [ 70.401202][ T39] kauditd_printk_skb: 177 callbacks suppressed [ 70.401217][ T39] audit: type=1400 audit(1733473297.942:598): avc: denied { write } for pid=7185 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.447974][ T39] audit: type=1400 audit(1733473297.982:599): avc: denied { append } for pid=7205 comm="syz.4.307" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 70.454319][ T39] audit: type=1400 audit(1733473297.982:600): avc: denied { accept } for pid=7205 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.466938][ T7206] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 70.480536][ T7206] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 70.516275][ T7209] ceph: Path missing in source [ 70.577518][ T39] audit: type=1400 audit(1733473298.112:601): avc: denied { read write } for pid=7212 comm="syz.2.310" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.583623][ T39] audit: type=1400 audit(1733473298.112:602): avc: denied { open } for pid=7212 comm="syz.2.310" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.591260][ T39] audit: type=1400 audit(1733473298.112:603): avc: denied { ioctl } for pid=7212 comm="syz.2.310" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.717924][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 70.718797][ T39] audit: type=1400 audit(1733473298.252:604): avc: denied { connect } for pid=7226 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.741686][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 70.770181][ T39] audit: type=1400 audit(1733473298.312:605): avc: denied { create } for pid=7230 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.016784][ T39] audit: type=1400 audit(1733473298.552:606): avc: denied { mount } for pid=7238 comm="syz.4.319" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 71.017309][ T7239] devtmpfs: Bad value for 'mpol' [ 71.024196][ T39] audit: type=1400 audit(1733473298.552:607): avc: denied { remount } for pid=7238 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 71.072013][ T5289] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 71.074467][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.075365][ T5289] Bluetooth: hci2: Injecting HCI hardware error event [ 71.076957][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.083665][ T5289] Bluetooth: hci2: hardware error 0x00 [ 71.189393][ T7248] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 71.189393][ T7248] program syz.0.321 not setting count and/or reply_len properly [ 71.211186][ T7247] netlink: 'syz.4.322': attribute type 39 has an invalid length. [ 71.547756][ T7258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.326'. [ 71.797279][ T7272] bad cache= option: none [ 71.797279][ T7272] [ 71.799369][ T7272] CIFS: VFS: bad cache= option: none [ 71.864743][ T7277] overlay: ./file0 is not a directory [ 71.889929][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.040365][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.043097][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.045639][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.050117][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.053330][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.058413][ T9] usb 7-1: config 0 descriptor?? [ 72.194093][ T7305] capability: warning: `syz.1.341' uses 32-bit capabilities (legacy support in use) [ 72.216519][ T7306] loop8: detected capacity change from 0 to 7 [ 72.221839][ T7306] Dev loop8: unable to read RDB block 7 [ 72.223942][ T7306] loop8: unable to read partition table [ 72.225672][ T7306] loop8: partition table beyond EOD, truncated [ 72.227374][ T7306] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 72.227374][ T7306] ) failed (rc=-5) [ 72.474196][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 72.476487][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 72.478465][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 72.482070][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 72.483855][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 72.486142][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 72.489907][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 72.498165][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 72.603251][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 72.625047][ T7314] netlink: 'syz.0.344': attribute type 2 has an invalid length. [ 72.627071][ T7314] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 72.755886][ T5994] usb 7-1: USB disconnect, device number 3 [ 72.801949][ T7322] efs: device does not support 512 byte blocks [ 72.804068][ T7322] device does not support 512 byte blocks [ 72.804068][ T7322] [ 73.160759][ T5289] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 73.316388][ T7368] delete_channel: no stack [ 73.614178][ T5289] Bluetooth: hci0: unexpected event for opcode 0x9961 [ 73.616145][ T5289] Bluetooth: hci0: unexpected event for opcode 0x9961 [ 73.659668][ T7402] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 73.712076][ T7405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.714867][ T7405] IPv6: NLM_F_CREATE should be set when creating new route [ 73.717318][ T7405] IPv6: NLM_F_CREATE should be set when creating new route [ 73.721469][ T7405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.365'. [ 73.724367][ T7405] netlink: 'syz.0.365': attribute type 10 has an invalid length. [ 73.738420][ T7405] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 73.740520][ T7405] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 73.746780][ T7405] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.847681][ T7414] sp0: Synchronizing with TNC [ 73.900831][ T7414] ebtables: ebtables: counters copy to user failed while replacing table [ 73.945542][ T7414] ebtables: ebtables: counters copy to user failed while replacing table [ 74.006028][ T7428] hsr0: entered promiscuous mode [ 74.008221][ T7428] macsec1: entered allmulticast mode [ 74.010386][ T7428] hsr0: entered allmulticast mode [ 74.012303][ T7428] hsr_slave_0: entered allmulticast mode [ 74.014446][ T7428] hsr_slave_1: entered allmulticast mode [ 74.019233][ T7428] hsr0: left allmulticast mode [ 74.021079][ T7428] hsr_slave_0: left allmulticast mode [ 74.023097][ T7428] hsr_slave_1: left allmulticast mode [ 74.225367][ T7436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.237424][ T9] hid (null): invalid report_size 48347 [ 74.245592][ T9] hid-generic 0209:0007:0007.0004: invalid report_size 48347 [ 74.248161][ T9] hid-generic 0209:0007:0007.0004: item 0 2 1 7 parsing failed [ 74.251635][ T9] hid-generic 0209:0007:0007.0004: probe with driver hid-generic failed with error -22 [ 74.387490][ T7441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.376'. [ 74.566449][ T7450] kvm: pic: non byte write [ 74.630537][ T7449] IPVS: persistence engine module ip_vs_pe_" not found [ 74.695999][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 74.959191][ T5994] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.009155][ T56] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 75.130825][ T5994] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.134513][ T5994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 75.138052][ T5994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.144133][ T5994] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.148223][ T5994] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.151162][ T5994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.155074][ T5994] usb 7-1: config 0 descriptor?? [ 75.157430][ T7471] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.159655][ T56] usb 6-1: too many configurations: 96, using maximum allowed: 8 [ 75.170698][ T56] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 75.173058][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.175090][ T56] usb 6-1: Product: syz [ 75.176275][ T56] usb 6-1: Manufacturer: syz [ 75.177503][ T56] usb 6-1: SerialNumber: syz [ 75.190499][ T56] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 75.212063][ T56] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.417085][ T3306] usb 6-1: USB disconnect, device number 4 [ 75.566352][ T39] kauditd_printk_skb: 92 callbacks suppressed [ 75.566364][ T39] audit: type=1400 audit(1733473303.102:700): avc: denied { read } for pid=7467 comm="syz.2.385" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.572635][ T7471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.575778][ T39] audit: type=1400 audit(1733473303.102:701): avc: denied { open } for pid=7467 comm="syz.2.385" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.578787][ T7471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.585699][ T39] audit: type=1400 audit(1733473303.102:702): avc: denied { map } for pid=7467 comm="syz.2.385" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.600926][ T5994] usbhid 7-1:0.0: can't add hid device: -71 [ 75.602934][ T5994] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 75.607886][ T5994] usb 7-1: USB disconnect, device number 4 [ 75.725009][ T39] audit: type=1400 audit(1733473303.262:703): avc: denied { setopt } for pid=7503 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.730431][ T39] audit: type=1400 audit(1733473303.272:704): avc: denied { write } for pid=7503 comm="syz.4.392" path="socket:[20530]" dev="sockfs" ino=20530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.738012][ T39] audit: type=1400 audit(1733473303.272:705): avc: denied { ioctl } for pid=7503 comm="syz.4.392" path="socket:[20530]" dev="sockfs" ino=20530 ioctlcmd=0x6105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.038635][ T39] audit: type=1400 audit(1733473303.572:706): avc: denied { sys_chroot } for pid=7512 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 76.044172][ T39] audit: type=1400 audit(1733473303.572:707): avc: denied { setgid } for pid=7512 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 76.050323][ T39] audit: type=1400 audit(1733473303.572:708): avc: denied { setrlimit } for pid=7512 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 76.144592][ T39] audit: type=1400 audit(1733473303.682:709): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 76.202760][ T30] cfg80211: failed to load regulatory.db [ 76.269688][ T56] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 76.272073][ T56] ath9k_htc: Failed to initialize the device [ 76.279596][ T3306] usb 6-1: ath9k_htc: USB layer deinitialized [ 76.344675][ T7541] trusted_key: encrypted_key: key trusted:syz not found [ 76.345123][ T7538] netlink: 68 bytes leftover after parsing attributes in process `syz.1.401'. [ 76.349329][ T7541] netlink: 68 bytes leftover after parsing attributes in process `syz.1.401'. [ 76.560776][ T7552] cgroup: noprefix used incorrectly [ 76.563024][ T7547] netlink: 80 bytes leftover after parsing attributes in process `syz.0.403'. [ 76.623977][ T7554] xt_hashlimit: size too large, truncated to 1048576 [ 77.097251][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 77.099556][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 77.113015][ T7572] Invalid source name [ 77.114103][ T7572] UBIFS error (pid: 7572): cannot open "/dev/nullb0", error -22 [ 77.175252][ T7576] autofs: Unknown parameter '#! [ 77.175252][ T7576] ' [ 77.205877][ T7577] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=53 sclass=netlink_tcpdiag_socket pid=7577 comm=syz.4.410 [ 77.261718][ T7585] binder: BINDER_SET_CONTEXT_MGR already set [ 77.263471][ T7585] binder: 7583:7585 ioctl 4018620d 20000040 returned -16 [ 77.343000][ T7589] hfs: can't find a HFS filesystem on dev sr0 [ 77.420378][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.417'. [ 77.595026][ T7619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1816 sclass=netlink_route_socket pid=7619 comm=syz.1.423 [ 77.932571][ T7633] binder: 7631:7633 unknown command 1986356271 [ 77.937512][ T7633] binder: 7631:7633 ioctl c0306201 20000380 returned -22 [ 78.077533][ T74] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 78.166474][ T7644] __nla_validate_parse: 1 callbacks suppressed [ 78.166486][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 78.193459][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 78.219265][ T7644] netlink: 44 bytes leftover after parsing attributes in process `syz.4.432'. [ 78.230560][ T74] usb 7-1: Using ep0 maxpacket: 8 [ 78.234501][ T74] usb 7-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 78.236847][ T74] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.238899][ T74] usb 7-1: Product: syz [ 78.240179][ T74] usb 7-1: Manufacturer: syz [ 78.241938][ T74] usb 7-1: SerialNumber: syz [ 78.246076][ T74] usb 7-1: config 0 descriptor?? [ 78.249562][ T74] option 7-1:0.0: GSM modem (1-port) converter detected [ 78.423854][ T1137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.466031][ T35] usb 7-1: USB disconnect, device number 5 [ 78.468165][ T35] option 7-1:0.0: device disconnected [ 78.520465][ T1137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.543746][ T7676] Bluetooth: (null): Non-link packet received in non-active state [ 78.583890][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.587469][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.591568][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.594125][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.597337][ T5934] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.599408][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.626938][ T1137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.681576][ T7679] chnl_net:caif_netlink_parms(): no params data found [ 78.684310][ T7690] IPVS: set_ctl: invalid protocol: 92 100.1.1.1:20003 [ 78.743657][ T1137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.748233][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.750160][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.752034][ T7679] bridge_slave_0: entered allmulticast mode [ 78.753999][ T7679] bridge_slave_0: entered promiscuous mode [ 78.757191][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.759131][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.762425][ T7679] bridge_slave_1: entered allmulticast mode [ 78.764387][ T7679] bridge_slave_1: entered promiscuous mode [ 78.792186][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.796616][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.797436][ T7698] overlay: ./bus is not a directory [ 78.806113][ T7698] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 78.836755][ T7679] team0: Port device team_slave_0 added [ 78.841005][ T7679] team0: Port device team_slave_1 added [ 78.856607][ T7701] can: request_module (can-proto-0) failed. [ 78.895633][ T1137] bridge_slave_1: left allmulticast mode [ 78.897508][ T1137] bridge_slave_1: left promiscuous mode [ 78.899814][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.910989][ T1137] bridge_slave_0: left allmulticast mode [ 78.912461][ T1137] bridge_slave_0: left promiscuous mode [ 78.914057][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.028240][ T7724] fuse: Unknown parameter '000000000000000000000x00000000000000080x0000000000000005' [ 79.056003][ T7726] ufs: Invalid option: "workdir=./bus" or missing value [ 79.058634][ T7726] ufs: wrong mount options [ 79.172418][ T7733] No such timeout policy "syz0" [ 79.326428][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.331744][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.336440][ T1137] bond0 (unregistering): Released all slaves [ 79.342636][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.345116][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.351453][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.356044][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.358367][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.368204][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.436422][ T7679] hsr_slave_0: entered promiscuous mode [ 79.439496][ T7679] hsr_slave_1: entered promiscuous mode [ 79.585009][ T7679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.602500][ T7679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.622911][ T1137] hsr_slave_0: left promiscuous mode [ 79.625305][ T1137] hsr_slave_1: left promiscuous mode [ 79.627576][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.629903][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.636584][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.638955][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.668982][ T1137] veth1_macvtap: left promiscuous mode [ 79.670553][ T1137] veth0_macvtap: left promiscuous mode [ 79.672018][ T1137] veth1_vlan: left promiscuous mode [ 79.673957][ T1137] veth0_vlan: left promiscuous mode [ 80.305743][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 80.369616][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 80.756898][ T5934] Bluetooth: hci2: command tx timeout [ 80.853361][ T7679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.870137][ T7679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.929478][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.942330][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 80.942340][ T39] audit: type=1400 audit(1733473308.226:736): avc: denied { append } for pid=7766 comm="syz.1.452" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.948320][ T7679] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.964543][ T7770] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 80.975375][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.977493][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.987105][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.989092][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.004880][ T39] audit: type=1326 audit(1733473308.283:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.454" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5807b7ff19 code=0x0 [ 81.064543][ T7789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7789 comm=syz.0.454 [ 81.112982][ T7679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.202686][ T7679] veth0_vlan: entered promiscuous mode [ 81.206266][ T7679] veth1_vlan: entered promiscuous mode [ 81.216772][ T7679] veth0_macvtap: entered promiscuous mode [ 81.219628][ T7679] veth1_macvtap: entered promiscuous mode [ 81.225993][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.228592][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.230989][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.233588][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.235947][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.238506][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.241509][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.246227][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.248822][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.251280][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.254823][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.257309][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.259910][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.262772][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.267471][ T7679] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.269741][ T7679] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.272024][ T7679] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.274341][ T7679] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.909383][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.914821][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.943022][ T39] audit: type=1400 audit(1733473309.169:738): avc: denied { listen } for pid=7809 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.961617][ T39] audit: type=1400 audit(1733473309.169:739): avc: denied { accept } for pid=7809 comm="syz.2.457" lport=52035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.966790][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.970983][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.980346][ T39] audit: type=1400 audit(1733473309.207:740): avc: denied { mounton } for pid=7679 comm="syz-executor" path="/syzkaller.y4A3pQ/syz-tmp" dev="sda1" ino=1943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 81.989456][ T39] audit: type=1400 audit(1733473309.207:741): avc: denied { mounton } for pid=7679 comm="syz-executor" path="/syzkaller.y4A3pQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 82.000315][ T39] audit: type=1400 audit(1733473309.207:742): avc: denied { mounton } for pid=7679 comm="syz-executor" path="/syzkaller.y4A3pQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 82.011380][ T39] audit: type=1400 audit(1733473309.235:743): avc: denied { mounton } for pid=7679 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 82.141909][ T39] audit: type=1400 audit(1733473309.357:744): avc: denied { create } for pid=7840 comm="syz.5.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 82.173698][ T39] audit: type=1400 audit(1733473309.386:745): avc: denied { remount } for pid=7845 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.805836][ T7887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.465'. [ 82.937846][ T7826] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 82.963508][ T5934] Bluetooth: hci2: command tx timeout [ 82.980425][ T5934] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 82.998063][ T7911] syz.2.469: attempt to access beyond end of device [ 82.998063][ T7911] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 83.001543][ T7911] syz.2.469: attempt to access beyond end of device [ 83.001543][ T7911] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 83.006250][ T7911] Mount JFS Failure: -5 [ 83.293788][ T7944] netlink: 44 bytes leftover after parsing attributes in process `syz.5.476'. [ 83.608764][ T5934] Bluetooth: hci3: link tx timeout [ 83.610427][ T5934] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 84.007474][ T7978] Cannot find set identified by id 0 to match [ 84.211713][ T7988] netlink: set zone limit has 8 unknown bytes [ 84.235833][ T5289] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.944153][ T5289] Bluetooth: hci3: link tx timeout [ 84.945688][ T5289] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 85.118991][ T5289] Bluetooth: hci3: link tx timeout [ 85.120620][ T5289] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 85.179082][ T5289] Bluetooth: hci2: command tx timeout [ 85.179740][ T5989] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 85.316747][ T5989] usb 10-1: device descriptor read/64, error -71 [ 85.404280][ T8031] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 85.429998][ T8045] 9pnet_fd: Insufficient options for proto=fd [ 85.582039][ T5989] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 85.720073][ T5989] usb 10-1: device descriptor read/64, error -71 [ 85.762581][ T5289] Bluetooth: hci3: command 0x040f tx timeout [ 85.837952][ T5989] usb usb10-port1: attempt power cycle [ 86.197615][ T5989] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 86.219276][ T5989] usb 10-1: device descriptor read/8, error -71 [ 86.275795][ T8060] netlink: 'syz.2.505': attribute type 5 has an invalid length. [ 86.473535][ T5989] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 86.498014][ T5989] usb 10-1: device descriptor read/8, error -71 [ 86.519833][ T8083] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 86.522394][ T8083] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 86.533938][ T8085] overlayfs: failed to resolve 'fsname=overlay': -2 [ 86.560698][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 86.565843][ T8087] syz.2.511[8087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.565917][ T8087] syz.2.511[8087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.569432][ T8087] syz.2.511[8087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.573431][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 86.587814][ T8089] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 86.590329][ T8089] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 86.612017][ T5989] usb usb10-port1: unable to enumerate USB device [ 86.646331][ T8096] syzkaller1: entered promiscuous mode [ 86.647815][ T8096] syzkaller1: entered allmulticast mode [ 86.729569][ T9] usb 5-1: config 0 has no interfaces? [ 86.730988][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.735151][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.743716][ T9] usb 5-1: config 0 descriptor?? [ 86.888016][ T8102] xfrm0: entered allmulticast mode [ 86.913810][ T8102] syzkaller0: entered promiscuous mode [ 86.915304][ T8102] syzkaller0: entered allmulticast mode [ 86.968140][ T8109] trusted_key: encrypted_key: insufficient parameters specified [ 86.975288][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 86.975302][ T39] audit: type=1400 audit(1733473313.919:765): avc: denied { getopt } for pid=8108 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.982878][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 86.985361][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 87.363219][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.519'. [ 87.375806][ T5289] Bluetooth: hci2: command tx timeout [ 87.599397][ T8135] batadv0: left promiscuous mode [ 87.601845][ T8135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'. [ 88.464678][ T8146] block nbd2: not configured, cannot reconfigure [ 88.845331][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 88.847798][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 88.850048][ T8158] netlink: 'syz.1.528': attribute type 7 has an invalid length. [ 88.905095][ T8165] netlink: 'syz.5.527': attribute type 10 has an invalid length. [ 88.914215][ T8165] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.941996][ T8166] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 88.960102][ T8166] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 88.969542][ T8166] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 88.976287][ T8169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.530'. [ 89.105516][ T8180] input: syz1 as /devices/virtual/input/input8 [ 89.110781][ T39] audit: type=1400 audit(1733473315.925:766): avc: denied { read } for pid=5333 comm="acpid" name="event4" dev="devtmpfs" ino=2850 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.117235][ T39] audit: type=1400 audit(1733473315.925:767): avc: denied { open } for pid=5333 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2850 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.124330][ T39] audit: type=1400 audit(1733473315.925:768): avc: denied { ioctl } for pid=5333 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2850 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.204848][ T39] audit: type=1400 audit(1733473316.019:769): avc: denied { read append } for pid=8182 comm="syz.2.534" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 89.211943][ T39] audit: type=1400 audit(1733473316.019:770): avc: denied { open } for pid=8182 comm="syz.2.534" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 89.218760][ T39] audit: type=1400 audit(1733473316.019:771): avc: denied { ioctl } for pid=8182 comm="syz.2.534" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 89.226662][ T39] audit: type=1400 audit(1733473316.029:772): avc: denied { setattr } for pid=8182 comm="syz.2.534" name="NETLINK" dev="sockfs" ino=24895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.234520][ T8183] Bluetooth: hci4: Frame reassembly failed (-84) [ 89.329200][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 89.426568][ T5989] usb 5-1: USB disconnect, device number 9 [ 89.462794][ T8185] can: request_module (can-proto-0) failed. [ 89.474487][ T8185] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 89.570442][ T39] audit: type=1400 audit(1733473316.358:773): avc: denied { execute_no_trans } for pid=8188 comm="syz.0.536" path="/120/file0" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.730503][ T39] audit: type=1400 audit(1733473316.509:774): avc: denied { create } for pid=8196 comm="syz.5.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 89.793853][ T8201] bond0: entered promiscuous mode [ 89.795341][ T8201] bond_slave_0: entered promiscuous mode [ 89.797856][ T8201] bond_slave_1: entered promiscuous mode [ 89.799495][ T8201] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 89.802210][ T8201] bond0: entered allmulticast mode [ 89.803738][ T8201] bond_slave_0: entered allmulticast mode [ 89.805357][ T8201] bond_slave_1: entered allmulticast mode [ 89.807250][ T8201] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 89.820320][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'. [ 89.918161][ T8210] random: crng reseeded on system resumption [ 90.259968][ T5989] hid (null): unknown global tag 0xdf [ 90.265653][ T5989] hid-generic 0002:0001:FFFFFFF7.0005: unknown main item tag 0x1 [ 90.267665][ T5989] hid-generic 0002:0001:FFFFFFF7.0005: unexpected long global item [ 90.269909][ T5989] hid-generic 0002:0001:FFFFFFF7.0005: probe with driver hid-generic failed with error -22 [ 90.804386][ T8276] Bluetooth: MGMT ver 1.23 [ 90.861263][ T8278] ptrace attach of "/syz-executor exec"[8279] was attempted by "/syz-executor exec"[8278] [ 90.867049][ T8278] vcan0 speed is unknown, defaulting to 1000 [ 90.873061][ T8278] vcan0 speed is unknown, defaulting to 1000 [ 90.877091][ T8278] vcan0 speed is unknown, defaulting to 1000 [ 90.923781][ T35] vcan0 speed is unknown, defaulting to 1000 [ 90.925515][ T8278] infiniband syz1: set active [ 90.926790][ T8278] infiniband syz1: added vcan0 [ 90.930824][ T8278] syz1: rxe_create_cq: returned err = -12 [ 90.932842][ T8278] infiniband syz1: Couldn't create ib_mad CQ [ 90.934449][ T8278] infiniband syz1: Couldn't open port 1 [ 90.951949][ T8278] RDS/IB: syz1: added [ 90.953256][ T8278] smc: adding ib device syz1 with port count 1 [ 90.955085][ T8278] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 90.958749][ T35] vcan0 speed is unknown, defaulting to 1000 [ 90.961726][ T8278] vcan0 speed is unknown, defaulting to 1000 [ 91.000007][ T8278] vcan0 speed is unknown, defaulting to 1000 [ 91.036578][ T8278] vcan0 speed is unknown, defaulting to 1000 [ 91.075134][ T8278] vcan0 speed is unknown, defaulting to 1000 [ 91.307467][ T8288] support for cryptoloop has been removed. Use dm-crypt instead. [ 91.367660][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 91.367679][ T5289] Bluetooth: hci4: command 0x1003 tx timeout [ 91.440077][ T8291] tmpfs: Unknown parameter 'vnode32' [ 91.531833][ T8302] bridge_slave_0: left allmulticast mode [ 91.533782][ T8302] bridge_slave_0: left promiscuous mode [ 91.535843][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.542621][ T8302] bridge_slave_1: left allmulticast mode [ 91.544195][ T8302] bridge_slave_1: left promiscuous mode [ 91.545730][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.552950][ T8302] bond0: (slave bond_slave_0): Releasing backup interface [ 91.563918][ T8302] bond0: (slave bond_slave_1): Releasing backup interface [ 91.577777][ T8302] team0: Port device team_slave_0 removed [ 91.584502][ T8302] team0: Port device team_slave_1 removed [ 91.586278][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.588357][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.591361][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.593343][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.601851][ T8302] bond0: (slave wlan1): Releasing backup interface [ 91.622998][ T8302] team0: Port device vlan2 removed [ 91.653540][ T8308] team0: Mode changed to "loadbalance" [ 91.710459][ T8317] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 91.785091][ T8326] veth0: entered promiscuous mode [ 91.790525][ T8324] veth0: left promiscuous mode [ 91.927833][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 91.981519][ T8344] netlink: 'syz.5.583': attribute type 1 has an invalid length. [ 92.286210][ T8363] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.288686][ T8363] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.291346][ T8363] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.294698][ T8363] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.297322][ T8363] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.299422][ T8363] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.302983][ T8363] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.305478][ T8363] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.305740][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 92.305752][ T39] audit: type=1400 audit(1733473318.939:826): avc: denied { create } for pid=8364 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.308321][ T8365] netlink: 68 bytes leftover after parsing attributes in process `syz.5.589'. [ 92.317271][ T8363] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.320101][ T8363] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.328385][ T39] audit: type=1400 audit(1733473318.958:827): avc: denied { write } for pid=8364 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.328448][ T8365] netlink: 16 bytes leftover after parsing attributes in process `syz.5.589'. [ 92.355298][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.375809][ T8367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.590'. [ 92.387132][ T39] audit: type=1400 audit(1733473319.005:828): avc: denied { ioctl } for pid=8366 comm="syz.1.590" path="socket:[23468]" dev="sockfs" ino=23468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 92.411214][ T39] audit: type=1400 audit(1733473319.033:829): avc: denied { accept } for pid=8364 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.417041][ T39] audit: type=1400 audit(1733473319.033:830): avc: denied { read } for pid=8364 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.475854][ T8378] netlink: 140 bytes leftover after parsing attributes in process `syz.5.589'. [ 92.525176][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 92.529220][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 92.531894][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.534959][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.537983][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.540776][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.544043][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.546260][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.725885][ T8382] CIFS: iocharset name too long [ 92.768834][ T9] usb 5-1: usb_control_msg returned -32 [ 92.770901][ T9] usbtmc 5-1:16.0: can't read capabilities [ 93.045694][ T35] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 93.194275][ T35] usb 7-1: device descriptor read/64, error -71 [ 93.230958][ T8405] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 93.230958][ T8405] program syz.1.601 not setting count and/or reply_len properly [ 93.243597][ T8405] netlink: 72 bytes leftover after parsing attributes in process `syz.1.601'. [ 93.460422][ T35] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 93.619152][ T35] usb 7-1: device descriptor read/64, error -71 [ 93.694804][ T8436] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 93.746757][ T35] usb usb7-port1: attempt power cycle [ 93.752369][ T8444] SELinux: Context is not valid (left unmapped). [ 93.755846][ T39] audit: type=1400 audit(1733473320.295:831): avc: denied { bind } for pid=8443 comm="syz.5.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.762658][ T39] audit: type=1400 audit(1733473320.304:832): avc: denied { setopt } for pid=8443 comm="syz.5.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.876081][ T8449] hfs: can't find a HFS filesystem on dev sr0 [ 93.912376][ T8454] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 93.914705][ T8454] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 93.918972][ T8454] vhci_hcd vhci_hcd.0: Device attached [ 93.924700][ T8457] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(7) [ 93.926738][ T8457] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 93.929796][ T8457] vhci_hcd vhci_hcd.0: Device attached [ 93.930233][ T8454] vhci_hcd vhci_hcd.0: port 0 already used [ 93.934821][ T8459] vhci_hcd: connection closed [ 93.935043][ T8455] vhci_hcd: connection closed [ 93.940003][ T11] vhci_hcd: stop threads [ 93.943666][ T11] vhci_hcd: release socket [ 93.945268][ T11] vhci_hcd: disconnect device [ 93.946993][ T11] vhci_hcd: stop threads [ 93.949036][ T11] vhci_hcd: release socket [ 93.950555][ T11] vhci_hcd: disconnect device [ 94.007165][ T5937] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 94.120512][ T35] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 94.126725][ T8466] netlink: 'syz.1.617': attribute type 10 has an invalid length. [ 94.129096][ T8466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.135540][ T8466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.140440][ T35] usb 7-1: device descriptor read/8, error -71 [ 94.141893][ T8466] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 94.394534][ T35] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 94.417421][ T35] usb 7-1: device descriptor read/8, error -71 [ 94.532933][ T35] usb usb7-port1: unable to enumerate USB device [ 94.567635][ T8471] netlink: 1092 bytes leftover after parsing attributes in process `syz.5.619'. [ 94.570142][ T8471] openvswitch: netlink: Missing key (keys=40, expected=80) [ 95.249361][ T8483] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 95.697000][ T8501] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 95.836586][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.627'. [ 95.840602][ T8503] binder: 8502:8503 ioctl c0046209 0 returned -22 [ 96.026759][ T8510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=168 sclass=netlink_route_socket pid=8510 comm=syz.2.630 [ 96.074395][ T8508] syz.5.629 (8508): drop_caches: 2 [ 96.137922][ T39] audit: type=1400 audit(1733473322.545:833): avc: denied { ioctl } for pid=8513 comm="syz.5.631" path="socket:[28715]" dev="sockfs" ino=28715 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 96.210300][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 96.497963][ T30] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 96.508704][ T35] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 96.659412][ T30] usb 10-1: config 0 has no interfaces? [ 96.660999][ T30] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.663509][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.667866][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 96.670427][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 96.672017][ T30] usb 10-1: config 0 descriptor?? [ 96.673368][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.673384][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.673395][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.685171][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.687628][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.891483][ T5988] usb 10-1: USB disconnect, device number 6 [ 96.904747][ T35] usb 7-1: GET_CAPABILITIES returned 0 [ 96.906292][ T35] usbtmc 7-1:16.0: can't read capabilities [ 97.128369][ T8536] netlink: 'syz.1.639': attribute type 23 has an invalid length. [ 97.169989][ T8538] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 97.172147][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.174956][ T8538] vhci_hcd vhci_hcd.0: Device attached [ 97.178268][ T8538] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(62) [ 97.180377][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.183091][ T8538] vhci_hcd vhci_hcd.0: Device attached [ 97.186463][ T8538] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(68) [ 97.188220][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.191378][ T8538] vhci_hcd vhci_hcd.0: Device attached [ 97.194989][ T8538] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(173) [ 97.196808][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.200831][ T8538] vhci_hcd vhci_hcd.0: Device attached [ 97.203251][ T8538] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(175) [ 97.205033][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.207138][ T8538] vhci_hcd vhci_hcd.0: Device attached [ 97.209506][ T8538] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(177) [ 97.211297][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.213518][ T8538] vhci_hcd vhci_hcd.0: Device attached [ 97.217557][ T8538] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(179) [ 97.219353][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.231453][ T8538] vhci_hcd vhci_hcd.0: Device attached [ 97.248362][ T8554] vhci_hcd: connection closed [ 97.248594][ T8550] vhci_hcd: connection closed [ 97.248618][ T8548] vhci_hcd: connection closed [ 97.249558][ T8552] vhci_hcd: connection closed [ 97.249924][ T11] vhci_hcd: stop threads [ 97.249971][ T8546] vhci_hcd: connection closed [ 97.255505][ T11] vhci_hcd: release socket [ 97.257838][ T8544] vhci_hcd: connection closed [ 97.258165][ T11] vhci_hcd: disconnect device [ 97.258766][ T11] vhci_hcd: stop threads [ 97.260211][ T8538] block nbd1: shutting down sockets [ 97.260850][ T11] vhci_hcd: release socket [ 97.260865][ T11] vhci_hcd: disconnect device [ 97.261045][ T11] vhci_hcd: stop threads [ 97.268158][ T11] vhci_hcd: release socket [ 97.269392][ T11] vhci_hcd: disconnect device [ 97.270788][ T11] vhci_hcd: stop threads [ 97.271927][ T11] vhci_hcd: release socket [ 97.273226][ T11] vhci_hcd: disconnect device [ 97.275192][ T8540] vhci_hcd: connection closed [ 97.276339][ T11] vhci_hcd: stop threads [ 97.278873][ T11] vhci_hcd: release socket [ 97.280215][ T11] vhci_hcd: disconnect device [ 97.281754][ T11] vhci_hcd: stop threads [ 97.283568][ T11] vhci_hcd: release socket [ 97.286295][ T11] vhci_hcd: disconnect device [ 97.289531][ T11] vhci_hcd: stop threads [ 97.290868][ T11] vhci_hcd: release socket [ 97.292067][ T11] vhci_hcd: disconnect device [ 97.483408][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.642'. [ 97.701100][ T8565] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 97.707841][ T8565] CIFS mount error: No usable UNC path provided in device string! [ 97.707841][ T8565] [ 97.711564][ T8565] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 97.792327][ T39] audit: type=1400 audit(1733473324.098:834): avc: denied { validate_trans } for pid=8566 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 97.842887][ T8571] netlink: 'syz.5.647': attribute type 2 has an invalid length. [ 97.845060][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.647'. [ 97.943768][ T8573] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.947158][ T39] audit: type=1400 audit(1733473324.248:835): avc: denied { nlmsg_read } for pid=8572 comm="syz.5.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.016653][ T39] audit: type=1400 audit(1733473324.305:836): avc: denied { wake_alarm } for pid=8574 comm="syz.5.649" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.023056][ T8577] netlink: 'syz.5.649': attribute type 10 has an invalid length. [ 98.033151][ T8577] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.035572][ T8577] team0: entered promiscuous mode [ 98.036975][ T8577] team_slave_0: entered promiscuous mode [ 98.038873][ T8577] team_slave_1: entered promiscuous mode [ 98.040550][ T8577] team0: entered allmulticast mode [ 98.041910][ T8577] team_slave_0: entered allmulticast mode [ 98.043411][ T8577] team_slave_1: entered allmulticast mode [ 98.045248][ T8577] bond0: (slave team0): Enslaving as an active interface with an up link [ 98.048007][ T8575] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 98.206784][ T39] audit: type=1400 audit(1733473324.483:837): avc: denied { mount } for pid=8578 comm="syz.1.650" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 98.220498][ T39] audit: type=1400 audit(1733473324.502:838): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 98.238135][ T39] audit: type=1400 audit(1733473324.512:839): avc: denied { watch_mount } for pid=8580 comm="syz.1.651" path="/144" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.243900][ T39] audit: type=1400 audit(1733473324.512:840): avc: denied { setopt } for pid=8580 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.272371][ T35] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 98.289254][ T8584] vcan0 speed is unknown, defaulting to 1000 [ 98.403913][ T8584] block device autoloading is deprecated and will be removed. [ 98.406652][ T39] audit: type=1400 audit(1733473324.672:841): avc: denied { ioctl } for pid=8583 comm="syz.1.652" path="/145/file0/file0" dev="fuse" ino=0 ioctlcmd=0x911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 98.447149][ T35] usb 10-1: not running at top speed; connect to a high speed hub [ 98.450417][ T35] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 98.455971][ T35] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.459322][ T35] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.462298][ T35] usb 10-1: Product: syz [ 98.463937][ T35] usb 10-1: Manufacturer: ၃ [ 98.465636][ T35] usb 10-1: SerialNumber: syz [ 98.470340][ T8576] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 98.655690][ T8594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.696532][ T35] cdc_ncm 10-1:1.0: bind() failure [ 98.699692][ T35] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 98.701428][ T35] cdc_ncm 10-1:1.1: bind() failure [ 98.704065][ T35] usb 10-1: USB disconnect, device number 7 [ 98.862102][ T39] audit: type=1400 audit(1733473325.105:842): avc: denied { map } for pid=8602 comm="syz.1.657" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.868163][ T39] audit: type=1400 audit(1733473325.105:843): avc: denied { execute } for pid=8602 comm="syz.1.657" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.932871][ T8430] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 98.937167][ T8607] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 98.941148][ T8607] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 98.946267][ T30] usb 7-1: USB disconnect, device number 10 [ 98.946763][ T3306] usb 5-1: USB disconnect, device number 10 [ 99.097759][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.663'. [ 99.102879][ T8624] binder: 8623:8624 ioctl c0306201 20000680 returned -14 [ 99.182030][ T8631] gfs2: not a GFS2 filesystem [ 99.254418][ T8640] vlan2: entered promiscuous mode [ 99.255867][ T8640] vlan2: entered allmulticast mode [ 99.257230][ T8640] hsr_slave_1: entered allmulticast mode [ 99.263216][ T8636] netlink: 'syz.0.668': attribute type 4 has an invalid length. [ 99.264503][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'. [ 99.346796][ T8640] hsr_slave_1 (unregistering): left allmulticast mode [ 99.356505][ T5987] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 99.362336][ T8640] hsr_slave_1 (unregistering): left promiscuous mode [ 99.494442][ T5987] usb 6-1: device descriptor read/64, error -71 [ 99.749482][ T5987] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 99.754218][ T8668] random: crng reseeded on system resumption [ 99.783102][ T8670] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 99.785214][ T8670] netlink: 224 bytes leftover after parsing attributes in process `syz.2.680'. [ 99.845517][ T8671] 9pnet_virtio: no channels available for device 127.0.0.1 [ 99.898184][ T5987] usb 6-1: device descriptor read/64, error -71 [ 100.015630][ T5987] usb usb6-port1: attempt power cycle [ 100.129307][ T8687] fuse: Unknown parameter 'gdJ?}w8A#QY!ͽ vr^v#|<~iߪMimCKOn b$yPgy!v;]i|TLZ#g%X֕J5:ȕ5U: [ 100.129307][ T8687] .AT4%cc"Fir[4DtEp^ܽ' [ 100.323117][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.691'. [ 100.326830][ T8703] netlink: 'syz.0.691': attribute type 7 has an invalid length. [ 100.328892][ T8703] netlink: 'syz.0.691': attribute type 8 has an invalid length. [ 100.334302][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 100.339526][ T8703] veth1_to_team: entered promiscuous mode [ 100.341779][ T8703] batadv_slave_1: entered promiscuous mode [ 100.343671][ T8703] gretap0: entered promiscuous mode [ 100.347188][ T8703] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 100.378338][ T8707] input: syz0 as /devices/virtual/input/input9 [ 100.399742][ T5987] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 100.419533][ T5987] usb 6-1: device descriptor read/8, error -71 [ 100.696567][ T5987] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 100.717686][ T5987] usb 6-1: device descriptor read/8, error -71 [ 100.769375][ C3] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:414/tfrc_rx_hist_sample_rtt() [ 100.769690][ T3306] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 100.773212][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 100.779298][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.782059][ C3] Call Trace: [ 100.782934][ C3] [ 100.783690][ C3] dump_stack_lvl+0x16c/0x1f0 [ 100.784932][ C3] tfrc_rx_hist_sample_rtt+0x3e1/0x4a0 [ 100.786307][ C3] ccid3_hc_rx_packet_recv+0x443/0xf50 [ 100.787733][ C3] ? __pfx_ccid3_hc_rx_packet_recv+0x10/0x10 [ 100.789306][ C3] dccp_deliver_input_to_ccids+0xe3/0x270 [ 100.790816][ C3] dccp_rcv_established+0x10a/0x160 [ 100.792159][ C3] dccp_v4_do_rcv+0x171/0x1b0 [ 100.793463][ C3] ? __pfx_dccp_v4_do_rcv+0x10/0x10 [ 100.794821][ C3] __sk_receive_skb+0x7aa/0x890 [ 100.796123][ C3] dccp_v4_rcv+0x1153/0x1d30 [ 100.797296][ C3] ? __pfx_dccp_v4_rcv+0x10/0x10 [ 100.798586][ C3] ip_protocol_deliver_rcu+0x441/0x4c0 [ 100.800033][ C3] ip_local_deliver_finish+0x316/0x570 [ 100.801471][ C3] ip_local_deliver+0x18e/0x1f0 [ 100.802755][ C3] ? __pfx_ip_local_deliver+0x10/0x10 [ 100.804165][ C3] ip_rcv+0x2c3/0x5d0 [ 100.805255][ C3] ? __pfx_ip_rcv+0x10/0x10 [ 100.806388][ C3] __netif_receive_skb_one_core+0x199/0x1e0 [ 100.808285][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 100.810149][ C3] ? rcu_is_watching+0x12/0xc0 [ 100.811529][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.813431][ C3] ? process_backlog+0x3f1/0x15f0 [ 100.815075][ C3] ? process_backlog+0x3f1/0x15f0 [ 100.816793][ C3] __netif_receive_skb+0x1d/0x160 [ 100.818300][ C3] process_backlog+0x443/0x15f0 [ 100.819946][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 100.821791][ C3] net_rx_action+0xa94/0x1010 [ 100.823173][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 100.824920][ C3] ? __print_lock_name+0x1d0/0x260 [ 100.826689][ C3] ? net_tx_action+0x7e6/0xd00 [ 100.828343][ C3] handle_softirqs+0x213/0x8f0 [ 100.829964][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 100.831746][ C3] __irq_exit_rcu+0x109/0x170 [ 100.833326][ C3] irq_exit_rcu+0x9/0x30 [ 100.834790][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 100.836709][ C3] [ 100.837739][ C3] [ 100.838749][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.840774][ C3] RIP: 0010:default_idle+0xf/0x20 [ 100.842494][ C3] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 c3 3c 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 100.848352][ C3] RSP: 0018:ffffc900001a7e08 EFLAGS: 00000206 [ 100.849958][ C3] RAX: 00000000000cfe65 RBX: 0000000000000003 RCX: ffffffff8b29c759 [ 100.851980][ C3] RDX: 0000000000000000 RSI: ffffffff8b6cd840 RDI: ffffffff8bd1b4a0 [ 100.853879][ C3] RBP: ffffed1003a56488 R08: 0000000000000001 R09: ffffed100d526fed [ 100.855904][ C3] R10: ffff88806a937f6b R11: 0000000000000000 R12: 0000000000000003 [ 100.857963][ C3] R13: ffff88801d2b2440 R14: ffffffff905f03d0 R15: 0000000000000000 [ 100.860021][ C3] ? ct_kernel_exit+0x139/0x190 [ 100.861203][ C3] default_idle_call+0x6d/0xb0 [ 100.862442][ C3] do_idle+0x329/0x3f0 [ 100.863495][ C3] ? __pfx_do_idle+0x10/0x10 [ 100.864709][ C3] cpu_startup_entry+0x4f/0x60 [ 100.866004][ C3] start_secondary+0x222/0x2b0 [ 100.867290][ C3] ? __pfx_start_secondary+0x10/0x10 [ 100.868684][ C3] common_startup_64+0x13e/0x148 [ 100.869908][ C3] [ 100.871130][ T5987] usb usb6-port1: unable to enumerate USB device [ 100.872094][ T8743] dccp_close: ABORT with 31224 bytes unread [ 100.929090][ T56] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 100.930968][ T3306] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.934728][ T3306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 100.937772][ T3306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.940933][ T3306] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.944179][ T3306] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.946475][ T3306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.949641][ T3306] usb 5-1: config 0 descriptor?? [ 100.951505][ T8724] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 101.099201][ T56] usb 10-1: Using ep0 maxpacket: 8 [ 101.102102][ T56] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 101.104785][ T56] usb 10-1: config 179 has no interface number 0 [ 101.106449][ T56] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 101.110115][ T56] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 101.114027][ T56] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.117685][ T56] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 101.121315][ T56] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.125543][ T56] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 101.128588][ T56] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.133385][ T8737] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 101.168862][ T8714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.172002][ T8714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.362204][ T56] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input10 [ 101.577624][ T56] usb 10-1: USB disconnect, device number 8 [ 101.579668][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 101.579695][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 101.588313][ T56] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 101.610243][ T3306] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 101.613949][ T3306] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 101.620878][ T3306] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.889145][ T5970] usb 5-1: USB disconnect, device number 11 [ 102.598019][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 102.598031][ T5937] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.602009][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 104.798543][ T5937] Bluetooth: hci1: command 0x0406 tx timeout [ 104.800906][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 104.802598][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 107.010228][ T5937] Bluetooth: hci3: command 0x040f tx timeout [ 107.010275][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 107.014730][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 109.318359][ T5937] Bluetooth: hci2: command 0x0405 tx timeout [ 109.320738][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 109.322951][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) VM DIAGNOSIS: 08:22:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8b27f9b4 RDX=ffff888021bc2440 RSI=0000000000000000 RDI=0000000000000004 RBP=0000000000000000 RSP=ffffc90003bd72a0 R8 =0000000000000004 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffff8880508a5378 R14=0000000000000000 R15=ffffc90003bd7448 RIP=ffffffff819a06d2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4c6212f6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020004000 CR3=000000004852c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c6212efb0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000013b6f5 RBX=0000000000000001 RCX=ffffffff8b29c759 RDX=0000000000000000 RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b4a0 RBP=ffffed1003a53910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d29c880 R14=ffffffff905f03d0 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000201c9fff CR3=00000000252e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555564388d20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556437a490 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555643f39d9 00005555643f2500 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642f01ffffff ffffffffffeb0805 80030008000c1000 4c100006004b9a50 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4bb2000200070004 00019ac880080005 800401c710000801 2ed400786d74702f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004001000001000 03ffffffff040100 000008060c0144e2 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000700316f696475 612f7665642f01ff ffffffffffffffe7 086c80033810000c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002080606011f 8800020007000400 0008006c800401c7 100008012da40002 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 016d80041080e2c0 a208000100000208 0606011f88000200 070004000008006c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800401c710000801 2da4000200070031 6f696475612f7665 642f01ffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffe7086c8003 3810000c80040010 0000100003ffffff ff04010000000806 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0144e200020007 0008000cb0030202 000cae0300000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c98d5 RDI=ffffffff9ab0fbe0 RBP=ffffffff9ab0fba0 RSP=ffffc90025e47390 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000009 R12=0000000000000000 R13=0000000000000064 R14=ffffffff851c9870 R15=0000000000000000 RIP=ffffffff851c98ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4c6210dfb8 CR3=0000000049a9e000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000000 DR2=0000000000000003 DR3=0000000000000001 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0c744f80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5807bf4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5807bf483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5807bf4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5807bf484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5807bf48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5807bf49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000094 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000094 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c98d5 RDI=ffffffff9ab0fbe0 RBP=ffffffff9ab0fba0 RSP=ffffc90000708338 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000008 R12=0000000000000000 R13=0000000000000032 R14=ffffffff851c9870 R15=0000000000000000 RIP=ffffffff851c98ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4c620ecfb8 CR3=000000004852c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c613f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 22a467841bbbc74a 62f77b21d08e77b7 9a6be81fcfa09abc f02bd5ca210ef94d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58ab17ace19e7ba5 f3f2e0d62fb8841e dcf50f7b816246a4 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b666084f97cd891f f4657aace529a030 69e4085ad4f23e47 6bc0ee7a4e9dccbd ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5cfae90e2979c210 1b0c9a5b706cb2ce fa0c41ac1f41fb57 6e79474688a0f987 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a88a82eb1864c47 80ca689a86ca256b d65bbb539a35d299 375d17b128275f58 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0d409f81ac76ad0 5e05ec669c9a7df6 0e059334ab630db6 381b42534e536c1c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 94ce6f81b804630c 7e555f33dcbbecd8 443e5f510d3a2e6c 0b94d26784ab6350 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9305afc972c22334 7c4918d0ec996562 4ce9b00b71314f35 a991e145ca5cfae9 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000