last executing test programs: 6.206146341s ago: executing program 0 (id=606): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x11) r0 = eventfd(0x800a6) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001880), 0x280, 0x0) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f00000018c0)={@msf={0x4, 0x7, 0x7}, 0x1, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f00000000c0)) 6.116408833s ago: executing program 0 (id=607): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close(r2) (async) close(r2) listen(r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010400442139d5aa2e8b2d"], 0x28}}, 0x0) 6.115872131s ago: executing program 0 (id=608): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@noop]}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@rand_addr, 0x8}, {@empty}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000001fff00000000020000002000019616dabf0000000000000000000000000000000001060001000a000000"], 0x34}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002800c0002001b0000001d00000006000100000000000600050088a8000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x60}}, 0x0) 6.056173634s ago: executing program 0 (id=609): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r0, &(0x7f0000002080)=""/4108, 0x100c) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f00000001c0)=0xe, 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) (rerun: 64) getdents64(r0, 0x0, 0x0) 5.963689665s ago: executing program 0 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x18000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000280)={'veth0_vlan\x00', @local}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x1, 0x95c7, 0x1, 0x10, 0x1000, 0x4123}) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000191407"], 0x10}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_delroute={0x2c, 0x19, 0x400, 0x70bd25, 0x25dfdbff, {0x2, 0x10, 0x14, 0x3, 0xfd, 0x1, 0xfe, 0x1, 0x100}, [@RTA_FLOW={0x8}, @RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x2c}}, 0x20000000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000006, 0x13, r8, 0x0) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000000080), 0x2) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x210, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x118, 0x140, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1a, 0x8, 0x50000000, {0x9}}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xffffffff], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xc4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_mpls={0xac, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xfa}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xde8, 0x5b, 0x3, 0x5, 0x1}, 0x3}}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x10053b7d}, @TCA_MPLS_PROTO={0x6, 0x4, 0x892f}]}, {0x2c, 0x6, "10fda650a107f6f7938a8071a24a11585b0ef8af21dba385e8f63a27de4e96437ef3de32a97403ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xc4}}, 0x0) 5.704071225s ago: executing program 0 (id=611): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async, rerun: 64) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) (async, rerun: 64) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x4}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x18000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c044}, 0x41) 5.631371833s ago: executing program 32 (id=611): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async, rerun: 64) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) (async, rerun: 64) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x4}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x18000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c044}, 0x41) 795.447496ms ago: executing program 2 (id=656): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="04005b00"], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000000000002800000105000000200000000000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="dc01000010000100fcffffff800000e200000000", @ANYRES32=0x0, @ANYBLOB="0335000000000000140012800c0001006d6163766c616e0004000280a0011680a00001800c00030008000000010000000c00040000010000018000000c00090067000000030000000c00040007000000040000000c0005000100000085e9000054000c801400010000000000620d00000000000088a8000014000100040000003a0c00008d00000088a800001400010007000000e50500000700000088a8000014000100bbbe0000e609000006000000810000000c0007000800000002000000a80001800c00050000100000ff0000002800010003000000000000000000000000000000000000000000000000000000000000000000000010000200ff0f0000800d00001e7f000028000100fce70000ffffffffffff000000000000000000000000000000000000000000000000000014000b000000000000000000070000000000000010000200ff030000f30100007a00000014000a0016000000000000000600000000000000540001800c00040008000000040000000c00050000010000010001000c00050004000000020000002c000c80140001000b000000530000000400000088a800001400010001ffffff41050000586d000081000000080028007d3f0000"], 0x1dc}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x8001000, 0x20481) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_buf(r9, 0x0, 0x2f, &(0x7f0000000280)=""/154, &(0x7f0000000200)=0x9a) ioctl$KVM_RUN(r11, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13], 0x90}}, 0x0) 746.207476ms ago: executing program 3 (id=657): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000380)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x32, 0x0, @empty=0xac1414aa, @rand_addr, {[@noop, @timestamp={0x44, 0x1c, 0xae, 0x0, 0x0, [0x7fb0c141, 0x5, 0xa, 0x4, 0x7f, 0xffffffff]}, @timestamp_addr={0x44, 0xc, 0x8e, 0x1, 0x9, [{@broadcast, 0xff}]}]}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x12020, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5819}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) (async) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x7) 695.634214ms ago: executing program 3 (id=658): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) setrlimit(0x6, &(0x7f00000000c0)={0x8, 0x6}) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002780), 0x202, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000040)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) keyctl$read(0x2, r1, &(0x7f0000001940)=""/4086, 0xff6) 635.657926ms ago: executing program 3 (id=659): syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa8865) 631.380502ms ago: executing program 3 (id=660): syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x800, 0x0, 0xff, 0x0, 0x4}, 0x20) epoll_create1(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer']) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x10002, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x2000, 0x0) getdents64(r6, &(0x7f00000032c0)=""/50, 0x32) getdents64(r6, 0xfffffffffffffffe, 0x29) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="0f05c4c2312f616e4e0fc72866ba6100ed262e6666400fc7b785e06f97b8010000000f01c148b80b000000000000000f23c88f88108fa4fe0d0000000a35040050000f23f83e67430f01c20f00d2670fc732", 0x52}], 0x1, 0x32, 0x0, 0x2) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x8, 'wg0\x00', {'vlan0\x00'}, 0xa6b}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x12000, 0x0) 566.009341ms ago: executing program 4 (id=662): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) r0 = open(0x0, 0x80ff, 0x36) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0xc4000, 0x0) renameat2(r1, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000280)='./file1\x00', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x220000) (async) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) read$FUSE(r2, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f00000000c0)='./file1\x00') (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x9362, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) accept(r3, &(0x7f0000000140)=@qipcrtr, &(0x7f0000000080)=0x80) 564.429531ms ago: executing program 4 (id=663): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000082"], 0x34}}, 0x0) r0 = syz_io_uring_setup(0x4a60, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0xfffffffe, 0x10a}, &(0x7f00000004c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)='~', 0x1}], 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0xc, @multicast2, 0x0, 0x0, 'ovf\x00'}}, 0x44) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000100)="da65bf7821c0c2a5662347bc10ff275adb5e8b02a9441f648923f9e8e0a6e46b6ad38023", 0x24}], 0x1) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 475.939618ms ago: executing program 4 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x552b}, 0x16, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000340)=ANY=[@ANYBLOB='flokk=loca@2dyn,\x00']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) fanotify_mark(r1, 0x441, 0x48000001, r0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x110) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb83cecb78cef66bafc0ced66ba400066b8ffff66ef0f78d164646565470fc77d9fb9240b0000b809000000ba000000000f3048b805000000000000000f23c00f21f835010004000f23f80f005300364b0fc729360fc77c8ffd0f20c035000000400f22c0", 0x68}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x40, 0xd2, 0x6, 0x1, 0x18c, 0xdb1, 0x0, 0x8000, 0x1, 0x8, 0xffffffffffffffd0, 0xfffffffffffffc4c, 0x7, 0x4, 0x1, 0x3], 0xeeef0000, 0x90400}) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000100)) 473.914694ms ago: executing program 3 (id=665): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) getpid() 415.527494ms ago: executing program 3 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', 0x108) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x3, 0x4, 0x0, 0x3e}}, 0x50) syz_open_dev$sndpcmp(&(0x7f0000001840), 0x1, 0x200) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x2, 0xc, 0xfffffffffffffffe, 0x3, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x300, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x24, 0x2004, 0x820000, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80, 0x20000004}}, 0x50) 415.319132ms ago: executing program 2 (id=667): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0x40ead000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011002d08000000000020000000000000", @ANYRESDEC=r0, @ANYRESHEX=r1], 0x34}}, 0xc0c4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0x40ead000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011002d08000000000020000000000000", @ANYRESDEC=r0, @ANYRESHEX=r1], 0x34}}, 0xc0c4) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) (async) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 356.323442ms ago: executing program 4 (id=668): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16157}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x80000001}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}}, 0x20040040) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x3, 0xfffffffc, 0x4, 0x6}}) 276.039245ms ago: executing program 4 (id=672): mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) (async) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x200000000000c, 0x800) (async) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x200000000000c, 0x800) read$usbmon(r5, 0x0, 0xfffffe4a) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000dc0)={@random="85e4f5cbe830", @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0xd, 0x6, "bac59b", 0x0, 0x88, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000dc0)={@random="85e4f5cbe830", @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0xd, 0x6, "bac59b", 0x0, 0x88, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000c40)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000940], 0x0, 0x0, &(0x7f0000000940)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x108) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x44f0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r7, 0x4010e501, 0x0) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r7, 0x4010e501, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_procs(r8, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) (async) r9 = openat$cgroup_procs(r8, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000002380)={0x5, 0x8, 0x5, 0x2, 0x4, 0x0, [{0x200, 0x3, 0x493, '\x00', 0x301}, {0x1c34, 0x1, 0xc, '\x00', 0x100}, {0x8, 0x0, 0xf6, '\x00', 0x1000}, {0x0, 0x358b, 0x3, '\x00', 0x2208}]}) open_by_handle_at(r9, &(0x7f0000000100)=ANY=[@ANYRES16=r8], 0x408b00) chdir(&(0x7f0000000040)='./file0\x00') (async) chdir(&(0x7f0000000040)='./file0\x00') openat2(r2, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x2040, 0x120, 0x22}, 0x18) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) chdir(0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x6d9a) (async) truncate(&(0x7f0000000200)='./file0\x00', 0x6d9a) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 205.922144ms ago: executing program 1 (id=674): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) timer_create(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)=0x0) timer_settime(r1, 0x1, &(0x7f0000000540)={{0x77359400}}, &(0x7f0000000580)) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) 205.636784ms ago: executing program 4 (id=675): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe"], 0x30}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 205.403786ms ago: executing program 2 (id=676): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000180)="ddf092bd6a94c042af44", 0xa}, {&(0x7f0000000600)}, {&(0x7f0000000900)="0e8aad8500062cec007bbf8532ae183c0a14d22c159f7cbdeb3f8115fd9bca8dcc6e692d5a338348e700c5f82f8fee42cbf186b26455e286678a2a0b48f4c85a8f88bf9a20355e2c447a67a5aa6ef9238650551040f4a7a4d54aaa392e3600e6029bf67e66eebcf606e714df26def47e4b0dc8bafbd52bfecbdb97e3bcbe092340667018390d5f5182f11bff5145dc10d42afc94cf55b22b2aafec3e30274cc79965aa95ba45b859b631d3ff59691261c88aa346cea3ef706b0c55737a27b8651b4de8645261b226cb18230176d5227d7ed9ff2f4e1e68bf86852701", 0xdc}, {&(0x7f0000000700)="48510c58801307eb29df712342aa33ed52c00065f38ccca334df10e39dd4286f3fdd530fd5da21e68815609b6c63eecdf82c01827af8873d59d2a393335457a241cc488dfe5b52b991c18daef96fe89385229fc50210643632ff", 0x5a}, {&(0x7f0000000a00)="86a42b94cfc8f9345f9ed105366506db68847e49390a71ede3cd30a67bc6412ba70c7da250cf5cb1ac2b1b13df498e4a0647133266f36e2e09a3ad5f9b7b137d4ab368738f1377b25424568c97bb5e47ace86f8da4006f620f261bb321addc5042b33d5e5bce7f30042e0d7e37806602e868053c5957cf3e55fdf4fdfabcc7b62249d5f81f7c9e447901add5f73f679d6c4b5b77c8b2a5f70f370b87474032a6bd5df314655e78899e3e6f52331eee3b2df8054f2a387aa28dd2e3d4db8798c4bc8795e875f99bdf90a0a9950db7fed7a525ef", 0xd3}], 0x5) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r1, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e00040002800800", @ANYRES32=r4, @ANYBLOB='\b'], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r6 = syz_io_uring_complete(0x0) r7 = accept$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) getsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@remote, @empty, @multicast2}, &(0x7f0000000300)=0xc) ioctl$CDROM_SELECT_SPEED(r6, 0x5322, 0x400000000006) 205.172648ms ago: executing program 1 (id=677): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='io_uring_poll_arm\x00', r3}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = socket$alg(0x26, 0x5, 0x0) syz_clone(0x0, 0x0, 0xf5ff, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c051}, 0x80) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000028c0)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r7, r8, r8}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000340)={0x2000}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00", 0x4e}], 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x25dfdbfd, {0xa, 0x10, 0x80, 0x10, 0x0, 0x0, 0x0, 0x7, 0x16}, [@FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40080) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0x4}, {0xfffd, 0xb}}}}, 0x11) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r11}, 0x18) prctl$PR_SET_NAME(0x53564d41, 0x0) 80.546897ms ago: executing program 1 (id=678): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000080)={0x6b0, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x8}}}}, [@NL80211_ATTR_BEACON_HEAD={0x402, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @initial, {0x4, 0x6}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xf, @random=0x2, 0x14, @void, @val={0x1, 0x8, [{0x36}, {0x3, 0x1}, {0x5}, {0x4}, {0x9}, {0x4, 0x1}, {0x9, 0x1}, {0xb}]}, @void, @val={0x4, 0x6, {0x3, 0x2, 0x8001, 0x6}}, @void, @val={0x5, 0x93, {0x7, 0x90, 0x0, "b03e2efd4d27384e66ef0d4d66a8cc7c4925d8ab34db14dfe7ee9614a19f7a24a2ad1f80dbbe34960b8342e21b925fb0e906eee88f009985d76c44c412e77c9ebf9305d544fec73facec89d068abe57a8b4098978b27a2a1c02eb19ba5f3ba0348b7019c9d58c52ec9e9cf6362eceed9ed403ed874869270e19f69964a611161e01e73978a13d6dee0e461d4d46cd47a"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x56, "047bb065acff3e857d1dde4d1384d8e96542273765ef90b0d28937677ff5e27ce94dd4e74df86bb8d9b5f40ceee773f996c89a21d5119196e33fd65d1f8a5b1b8bbb0197d02c6c687ea5054c1522229d8eda5fc56bd0"}, {0xdd, 0xae, "d2d1089af76efbfbdc87dab8184b1156c59b5f91eb779019876a251fd211edc72fc0497e0dfadf3277f9c2c17d64e5fa103830ef0d369518c1d5b82fe09e41614661fac2be6898f02325089caa15e25bbdf42e442615da1b35142b8fdfba917f60a697df65f4b10e3f77176f1ff837ca48dc0717e72c8ee92177142a002709e7dcf3ea31348275816c8844d7cf7c346a751890a18fd8f77c6a3c5dd571f9b4a25f1e8d164431102febe6b7f78bf5"}, {0xdd, 0xd2, "c09657640545249c01756b3cf33adb70903d56b868e3c0f1793cfafa2e58f604432d7d727a8d4d3b30f2a2b0567f75836caef0a19e41c6cf823df3be8f046d9a10448504d0408ed3f11268380f71a3477c05f1cb87fa967b76deb39937d59c9d2d96cc50e2d1cc0a84cb96ac76e85f0d4a29adff41758274635942d2890fa5067f732565f1c986cd7257a0ae3340ef2596cf2c40102be55dd64ba1d090ca3c423f0103818955492e522356c3e364494bcb4295edf39224410ec05f6af39a796df6ba387fe01854bb5ef7f22e548e424d8abf"}, {0xdd, 0x6a, "dd77f01060a42b9aade15421b8fc18b1203415725d89d597bce157ffe9f94d745282bc03d4e8fc149b75d110ba320aff3458e6ec825450502378c3ae24f94452df3264dad9eaf2ce641b7bda2688b7cac9c3df6510c60ed10d38da651701e946f59106bb5111e6282309"}, {0xdd, 0x57, "2d68b159e4a76e2708d36cd366d98571d49865d4bb3e389d12a7be8c8e81949089cab5ed3cbeb2dbcd434a095fd404ad8bafcccc1ea0f2d1c301654f9e5419381021f9d83d1d96386bd4696c4e7b639ffe80807c858864"}, {0xdd, 0x84, "17b1e5f572abf14fde9e054523411c6752fa9d0e4bd9f9717c8431d0090a3ca2d53a2ae4aa5c2e0c7e0c198e672e937158bbc93ab775c8325e12904e7e1f7557144e9f7b7e7acc593e5e9e4da93f41436cfcf4424ee37664b0a1445a1e0f089eb8f27ad586440f0e28908797e792b3a38e94fc1b68ef2027bc0d73d0fe5ca24d871a6c55"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xd, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xef, 0xa1, 0xda}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_IE={0xa7, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xa5, 0x4}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x16, {0x0, 0x8000, @void, @val=0x3c, @val="053d1a074f9294821981dad30a020ada"}}, @link_id={0x65, 0x12, {@random="5b8af6fbd8d7", @broadcast}}, @ibss={0x6, 0x2, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @random={0xb0, 0x59, "42488fb59b9fb6b28a3547740d585c6f8101817ce8a9011d80fdc148aedcdab9fce5e002a61fcea9970474364aaabbdc8424bc74994b10d10da83f3344526500bafad0967d74d3eb03013e45171b3102a14cd2965747fda63d"}, @mesh_chsw={0x76, 0x6, {0x7, 0x8, 0x7, 0x1}}]}, @NL80211_ATTR_IE={0x10b, 0x2a, [@challenge={0x10, 0x1, 0x78}, @chsw_timing={0x68, 0x4, {0x6, 0x3}}, @link_id={0x65, 0x12, {@random="1277ff249481", @broadcast}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xc, 0x7, @device_a, 0x4, @value, 0x1, 0x1, @broadcast, 0x80000000}}, @dsss={0x3, 0x1, 0xaf}, @chsw_timing={0x68, 0x4, {0x1, 0xfff}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x4, 0x4}}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x0, 0x0, {0x3, 0x5, 0x0, 0x3b, 0x0, 0x0, 0x1, 0x2}, 0x1, 0x7, 0x2}}, @random_vendor={0xdd, 0x93, "452b2ce65a7df9e6e13cfa997b8a69dfb5b5b263cbabb68a0c3dc4e184ebcad9a1b917a8252de6e9a24527af0fbada3ac4ebb855620643b9699ed3cd13d05f47f23d489f447b45e571e047adb1a197d6514b619c71b31f59473ec6d4ad70bc7fb8b04bcb6a7afa1ac54a727dacb4fb67f555f01c6ca32c058303a73f3707a1c58def013d1d8d50d4265790f465baba685170b0"}]}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7f, 0x3, "60dd4c295a9c855563af1675c0b3e6af1a8feb6b4d13c77c9a61e0a98066226ba66e60921339022ceeb457d41d2bfb793b75dba3453c2d782eedb6656b3ec51d96350411afb17b16097923f5d6328b6b86cdde15f07e79a1ab4e5642912d390e8b7a1e6a86f80912c0beaaa054dff34959b5430d94068db69008f0"}]}, @NL80211_ATTR_IE={0x33, 0x2a, [@dsss={0x3, 0x1, 0xb3}, @prep={0x83, 0x1f, {{}, 0x3, 0x3, @device_a, 0x5, @void, 0xfffffff7, 0x0, @broadcast, 0xf}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_chsw={0x76, 0x6, {0x5, 0x9e, 0x1e, 0x9}}]}]}, 0x6b0}}, 0x80) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000840)=""/189, 0xbd}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000a00)=""/38, 0x26}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/68, 0x44}], 0x5}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/131, 0x83}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x2, 0x40000041, &(0x7f0000001e40)={0x77359400}) (async) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000840)=""/189, 0xbd}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000a00)=""/38, 0x26}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/68, 0x44}], 0x5}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/131, 0x83}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x2, 0x40000041, &(0x7f0000001e40)={0x77359400}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r4) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r4) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001ec0), r9) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x40) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x40) socket$inet6(0xa, 0x3, 0x3ff) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000002000)=0x880, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x30, r8, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x21}, @void, @val={0xc, 0x99, {0x1000, 0x20}}}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0xc041}, 0x4048080) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002180), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x58, r10, 0x520, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44008010}, 0x4000000) syz_genetlink_get_family_id$tipc(&(0x7f0000002300), r2) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002300), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x2c, r11, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0xc5cc40c96635525c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f00000026c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002440)={0x22c, r8, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x56}, @NL80211_ATTR_IE={0x158, 0x2a, [@mesh_chsw={0x76, 0x6, {0xff, 0x40, 0x1e, 0x8000}}, @tim={0x5, 0xba, {0x3, 0x57, 0x3, "cf7879fd6bb990b50b702697f27efe04d9a868cabaf7b2e3889b9143a4e74133d03df8829fab87e83b2b4f1617ec624515716041ff93df90159144309d1d4111743cdec4a0872871553fbe61173d26efee258e3d91f73688b5ae74c3d06eacdd61b5c5ad8cd752de0de59733cd0159507ce554233249e6bc17030dae0e8307fb547672c765be4e7cfd6e31dffc414dac97202153a193eb63ff98e4a6aeeb3c275bd4e9f485b6be9aaa488c9240e5ab558958941dcb63b2"}}, @rann={0x7e, 0x15, {{0x1, 0x6d}, 0x1, 0x4, @device_a, 0x0, 0x217, 0x1cd}}, @cf={0x4, 0x6, {0x3, 0x9, 0x0, 0x3}}, @mesh_chsw={0x76, 0x6, {0x81, 0x4, 0x2f, 0x6}}, @preq={0x82, 0x67, {{}, 0x71, 0x2, 0x44, @broadcast, 0x3, @void, 0x2, 0x7, 0x7, [{{}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @device_b, 0xfed8}, {{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_b, 0x9}, {{0x1, 0x0, 0x1}, @broadcast, 0xffff0000}, {{0x0, 0x0, 0x1}, @device_b, 0x10001}, {{0x1}, @broadcast, 0x7}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4c}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_IE={0x76, 0x2a, [@dsss={0x3, 0x1, 0x24}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0x6a, {0x7f, 0x2, 0x3, "6a137996eb32ee29e8cb9df61ee84c783825f627d75fe5d8e659be29184e761354c0eaabde14ad196fcad9e0ae0c8495f805cd6609584dfb17d767951c50264dee06efa6962d316503dd42114309d34472afc23e9b6351a6729ee08990cb00ccefcf364560ef86"}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002740), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x3c, r12, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x51}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000061}, 0x8000) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x3c, r12, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x51}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000061}, 0x8000) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000002840)={0x9, 0xf, 0x1ff, 0x0, 0x98}) (async) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000002840)={0x9, 0xf, 0x1ff, 0x0, 0x98}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000028c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000029c0)) syz_io_uring_setup(0x3f49, &(0x7f0000002a00)={0x0, 0xe88e, 0x40, 0x3, 0x17c}, &(0x7f0000002a80), &(0x7f0000002ac0)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r14, &(0x7f0000002b00)=@IORING_OP_SPLICE={0x1e, 0x2e, 0x0, @fd_index=0x3, 0x6, {0x0, r4}, 0x1, 0x1, 0x1, {0x0, r15, r5}}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000002b40)={r3}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000002b40)={r3}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r16, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x90, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x65}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xfff}, {0x8, 0x0, 0x10}, {0x8, 0x0, 0x8}, {0x8}, {0x8, 0x0, 0xab2b}, {0x8, 0x0, 0xffffff80}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xd99}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x6}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1000}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xfffffff7}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfff}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4068014) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000002d00)=0x101) 79.570014ms ago: executing program 2 (id=679): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) creat(&(0x7f0000000200)='./file5\x00', 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') r2 = syz_open_dev$radio(&(0x7f0000000b00), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000b40)={0x0, "b992447f1252bbde728df2362be6d0f5c49cd29346b53475cf76c2e939a305f2", 0x5, 0x10, 0x4, 0x97, 0x10, 0x0, 0x1, 0x4}) 79.110472ms ago: executing program 1 (id=680): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x2, 0x6, 0xfffffffc, 'syz1\x00'}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x30}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c010000", @ANYBLOB="e402003d8aec0412631b12d296810af0433051fb64647495fc55ac7b49138fa92e41a8f6a37a10419e49ed47937ef0d685fd3273878a763a1d3ced", @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004820}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 15.687463ms ago: executing program 1 (id=681): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xc082, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) add_key(&(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000180)="6e0c9b6b38", 0x5, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x80000003) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 15.478406ms ago: executing program 2 (id=682): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0xc2, 0xfffff028}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0xa, 0xf, 0xea, &(0x7f0000000500)="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"}) 13.611482ms ago: executing program 1 (id=683): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x31, 0x2c, 0x0, @void, @void, @void, @value}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf2501000000080002000000000008000100", @ANYRES64=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20000885}, 0x40030) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b625d7000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000005"], 0x104}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=684): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000540)="8a21d57b0000", 0x0, 0x0, 0x10001, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000002100), 0x180022, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) 0s ago: executing program 2 (id=686): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x8000000001) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) (async) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0x47, &(0x7f0000000040)=""/71}, &(0x7f0000000180)="851666ce20db96ab0c7d83e114e7c41762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab325c16dc2f1c4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1dcf3eb2eb4fe3534fcee01e9ca0c66f27b8e05e7545cbc3511b3d086f51d58f9acd52eab032468cc8075451bcd5c081a8db84ff509a2f874daf6b3ddff977834d87", 0x0, 0x10, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 0c38 length: 249 > 2 [ 52.725047][ T40] audit: type=1400 audit(1748222185.594:91): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.940998][ T40] audit: type=1400 audit(1748222185.824:92): avc: denied { module_request } for pid=5937 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.002180][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 53.007080][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 53.017449][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 53.097940][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 53.346078][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.349358][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.351840][ T5940] bridge_slave_0: entered allmulticast mode [ 53.355147][ T5940] bridge_slave_0: entered promiscuous mode [ 53.358989][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.361162][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.364122][ T5940] bridge_slave_1: entered allmulticast mode [ 53.366896][ T5940] bridge_slave_1: entered promiscuous mode [ 53.387385][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.389727][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.392137][ T5937] bridge_slave_0: entered allmulticast mode [ 53.395730][ T5937] bridge_slave_0: entered promiscuous mode [ 53.399108][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.401405][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.403921][ T5937] bridge_slave_1: entered allmulticast mode [ 53.406601][ T5937] bridge_slave_1: entered promiscuous mode [ 53.409091][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.411329][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.414434][ T5933] bridge_slave_0: entered allmulticast mode [ 53.417033][ T5933] bridge_slave_0: entered promiscuous mode [ 53.476391][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.478645][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.480951][ T5933] bridge_slave_1: entered allmulticast mode [ 53.483910][ T5933] bridge_slave_1: entered promiscuous mode [ 53.503434][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.580533][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.584930][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.589471][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.592338][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.596266][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.598520][ T5934] bridge_slave_0: entered allmulticast mode [ 53.601187][ T5934] bridge_slave_0: entered promiscuous mode [ 53.638103][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.642452][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.662576][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.664904][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.667175][ T5934] bridge_slave_1: entered allmulticast mode [ 53.669863][ T5934] bridge_slave_1: entered promiscuous mode [ 53.674330][ T5940] team0: Port device team_slave_0 added [ 53.724913][ T5940] team0: Port device team_slave_1 added [ 53.753899][ T5933] team0: Port device team_slave_0 added [ 53.771511][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.805600][ T5937] team0: Port device team_slave_0 added [ 53.811890][ T5933] team0: Port device team_slave_1 added [ 53.818363][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.822001][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.825077][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.835264][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.840189][ T5937] team0: Port device team_slave_1 added [ 53.878796][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.881005][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.888763][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.940014][ T5934] team0: Port device team_slave_0 added [ 53.950242][ T5934] team0: Port device team_slave_1 added [ 53.969174][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.971386][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.980369][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.984819][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.987012][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.995277][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.000177][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.002374][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.011342][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.041784][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.044229][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.052004][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.098591][ T5940] hsr_slave_0: entered promiscuous mode [ 54.100920][ T5940] hsr_slave_1: entered promiscuous mode [ 54.118640][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.120886][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.130372][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.166470][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.169416][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.178303][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.217418][ T5933] hsr_slave_0: entered promiscuous mode [ 54.220218][ T5933] hsr_slave_1: entered promiscuous mode [ 54.222317][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.224990][ T5933] Cannot create hsr debugfs directory [ 54.262483][ T5937] hsr_slave_0: entered promiscuous mode [ 54.264942][ T5937] hsr_slave_1: entered promiscuous mode [ 54.267008][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.269377][ T5937] Cannot create hsr debugfs directory [ 54.344270][ T5934] hsr_slave_0: entered promiscuous mode [ 54.346523][ T5934] hsr_slave_1: entered promiscuous mode [ 54.348587][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.350987][ T5934] Cannot create hsr debugfs directory [ 54.650319][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.658179][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.664551][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.676970][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.704929][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.710283][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.716679][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.725052][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.753222][ T5938] Bluetooth: hci1: command tx timeout [ 54.753226][ T5947] Bluetooth: hci0: command tx timeout [ 54.753495][ T5947] Bluetooth: hci2: command tx timeout [ 54.754290][ T5950] Bluetooth: hci3: command tx timeout [ 54.772978][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.777246][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.782089][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.791094][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.853455][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.859012][ T5934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.863681][ T5934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.875561][ T5934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.879729][ T5934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.912290][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.931857][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.934263][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.944240][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.947262][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.959256][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.989839][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.003775][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.017316][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.019586][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.031494][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.033802][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.044901][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.059814][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.062131][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.081851][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.084149][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.113897][ T40] audit: type=1400 audit(1748222188.004:93): avc: denied { sys_module } for pid=5940 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.120723][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.154898][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.164293][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.166679][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.174413][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.176776][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.218497][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.244446][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.261455][ T5940] veth0_vlan: entered promiscuous mode [ 55.275891][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.278750][ T5940] veth1_vlan: entered promiscuous mode [ 55.301274][ T5937] veth0_vlan: entered promiscuous mode [ 55.307714][ T5937] veth1_vlan: entered promiscuous mode [ 55.333171][ T5940] veth0_macvtap: entered promiscuous mode [ 55.341173][ T5940] veth1_macvtap: entered promiscuous mode [ 55.349808][ T5933] veth0_vlan: entered promiscuous mode [ 55.361250][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.369721][ T5933] veth1_vlan: entered promiscuous mode [ 55.372833][ T5937] veth0_macvtap: entered promiscuous mode [ 55.376893][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.381558][ T5937] veth1_macvtap: entered promiscuous mode [ 55.388634][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.396197][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.398944][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.401720][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.405012][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.420383][ T5933] veth0_macvtap: entered promiscuous mode [ 55.425958][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.434588][ T5933] veth1_macvtap: entered promiscuous mode [ 55.444909][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.453972][ T5937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.456953][ T5937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.460044][ T5937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.463315][ T5937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.473672][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.487325][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.503162][ T5934] veth0_vlan: entered promiscuous mode [ 55.505575][ T5933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.508271][ T5933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.511004][ T5933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.514010][ T5933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.534217][ T5934] veth1_vlan: entered promiscuous mode [ 55.534756][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.539192][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.562145][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.565515][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.583542][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.586015][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.588259][ T5934] veth0_macvtap: entered promiscuous mode [ 55.596563][ T5934] veth1_macvtap: entered promiscuous mode [ 55.604250][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.607612][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.634605][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.635307][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.637797][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.645527][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.664717][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.667347][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.677111][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.689953][ T5934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.692906][ T5934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.697155][ T5934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.699948][ T5934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.779255][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.780505][ T6003] block device autoloading is deprecated and will be removed. [ 55.781790][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.807332][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.809831][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.816963][ T6004] ptm ptm50: ldisc open failed (-12), clearing slot 50 [ 55.871130][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 55.894285][ T6018] overlayfs: conflicting lowerdir path [ 55.905012][ T6018] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6018 comm=syz.1.7 [ 55.956491][ T6027] 9pnet_fd: p9_fd_create_unix (6027): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 56.007769][ T6029] tipc: Started in network mode [ 56.038764][ T6029] tipc: Node identity ac1414aa, cluster identity 4711 [ 56.041949][ T6029] tipc: Enabled bearer , priority 10 [ 56.044205][ T5979] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 56.087357][ T6029] tipc: Enabled bearer , priority 0 [ 56.132543][ T6035] Unknown options in mask 5 [ 56.136312][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 56.136324][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 56.195318][ T5979] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.198464][ T5979] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.202540][ T5979] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 56.207056][ T5979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.414119][ T5979] usb 7-1: usb_control_msg returned -32 [ 56.416094][ T5979] usbtmc 7-1:16.0: can't read capabilities [ 56.701940][ T6056] syz.1.17: attempt to access beyond end of device [ 56.701940][ T6056] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 56.707648][ T6056] qnx4: unable to read the superblock [ 56.716347][ T6060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18'. [ 56.775295][ T6061] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6'. [ 56.832769][ T5947] Bluetooth: hci1: command tx timeout [ 56.842943][ T5947] Bluetooth: hci3: command tx timeout [ 56.843402][ T5938] Bluetooth: hci0: command tx timeout [ 56.843486][ T5950] Bluetooth: hci2: command tx timeout [ 56.851384][ T6065] syzkaller0: create flow: hash 1865158811 index 1 [ 56.883132][ T6064] syzkaller0: delete flow: hash 1865158811 index 1 [ 57.074260][ T5988] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.154124][ T5979] tipc: Node number set to 2886997162 [ 57.155110][ T6067] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 57.164304][ T6067] Bluetooth: MGMT ver 1.23 [ 57.212766][ T5988] usb 8-1: device descriptor read/64, error -71 [ 57.452772][ T5988] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.582899][ T5988] usb 8-1: device descriptor read/64, error -71 [ 57.693096][ T5988] usb usb8-port1: attempt power cycle [ 58.042805][ T5988] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 58.063429][ T5988] usb 8-1: device descriptor read/8, error -71 [ 58.302745][ T5988] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 58.323200][ T5988] usb 8-1: device descriptor read/8, error -71 [ 58.433375][ T5988] usb usb8-port1: unable to enumerate USB device [ 58.774813][ T5988] usb 7-1: USB disconnect, device number 2 [ 58.796341][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 58.796357][ T40] audit: type=1400 audit(1748222191.684:182): avc: denied { create } for pid=6070 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.807490][ T40] audit: type=1400 audit(1748222191.684:183): avc: denied { read write } for pid=6070 comm="syz.0.30" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.818942][ T40] audit: type=1400 audit(1748222191.684:184): avc: denied { open } for pid=6070 comm="syz.0.30" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.829052][ T40] audit: type=1400 audit(1748222191.684:185): avc: denied { write } for pid=6070 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.838590][ T40] audit: type=1400 audit(1748222191.724:186): avc: denied { remount } for pid=6077 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 58.839779][ T6078] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.846123][ T40] audit: type=1400 audit(1748222191.724:187): avc: denied { unmount } for pid=6075 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.857586][ T40] audit: type=1400 audit(1748222191.734:188): avc: denied { listen } for pid=6077 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.865843][ T40] audit: type=1400 audit(1748222191.734:189): avc: denied { accept } for pid=6077 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.897706][ T6080] netlink: 64 bytes leftover after parsing attributes in process `syz.1.26'. [ 58.902185][ T40] audit: type=1400 audit(1748222191.784:190): avc: denied { create } for pid=6079 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.908945][ T40] audit: type=1400 audit(1748222191.794:191): avc: denied { ioctl } for pid=6079 comm="syz.1.26" path="socket:[10446]" dev="sockfs" ino=10446 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.914113][ T5938] Bluetooth: hci3: command tx timeout [ 58.920205][ T5938] Bluetooth: hci0: command tx timeout [ 58.922496][ T5938] Bluetooth: hci1: command tx timeout [ 58.922822][ T5947] Bluetooth: hci2: command tx timeout [ 58.984365][ T6090] Zero length message leads to an empty skb [ 59.076974][ T6096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.106292][ T6104] bridge: RTM_NEWNEIGH with invalid ether address [ 59.113670][ T6100] trusted_key: syz.1.31 sent an empty control message without MSG_MORE. [ 59.164196][ T6107] vxcan1 speed is unknown, defaulting to 1000 [ 59.167110][ T6107] vxcan1 speed is unknown, defaulting to 1000 [ 59.170345][ T6107] vxcan1 speed is unknown, defaulting to 1000 [ 59.273233][ T5977] vxcan1 speed is unknown, defaulting to 1000 [ 59.273306][ T6107] infiniband syz0: set active [ 59.277158][ T6107] infiniband syz0: added vxcan1 [ 59.299822][ T6107] RDS/IB: syz0: added [ 59.301387][ T6107] smc: adding ib device syz0 with port count 1 [ 59.303581][ T6107] smc: ib device syz0 port 1 has pnetid [ 59.306299][ T34] vxcan1 speed is unknown, defaulting to 1000 [ 59.309354][ T6107] vxcan1 speed is unknown, defaulting to 1000 [ 59.354810][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.423880][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.429369][ T6107] vxcan1 speed is unknown, defaulting to 1000 [ 59.520102][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.521897][ T6126] overlay: ./file0 is not a directory [ 59.523863][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.526885][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.530740][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.534298][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.560197][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.570368][ T6107] vxcan1 speed is unknown, defaulting to 1000 [ 59.632132][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.672036][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 59.674972][ T6131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.677334][ T6131] IPv6: NLM_F_CREATE should be set when creating new route [ 59.680140][ T6125] vxcan1 speed is unknown, defaulting to 1000 [ 59.765276][ T13] bridge_slave_1: left allmulticast mode [ 59.767719][ T13] bridge_slave_1: left promiscuous mode [ 59.770929][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.773902][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 59.791971][ T13] bridge_slave_0: left allmulticast mode [ 59.805374][ T13] bridge_slave_0: left promiscuous mode [ 59.807596][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.065889][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.070955][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.074820][ T13] bond0 (unregistering): Released all slaves [ 60.138965][ T13] bond1 (unregistering): Released all slaves [ 60.161167][ T6107] vxcan1 speed is unknown, defaulting to 1000 [ 60.337825][ T6125] chnl_net:caif_netlink_parms(): no params data found [ 60.554361][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.556465][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.558743][ T6125] bridge_slave_0: entered allmulticast mode [ 60.564886][ T6125] bridge_slave_0: entered promiscuous mode [ 60.568706][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.570946][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.573268][ T6125] bridge_slave_1: entered allmulticast mode [ 60.575820][ T6125] bridge_slave_1: entered promiscuous mode [ 60.661694][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.671503][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.685335][ T13] hsr_slave_0: left promiscuous mode [ 60.690478][ T13] hsr_slave_1: left promiscuous mode [ 60.692502][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.700731][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.704873][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.707180][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.730691][ T13] veth1_macvtap: left promiscuous mode [ 60.733076][ T13] veth0_macvtap: left promiscuous mode [ 60.734914][ T13] veth1_vlan: left promiscuous mode [ 60.736813][ T13] veth0_vlan: left promiscuous mode [ 60.819819][ T6207] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.825070][ T6207] netlink: 'syz.1.57': attribute type 10 has an invalid length. [ 60.995049][ T5947] Bluetooth: hci1: command tx timeout [ 61.002788][ T5947] Bluetooth: hci0: command tx timeout [ 61.002806][ T5938] Bluetooth: hci3: command tx timeout [ 61.062094][ T6221] ufs: You didn't specify the type of your ufs filesystem [ 61.062094][ T6221] [ 61.062094][ T6221] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 61.062094][ T6221] [ 61.062094][ T6221] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 61.073655][ T6221] ufs: ufstype=old is supported read-only [ 61.075996][ T6221] syz.3.60: attempt to access beyond end of device [ 61.075996][ T6221] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 61.275654][ T13] team0 (unregistering): Port device team_slave_1 removed [ 61.324405][ T13] team0 (unregistering): Port device team_slave_0 removed [ 61.563009][ T5938] Bluetooth: hci2: command tx timeout [ 61.676565][ T6207] lo: entered promiscuous mode [ 61.684279][ T6207] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 61.753118][ T6125] team0: Port device team_slave_0 added [ 61.756987][ T6125] team0: Port device team_slave_1 added [ 61.780818][ T6266] tmpfs: Bad value for 'mpol' [ 61.802316][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.806153][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.817466][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.823108][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.825298][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.833834][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.879874][ T6282] gtp0: entered allmulticast mode [ 61.895457][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 61.945632][ T6125] hsr_slave_0: entered promiscuous mode [ 61.947860][ T6125] hsr_slave_1: entered promiscuous mode [ 61.949842][ T6125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.952200][ T6125] Cannot create hsr debugfs directory [ 61.991876][ T6294] netlink: 76 bytes leftover after parsing attributes in process `syz.1.72'. [ 62.001654][ T6294] netlink: 72 bytes leftover after parsing attributes in process `syz.1.72'. [ 62.004569][ T6294] netlink: 'syz.1.72': attribute type 3 has an invalid length. [ 62.006931][ T6294] netlink: 11 bytes leftover after parsing attributes in process `syz.1.72'. [ 62.125431][ T6301] block device autoloading is deprecated and will be removed. [ 62.186119][ T6310] netlink: 'syz.0.78': attribute type 4 has an invalid length. [ 62.190176][ T6310] /dev/nullb0: Can't open blockdev [ 62.264078][ T6318] process 'syz.0.80' launched '/dev/fd/3' with NULL argv: empty string added [ 62.569296][ T6125] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.574630][ T6125] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.579658][ T6125] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.583650][ T6125] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.633636][ T5988] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 62.634383][ T6125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.653990][ T6125] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.660112][ T236] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.662383][ T236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.668564][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.670918][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.777669][ T6125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.800980][ T5988] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.801722][ T6125] veth0_vlan: entered promiscuous mode [ 62.804970][ T5988] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.810260][ T6125] veth1_vlan: entered promiscuous mode [ 62.812001][ T5988] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.817161][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.839200][ T6125] veth0_macvtap: entered promiscuous mode [ 62.844377][ T6125] veth1_macvtap: entered promiscuous mode [ 62.854064][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.859784][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.865798][ T6125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.869206][ T6125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.871857][ T6125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.875643][ T6125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.927784][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.930304][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.958465][ T236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.961468][ T236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.016967][ T6377] pim6reg1: entered promiscuous mode [ 63.018741][ T6377] pim6reg1: entered allmulticast mode [ 63.026511][ T5988] usb 5-1: usb_control_msg returned -32 [ 63.028429][ T5988] usbtmc 5-1:16.0: can't read capabilities [ 63.130826][ T6399] program syz.3.93 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.131705][ T6399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.152314][ T5938] Bluetooth: Unexpected start frame (len 12) [ 63.205507][ T6416] x_tables: duplicate underflow at hook 2 [ 63.265799][ T6421] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 63.290351][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.346018][ T6432] xt_TCPMSS: Only works on TCP SYN packets [ 63.385039][ T6439] netlink: 68 bytes leftover after parsing attributes in process `syz.0.82'. [ 63.449566][ T6441] dvmrp8: entered allmulticast mode [ 63.486115][ T6451] netlink: 52 bytes leftover after parsing attributes in process `syz.2.104'. [ 63.489361][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 63.492084][ T6451] tipc: MTU too low for tipc bearer [ 63.501153][ T6431] dvmrp8: left allmulticast mode [ 63.633167][ T5938] Bluetooth: hci2: command tx timeout [ 63.701386][ T6477] erofs (device loop2): cannot find valid erofs superblock [ 63.815257][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 64.117752][ T6504] syz.1.118: attempt to access beyond end of device [ 64.117752][ T6504] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 64.121955][ T6504] vxfs: unable to read disk superblock at 1 [ 64.124124][ T6504] syz.1.118: attempt to access beyond end of device [ 64.124124][ T6504] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 64.127928][ T6504] vxfs: unable to read disk superblock at 8 [ 64.129888][ T6504] vxfs: can't find superblock. [ 64.189420][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 64.189431][ T40] audit: type=1400 audit(1748222197.074:284): avc: denied { getopt } for pid=6505 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.197551][ T40] audit: type=1400 audit(1748222197.074:285): avc: denied { append } for pid=6505 comm="syz.1.119" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.225486][ T6506] capability: warning: `syz.1.119' uses 32-bit capabilities (legacy support in use) [ 64.235214][ T6510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.725460][ T40] audit: type=1400 audit(1748222197.604:286): avc: denied { read write } for pid=6542 comm="syz.1.130" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 64.732380][ T40] audit: type=1400 audit(1748222197.604:287): avc: denied { open } for pid=6542 comm="syz.1.130" path="/45/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 64.742196][ T40] audit: type=1326 audit(1748222197.604:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6542 comm="syz.1.130" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e78e969 code=0x0 [ 64.827723][ T6554] veth3: entered promiscuous mode [ 64.988763][ T40] audit: type=1400 audit(1748222197.874:289): avc: denied { create } for pid=6556 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.998002][ T40] audit: type=1400 audit(1748222197.874:290): avc: denied { ioctl } for pid=6556 comm="syz.3.134" path="socket:[10202]" dev="sockfs" ino=10202 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.009187][ T40] audit: type=1400 audit(1748222197.874:291): avc: denied { bind } for pid=6556 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.021962][ T40] audit: type=1400 audit(1748222197.874:292): avc: denied { setopt } for pid=6556 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.030892][ T40] audit: type=1400 audit(1748222197.874:293): avc: denied { getopt } for pid=6556 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.197573][ T6569] No such timeout policy "syz1" [ 65.201235][ T6569] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 65.202803][ T6570] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 65.373147][ T6575] team0 (unregistering): Port device team_slave_0 removed [ 65.377916][ T6575] team0 (unregistering): Port device team_slave_1 removed [ 65.393468][ T5979] usb 5-1: USB disconnect, device number 2 [ 65.514925][ T6583] program syz.1.142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.535907][ T6583] lo: left promiscuous mode [ 65.537414][ T6583] lo: entered allmulticast mode [ 65.539288][ T6583] tunl0: entered allmulticast mode [ 65.542906][ T6583] gre0: entered allmulticast mode [ 65.547478][ T6583] gretap0: entered allmulticast mode [ 65.551037][ T6583] erspan0: entered allmulticast mode [ 65.555903][ T6583] ip_vti0: entered allmulticast mode [ 65.559968][ T6583] ip6_vti0: entered allmulticast mode [ 65.563257][ T6583] sit0: entered allmulticast mode [ 65.567743][ T6583] ip6tnl0: entered allmulticast mode [ 65.570801][ T6583] ip6gre0: entered allmulticast mode [ 65.574091][ T6583] syz_tun: entered allmulticast mode [ 65.578191][ T6583] ip6gretap0: entered allmulticast mode [ 65.581914][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.584873][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.588508][ T6583] bridge0: entered allmulticast mode [ 65.594702][ T6583] vcan0: entered allmulticast mode [ 65.597663][ T6583] bond0: entered allmulticast mode [ 65.599404][ T6583] bond_slave_0: entered allmulticast mode [ 65.601194][ T6583] bond_slave_1: entered allmulticast mode [ 65.607648][ T6583] team0: entered allmulticast mode [ 65.609570][ T6583] team_slave_0: entered allmulticast mode [ 65.612048][ T6583] team_slave_1: entered allmulticast mode [ 65.618181][ T6583] dummy0: entered allmulticast mode [ 65.622164][ T6583] nlmon0: entered allmulticast mode [ 65.624996][ T6583] caif0: entered allmulticast mode [ 65.627226][ T6583] batadv0: entered allmulticast mode [ 65.631274][ T6583] vxcan0: entered allmulticast mode [ 65.635788][ T6583] vxcan1: entered allmulticast mode [ 65.638841][ T6583] veth0: entered allmulticast mode [ 65.642507][ T6583] veth1: entered allmulticast mode [ 65.647237][ T6583] wg0: entered allmulticast mode [ 65.651037][ T6583] wg1: entered allmulticast mode [ 65.654445][ T6583] wg2: entered allmulticast mode [ 65.658205][ T6583] veth0_to_bridge: entered allmulticast mode [ 65.663742][ T6583] veth1_to_bridge: entered allmulticast mode [ 65.669269][ T6583] veth0_to_bond: entered allmulticast mode [ 65.675901][ T6583] veth1_to_bond: entered allmulticast mode [ 65.679882][ T6583] veth0_to_team: entered allmulticast mode [ 65.684875][ T6583] tipc: Resetting bearer [ 65.688327][ T6583] veth1_to_team: entered allmulticast mode [ 65.693406][ T6583] veth0_to_batadv: entered allmulticast mode [ 65.697533][ T6583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.700469][ T6583] batadv_slave_0: entered allmulticast mode [ 65.704774][ T6583] veth1_to_batadv: entered allmulticast mode [ 65.709229][ T6583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.712406][ T6583] batadv_slave_1: entered allmulticast mode [ 65.716391][ T6583] xfrm0: entered allmulticast mode [ 65.718713][ T1145] Bluetooth: hci4: Frame reassembly failed (-84) [ 65.722736][ T5947] Bluetooth: hci2: command tx timeout [ 65.723466][ T6583] veth0_to_hsr: entered allmulticast mode [ 65.727729][ T6583] hsr_slave_0: entered allmulticast mode [ 65.731600][ T6583] veth1_to_hsr: entered allmulticast mode [ 65.735128][ T6583] hsr_slave_1: entered allmulticast mode [ 65.739737][ T6583] hsr0: entered allmulticast mode [ 65.743692][ T6583] veth1_virt_wifi: entered allmulticast mode [ 65.748071][ T6583] veth0_virt_wifi: entered allmulticast mode [ 65.751240][ T6583] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 65.754765][ T6583] veth1_vlan: entered allmulticast mode [ 65.758373][ T6583] veth0_vlan: entered allmulticast mode [ 65.765905][ T6583] vlan0: entered allmulticast mode [ 65.767617][ T6583] vlan1: entered allmulticast mode [ 65.769810][ T6583] macvlan0: entered allmulticast mode [ 65.773737][ T6583] macvlan1: entered allmulticast mode [ 65.776914][ T6583] ipvlan0: entered allmulticast mode [ 65.778679][ T6583] ipvlan1: entered allmulticast mode [ 65.781124][ T6583] veth1_macvtap: entered allmulticast mode [ 65.785693][ T6583] veth0_macvtap: entered allmulticast mode [ 65.789406][ T6583] macvtap0: entered allmulticast mode [ 65.793203][ T6583] macsec0: entered allmulticast mode [ 65.797586][ T6583] geneve0: entered allmulticast mode [ 65.801765][ T6583] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.804685][ T6583] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.807427][ T6583] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.810262][ T6583] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.815768][ T6583] geneve1: entered allmulticast mode [ 65.819632][ T6583] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 65.826723][ T6583] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 65.831982][ T6583] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 65.835742][ T6583] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 65.847095][ T6583] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 65.854554][ T6583] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 65.857806][ T6583] ip6tnl1: entered allmulticast mode [ 65.860232][ T6588] vxcan1 speed is unknown, defaulting to 1000 [ 65.863012][ T6588] syz0: Port: 1 Link DOWN [ 65.865823][ T6588] vxcan1 speed is unknown, defaulting to 1000 [ 65.892708][ T6596] overlayfs: missing 'workdir' [ 65.965208][ T6594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.002880][ T6601] syz.1.146 uses obsolete (PF_INET,SOCK_PACKET) [ 66.042376][ T6594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.151510][ T6594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.302990][ T6594] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.412092][ T6594] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.420235][ T6594] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.427311][ T6594] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.436229][ T6594] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.002730][ T5935] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 67.173452][ T5935] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.176476][ T5935] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.180502][ T5935] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.183426][ T5935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.389840][ T5935] usb 8-1: usb_control_msg returned -32 [ 67.391631][ T5935] usbtmc 8-1:16.0: can't read capabilities [ 67.792823][ T5938] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.796273][ T5938] Bluetooth: hci2: command tx timeout [ 67.989900][ T6642] ata1.00: invalid multi_count 1 ignored [ 67.996049][ T6644] netlink: 'syz.1.162': attribute type 2 has an invalid length. [ 67.998410][ T6644] netlink: 748 bytes leftover after parsing attributes in process `syz.1.162'. [ 68.028411][ T6648] capability: warning: `syz.1.163' uses deprecated v2 capabilities in a way that may be insecure [ 68.152725][ T5935] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.211431][ T6661] ======================================================= [ 68.211431][ T6661] WARNING: The mand mount option has been deprecated and [ 68.211431][ T6661] and is ignored by this kernel. Remove the mand [ 68.211431][ T6661] option from the mount to silence this warning. [ 68.211431][ T6661] ======================================================= [ 68.302817][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 68.305852][ T5935] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.309699][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.313974][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.318058][ T5935] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.323287][ T5935] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 68.326832][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.534452][ T5935] usb 5-1: GET_CAPABILITIES returned 0 [ 68.536224][ T5935] usbtmc 5-1:16.0: can't read capabilities [ 68.552187][ T6588] usb 5-1: USB disconnect, device number 3 [ 69.135914][ T6696] netlink: 176 bytes leftover after parsing attributes in process `syz.2.177'. [ 69.598998][ T6718] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 69.743969][ T6736] netlink: 176 bytes leftover after parsing attributes in process `syz.0.190'. [ 69.747008][ T6736] netlink: 176 bytes leftover after parsing attributes in process `syz.0.190'. [ 69.767832][ T58] usb 8-1: USB disconnect, device number 6 [ 69.784555][ T6734] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 69.785524][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 69.785533][ T40] audit: type=1400 audit(1748222202.674:319): avc: denied { map } for pid=6738 comm="syz.0.191" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.787064][ T6734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.789987][ T40] audit: type=1400 audit(1748222202.674:320): avc: denied { execute } for pid=6738 comm="syz.0.191" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.796124][ T6734] IPv6: NLM_F_CREATE should be set when creating new route [ 69.835852][ T40] audit: type=1400 audit(1748222202.724:321): avc: denied { getopt } for pid=6738 comm="syz.0.191" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.842325][ T40] audit: type=1400 audit(1748222202.724:322): avc: denied { connect } for pid=6738 comm="syz.0.191" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.849555][ T40] audit: type=1400 audit(1748222202.724:323): avc: denied { ioctl } for pid=6738 comm="syz.0.191" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.896312][ T6748] FAULT_INJECTION: forcing a failure. [ 69.896312][ T6748] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.900417][ T6748] CPU: 2 UID: 0 PID: 6748 Comm: syz.3.195 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 69.900432][ T6748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.900438][ T6748] Call Trace: [ 69.900443][ T6748] [ 69.900447][ T6748] dump_stack_lvl+0x16c/0x1f0 [ 69.900482][ T6748] should_fail_ex+0x512/0x640 [ 69.900504][ T6748] _copy_from_user+0x2e/0xd0 [ 69.900544][ T6748] copy_msghdr_from_user+0x98/0x160 [ 69.900563][ T6748] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 69.900588][ T6748] ___sys_sendmsg+0xfe/0x1d0 [ 69.900601][ T6748] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.900629][ T6748] __sys_sendmsg+0x16d/0x220 [ 69.900641][ T6748] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.900662][ T6748] do_syscall_64+0xcd/0x260 [ 69.900680][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.900691][ T6748] RIP: 0033:0x7fa9bc78e969 [ 69.900700][ T6748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.900710][ T6748] RSP: 002b:00007fa9bd5d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.900721][ T6748] RAX: ffffffffffffffda RBX: 00007fa9bc9b5fa0 RCX: 00007fa9bc78e969 [ 69.900728][ T6748] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 69.900734][ T6748] RBP: 00007fa9bd5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 69.900740][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.900747][ T6748] R13: 0000000000000000 R14: 00007fa9bc9b5fa0 R15: 00007ffea433d778 [ 69.900761][ T6748] [ 69.909634][ T6749] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 69.990182][ T6757] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 70.086791][ T40] audit: type=1400 audit(1748222202.974:324): avc: denied { connect } for pid=6766 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.091231][ T6768] netlink: 'syz.0.200': attribute type 4 has an invalid length. [ 70.095185][ T40] audit: type=1400 audit(1748222202.974:325): avc: denied { name_connect } for pid=6766 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 70.105880][ T40] audit: type=1400 audit(1748222202.974:326): avc: denied { bind } for pid=6766 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.114242][ T40] audit: type=1400 audit(1748222202.974:327): avc: denied { name_bind } for pid=6766 comm="syz.0.200" src=28326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 70.122315][ T40] audit: type=1400 audit(1748222202.974:328): avc: denied { node_bind } for pid=6766 comm="syz.0.200" saddr=172.20.20.170 src=28326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 70.138011][ T6767] netlink: 'syz.0.200': attribute type 4 has an invalid length. [ 70.138972][ T6768] netlink: 'syz.0.200': attribute type 4 has an invalid length. [ 70.191068][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 70.232358][ T6774] Malformed UNC in devname [ 70.232358][ T6774] [ 70.235591][ T6774] CIFS: VFS: Malformed UNC in devname [ 70.240948][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 70.246713][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 70.250352][ T6774] netlink: 'syz.3.202': attribute type 18 has an invalid length. [ 70.262063][ T6778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.321106][ T6778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.383072][ T6789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.902715][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.934246][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.936618][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.938886][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.941446][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.944627][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.946875][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.949135][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.951364][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.954485][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.956869][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.959112][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.961305][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.963583][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.965822][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.968054][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.970281][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.972520][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.975151][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.977397][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.979625][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.981861][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.984196][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.986426][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.988647][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.990882][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.993331][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.995557][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 70.997787][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 71.000000][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 71.002253][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 71.005051][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 71.007268][ T6807] blktrace: Concurrent blktraces are not allowed on nbd2 [ 71.052760][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 71.055672][ T58] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 71.058678][ T58] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 71.062050][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.066555][ T58] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 71.069433][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.071935][ T58] usb 6-1: Product: syz [ 71.073488][ T58] usb 6-1: Manufacturer: syz [ 71.075299][ T58] usb 6-1: SerialNumber: syz [ 71.078952][ T58] usb 6-1: config 0 descriptor?? [ 71.156103][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.162714][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.280374][ T6827] openvswitch: netlink: Duplicate or invalid key (type 0). [ 71.282920][ T6827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.341389][ T6837] xt_hashlimit: size too large, truncated to 1048576 [ 71.388417][ T6841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.506256][ T58] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 71.682685][ T836] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 71.843933][ T836] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.847007][ T836] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.851030][ T836] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.854059][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.060585][ T836] usb 7-1: usb_control_msg returned -32 [ 72.062396][ T836] usbtmc 7-1:16.0: can't read capabilities [ 72.328384][ T6861] fuse: Unknown parameter ')Y' [ 72.508407][ T6864] FAULT_INJECTION: forcing a failure. [ 72.508407][ T6864] name failslab, interval 1, probability 0, space 0, times 1 [ 72.512357][ T6864] CPU: 2 UID: 0 PID: 6864 Comm: syz.3.231 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 72.512372][ T6864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.512378][ T6864] Call Trace: [ 72.512383][ T6864] [ 72.512388][ T6864] dump_stack_lvl+0x16c/0x1f0 [ 72.512407][ T6864] should_fail_ex+0x512/0x640 [ 72.512425][ T6864] should_failslab+0xc2/0x120 [ 72.512438][ T6864] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 72.512450][ T6864] ? skb_clone+0x190/0x3f0 [ 72.512465][ T6864] skb_clone+0x190/0x3f0 [ 72.512478][ T6864] netlink_deliver_tap+0xabd/0xd30 [ 72.512513][ T6864] netlink_unicast+0x5df/0x7f0 [ 72.512530][ T6864] ? __pfx_netlink_unicast+0x10/0x10 [ 72.512548][ T6864] netlink_sendmsg+0x8d1/0xdd0 [ 72.512564][ T6864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.512584][ T6864] ____sys_sendmsg+0xa95/0xc70 [ 72.512614][ T6864] ? copy_msghdr_from_user+0x10a/0x160 [ 72.512626][ T6864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.512648][ T6864] ___sys_sendmsg+0x134/0x1d0 [ 72.512661][ T6864] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.512695][ T6864] __sys_sendmsg+0x16d/0x220 [ 72.512719][ T6864] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.512741][ T6864] do_syscall_64+0xcd/0x260 [ 72.512759][ T6864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.512770][ T6864] RIP: 0033:0x7fa9bc78e969 [ 72.512779][ T6864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.512789][ T6864] RSP: 002b:00007fa9bd5d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.512800][ T6864] RAX: ffffffffffffffda RBX: 00007fa9bc9b5fa0 RCX: 00007fa9bc78e969 [ 72.512807][ T6864] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 72.512813][ T6864] RBP: 00007fa9bd5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 72.512819][ T6864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.512825][ T6864] R13: 0000000000000000 R14: 00007fa9bc9b5fa0 R15: 00007ffea433d778 [ 72.512839][ T6864] [ 72.665151][ T6869] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 72.668020][ T6869] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.672851][ T6869] vhci_hcd vhci_hcd.0: Device attached [ 72.678065][ T6869] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 72.680855][ T6869] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.684689][ T6869] vhci_hcd vhci_hcd.0: Device attached [ 72.689021][ T6872] vhci_hcd: connection closed [ 72.689146][ T6870] vhci_hcd: connection closed [ 72.691731][ T12] vhci_hcd: stop threads [ 72.696089][ T12] vhci_hcd: release socket [ 72.697704][ T12] vhci_hcd: disconnect device [ 72.699846][ T12] vhci_hcd: stop threads [ 72.701347][ T12] vhci_hcd: release socket [ 72.703792][ T12] vhci_hcd: disconnect device [ 73.466938][ T6886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.237'. [ 73.534754][ T6886] Process accounting resumed [ 73.641985][ T6894] FAULT_INJECTION: forcing a failure. [ 73.641985][ T6894] name failslab, interval 1, probability 0, space 0, times 0 [ 73.646392][ T6894] CPU: 2 UID: 0 PID: 6894 Comm: syz.3.240 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 73.646407][ T6894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.646414][ T6894] Call Trace: [ 73.646418][ T6894] [ 73.646422][ T6894] dump_stack_lvl+0x16c/0x1f0 [ 73.646443][ T6894] should_fail_ex+0x512/0x640 [ 73.646458][ T6894] ? __kmalloc_noprof+0xbf/0x510 [ 73.646469][ T6894] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 73.646487][ T6894] should_failslab+0xc2/0x120 [ 73.646499][ T6894] __kmalloc_noprof+0xd2/0x510 [ 73.646511][ T6894] ? avc_has_perm_noaudit+0x149/0x3b0 [ 73.646524][ T6894] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 73.646545][ T6894] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 73.646562][ T6894] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 73.646582][ T6894] ? bpf_lsm_capable+0x9/0x10 [ 73.646592][ T6894] ? security_capable+0x7e/0x260 [ 73.646606][ T6894] ? ns_capable+0xd7/0x110 [ 73.646621][ T6894] genl_rcv_msg+0x55c/0x800 [ 73.646638][ T6894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.646654][ T6894] ? __pfx___dev_queue_xmit+0x10/0x10 [ 73.646671][ T6894] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 73.646687][ T6894] ? __pfx_nl80211_join_ocb+0x10/0x10 [ 73.646697][ T6894] ? __pfx_nl80211_post_doit+0x10/0x10 [ 73.646713][ T6894] ? __lock_acquire+0xaa4/0x1ba0 [ 73.646733][ T6894] netlink_rcv_skb+0x16d/0x440 [ 73.646747][ T6894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.646764][ T6894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.646785][ T6894] ? __pfx_down_read+0x10/0x10 [ 73.646796][ T6894] ? netlink_deliver_tap+0x1ae/0xd30 [ 73.646812][ T6894] genl_rcv+0x28/0x40 [ 73.646826][ T6894] netlink_unicast+0x53a/0x7f0 [ 73.646842][ T6894] ? __pfx_netlink_unicast+0x10/0x10 [ 73.646860][ T6894] netlink_sendmsg+0x8d1/0xdd0 [ 73.646876][ T6894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.646896][ T6894] ____sys_sendmsg+0xa95/0xc70 [ 73.646912][ T6894] ? copy_msghdr_from_user+0x10a/0x160 [ 73.646924][ T6894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.646946][ T6894] ___sys_sendmsg+0x134/0x1d0 [ 73.646965][ T6894] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.646994][ T6894] __sys_sendmsg+0x16d/0x220 [ 73.647006][ T6894] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.647027][ T6894] do_syscall_64+0xcd/0x260 [ 73.647045][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.647056][ T6894] RIP: 0033:0x7fa9bc78e969 [ 73.647065][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.647075][ T6894] RSP: 002b:00007fa9bd5d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.647086][ T6894] RAX: ffffffffffffffda RBX: 00007fa9bc9b5fa0 RCX: 00007fa9bc78e969 [ 73.647093][ T6894] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 73.647099][ T6894] RBP: 00007fa9bd5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 73.647105][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.647111][ T6894] R13: 0000000000000000 R14: 00007fa9bc9b5fa0 R15: 00007ffea433d778 [ 73.647124][ T6894] [ 73.653655][ T34] usb 6-1: USB disconnect, device number 2 [ 73.812577][ T6907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.816782][ T6907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.820696][ T6907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.846899][ T6914] syz.3.246: attempt to access beyond end of device [ 73.846899][ T6914] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 73.851314][ T6914] syz.3.246: attempt to access beyond end of device [ 73.851314][ T6914] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 73.856204][ T6914] Mount JFS Failure: -5 [ 73.857569][ T6914] jfs_mount failed w/return code = -5 [ 73.948324][ T6919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.975126][ T6927] xt_hashlimit: size too large, truncated to 1048576 [ 74.124701][ T6939] netlink: 'syz.1.253': attribute type 11 has an invalid length. [ 74.127217][ T6939] netlink: 224 bytes leftover after parsing attributes in process `syz.1.253'. [ 74.441779][ T10] usb 7-1: USB disconnect, device number 3 [ 74.453591][ T836] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.458749][ T6960] vxcan1 speed is unknown, defaulting to 1000 [ 74.612737][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=6971 comm=syz.0.263 [ 74.638813][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 74.642191][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8224, setting to 1024 [ 74.651764][ T836] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.655046][ T836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.663875][ T836] usb 6-1: config 0 descriptor?? [ 74.714433][ T6969] CUSE: unknown device info "" [ 74.715959][ T6969] CUSE: zero length info key specified [ 74.721574][ T6969] netlink: 36 bytes leftover after parsing attributes in process `syz.2.262'. [ 74.842264][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 74.842275][ T40] audit: type=1400 audit(1748222207.724:363): avc: denied { ioctl } for pid=6985 comm="syz.0.267" path="socket:[13780]" dev="sockfs" ino=13780 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 74.855042][ T6984] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 74.857367][ T6984] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 74.860421][ T40] audit: type=1400 audit(1748222207.744:364): avc: denied { listen } for pid=6985 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 74.872946][ T6986] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 74.873890][ T40] audit: type=1400 audit(1748222207.754:365): avc: denied { nlmsg_write } for pid=6983 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 74.875027][ T6986] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 74.876058][ T836] usbhid 6-1:0.0: can't add hid device: -71 [ 74.876147][ T836] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 74.881729][ T836] usb 6-1: USB disconnect, device number 3 [ 74.889128][ T6986] vhci_hcd vhci_hcd.0: Device attached [ 74.901529][ T6987] vhci_hcd: connection closed [ 74.902440][ T13] vhci_hcd: stop threads [ 74.906278][ T13] vhci_hcd: release socket [ 74.907932][ T13] vhci_hcd: disconnect device [ 74.936373][ T6990] FAULT_INJECTION: forcing a failure. [ 74.936373][ T6990] name failslab, interval 1, probability 0, space 0, times 0 [ 74.940357][ T6990] CPU: 1 UID: 0 PID: 6990 Comm: syz.2.268 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 74.940372][ T6990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.940378][ T6990] Call Trace: [ 74.940382][ T6990] [ 74.940387][ T6990] dump_stack_lvl+0x16c/0x1f0 [ 74.940407][ T6990] should_fail_ex+0x512/0x640 [ 74.940426][ T6990] should_failslab+0xc2/0x120 [ 74.940438][ T6990] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 74.940450][ T6990] ? skb_clone+0x190/0x3f0 [ 74.940479][ T6990] skb_clone+0x190/0x3f0 [ 74.940495][ T6990] netlink_deliver_tap+0xabd/0xd30 [ 74.940512][ T6990] netlink_unicast+0x6b2/0x7f0 [ 74.940528][ T6990] ? __pfx_netlink_unicast+0x10/0x10 [ 74.940541][ T6990] ? genl_rcv_msg+0x4bb/0x800 [ 74.940561][ T6990] netlink_ack+0x696/0xb80 [ 74.940579][ T6990] netlink_rcv_skb+0x347/0x440 [ 74.940593][ T6990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.940609][ T6990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.940630][ T6990] ? __pfx_down_read+0x10/0x10 [ 74.940641][ T6990] ? netlink_deliver_tap+0x1ae/0xd30 [ 74.940656][ T6990] genl_rcv+0x28/0x40 [ 74.940674][ T6990] netlink_unicast+0x53a/0x7f0 [ 74.940689][ T6990] ? __pfx_netlink_unicast+0x10/0x10 [ 74.940707][ T6990] netlink_sendmsg+0x8d1/0xdd0 [ 74.940724][ T6990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.940743][ T6990] ____sys_sendmsg+0xa95/0xc70 [ 74.940760][ T6990] ? copy_msghdr_from_user+0x10a/0x160 [ 74.940772][ T6990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.940794][ T6990] ___sys_sendmsg+0x134/0x1d0 [ 74.940807][ T6990] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.940836][ T6990] __sys_sendmsg+0x16d/0x220 [ 74.940849][ T6990] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.940870][ T6990] do_syscall_64+0xcd/0x260 [ 74.940887][ T6990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.940899][ T6990] RIP: 0033:0x7f2051f8e969 [ 74.940909][ T6990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.940919][ T6990] RSP: 002b:00007f2052e18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.940931][ T6990] RAX: ffffffffffffffda RBX: 00007f20521b5fa0 RCX: 00007f2051f8e969 [ 74.940938][ T6990] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 74.940944][ T6990] RBP: 00007f2052e18090 R08: 0000000000000000 R09: 0000000000000000 [ 74.940950][ T6990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.940956][ T6990] R13: 0000000000000000 R14: 00007f20521b5fa0 R15: 00007ffce3cc6178 [ 74.940970][ T6990] [ 75.046646][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 75.077927][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.190126][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 75.192880][ T40] audit: type=1400 audit(1748222208.074:366): avc: denied { write } for pid=7006 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.192908][ T40] audit: type=1400 audit(1748222208.074:367): avc: denied { read } for pid=7006 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.344360][ T7016] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 75.346905][ T7016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.350386][ T7016] vhci_hcd vhci_hcd.0: Device attached [ 75.356010][ T7017] vhci_hcd: connection closed [ 75.356357][ T1145] vhci_hcd: stop threads [ 75.359292][ T1145] vhci_hcd: release socket [ 75.360740][ T1145] vhci_hcd: disconnect device [ 75.412841][ T836] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 75.438730][ T7020] FAULT_INJECTION: forcing a failure. [ 75.438730][ T7020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.443059][ T7020] CPU: 2 UID: 0 PID: 7020 Comm: syz.0.279 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 75.443076][ T7020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.443082][ T7020] Call Trace: [ 75.443086][ T7020] [ 75.443090][ T7020] dump_stack_lvl+0x16c/0x1f0 [ 75.443122][ T7020] should_fail_ex+0x512/0x640 [ 75.443140][ T7020] _copy_to_user+0x32/0xd0 [ 75.443158][ T7020] simple_read_from_buffer+0xcb/0x170 [ 75.443175][ T7020] proc_fail_nth_read+0x197/0x270 [ 75.443193][ T7020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.443211][ T7020] ? rw_verify_area+0xcf/0x680 [ 75.443225][ T7020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.443241][ T7020] vfs_read+0x1e1/0xc70 [ 75.443259][ T7020] ? __pfx___mutex_lock+0x10/0x10 [ 75.443276][ T7020] ? __pfx_vfs_read+0x10/0x10 [ 75.443296][ T7020] ? __fget_files+0x20e/0x3c0 [ 75.443310][ T7020] ksys_read+0x12a/0x240 [ 75.443326][ T7020] ? __pfx_ksys_read+0x10/0x10 [ 75.443347][ T7020] do_syscall_64+0xcd/0x260 [ 75.443364][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.443375][ T7020] RIP: 0033:0x7fac5998d37c [ 75.443384][ T7020] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 75.443395][ T7020] RSP: 002b:00007fac5a73c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.443406][ T7020] RAX: ffffffffffffffda RBX: 00007fac59bb5fa0 RCX: 00007fac5998d37c [ 75.443413][ T7020] RDX: 000000000000000f RSI: 00007fac5a73c0a0 RDI: 0000000000000004 [ 75.443419][ T7020] RBP: 00007fac5a73c090 R08: 0000000000000000 R09: 0000000000000000 [ 75.443425][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.443431][ T7020] R13: 0000000000000000 R14: 00007fac59bb5fa0 R15: 00007ffc563edec8 [ 75.443445][ T7020] [ 75.509348][ C2] vkms_vblank_simulate: vblank timer overrun [ 75.558998][ T7024] vlan2: entered promiscuous mode [ 75.561166][ T7024] bond0: entered promiscuous mode [ 75.563083][ T7024] bond_slave_0: entered promiscuous mode [ 75.565042][ T7024] bond_slave_1: entered promiscuous mode [ 75.593425][ T836] usb 6-1: Using ep0 maxpacket: 32 [ 75.596275][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 75.599745][ T836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8224, setting to 1024 [ 75.603287][ T836] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 75.606115][ T836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.610616][ T836] usb 6-1: config 0 descriptor?? [ 75.615328][ T836] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 75.619053][ T836] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 75.638962][ T40] audit: type=1400 audit(1748222208.524:368): avc: denied { bind } for pid=7025 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.738337][ T7030] ./cgroup: Can't lookup blockdev [ 75.744053][ T40] audit: type=1400 audit(1748222208.634:369): avc: denied { accept } for pid=7029 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 75.815168][ T836] usb 6-1: USB disconnect, device number 4 [ 75.820027][ T836] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 75.933913][ T7037] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 76.037030][ T7044] netlink: 'syz.3.290': attribute type 2 has an invalid length. [ 76.037528][ T40] audit: type=1400 audit(1748222208.924:370): avc: denied { create } for pid=7043 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 76.043162][ T7045] netlink: 72 bytes leftover after parsing attributes in process `syz.3.290'. [ 76.046386][ T40] audit: type=1400 audit(1748222208.934:371): avc: denied { write } for pid=7043 comm="syz.3.290" path="socket:[15569]" dev="sockfs" ino=15569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 76.384559][ T40] audit: type=1400 audit(1748222209.274:372): avc: denied { allowed } for pid=7056 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.413962][ T5988] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 76.433565][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 76.437113][ T7059] bridge_slave_1: left promiscuous mode [ 76.439566][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.443738][ T7059] bridge_slave_0: left promiscuous mode [ 76.445606][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.562835][ T5988] usb 8-1: Using ep0 maxpacket: 32 [ 76.566594][ T5988] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.570074][ T5988] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.573226][ T5988] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 76.576081][ T5988] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.581094][ T5988] usb 8-1: config 0 descriptor?? [ 76.654483][ T7064] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 76.708094][ T7067] syzkaller1: entered promiscuous mode [ 76.709981][ T7067] syzkaller1: entered allmulticast mode [ 76.734205][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 76.846859][ T7068] SELinux: policydb magic number 0x45cf61f8 does not match expected magic number 0xf97cff8c [ 76.850246][ T7068] SELinux: failed to load policy [ 76.891468][ T7081] warning: `syz.0.302' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.910331][ T7081] Process accounting resumed [ 76.978727][ T7091] netlink: 'syz.1.306': attribute type 9 has an invalid length. [ 76.981112][ T7091] netlink: 212012 bytes leftover after parsing attributes in process `syz.1.306'. [ 76.994669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.007683][ T5988] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 77.087688][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 77.151951][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 77.171647][ T7117] use of bytesused == 0 is deprecated and will be removed in the future, [ 77.174957][ T7117] use the actual size instead. [ 77.214236][ T7124] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 77.245424][ T5988] usb 8-1: USB disconnect, device number 7 [ 77.285465][ T7131] xt_hashlimit: size too large, truncated to 1048576 [ 77.429113][ T5977] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.452543][ T7144] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 77.542567][ T7149] @: renamed from vlan0 [ 77.603962][ T5977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.606899][ T5977] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 77.609839][ T5977] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 77.615240][ T5977] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.618071][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.620508][ T5977] usb 5-1: Product: syz [ 77.621812][ T5977] usb 5-1: Manufacturer: syz [ 77.623529][ T5977] usb 5-1: SerialNumber: syz [ 77.627130][ T7122] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 77.695693][ T7154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.848140][ T5977] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 77.856723][ T5977] usb 5-1: USB disconnect, device number 4 [ 77.865500][ T5977] usblp0: removed [ 77.987356][ T7177] vxcan1 speed is unknown, defaulting to 1000 [ 78.062831][ T34] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 78.225818][ T34] usb 8-1: not running at top speed; connect to a high speed hub [ 78.230098][ T34] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 78.237283][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.241174][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.245892][ T34] usb 8-1: Product: syz [ 78.247710][ T34] usb 8-1: Manufacturer: й [ 78.249728][ T34] usb 8-1: SerialNumber: syz [ 78.382715][ T6057] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 78.468416][ T34] cdc_ncm 8-1:1.0: bind() failure [ 78.468484][ T7193] fuse: Unknown parameter '00000000000000000000004' [ 78.473423][ T34] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 78.474956][ T7193] fuse: Bad value for 'user_id' [ 78.475579][ T34] cdc_ncm 8-1:1.1: bind() failure [ 78.477119][ T7193] fuse: Bad value for 'user_id' [ 78.484488][ T7193] netlink: 'syz.1.339': attribute type 4 has an invalid length. [ 78.484501][ T7194] netlink: 'syz.1.339': attribute type 4 has an invalid length. [ 78.489892][ T34] usb 8-1: USB disconnect, device number 8 [ 78.534466][ T6057] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.537942][ T6057] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.541742][ T6057] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.545573][ T6057] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.751194][ T6057] usb 7-1: usb_control_msg returned -32 [ 78.753019][ T6057] usbtmc 7-1:16.0: can't read capabilities [ 78.802756][ T6588] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 78.912708][ T34] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 78.952670][ T6588] usb 6-1: Using ep0 maxpacket: 16 [ 78.956395][ T6588] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.959757][ T6588] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.962888][ T6588] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 78.965659][ T6588] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.969486][ T6588] usb 6-1: config 0 descriptor?? [ 79.062672][ T34] usb 8-1: device descriptor read/64, error -71 [ 79.175257][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.178779][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.183972][ T6588] usbhid 6-1:0.0: can't add hid device: -71 [ 79.185936][ T6588] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 79.189972][ T6588] usb 6-1: USB disconnect, device number 5 [ 79.312719][ T34] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 79.462684][ T34] usb 8-1: device descriptor read/64, error -71 [ 79.575045][ T34] usb usb8-port1: attempt power cycle [ 79.609333][ T7219] Failed to get privilege flags for destination (handle=0x2:0xd) [ 79.636913][ T7221] netlink: zone id is out of range [ 79.638600][ T7221] netlink: zone id is out of range [ 79.640350][ T7221] netlink: zone id is out of range [ 79.642532][ T7221] netlink: zone id is out of range [ 79.645474][ T7221] netlink: zone id is out of range [ 79.647793][ T7221] netlink: zone id is out of range [ 79.649916][ T7221] netlink: zone id is out of range [ 79.705428][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'. [ 79.724114][ T7229] binder_alloc: 7227: binder_alloc_buf size 8 failed, no address space [ 79.727294][ T7229] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 79.784207][ T7235] Cannot find del_set index 85 as target [ 79.797359][ T7235] fuse: Bad value for 'fd' [ 79.856411][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 79.856444][ T40] audit: type=1400 audit(1748222212.744:405): avc: denied { setopt } for pid=7243 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.912676][ T34] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 79.933131][ T34] usb 8-1: device descriptor read/8, error -71 [ 79.992063][ T40] audit: type=1400 audit(1748222212.874:406): avc: denied { execute } for pid=7250 comm="syz.0.362" path="/dev/audio1" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 80.182737][ T34] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 80.203147][ T34] usb 8-1: device descriptor read/8, error -71 [ 80.315290][ T34] usb usb8-port1: unable to enumerate USB device [ 80.570054][ T40] audit: type=1400 audit(1748222213.454:407): avc: denied { remount } for pid=7253 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.577787][ T40] audit: type=1400 audit(1748222213.454:408): avc: denied { watch watch_reads } for pid=7253 comm="syz.1.363" path="/100/file1" dev="tmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.622409][ T7255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'. [ 80.638779][ T40] audit: type=1400 audit(1748222213.524:409): avc: denied { mount } for pid=7253 comm="syz.1.363" name="/" dev="autofs" ino=14105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 80.851971][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 81.148731][ T58] usb 7-1: USB disconnect, device number 4 [ 81.254468][ T7277] sp0: Synchronizing with TNC [ 81.415991][ T87] cfg80211: failed to load regulatory.db [ 81.452951][ T7285] netlink: 64 bytes leftover after parsing attributes in process `syz.2.373'. [ 81.638301][ T40] audit: type=1400 audit(1748222214.524:410): avc: denied { bind } for pid=7300 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.669532][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.378'. [ 81.728647][ T40] audit: type=1400 audit(1748222214.614:411): avc: denied { map } for pid=7315 comm="syz.1.381" path="socket:[14154]" dev="sockfs" ino=14154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.735747][ T40] audit: type=1400 audit(1748222214.614:412): avc: denied { read accept } for pid=7315 comm="syz.1.381" path="socket:[14154]" dev="sockfs" ino=14154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.794097][ T40] audit: type=1400 audit(1748222214.684:413): avc: denied { accept } for pid=7315 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.856382][ T40] audit: type=1400 audit(1748222214.744:414): avc: denied { listen } for pid=7321 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.894698][ T7332] netlink: 'syz.1.385': attribute type 10 has an invalid length. [ 81.897314][ T7332] team0: left allmulticast mode [ 81.908614][ T7332] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.911482][ T7332] team0: entered allmulticast mode [ 81.915951][ T7332] bond0: (slave team0): Enslaving as an active interface with an up link [ 81.929435][ T7329] syzkaller0: entered allmulticast mode [ 82.015437][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 82.027635][ T7336] fuseblk: Bad value for 'group_id' [ 82.029351][ T7336] fuseblk: Bad value for 'group_id' [ 82.106096][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 82.295992][ T7353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7353 comm=syz.0.393 [ 82.354651][ T7356] xt_TCPMSS: Only works on TCP SYN packets [ 82.541044][ T7362] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 82.842835][ T5988] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.005213][ T5988] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 83.008732][ T5988] usb 7-1: config 0 has no interface number 0 [ 83.011371][ T5988] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.017586][ T5988] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 83.020594][ T5988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.023220][ T5988] usb 7-1: Product: syz [ 83.024730][ T5988] usb 7-1: Manufacturer: syz [ 83.026812][ T5988] usb 7-1: SerialNumber: syz [ 83.034801][ T5988] usb 7-1: config 0 descriptor?? [ 83.045584][ T5988] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 83.665206][ T7416] netlink: 'syz.0.410': attribute type 10 has an invalid length. [ 83.672500][ T7416] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.675854][ T7416] team0: entered promiscuous mode [ 83.677525][ T7416] team_slave_0: entered promiscuous mode [ 83.679553][ T7416] team_slave_1: entered promiscuous mode [ 83.682098][ T7416] bond0: (slave team0): Enslaving as an active interface with an up link [ 83.696511][ T7420] tmpfs: Bad value for 'mpol' [ 83.698305][ T7418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62496 sclass=netlink_route_socket pid=7418 comm=syz.3.411 [ 83.736851][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 83.789782][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.415'. [ 83.920597][ T12] tipc: Subscription rejected, illegal request [ 84.006027][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.009702][ T7450] netlink: 'syz.0.423': attribute type 7 has an invalid length. [ 84.010805][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.055018][ T7459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.425'. [ 84.061791][ T7459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=7459 comm=syz.3.425 [ 84.142526][ T7471] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 84.144625][ T7471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.148929][ T7471] vhci_hcd vhci_hcd.0: Device attached [ 84.152047][ T7474] vhci_hcd: connection closed [ 84.152261][ T64] vhci_hcd: stop threads [ 84.156656][ T64] vhci_hcd: release socket [ 84.158136][ T64] vhci_hcd: disconnect device [ 84.225698][ T7480] netdevsim netdevsim1 : renamed from netdevsim0 [ 84.682734][ T7509] sg_read: process 370 (syz.0.442) changed security contexts after opening file descriptor, this is not allowed. [ 84.897881][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 84.897899][ T40] audit: type=1400 audit(1748222218.777:443): avc: denied { module_request } for pid=7514 comm="syz.0.443" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.218170][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.229884][ T40] audit: type=1326 audit(1748222219.107:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.0.444" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac5998e969 code=0x0 [ 85.312938][ C0] usb 7-1: yurex_control_callback - control failed: -2 [ 85.316412][ T836] usb 7-1: USB disconnect, device number 5 [ 85.321716][ T836] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 85.357733][ T7526] __nla_validate_parse: 2 callbacks suppressed [ 85.357745][ T7526] netlink: 44 bytes leftover after parsing attributes in process `syz.3.445'. [ 85.398823][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 85.444838][ T40] audit: type=1400 audit(1748222219.327:445): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 85.504352][ T40] audit: type=1400 audit(1748222219.387:446): avc: denied { unlink } for pid=5933 comm="syz-executor" name="file0" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.551240][ T40] audit: type=1400 audit(1748222219.427:447): avc: denied { getopt } for pid=7533 comm="syz.3.449" laddr=::ac14:14aa lport=42773 faddr=fc00:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 85.740551][ T40] audit: type=1400 audit(1748222219.617:448): avc: denied { connect } for pid=7548 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.746968][ T40] audit: type=1400 audit(1748222219.617:449): avc: denied { read } for pid=7548 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.845505][ T7549] Unsupported ieee802154 address type: 0 [ 85.847521][ T40] audit: type=1400 audit(1748222219.727:450): avc: denied { write } for pid=7548 comm="syz.1.453" path="socket:[16734]" dev="sockfs" ino=16734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.855804][ T40] audit: type=1400 audit(1748222219.727:451): avc: denied { bind } for pid=7548 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.889879][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 85.901739][ T7559] vxcan1 speed is unknown, defaulting to 1000 [ 85.956178][ T7571] syz.2.459 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.967722][ T7571] Invalid option length (1047906) for dns_resolver key [ 85.988656][ T7571] macvtap0: entered allmulticast mode [ 85.990472][ T7571] veth0_macvtap: entered allmulticast mode [ 85.994880][ T7571] netlink: 'syz.2.459': attribute type 3 has an invalid length. [ 85.997863][ T7571] net_ratelimit: 408 callbacks suppressed [ 85.997872][ T7571] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 86.086213][ T40] audit: type=1400 audit(1748222219.967:452): avc: denied { unlink } for pid=7572 comm="syz.0.460" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 86.284753][ T7616] netlink: 248 bytes leftover after parsing attributes in process `syz.2.468'. [ 86.311520][ T7618] netlink: 'syz.0.469': attribute type 10 has an invalid length. [ 86.318307][ T7618] hsr_slave_0: left promiscuous mode [ 86.320426][ T7618] hsr_slave_1: left promiscuous mode [ 86.586093][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 86.863166][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.484'. [ 87.261070][ T7712] loop4: detected capacity change from 0 to 524255232 [ 87.290906][ T7712] 9pnet_fd: p9_fd_create_unix (7712): problem connecting socket: ./file0/file0: -111 [ 87.492751][ T836] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 87.623486][ T836] usb 6-1: device descriptor read/64, error -71 [ 87.863027][ T836] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 88.002717][ T836] usb 6-1: device descriptor read/64, error -71 [ 88.113024][ T836] usb usb6-port1: attempt power cycle [ 88.205603][ T7768] bridge1: entered allmulticast mode [ 88.464559][ T836] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 88.484602][ T836] usb 6-1: device descriptor read/8, error -71 [ 88.722697][ T836] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 88.743129][ T836] usb 6-1: device descriptor read/8, error -71 [ 88.853272][ T836] usb usb6-port1: unable to enumerate USB device [ 88.892722][ T5977] IPVS: starting estimator thread 0... [ 88.950968][ T7785] ubi31: attaching mtd0 [ 88.955174][ T7785] ubi31: scanning is finished [ 88.956803][ T7785] ubi31: empty MTD device detected [ 88.992758][ T7781] IPVS: using max 42 ests per chain, 100800 per kthread [ 89.079499][ T7785] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 89.083354][ T7785] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 89.086525][ T7785] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 89.089745][ T7785] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 89.093301][ T7785] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 89.096458][ T7785] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 89.101414][ T7785] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 623649766 [ 89.105882][ T7785] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 89.110883][ T7791] ubi31: background thread "ubi_bgt31d" started, PID 7791 [ 89.157046][ T7797] netlink: 'syz.0.507': attribute type 11 has an invalid length. [ 89.161642][ T7797] netlink: 'syz.0.507': attribute type 1 has an invalid length. [ 89.167372][ T7797] netlink: 216 bytes leftover after parsing attributes in process `syz.0.507'. [ 89.216122][ T7804] netlink: 'syz.0.509': attribute type 3 has an invalid length. [ 89.232670][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 89.272951][ T7804] hfsplus: unable to find HFS+ superblock [ 89.303479][ T7801] xt_hashlimit: size too large, truncated to 1048576 [ 89.374376][ T7807] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 89.379575][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 89.382407][ T7817] netem: invalid attributes len -11 [ 89.384163][ T7817] netem: change failed [ 89.386419][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.388951][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.414537][ T7821] netlink: 'syz.0.513': attribute type 29 has an invalid length. [ 89.421788][ T7821] netlink: 'syz.0.513': attribute type 29 has an invalid length. [ 89.425972][ T7821] netlink: 'syz.0.513': attribute type 32 has an invalid length. [ 89.596886][ T7839] nbd: socks must be embedded in a SOCK_ITEM attr [ 89.633577][ T5947] Bluetooth: hci0: command 0x0406 tx timeout [ 89.639025][ T5938] Bluetooth: hci0: hardware error 0x22 [ 89.649062][ T7837] QAT: failed to copy from user. [ 89.651843][ T7837] QAT: failed to copy from user. [ 89.654269][ T7837] QAT: failed to copy from user. [ 89.655880][ T7837] QAT: failed to copy from user. [ 89.657871][ T7837] QAT: failed to copy from user. [ 89.659763][ T7837] QAT: failed to copy from user. [ 89.661374][ T7837] QAT: failed to copy from user. [ 89.663318][ T7837] QAT: failed to copy from user. [ 89.664948][ T7837] QAT: failed to copy from user. [ 89.666538][ T7837] QAT: failed to copy from user. [ 89.668241][ T7837] QAT: failed to copy from user. [ 89.669822][ T7837] QAT: failed to copy from user. [ 89.671366][ T7837] QAT: failed to copy from user. [ 89.673207][ T7837] QAT: failed to copy from user. [ 89.674828][ T7837] QAT: failed to copy from user. [ 89.676747][ T7837] QAT: failed to copy from user. [ 89.678621][ T7837] QAT: failed to copy from user. [ 89.680212][ T7837] QAT: failed to copy from user. [ 89.682157][ T7837] QAT: failed to copy from user. [ 89.684594][ T7837] QAT: failed to copy from user. [ 89.686192][ T7837] QAT: failed to copy from user. [ 89.688072][ T7837] QAT: failed to copy from user. [ 89.689693][ T7837] QAT: failed to copy from user. [ 89.691287][ T7837] QAT: failed to copy from user. [ 89.694173][ T7837] QAT: failed to copy from user. [ 89.696236][ T7837] QAT: failed to copy from user. [ 89.697986][ T7837] QAT: failed to copy from user. [ 89.699615][ T7837] QAT: failed to copy from user. [ 89.701569][ T7837] QAT: failed to copy from user. [ 89.704293][ T7837] QAT: failed to copy from user. [ 89.706409][ T7837] QAT: failed to copy from user. [ 89.708377][ T7837] QAT: failed to copy from user. [ 89.710025][ T7837] QAT: failed to copy from user. [ 89.857074][ T7856] fuse: Bad value for 'fd' [ 89.982576][ T7867] netlink: 'syz.3.529': attribute type 4 has an invalid length. [ 89.986776][ T7867] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 90.030441][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 90.030452][ T40] audit: type=1400 audit(1748222223.907:478): avc: denied { mounton } for pid=7869 comm="syz.3.531" path="/131/file0" dev="hugetlbfs" ino=18970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 90.033265][ T7871] overlayfs: maximum fs stacking depth exceeded [ 90.113122][ T7883] vxcan1 speed is unknown, defaulting to 1000 [ 90.141774][ T7886] tmpfs: Bad value for 'mpol' [ 90.152743][ T5977] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 90.295111][ T40] audit: type=1326 audit(1748222224.177:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.537" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e78e969 code=0x0 [ 90.302790][ T5977] usb 7-1: Using ep0 maxpacket: 16 [ 90.306067][ T7897] kAFS: unable to lookup cell '/,cL' [ 90.313873][ T5977] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 90.317585][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 90.325490][ T5977] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 90.328487][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.331201][ T5977] usb 7-1: Product: syz [ 90.332801][ T5977] usb 7-1: Manufacturer: syz [ 90.334516][ T5977] usb 7-1: SerialNumber: syz [ 90.343209][ T5977] usb 7-1: config 0 descriptor?? [ 90.350597][ T7902] dlm: non-version read from control device 0 [ 90.366656][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 90.390983][ T7904] netlink: 'syz.3.541': attribute type 29 has an invalid length. [ 90.554467][ T7864] netlink: 76 bytes leftover after parsing attributes in process `syz.2.528'. [ 90.565688][ T7864] netlink: 260 bytes leftover after parsing attributes in process `syz.2.528'. [ 90.622914][ T5977] appledisplay 7-1:0.0: Error while getting initial brightness: -110 [ 90.627456][ T5977] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110 [ 90.641708][ T40] audit: type=1400 audit(1748222224.517:480): avc: denied { read } for pid=7924 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.674431][ T5977] usb 7-1: USB disconnect, device number 6 [ 90.776033][ T40] audit: type=1400 audit(1748222224.657:481): avc: denied { ioctl } for pid=7928 comm="syz.3.548" path="socket:[19216]" dev="sockfs" ino=19216 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.899228][ T7938] netlink: 48 bytes leftover after parsing attributes in process `syz.0.552'. [ 90.901845][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 90.921619][ T40] audit: type=1400 audit(1748222224.797:482): avc: denied { setattr } for pid=7937 comm="syz.0.552" name="SCO" dev="sockfs" ino=17317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.921901][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 90.957431][ T40] audit: type=1400 audit(1748222224.837:483): avc: denied { read } for pid=7937 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.998083][ T40] audit: type=1400 audit(1748222224.877:484): avc: denied { create } for pid=7943 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 91.221604][ T7966] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 91.226486][ T40] audit: type=1400 audit(1748222225.107:485): avc: denied { ioctl } for pid=7964 comm="syz.1.562" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.236948][ T7966] netlink: 96 bytes leftover after parsing attributes in process `syz.1.562'. [ 91.273300][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 91.279164][ T7969] netlink: 244 bytes leftover after parsing attributes in process `syz.1.563'. [ 91.283985][ T40] audit: type=1400 audit(1748222225.167:486): avc: denied { getopt } for pid=7971 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.325433][ T40] audit: type=1400 audit(1748222225.207:487): avc: denied { name_connect } for pid=7975 comm="syz.1.565" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 91.334796][ T7976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.565'. [ 91.392846][ T836] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 91.527471][ T7995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=7995 comm=syz.2.572 [ 91.568357][ T836] usb 8-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 91.573175][ T836] usb 8-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 91.577274][ T836] usb 8-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.583527][ T836] usb 8-1: config 1 interface 0 has no altsetting 0 [ 91.590498][ T836] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.595185][ T836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.598670][ T836] usb 8-1: Product: ꇕ䵅酮卄ｸ䇝웅㎓鐴츷ㅿ㣭컨ꎙ䊓誧畮魅◝펛⩱ｳ㫆渪髪瑂ềช祸峧ྖ鈉ˣ챮໐Ḹ䷈瘓ܹ㺯콭陂㜐딷昢⌛鱸ఌ뿉碳黎ⷞࣧ弟皵犖嶴饪ۻ꟟ [ 91.607505][ T836] usb 8-1: Manufacturer: ᐊ [ 91.609490][ T836] usb 8-1: SerialNumber: 䐊 [ 91.616234][ T7956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.619823][ T7956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.647193][ T8005] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 91.712980][ T5938] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 91.968285][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.020654][ T8034] kvm: pic: single mode not supported [ 92.020749][ T8034] kvm: pic: level sensitive irq not supported [ 92.025221][ T8034] kvm: pic: single mode not supported [ 92.027098][ T8034] kvm: pic: level sensitive irq not supported [ 92.029818][ T8034] kvm: pic: single mode not supported [ 92.031691][ T8034] kvm: pic: level sensitive irq not supported [ 92.034280][ T8034] kvm: pic: single mode not supported [ 92.036148][ T8034] kvm: pic: level sensitive irq not supported [ 92.038405][ T836] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 92.038694][ T8034] kvm: pic: single mode not supported [ 92.042366][ T836] usb 8-1: USB disconnect, device number 13 [ 92.043147][ T8034] kvm: pic: level sensitive irq not supported [ 92.047483][ T8034] kvm: pic: single mode not supported [ 92.049301][ T8034] kvm: pic: level sensitive irq not supported [ 92.051682][ T8034] kvm: pic: single mode not supported [ 92.053652][ T8034] kvm: pic: level sensitive irq not supported [ 92.056636][ T8034] kvm: pic: single mode not supported [ 92.058575][ T8034] kvm: pic: level sensitive irq not supported [ 92.061683][ T8034] kvm: pic: single mode not supported [ 92.063627][ T8034] kvm: pic: level sensitive irq not supported [ 92.066740][ T8034] kvm: pic: single mode not supported [ 92.068684][ T8034] kvm: pic: level sensitive irq not supported [ 92.222068][ T8049] ref_ctr_offset mismatch. inode: 0x399 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 92.355413][ T8053] relay: one or more items not logged [item size (56) > sub-buffer size (13)] [ 92.482497][ T8005] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 92.834014][ T8080] overlayfs: conflicting options: userxattr,redirect_dir=on [ 92.922830][ T87] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 93.088082][ T87] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.091196][ T87] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.094117][ T8098] ipvlan0: entered promiscuous mode [ 93.095363][ T87] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.099694][ T87] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.102426][ T8098] ipvlan0: left promiscuous mode [ 93.142095][ T8103] syz.0.602: attempt to access beyond end of device [ 93.142095][ T8103] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 93.306194][ T87] usb 7-1: usb_control_msg returned -32 [ 93.307994][ T87] usbtmc 7-1:16.0: can't read capabilities [ 93.318717][ T87] usb 7-1: USB disconnect, device number 7 [ 93.339553][ T8113] block device autoloading is deprecated and will be removed. [ 93.854143][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.935237][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.952005][ T8134] vxcan1 speed is unknown, defaulting to 1000 [ 94.029423][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.032925][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.040840][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.040905][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.044184][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.050854][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.073594][ T8137] vxcan1 speed is unknown, defaulting to 1000 [ 94.115486][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.146722][ T8141] netlink: 'syz.3.614': attribute type 2 has an invalid length. [ 94.388451][ T64] bridge_slave_1: left promiscuous mode [ 94.390455][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.397099][ T64] bridge_slave_0: left allmulticast mode [ 94.398962][ T64] bridge_slave_0: left promiscuous mode [ 94.400902][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.646100][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.649440][ T64] bond_slave_0: left promiscuous mode [ 94.652882][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.655897][ T64] bond_slave_1: left promiscuous mode [ 94.659563][ T64] bond0 (unregistering): (slave team0): Releasing backup interface [ 94.665198][ T64] team0: left promiscuous mode [ 94.667487][ T64] team_slave_0: left promiscuous mode [ 94.670482][ T64] team_slave_1: left promiscuous mode [ 94.675576][ T64] bond0 (unregistering): Released all slaves [ 94.756550][ T8137] chnl_net:caif_netlink_parms(): no params data found [ 94.885559][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.888492][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.891088][ T8137] bridge_slave_0: entered allmulticast mode [ 94.896832][ T8137] bridge_slave_0: entered promiscuous mode [ 94.901287][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.903668][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.905956][ T8137] bridge_slave_1: entered allmulticast mode [ 94.908720][ T8137] bridge_slave_1: entered promiscuous mode [ 94.961656][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.968757][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.018809][ T8137] team0: Port device team_slave_0 added [ 95.023695][ T8137] team0: Port device team_slave_1 added [ 95.117225][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.119508][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.128102][ T8137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.139128][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.141512][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.146053][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.148389][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.170140][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 95.170151][ T40] audit: type=1400 audit(1748222229.047:504): avc: denied { getopt } for pid=8168 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.177877][ T64] veth1_macvtap: left promiscuous mode [ 95.180817][ T64] veth0_macvtap: left promiscuous mode [ 95.183843][ T64] veth1_vlan: left promiscuous mode [ 95.185567][ T64] veth0_vlan: left promiscuous mode [ 95.542780][ T5988] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 95.718523][ T5988] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.722985][ T5988] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.724044][ T64] team0 (unregistering): Port device team_slave_1 removed [ 95.728254][ T5988] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.728299][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.803749][ T64] team0 (unregistering): Port device team_slave_0 removed [ 95.943678][ T5988] usb 6-1: usb_control_msg returned -32 [ 95.947145][ T5988] usbtmc 6-1:16.0: can't read capabilities [ 95.960005][ T8184] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8184 comm=syz.2.622 [ 95.965172][ T40] audit: type=1400 audit(1748222229.847:505): avc: denied { read } for pid=8183 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.125430][ T5947] Bluetooth: hci3: command tx timeout [ 96.314159][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.317046][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.327768][ T8137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.332532][ T8176] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 96.339585][ T8176] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 96.342306][ T87] usb 6-1: USB disconnect, device number 10 [ 96.430285][ T8194] hugetlbfs: syz.3.625 (8194): Using mlock ulimits for SHM_HUGETLB is obsolete [ 96.447171][ T8196] can0: slcan on ptm0. [ 96.497051][ T8137] hsr_slave_0: entered promiscuous mode [ 96.499306][ T8137] hsr_slave_1: entered promiscuous mode [ 96.627792][ T40] audit: type=1400 audit(1748222230.507:506): avc: denied { ioctl } for pid=8202 comm="syz.3.628" path="socket:[21729]" dev="sockfs" ino=21729 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.653672][ T40] audit: type=1400 audit(1748222230.537:507): avc: denied { read } for pid=8202 comm="syz.3.628" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.662759][ T40] audit: type=1400 audit(1748222230.537:508): avc: denied { open } for pid=8202 comm="syz.3.628" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.682930][ T6589] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 96.703479][ T8137] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.708618][ T8137] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.713006][ T8137] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.717370][ T8137] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.785691][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.811945][ T8137] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.825192][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.827493][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.834114][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.836569][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.843175][ T6589] usb 7-1: Using ep0 maxpacket: 16 [ 96.852681][ T6589] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 96.862671][ T6589] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.865670][ T8137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.865729][ T6589] usb 7-1: Product: syz [ 96.875688][ T6589] usb 7-1: Manufacturer: syz [ 96.877593][ T6589] usb 7-1: SerialNumber: syz [ 96.883954][ T6589] usb 7-1: config 0 descriptor?? [ 96.888964][ T6589] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 96.893935][ T6589] usb 7-1: Detected FT232H [ 97.019488][ T8137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.141851][ T40] audit: type=1400 audit(1748222231.017:509): avc: denied { setattr } for pid=8247 comm="syz.1.635" name="/" dev="9p" ino=35913908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.181927][ T8137] veth0_vlan: entered promiscuous mode [ 97.190742][ T8137] veth1_vlan: entered promiscuous mode [ 97.206120][ T8137] veth0_macvtap: entered promiscuous mode [ 97.209912][ T8137] veth1_macvtap: entered promiscuous mode [ 97.228141][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.236493][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.241104][ T8137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.244214][ T8137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.246908][ T8137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.249561][ T8137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.283361][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.286610][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.304244][ T236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.312746][ T236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.314004][ T6589] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 97.319440][ T6589] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 97.323237][ T6589] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 97.329021][ T6589] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 97.333752][ T6589] usb 7-1: USB disconnect, device number 8 [ 97.342174][ T6589] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 97.348110][ T6589] ftdi_sio 7-1:0.0: device disconnected [ 97.348704][ T40] audit: type=1400 audit(1748222231.227:510): avc: denied { mounton } for pid=8137 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 97.373806][ T8250] can0 (unregistered): slcan off ptm0. [ 97.406777][ T40] audit: type=1400 audit(1748222231.287:511): avc: denied { associate } for pid=8262 comm="syz.4.612" name="blkio.throttle.io_service_bytes_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 97.420987][ T40] audit: type=1400 audit(1748222231.297:512): avc: denied { read append open } for pid=8262 comm="syz.4.612" path="/0/file0/blkio.throttle.io_service_bytes_recursive" dev="9p" ino=35913963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.612304][ T8271] __nla_validate_parse: 8 callbacks suppressed [ 97.612321][ T8271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.638'. [ 97.692105][ T8288] binder: 8287:8288 ioctl c0306201 200000000540 returned -14 [ 97.807777][ T8304] netlink: 60 bytes leftover after parsing attributes in process `syz.4.640'. [ 97.814430][ T8304] unsupported nlmsg_type 40 [ 98.202901][ T5947] Bluetooth: hci3: command tx timeout [ 98.308595][ T5947] Bluetooth: hci2: hardware error 0x22 [ 98.347950][ T8343] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8343 comm=syz.1.651 [ 98.385908][ T8341] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 98.642778][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 98.647191][ T40] audit: type=1400 audit(1748222232.527:513): avc: denied { append } for pid=8353 comm="syz.3.654" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.692537][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.655'. [ 98.752925][ T8361] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.804377][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.656'. [ 98.808079][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.656'. [ 98.808829][ T8365] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 98.816215][ T8359] bond0: entered promiscuous mode [ 98.818851][ T8359] bond_slave_0: entered promiscuous mode [ 98.820767][ T8359] bond_slave_1: entered promiscuous mode [ 98.824344][ T8359] bond0: left promiscuous mode [ 98.826448][ T8359] bond_slave_0: left promiscuous mode [ 98.828763][ T8359] bond_slave_1: left promiscuous mode [ 99.010214][ T8382] afs: Unknown parameter 'flokk' [ 99.013794][ T8382] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 99.016236][ T8382] netlink: 'syz.4.664': attribute type 2 has an invalid length. [ 99.018627][ T8382] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.664'. [ 99.052833][ T58] IPVS: starting estimator thread 0... [ 99.153836][ T8386] IPVS: using max 42 ests per chain, 100800 per kthread [ 99.240599][ T8407] netlink: 'syz.1.673': attribute type 21 has an invalid length. [ 99.246082][ T8407] netlink: 36 bytes leftover after parsing attributes in process `syz.1.673'. [ 99.259094][ T8408] SELinux: ebitmap: empty map [ 99.264032][ T8408] SELinux: failed to load policy [ 99.326134][ T8416] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -17006, delta: 1 [ 99.329592][ T8416] ref_ctr increment failed for inode: 0x2c9 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801b47c600 [ 99.363748][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 99.371484][ T91] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 99.411901][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.675'. [ 99.582265][ T8445] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 99.586072][ T8445] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 99.590364][ T8445] CPU: 1 UID: 0 PID: 8445 Comm: syz.2.686 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) [ 99.594419][ T8445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.597946][ T8445] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 99.599573][ T8445] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 3a 0c 5d f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 99.605301][ T8445] RSP: 0018:ffffc9000d367bf0 EFLAGS: 00010293 [ 99.607148][ T8445] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff885e396a [ 99.609639][ T8445] RDX: ffff888027c3a440 RSI: ffffffff885e39b6 RDI: 0000000000000005 [ 99.612032][ T8445] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 99.614401][ T8445] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000d367d88 [ 99.616791][ T8445] R13: ffffc9000d367d88 R14: 0000000000000001 R15: ffff88805b3d7000 [ 99.619173][ T8445] FS: 00007f2052dd66c0(0000) GS:ffff8880d6ada000(0000) knlGS:0000000000000000 [ 99.621869][ T8445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.623831][ T8445] CR2: 00007f2052dd5f98 CR3: 000000005141d000 CR4: 0000000000352ef0 [ 99.626175][ T8445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.628634][ T8445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.631060][ T8445] Call Trace: [ 99.632076][ T8445] [ 99.632994][ T8445] ? __pfx_bcsp_recv+0x10/0x10 [ 99.634523][ T8445] hci_uart_tty_receive+0x251/0x7e0 [ 99.636314][ T8445] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 99.638253][ T8445] tty_ioctl+0x580/0x1610 [ 99.639669][ T8445] ? __pfx_tty_ioctl+0x10/0x10 [ 99.641502][ T8445] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.643843][ T8445] ? hook_file_ioctl_common+0x145/0x410 [ 99.645639][ T8445] ? selinux_file_ioctl+0x180/0x270 [ 99.647259][ T8445] ? selinux_file_ioctl+0xb4/0x270 [ 99.648907][ T8445] ? __pfx_tty_ioctl+0x10/0x10 [ 99.650448][ T8445] __x64_sys_ioctl+0x193/0x200 [ 99.651898][ T8445] do_syscall_64+0xcd/0x260 [ 99.653316][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.655111][ T8445] RIP: 0033:0x7f2051f8e969 [ 99.656556][ T8445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.662618][ T8445] RSP: 002b:00007f2052dd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.662662][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 99.665211][ T8445] RAX: ffffffffffffffda RBX: 00007f20521b6160 RCX: 00007f2051f8e969 [ 99.670118][ T8445] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000004 [ 99.672752][ T8445] RBP: 00007f2052010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 99.675276][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.677776][ T8445] R13: 0000000000000001 R14: 00007f20521b6160 R15: 00007ffce3cc6178 [ 99.680420][ T8445] [ 99.681439][ T8445] Modules linked in: [ 99.682845][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.685317][ T8445] ---[ end trace 0000000000000000 ]--- [ 99.692918][ T8445] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 99.694680][ T8445] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 3a 0c 5d f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 99.701539][ T8445] RSP: 0018:ffffc9000d367bf0 EFLAGS: 00010293 [ 99.704002][ T8445] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff885e396a [ 99.704013][ T8445] RDX: ffff888027c3a440 RSI: ffffffff885e39b6 RDI: 0000000000000005 [ 99.709470][ T8445] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 99.709480][ T8445] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000d367d88 [ 99.709487][ T8445] R13: ffffc9000d367d88 R14: 0000000000000001 R15: ffff88805b3d7000 [ 99.709499][ T8445] FS: 00007f2052dd66c0(0000) GS:ffff8880d6ada000(0000) knlGS:0000000000000000 [ 99.709523][ T8445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.709532][ T8445] CR2: 00007f2052dd5f98 CR3: 000000005141d000 CR4: 0000000000352ef0 [ 99.709540][ T8445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.727553][ T8445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.727565][ T8445] Kernel panic - not syncing: Fatal exception [ 99.728538][ T8445] Kernel Offset: disabled VM DIAGNOSIS: 01:17:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8ef92ca0 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff88802d3cde64 RBP=0000000000000000 RSP=ffffc90004237bf8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88802d3cc880 R13=0000000000000001 R14=ffffffff8e26fc80 R15=0000000000000000 RIP=ffffffff85015480 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa89e168880 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffce3cc4c58 CR3=000000004e069000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000024912492 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7165736b736964 2d79622f6b736964 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 39312f7165736b73 69642d79622f6b73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 0000556b6d536690 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa89dbf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c145530793e2e3c5 6464310a5f817938 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64646464646464b5 6464646464646454 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a47000a73253d73 253a45000a756c25 3a49000a69253a57 000a69253a4c000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f47000a56001856 001f45000a504900 1f49000a4c001f57 000a4c001f4c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 632f6573756f6d2d 302e303a313a302d 6273752d312e6463 685f796d6d000032 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c6f736e6f6320 6164732f7665642f 3d746f6f7220313d 6e7261775f6e6f5f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63696e6170203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000037636d545630 000000053bb6c44c 0000000000000060 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854fb975 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc9000d3675f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adfe560 R15=ffffffff854fb910 RIP=ffffffff854fb99f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f2052dd66c0 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2052dd5f98 CR3=000000005141d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052183488 00007f2052183480 00007f2052183478 00007f2052183450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052ced100 00007f2052183440 00007f2052183458 00007f20521834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052183498 00007f2052183490 00007f2052183488 00007f2052183480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea00015f7500 RCX=1ffff92001b89e28 RDX=ffff88802be24880 RSI=ffffffff8204adb6 RDI=ffff88802be24cc4 RBP=0000000000000067 RSP=ffffc9000dc4f1d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888055118370 R13=0000000000000001 R14=000000000000000e R15=ffff88804796e640 RIP=ffffffff8b7038e0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fcc3f5fc6c0 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2052df6f98 CR3=0000000025c43000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 614df47587bc87f2 4ed08b55d8e40f0d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 09996ab846052d07 d6f701aadaa1de5d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dffc0b7639ecb29e cca1d6b886d6fbea ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 669ee8a4d6fa63ba 7e761b9be4417dae ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001100 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000b4003d7bf0 75a6000018400000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d7b7b003d7bff 00000000003d7c13 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d7bd844340000 c6dc0000b98e0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44a0000000000000 003d7c0d13b80000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 132618358f3f6fb5 daa6a2f66f992542 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e97ed514111b6aa4 e91a3fad26a8afc6 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052183488 00007f2052183480 00007f2052183478 00007f2052183450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052ced100 00007f2052183440 00007f2052183458 00007f20521834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052183498 00007f2052183490 00007f2052183488 00007f2052183480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000079f24 RBX=0000000000000003 RCX=ffffffff8b6d5419 RDX=ffffed100d4e65be RSI=ffffffff8bf4a460 RDI=ffffffff8191adf1 RBP=ffffed1003b5a000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dad0000 R14=ffffffff90853110 R15=0000000000000000 RIP=ffffffff8b6d3caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2052df6f98 CR3=0000000053f46000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce3cc6500 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2052011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000