last executing test programs: 1m22.262650946s ago: executing program 1 (id=54): r0 = socket(0x11, 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"6dca074e32f49d9897871a2c5a437e13554a7c240caa3b7ca61aa4ee7770b0eb14a3c70018a1ac3ce2dc7b738bd9dee10b325047f868bbc9557b2733ea1b7ecdae3fe421001ef3db0efba8141a2329f06bdf2be977176a11f26acee0fcf4f499efe78ca572711e117b7e9714681a199ecc8e5aa269398c0f7a6ed814027aeadebeda2c811215254a0b2e769a7c19bdc529799cb6ffded9b8545bc3babd69cf59dbadba69a6fd75120dab9f90395760b55a17d21984ba6eb87d5385c400691355a3145c0369803aca1cc13824150d142d9f7c41dbe27e8d407d04ae16df4112cb628d625a48d3e9b5245abd2d73e51f2ab7c47d96eec94a9f59a2d8d8b9a2d17bbe18f9da105b824afdd85344a3322c8f8e9d1d36b37bc9b6309051f41bc4ec092c03ce2913d8a9f01980017215ee823288476a30079e0422fcf303e1868000cc11c1fde29bfcdc3e1a74c6fa6ae1033f03f06cef344a75fb491e44283632a6a38e09337058ff12dfc8864ab0cef14813f4a0c1129373d569e27c59300608d1369ac07dbd219f3b3b57f22d4d4a4ace028d73244f8755e4cd9493bd7a219abd2b9b63f8c9496210fb189f3fac2ce8b3fc7b4d0bc4dfd588f49e034578d885750bff3fdf037e203797c10db852319376307227aeb848b3f3e1e97e1fdb8f960c3d8a54ca76414ca5987e6d594ee85d10dc1ae646154cc02d3a74d5467063933948b99f3b96be4e986b93349b3b38457b1ed5bff665e263626ec15d53dd2d6c0141e3f2ad1edea25b7e921fd583bc7981592b531b15f597cc98551a4d6e2e85d22d68cf50e4ae43bfaf861f8b86f49e32d798ddea9b49c64cf04c5b50c7742aab71090a3e9ee3d2e30d83644a9f6bb445fbee0a2d3f1a947cb8fa6c74c1217edd5cb7bba1d9b33fafb7455df0e40ae5e9dc69eb077625dc6890b77e261768c8187c417195256d7b30f2c93ca7d89d4b8a290ac74c6fe1b3730366e67f3ba02082a3e407f37e36fee704733617ad92f123419a5ae2493d0a2fb2069921bbcc1b71340b9ea8c0ce6efeff0f5f189bf54c5c35b7270ac9541a04faf4412717b8b7b6eb8ad450ec12c2d23ae6136680c7c44994608cb9bf502d0716be18f89ca54b9a1e3331c360e51c2d7e30f98269eb419aa1be24ce8f9d6be3d9824035b5c5ce44e3e68ead63e9de4df0f31247c1544db089f1e6653fadf8e318525ef74428c519f0ef92b8faf7cc104ac9a09ff4faa1b93a0e2741f11aad89139ed458656458be72ffbc344118c3849639fbde89afa3b165a321eca878b762abab483e77650bb1fb9d66cda273021b83047d7990f96c071b6dad61ca6fe37779110e65de0a44ef19323d37a56ff3923b89b0974d2de9347644a51a86f10b67c981cc661eb66327be02181703e8784686a434e76b059b1effa82fee3015b23c9292ccda3a36b278f7"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f00001b9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sched_setaffinity(r6, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000380)={0x0, 'bond_slave_0\x00', {0x2}, 0xd}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000030000000000001"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000180)={'ip6_vti0\x00', 0x2}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@delqdisc={0x214, 0x25, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x7, 0xc}, {0x9, 0x9}, {0x1, 0x7}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5e, 0xd, 0x5, 0x4, 0x0, 0x8c0, 0x4d, 0x5}}, {0xe, 0x2, [0x9f2f, 0x1, 0x4, 0xc, 0xe]}}]}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfc, 0x3, 0xfc00, 0x7, 0x2, 0x1, 0xb, 0x9}}, {0x16, 0x2, [0x8, 0x1, 0xff, 0x0, 0xe639, 0x8, 0xfc8b, 0x100, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x2, 0xda4, 0x5, 0x3, 0x80000000, 0x5, 0x4}}, {0xc, 0x2, [0x4, 0xd, 0x4, 0x6]}}, {{0x1c, 0x1, {0xc, 0x6, 0x8, 0xfffffff9, 0x0, 0x7, 0x9b8, 0x1}}, {0x6, 0x2, [0x2]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0x45}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2a, 0x7, 0x5, 0x7, 0x1, 0x100, 0x7, 0x4}}, {0xc, 0x2, [0xe, 0x0, 0x2, 0x3a40]}}, {{0x1c, 0x1, {0x10, 0x2b, 0x8, 0x3, 0x0, 0x5, 0xd, 0x4}}, {0xc, 0x2, [0x2ecf, 0x3, 0x6, 0x3]}}, {{0x1c, 0x1, {0x5, 0x4, 0x9, 0xa59, 0x1, 0x5, 0x81, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x1e, 0x9, 0x7, 0x3, 0x0, 0x8, 0xfffffff8, 0x7}}, {0x12, 0x2, [0xfffb, 0x781, 0x9, 0x3, 0x0, 0x7, 0xb]}}, {{0x1c, 0x1, {0x8, 0xfb, 0x8, 0x3, 0x0, 0x7, 0x8, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x8a, 0xdc, 0x7, 0x10, 0x0, 0xb, 0x3, 0x5}}, {0xe, 0x2, [0xfffe, 0x6, 0x0, 0xfff9, 0x2]}}]}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x6, 0x6e5}}}}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$netlink(0x10, 0x3, 0xb) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x5, 0x800}, {0x1, 0xfff}, {0x2, 0x3, 0xa5d569171ca76f60}, {0x0, 0x4, 0x800}, {0x2, 0x6, 0x800}, {0x1, 0x1, 0x800}, {0x1, 0x100, 0x1800}], 0x7, &(0x7f0000000040)={0x0, 0x989680}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0xfffff236) 1m22.122717792s ago: executing program 1 (id=55): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @local}, 0x10) getpeername$llc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) bind(r2, &(0x7f0000000280)=@isdn={0x22, 0x0, 0xdd, 0x9e, 0x7f}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x20040000) timerfd_create(0x0, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m21.201684907s ago: executing program 1 (id=73): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x1}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async) sendto$packet(r0, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) 1m21.062188408s ago: executing program 1 (id=74): socket$inet(0x10, 0xa, 0x6) (async) r0 = socket$inet(0x10, 0xa, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_pidfd_open(0x0, 0x0) (async) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) (async) setpgid(0x0, r3) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) open(&(0x7f0000000100)='./file0/file0\x00', 0x200000, 0x8) (async) r6 = open(&(0x7f0000000100)='./file0/file0\x00', 0x200000, 0x8) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x66, &(0x7f0000000080), &(0x7f000009de80)=0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x6, 0x1ee0, 0x3, 0x42800, r5, 0x0, '\x00', r1, r6, 0x1, 0x2, 0x4, 0x7, @void, @value, @void, @value}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r9}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r9}, 0x18) syz_io_uring_setup(0x5a7, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5a7, 0x0, 0x0, 0x0) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x800000000002000) 1m20.990787713s ago: executing program 1 (id=77): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(morus1280-avx2)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) recvmsg$can_j1939(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x12101) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0xe0, 0x4000000}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8937, &(0x7f0000000040)={'ip6_vti0\x00', @random="0103002000"}) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(morus1280-avx2)\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) (async) recvmsg$can_j1939(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x12101) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) (async) accept4(r2, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r3, &(0x7f0000002340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0xe0, 0x4000000}], 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8937, &(0x7f0000000040)={'ip6_vti0\x00', @random="0103002000"}) (async) 1m20.722749729s ago: executing program 1 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000f0800034000000001080004400000002205000200070000002c0001800a00010072656469720000001c0002800800024000000016080001400000001208000340000000020900010073797a30"], 0x3000}}, 0x0) 1m20.701486771s ago: executing program 32 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000f0800034000000001080004400000002205000200070000002c0001800a00010072656469720000001c0002800800024000000016080001400000001208000340000000020900010073797a30"], 0x3000}}, 0x0) 31.340961893s ago: executing program 2 (id=447): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80700, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xf, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x6, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x7, 0x4, 0xfffffffa, 0x1, 0x5, 0x1000000, 0x6}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0xfffd, 0x0, 0x249, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000000c0)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r3, 0x1, 0x10000, 0x7}) 31.102135546s ago: executing program 2 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000400)=""/160}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000400)=""/160}, 0x20) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r2, 0x0, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) read$eventfd(r6, &(0x7f0000000280), 0x8) (async) read$eventfd(r6, &(0x7f0000000280), 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4010) 25.669985567s ago: executing program 2 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000400)=""/160}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000400)=""/160}, 0x20) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r2, 0x0, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) read$eventfd(r6, &(0x7f0000000280), 0x8) (async) read$eventfd(r6, &(0x7f0000000280), 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4010) 19.170335103s ago: executing program 2 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000400)=""/160}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000400)=""/160}, 0x20) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r2, 0x0, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) read$eventfd(r6, &(0x7f0000000280), 0x8) (async) read$eventfd(r6, &(0x7f0000000280), 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4010) 12.669963419s ago: executing program 2 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000400)=""/160}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000400)=""/160}, 0x20) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r2, 0x0, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) read$eventfd(r6, &(0x7f0000000280), 0x8) (async) read$eventfd(r6, &(0x7f0000000280), 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4010) 6.0505823s ago: executing program 2 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000400)=""/160}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000400)=""/160}, 0x20) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r2, 0x0, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) read$eventfd(r6, &(0x7f0000000280), 0x8) (async) read$eventfd(r6, &(0x7f0000000280), 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4010) 1.840432222s ago: executing program 0 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200200, 0x100) unlink(&(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socket(0x400000000010, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x2fe}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x2fe}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x10, r2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r4, {0x1656}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0xc, &(0x7f0000000900)=@raw=[@alu={0x4, 0x0, 0xb, 0x5, 0x0, 0xfffffffffffffff0, 0x10}, @exit, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0x50, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa8829799}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000640)='GPL\x00', 0x3, 0xa6, &(0x7f0000000980)=""/166, 0x41100, 0x0, '\x00', r7, 0x0, r9, 0x8, &(0x7f0000000a80)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x8857, r2, 0x0, &(0x7f0000000ac0), 0x0, 0x10, 0x4, @void, @value}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x4, 0x0) 1.211606005s ago: executing program 4 (id=798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$pfkey(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 891.392439ms ago: executing program 0 (id=802): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffff2}}, '.\x00'}) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffff2}}, '.\x00'}) (async) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) 701.784243ms ago: executing program 0 (id=803): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60000000020605000a000000000000000000000005000400000000000900020073797a320000020073797a3000000000050005000000000005000500010000001c00078008000940000000090600054000000000080008400000001000000000"], 0x60}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000000906b6b8b567227c81314923c02e25ffd4de49ed8ce469773d9b2c37d225c235957d17eb4a593bf442d1a8ca03fb7a1000000000000000000", @ANYRES16=r3, @ANYBLOB="01052cbd7000fcdbdf255300000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10082dbd7000fbdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000a00ffffffff00000500d200000000000a000600ffffffffffff00000500d200020000000500d2000500000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0xffffffffffffffc5, &(0x7f0000000100)={&(0x7f0000000540)=@gettaction={0x20, 0x5a, 0x1, 0x70bd2c, 0x1, {}, [@action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x80000000}}, {0x0, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x2}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x8}}, {0x0, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x20000cc0) r7 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000", @ANYBLOB="ebffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="61636c2bfe3e94bbe26f9502c5045fd9afe3daf15bb66f508b929ed9842de356297b874940f02bcb01040000d0d482290ba83bde1477a14a4c981d6226c639824f94f86e4d6db2046fcd0d3178c26d8926df6997dd976fc5e7ee4902b0b29002148af7c8d60d4ef16664ae6b23312b701bc78dcde4614a1ed42ec093213a6d4eeae2da5328ad7449ce0d95515eaf4ac180fb5deaab999add3c5ac7e336fdaf6b6608282c89f8fd13a0ff253864cefaae823b1fc0f9797aa6aefbae6540025ae3f2b896c5f99cfa2f16eb69b25d"]) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 436.90981ms ago: executing program 0 (id=809): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x14) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r2, r0, 0x0, 0x8217) 436.58499ms ago: executing program 0 (id=810): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r2, @ANYBLOB="ea0000000a000100010100000000000008000f0001"], 0x30}}, 0x4) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x9, 0x2, 0x7, @lba=0x7, @lba=0xdf0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000810}, 0x4004804) 311.884566ms ago: executing program 0 (id=811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b", 0x72, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r3) socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) fallocate(r7, 0x10, 0x20000007, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b"], 0x0) r8 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fff, 0x0, 0x0, 0x40, 0x2, '\x00', 0x0, 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 309.440996ms ago: executing program 4 (id=813): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300030c000000000700000000000004000900a0000000e925051abca75b82aed73edfd91c88104cf1c597b853c1600c4b6b9d00000000030006000000000002000000e0000002000000000000000002000100000000000000000dfbffffff010016004e210000"], 0x60}, 0x1, 0x7}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000780)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x80, 0x0, @empty, 0x1}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffd}}}, 0x118) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) timer_create(0x7, &(0x7f0000000040)={0x0, 0xa, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000440)=0x1, 0x4) timer_settime(r3, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f00000002c0)={0x1c000, 0x0, 0x300f, 0x177, 0x7, 0x4, 0x8}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fddbdf250900020073797a30000000000800410008006500140033006c6f1100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4400) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="195ab4cbfea5d84ff5b932dc29602b582257921d9e52dd6edc2445b23f4aa402863ed64019bc0e001bb4436f3907228c41be6a11feec97856e42237c76d0fc4a0293fd87d81845f1ec6c37bb85d2ea76263e6243d749abb90734e14053dcf7627ce0d81d1cbb4e0dfc9c8f9cc2cd1d8308c67b397c226dbce73cc32372e8e4294097507a10ff"], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r7, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r10 = socket(0x10, 0x2, 0x0) sendto$inet6(r10, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) accept4(r11, 0x0, 0x0, 0x0) 241.558821ms ago: executing program 4 (id=815): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)={0x34, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfb}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x44) 241.388133ms ago: executing program 4 (id=816): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8, 0x4b2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000000)={"fe080800", 0x5, 0x6, 0x2, 0x0, 0x200, "33777877c734c4f928875ab8db00", '\x00', "020100", '\x00\x00\t\x00', ["a51c00a60100", "00000000fa66ee4000000200", "2c09000000ffd8ffff0000ff", "000500"]}) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x5, @val=@target_btf_id=0xffffffffffffffff}, 0x14) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x200443, 0x0) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000140)) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000180)) 239.542619ms ago: executing program 3 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000600)) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x6}, 'port0\x00', 0x94, 0x400, 0x1, 0x1, 0x1, 0x326f8ba4, 0x10000, 0x0, 0x2, 0x7f}) 169.060198ms ago: executing program 4 (id=818): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x5ca, 0x500) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f00000001c0), 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x18, @private0, 0xff}, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x1, 0x100, 0x0, [], [0x0, 0x9], [0x80001]}) close(0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004e40)="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", 0x484}, {&(0x7f0000000200)="8fd26291dc7d67b112d3e8b82fa2c2c44486653b44834d66239fa66393c45a6031f6c1bd07000000000000000903e1c5863cc58490e29936da789cff4b90234d9c63654eaf2fac23d471ffd86e91f5754393f475a5a558936be5c3791a864c78e4a0aad7e6f039a697ab36de627cd7a4cae2743f5cced83b6f2909c5e96c05c85c13169658ad5799404148be9cade82f750069f711a9b715a8277295ed66f89453901389962590d5551afdf10aea56939b89dff5569c1f34c3c03850ec", 0xbd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a40)="3912c1d03d9f66103940872256d8995b00c720af8cfa51b2b3b1448411fe107e64af467c85a200ebafdbee2c35b8ad1677fe7bb27ca22acbe83c449484972354b3baa1809633e690474a9154f95bd6874f20a0b290c590d44a9f5cd01414544ad719b82a550f2a7215e33e2dfdc1ce61a75637323b8828c5e5ef1f77b3d93114d46ceddb9d976eea7e20bb95e24e1e8b9974397bb8d73856a38618eac0ab333267fc833503b4df7838f5e522192252f4fd72ae45d21b55414a82ec84ff620a1ee2fe4691573a8afc79adaac5f0618cb457b14013f9e048cdec329a9e3343140213a41330b43e3290ef836c8839b303f0639a7561361247db2646977014051dcf3dc1246225f9aae3ca02943571bb39ecfdfa5b9ebc30a0476103c6133c7da6313848373c719a1f43ba5a765b8aa97caf7717fa063166951aa4e72d5616e6b42d6866fb308970430b2ff44c25b7dde2494389d1717c83f83ac7a632da0472bd6b0295b9f1fd1fc43099b1062bef744785158264f636cbf13926e7fcde7ebc1560a20961df3286df51b246ee7fe9474a8d51498bd90230bc89ea8dccb85035edd01aa93ed2f82297c3c3703990cb5201c7b92a04ea7abf9a36a488369161a9bfa42664d84860974fddbabed7eb509350917a3bbd427fe226bd1dd34275dfd3882c0a7d711641babb2e36d9637c0b33a41a3578861d75e7e93c22ee94e9594258dc186ec2d749cad6e03b767555610c200efb5f104f91be7fb2513c97f3f279da2baedf7f91ed97ae33edef2a05eeaf08909baef70a86b348dded9df075b1ca5855866843aff902b6678075cb4a3d988ffd8ed61885400d1bcf6dc38c6be9b6428d4eba30711556510eb41b5c04590f11e393317a4fc988b39ecdbe322344c5ec4ed178e1dd35182a00f3ac345bfeea9936b6a015151332962bd28c5e1dbcdd825d51c78ef6db73170d9cfd47f2ca210ce8c103d37be1c61427bd3cf1bb5bcf9888f6e1631f404ea51f9cd8e0725459f9a531af19e2b533532f0b66fb5e9614d0895d35ccda358ac482a824fe67165bdaedcda5ddd86924c4fe5f22a043f92aed7a105fb54ec323273e660c17b8ae89d1546022320711ae0cab37564fc6b394f39e0b216227fa74b76c2a020d42f167891cbaf960fc0288547f2d31dceff3787135659a65878e5df65ce0004104a665098be576ebaf3733b6ba57e40f40ac74aad7d8b41db0f55513389faa84b1ce0fafed7018bcc5a687118bfab115b7a3163fb22af534406206065acf06066a5fb65f0b928cd25838c0c1a7b06bc42e622f502e515b87426b2a184b593bf35a4d454dc56881bbda1b9350f956e086196447a5052288aa0556e638d292bfd1abad58ef5db98f92694b30c3eda5b25a44688b24eadf579616c034ef688fad705c3dc99aafda0f7bbb591fd20e0ff96e8941188b9676b833aa91ba5ab1cf7acbdf16f14c843dd3cfeedf8e7628051f361ba328496c8a05aa68997257cb505dba270e132c437bc6df39134b0807fea53ecb84714ab0d9d8cda271e15bddac37ae4e0534322d649b74c90499919b771679c7211b4df2c80864809991750f966f52d217f63e80b7142b9205576133469a0a950060cd2fa0c25554b89900ebb6a991954990adeee517e55ff3abe4f3f7c07cb735b80be674d53ccc5bef27421c7bb602c7f22dde056ae0c85086f9850fe6a7dd108fd29c7f99f3d1316da10415b2e4e029762a39369cd8738e0a840690c5e2167099a6c1d59a6cc81b98d95fbb0e614aef4209f40a3e3658827630b699da0d592e01c2db8af46daa48575fc2f4eeca2c3abf26ec776906572e712c6f0c57ec39ab4e004d994a341570a6e117edc13626aeaf794266a0f3103c84ae1300e6928b749cce7a1b", 0x541}], 0x1}}], 0x2, 0xc010) shutdown(r7, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r12, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000090400000000fbdbdf2500000000", @ANYRES32=r8, @ANYBLOB="020500080001006272696467655f736c617665000000000c00058005000c0000000000000000000000000000f6e29e4a2ee28d40925fe975646a5a71628052429da571a1b37c5bc0459ca561cec1fcb587fe0c9e4c944a4d3901bffc7c0935e922"], 0x44}, 0x1, 0x0, 0x0, 0xcfdd3cd448ebdf74}, 0x0) 168.658552ms ago: executing program 3 (id=819): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="01808200000000000000000008f344000024000000000073907800000002e000000100000000fe9a90780200000000000000"], 0x0) (async, rerun: 32) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x0, {}, 0x1}, 0x18) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', '\x00'}) (async) r4 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000200)=0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x440, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x3}, 0x2c, {[{@common=@privport}, {@rq={'rq', 0x3d, 0xffffffffffffffff}}, {@timeout={'timeout', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0xfe8}}], [{@subj_role={'subj_role', 0x3d, '\\-['}}, {@context={'context', 0x3d, 'root'}}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'upperdir'}}, {@subj_type={'subj_type', 0x3d, 'S*!]\\-&[)[\'}#\xbf\xfa.'}}, {@fowner_gt={'fowner>', r6}}, {@pcr={'pcr', 0x3d, 0x5}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x30, 0x64, 0x37, 0x32, 0x34, 0x36, 0x66], 0x2d, [0x62, 0x64, 0x30, 0x35], 0x2d, [0x32, 0x64, 0x62, 0x34], 0x2d, [0x62, 0x34, 0x50, 0x64], 0x2d, [0x66, 0x34, 0x32, 0x36, 0x65, 0x64, 0x31, 0x63]}}}]}}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) mkdirat(r1, &(0x7f0000000440)='./file1\x00', 0x73) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285628, &(0x7f0000000280)={0x3, @win={{0xd, 0x0, 0x7f}, 0x0, 0x0, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x40}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xbffd}, 0x6) write(r0, &(0x7f0000000100)="07000000010000", 0x7) 82.043203ms ago: executing program 3 (id=820): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000482, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/281, @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESDEC=0x0]) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x1}}, 0x30) 81.391131ms ago: executing program 3 (id=821): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={0x44, r2, 0x1, 0x70bd2a, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xffffffffffffff1e}}]}, 0x44}}, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40884) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0xfffffffffffffe1f, 0x0}, 0x1}], 0x3fffffffffffd3c, 0x40018003, 0x0) 80.085667ms ago: executing program 4 (id=822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="260f01cfbaf80c66b835b9ca8166efbafc0cec66640f32baf80c66b830e7cd8866efbafc0c66b88f9b000066efbaf80c66b8a8a86e8866efbafc0c66b80100000066efbaf80c66b8983d448366efbafc0cb000eeea012b5d00660ff96700c4e2bddfdd0f01c2", 0x66}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xa0, 0x34, 0x9, 0x70bd2c, 0x0, {0x3}, [@generic="de3d566f36da5f1ed6daf01ff10b03fbabe4e326fa12077ecc2394b60fd209bfefba66b47e79bdb7f873c19fce235a83a28505927aa4e3b971982454280d6a63bffed88dafa7fa1ddc5122b6ffa25311b5a017cd832262bcce690dfb6a6235b03237e076d65abc38d10d84e5f0473c8cd5285d5f36330c95e47b9a54d7b60917dae9d25628d3924e34f00d"]}, 0xa0}, 0x1, 0x0, 0x0, 0x10004004}, 0x4000010) 1.431229ms ago: executing program 3 (id=823): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r2) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x1) (async) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x140) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) close(r2) (async) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) (async) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r1, 0x0) (async) 0s ago: executing program 3 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x8, 0x2, &(0x7f0000000080)={r3, r4+10000000}, &(0x7f00000000c0)=0x2, 0x1) r5 = io_uring_setup(0x192, &(0x7f0000000000)={0x0, 0x4178, 0x400, 0x8000006, 0x1a8}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xaece, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000001c0)={0xd5, 0x0, 0x4}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x7d, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r12, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r11, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) sendmsg$NL802154_CMD_SET_TX_POWER(r10, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r11, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x10090) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): .99': attribute type 7 has an invalid length. [ 54.959652][ T6354] netlink: 'syz.3.99': attribute type 8 has an invalid length. [ 54.961806][ T6270] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.962056][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 54.970371][ T6356] capability: warning: `syz.2.100' uses deprecated v2 capabilities in a way that may be insecure [ 54.972808][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.976668][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.988091][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.990432][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.054691][ T6368] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.062409][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.103'. [ 55.066318][ T6368] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 55.078153][ T6370] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.102266][ T6010] IPVS: stop unused estimator thread 0... [ 55.124228][ T6380] netlink: 'syz.3.105': attribute type 5 has an invalid length. [ 55.135023][ T6270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.268571][ T6270] veth0_vlan: entered promiscuous mode [ 55.279573][ T6270] veth1_vlan: entered promiscuous mode [ 55.281645][ T6100] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.305067][ T6405] fuse: Bad value for 'fd' [ 55.314694][ T6270] veth0_macvtap: entered promiscuous mode [ 55.323939][ T6270] veth1_macvtap: entered promiscuous mode [ 55.330394][ T6407] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 55.334979][ T6407] bridge0: port 3(syz_tun) entered disabled state [ 55.338326][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.341545][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.349718][ T6411] loop2: detected capacity change from 0 to 7 [ 55.354696][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.354962][ T6272] Dev loop2: unable to read RDB block 7 [ 55.359294][ T6272] loop2: AHDI p1 p2 p3 [ 55.360709][ T6272] loop2: partition table partially beyond EOD, truncated [ 55.362815][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.364594][ T6272] loop2: p1 start 1601398130 is beyond EOD, truncated [ 55.368203][ T6272] loop2: p2 start 1702059890 is beyond EOD, truncated [ 55.374749][ T6270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.376750][ T6411] Dev loop2: unable to read RDB block 7 [ 55.378414][ T6270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.379464][ T6411] loop2: AHDI p1 p2 p3 [ 55.382386][ T6270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.383805][ T6411] loop2: partition table partially beyond EOD, [ 55.387183][ T6270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.387806][ T6411] truncated [ 55.393460][ T6411] loop2: p1 start 1601398130 is beyond EOD, truncated [ 55.396233][ T6411] loop2: p2 start 1702059890 is beyond EOD, truncated [ 55.427637][ T6100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.440116][ T6100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.444730][ T6100] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.450435][ T6100] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.453408][ T6100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.459954][ T6100] usb 7-1: config 0 descriptor?? [ 55.482894][ T6010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.487250][ T6010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.502550][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.506183][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.765588][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.835637][ T835] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 55.867418][ T6100] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 55.870948][ T6100] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 55.877684][ T6100] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 55.915776][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 55.917778][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 55.917787][ T40] audit: type=1400 audit(1747681917.297:281): avc: denied { ioctl } for pid=6439 comm="syz.3.115" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.919985][ T24] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 55.930723][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 55.934191][ T24] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 55.941256][ T24] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 55.945960][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 55.951876][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 55.954854][ T24] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 55.959273][ T24] usb 5-1: Product: syz [ 55.960705][ T24] usb 5-1: Manufacturer: syz [ 55.962235][ T24] usb 5-1: SerialNumber: syz [ 55.965052][ T24] usb 5-1: config 0 descriptor?? [ 55.965350][ T40] audit: type=1400 audit(1747681917.347:282): avc: denied { write } for pid=6463 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.970212][ T24] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 55.978064][ T24] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 56.005613][ T835] usb 8-1: Using ep0 maxpacket: 16 [ 56.010006][ T40] audit: type=1400 audit(1747681917.387:283): avc: denied { nlmsg_read } for pid=6466 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.012276][ T835] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.022800][ T835] usb 8-1: config 0 has no interfaces? [ 56.026608][ T835] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 56.030266][ T835] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 56.033485][ T835] usb 8-1: Product: syz [ 56.035242][ T835] usb 8-1: SerialNumber: syz [ 56.040604][ T835] usb 8-1: config 0 descriptor?? [ 56.042735][ T40] audit: type=1400 audit(1747681917.417:284): avc: denied { bind } for pid=6469 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.049334][ T40] audit: type=1400 audit(1747681917.417:285): avc: denied { ioctl } for pid=6469 comm="syz.4.119" path="socket:[13467]" dev="sockfs" ino=13467 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.069695][ T40] audit: type=1400 audit(1747681917.447:286): avc: denied { getopt } for pid=6472 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.077484][ T40] audit: type=1400 audit(1747681917.447:287): avc: denied { read } for pid=6472 comm="syz.4.120" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.084955][ T40] audit: type=1400 audit(1747681917.447:288): avc: denied { open } for pid=6472 comm="syz.4.120" path="/dev/sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.120678][ T6481] netlink: 52 bytes leftover after parsing attributes in process `syz.4.121'. [ 56.222053][ T6358] usb 5-1: USB disconnect, device number 3 [ 56.231292][ T6358] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 56.231635][ T40] audit: type=1400 audit(1747681917.607:289): avc: denied { write } for pid=6489 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.239968][ T40] audit: type=1400 audit(1747681917.607:290): avc: denied { ioctl } for pid=6489 comm="syz.4.122" path="socket:[10718]" dev="sockfs" ino=10718 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.248930][ T5802] usb 8-1: USB disconnect, device number 4 [ 56.265865][ T6495] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 56.420842][ T6501] ======================================================= [ 56.420842][ T6501] WARNING: The mand mount option has been deprecated and [ 56.420842][ T6501] and is ignored by this kernel. Remove the mand [ 56.420842][ T6501] option from the mount to silence this warning. [ 56.420842][ T6501] ======================================================= [ 56.439964][ T6501] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 56.817982][ T5931] Bluetooth: hci1: command tx timeout [ 57.143896][ T6521] ptrace attach of "/syz-executor exec"[5928] was attempted by ""[6521] [ 57.468823][ T6539] process 'syz.3.134' launched './file2' with NULL argv: empty string added [ 58.050530][ T6240] usb 7-1: USB disconnect, device number 3 [ 58.064538][ T6552] netlink: 248 bytes leftover after parsing attributes in process `syz.4.137'. [ 58.127412][ T6555] Invalid option length (497) for dns_resolver key [ 58.176193][ T6560] netlink: 'syz.4.139': attribute type 1 has an invalid length. [ 58.179355][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 58.595647][ T6240] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 58.662091][ T6596] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 58.692112][ T6599] trusted_key: syz.0.150 sent an empty control message without MSG_MORE. [ 58.765690][ T6240] usb 9-1: Using ep0 maxpacket: 16 [ 58.771506][ T6240] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.775066][ T6240] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.779544][ T6240] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 58.782860][ T6240] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 58.787793][ T6240] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.791021][ T6240] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.793602][ T6240] usb 9-1: Product: Ч [ 58.794935][ T6240] usb 9-1: Manufacturer: 䳊ä긛ᇕַ॑ã¾ê¤—ᤚ癩ë—डỄ鼭î ã¼³ã¢‘è½à¶·âˆ¿é¥’﷎ⷷ૶堌 [ 58.799282][ T6240] usb 9-1: SerialNumber: †[ 58.835730][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 58.896913][ T5931] Bluetooth: hci1: command tx timeout [ 58.969659][ T6618] sp0: Synchronizing with TNC [ 58.979271][ T6618] netlink: 84 bytes leftover after parsing attributes in process `syz.0.157'. [ 58.994422][ T6618] netlink: 'syz.0.157': attribute type 8 has an invalid length. [ 58.997208][ T6618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.157'. [ 59.015437][ T6618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6618 comm=syz.0.157 [ 59.022192][ T34] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.026445][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 59.030073][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.033676][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.047239][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.050368][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.065712][ T34] usb 8-1: config 0 descriptor?? [ 59.068291][ T6594] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 59.072473][ T6623] Invalid source name [ 59.074298][ T6623] UBIFS error (pid: 6623): cannot open "./file0", error -22 [ 59.098163][ T6240] cdc_ncm 9-1:1.0: bind() failure [ 59.106387][ T6240] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 59.108604][ T6240] cdc_ncm 9-1:1.1: bind() failure [ 59.120440][ T6240] usb 9-1: USB disconnect, device number 2 [ 59.208274][ C0] vcan0: j1939_tp_rxtimer: 0xffff888108e7ac00: rx timeout, send abort [ 59.474563][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.477127][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.479540][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.481871][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.484242][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.486905][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.489405][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.492167][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.494681][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.497391][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.499969][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.502365][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.504794][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.507267][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.509720][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.512883][ T34] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 59.519033][ T34] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 59.711742][ C0] vcan0: j1939_tp_rxtimer: 0xffff888108e7ac00: abort rx timeout. Force session deactivation [ 59.741283][ T24] usb 8-1: USB disconnect, device number 5 [ 59.972152][ T6643] ntfs3(sr0): Primary boot signature is not NTFS. [ 59.977057][ T6643] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 60.021963][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.162'. [ 60.037265][ T24] IPVS: starting estimator thread 0... [ 60.092549][ T6640] serio: Serial port ptm0 [ 60.125685][ T6646] IPVS: using max 27 ests per chain, 64800 per kthread [ 60.573737][ T6644] bond1: entered promiscuous mode [ 60.575910][ T6644] bond1: entered allmulticast mode [ 60.578009][ T6644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.882418][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 60.889740][ T6661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.167'. [ 60.972895][ T6679] netlink: 'syz.0.172': attribute type 1 has an invalid length. [ 60.979795][ T5931] Bluetooth: hci1: command tx timeout [ 60.986030][ T6679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.992309][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 61.003748][ T6679] bond1: (slave ip6gretap1): making interface the new active one [ 61.007451][ T6679] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 61.037918][ T40] kauditd_printk_skb: 67 callbacks suppressed [ 61.037928][ T40] audit: type=1400 audit(1747681922.417:358): avc: denied { write } for pid=6682 comm="syz.0.173" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 61.080985][ T6683] netlink: 'syz.0.173': attribute type 2 has an invalid length. [ 61.111893][ T40] audit: type=1400 audit(1747681922.487:359): avc: denied { set_context_mgr } for pid=6685 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 61.116059][ T6686] binder: 6685:6686 ioctl c0306201 200000000240 returned -14 [ 61.118275][ T40] audit: type=1400 audit(1747681922.487:360): avc: denied { map } for pid=6685 comm="syz.0.174" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.128427][ T40] audit: type=1400 audit(1747681922.487:361): avc: denied { call } for pid=6685 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 61.157996][ T40] audit: type=1400 audit(1747681922.537:362): avc: denied { connect } for pid=6690 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.167190][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 61.170395][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 61.243911][ T6688] netlink: 700 bytes leftover after parsing attributes in process `syz.3.175'. [ 61.243948][ T6689] netlink: 700 bytes leftover after parsing attributes in process `syz.3.175'. [ 61.251522][ T6696] overlayfs: disabling nfs_export due to verity=require [ 61.258546][ T6696] overlayfs: invalid origin (0000) [ 61.448291][ T40] audit: type=1400 audit(1747681922.827:363): avc: denied { read } for pid=6703 comm="syz.3.178" lport=58370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.516764][ T40] audit: type=1400 audit(1747681922.897:364): avc: denied { read } for pid=6706 comm="syz.4.179" dev="sockfs" ino=14551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.524499][ T40] audit: type=1400 audit(1747681922.897:365): avc: denied { name_bind 0x1000000 } for pid=6706 comm="syz.4.179" path="socket:[14551]" dev="sockfs" ino=14551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.532862][ T40] audit: type=1400 audit(1747681922.897:366): avc: denied { watch watch_reads } for pid=6706 comm="syz.4.179" path="/21" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.570404][ T6707] netlink: 36 bytes leftover after parsing attributes in process `syz.4.179'. [ 61.573716][ T6707] netlink: 'syz.4.179': attribute type 4 has an invalid length. [ 61.578349][ T40] audit: type=1400 audit(1747681922.967:367): avc: denied { listen } for pid=6706 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 61.685807][ T5996] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 61.825435][ T6716] NILFS (nbd2): device size too small [ 61.857090][ T5996] usb 8-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 61.860893][ T5996] usb 8-1: config 1 interface 0 has no altsetting 0 [ 61.865235][ T5996] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 61.868470][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.871761][ T5996] usb 8-1: Product: syz [ 61.873160][ T5996] usb 8-1: Manufacturer: syz [ 61.874754][ T5996] usb 8-1: SerialNumber: syz [ 61.879881][ T6704] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.959470][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 62.007590][ T6729] netlink: 'syz.2.183': attribute type 16 has an invalid length. [ 62.010246][ T6729] netlink: 'syz.2.183': attribute type 17 has an invalid length. [ 62.019972][ T6729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.059698][ T6733] deleting an unspecified loop device is not supported. [ 62.156079][ T5996] usb 8-1: USB disconnect, device number 6 [ 62.386121][ T6756] netlink: 'syz.4.190': attribute type 29 has an invalid length. [ 62.411274][ T6756] netlink: 'syz.4.190': attribute type 29 has an invalid length. [ 62.635603][ T63] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 62.765683][ T63] usb 9-1: device descriptor read/64, error -71 [ 63.015658][ T63] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 63.166763][ T63] usb 9-1: device descriptor read/64, error -71 [ 63.289418][ T63] usb usb9-port1: attempt power cycle [ 63.336784][ T57] cfg80211: failed to load regulatory.db [ 63.408183][ T6805] SELinux: Context Ü is not valid (left unmapped). [ 63.417700][ T6805] binder: 6803:6805 ioctl c0306201 200000000000 returned -22 [ 63.580290][ T6822] openvswitch: netlink: IPv6 tunnel dst address is zero [ 63.629853][ T6825] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 63.645631][ T63] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 63.666050][ T63] usb 9-1: device descriptor read/8, error -71 [ 63.696576][ T6827] tmpfs: Group quota block hardlimit too large. [ 63.828931][ T6835] syz.2.210 (6835) used greatest stack depth: 19736 bytes left [ 63.905695][ T63] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 63.928046][ T63] usb 9-1: device descriptor read/8, error -71 [ 64.039594][ T63] usb usb9-port1: unable to enumerate USB device [ 64.257138][ T6875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=6875 comm=syz.2.224 [ 64.373610][ T6901] IPv6: Can't replace route, no match found [ 64.464356][ T6908] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 64.517520][ T6915] netlink: 'syz.3.236': attribute type 1 has an invalid length. [ 64.539554][ T6915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.575686][ T6358] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 64.726048][ T6358] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 64.729383][ T6358] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.732377][ T6358] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.736594][ T6358] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.739538][ T6358] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.742836][ T6358] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.746947][ T6358] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.749912][ T6358] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.752934][ T6358] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.757170][ T6358] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.760243][ T6358] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.763512][ T6358] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.768513][ T6358] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.771628][ T6358] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.774584][ T6358] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.778451][ T6358] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.782109][ T6358] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.785138][ T6358] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.789122][ T6358] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.792167][ T6358] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.795061][ T6358] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.798871][ T6358] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.802306][ T6358] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.805339][ T6358] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.809067][ T6358] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.812773][ T6358] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 64.816094][ T6358] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 64.818861][ T6358] usb 7-1: Product: syz [ 64.820426][ T6358] usb 7-1: Manufacturer: syz [ 64.822627][ T6358] usb 7-1: SerialNumber: syz [ 64.832282][ T6358] usb 7-1: config 0 descriptor?? [ 64.843123][ T6358] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 65.086734][ T835] usb 7-1: USB disconnect, device number 4 [ 65.096446][ T835] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 65.125663][ T63] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 65.258887][ T6941] ceph: Path missing in source [ 65.277303][ T63] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 65.281177][ T63] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 65.284144][ T63] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 65.288126][ T6943] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 65.289597][ T63] usb 8-1: string descriptor 0 read error: -22 [ 65.292769][ T63] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.295433][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.300543][ T6928] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 65.300730][ T6943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.309611][ T6943] __nla_validate_parse: 9 callbacks suppressed [ 65.309621][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 65.379141][ T6948] nbd: must specify at least one socket [ 65.384884][ T6948] block nbd0: not configured, cannot reconfigure [ 65.455342][ T6954] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 65.457944][ T6954] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.465321][ T6954] vhci_hcd vhci_hcd.0: Device attached [ 65.472892][ T6954] netlink: 6 bytes leftover after parsing attributes in process `syz.0.251'. [ 65.477235][ T6955] vhci_hcd: connection closed [ 65.479396][ T1141] vhci_hcd: stop threads [ 65.483733][ T1141] vhci_hcd: release socket [ 65.486218][ T1141] vhci_hcd: disconnect device [ 65.489999][ T6958] netlink: 152 bytes leftover after parsing attributes in process `syz.4.252'. [ 65.598905][ T6965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.604706][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 65.613416][ T6965] bond1: (slave ip6gretap1): making interface the new active one [ 65.618320][ T6965] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 65.652568][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.697156][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.959360][ T6997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.965279][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 66.059466][ T7008] geneve2: entered promiscuous mode [ 66.061233][ T7008] geneve2: entered allmulticast mode [ 66.586220][ T6272] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 66.737780][ T6272] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 67.887753][ T63] cdc_ncm 8-1:1.0: bind() failure [ 67.893574][ T63] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 67.898019][ T63] cdc_ncm 8-1:1.1: bind() failure [ 67.901163][ T63] usb 8-1: USB disconnect, device number 7 [ 71.219299][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.222151][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 80.952033][ T7081] validate_nla: 4 callbacks suppressed [ 80.952049][ T7081] netlink: 'syz.0.275': attribute type 1 has an invalid length. [ 80.973764][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 80.973779][ T40] audit: type=1400 audit(1747681942.347:392): avc: denied { write } for pid=7077 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.974533][ T7081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.978699][ T7079] overlayfs: overlapping lowerdir path [ 80.979790][ T40] audit: type=1400 audit(1747681942.347:393): avc: denied { ioctl } for pid=7077 comm="syz.2.273" path="socket:[14158]" dev="sockfs" ino=14158 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.987355][ T7081] netlink: 56 bytes leftover after parsing attributes in process `syz.0.275'. [ 80.998400][ T7081] netlink: 5 bytes leftover after parsing attributes in process `syz.0.275'. [ 81.027438][ T40] audit: type=1400 audit(1747681942.407:394): avc: denied { mounton } for pid=7080 comm="syz.3.274" path="/76/file0" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 81.034997][ T40] audit: type=1400 audit(1747681942.407:395): avc: denied { create } for pid=7086 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.035088][ T7087] Cannot find add_set index 0 as target [ 81.041293][ T40] audit: type=1400 audit(1747681942.407:396): avc: denied { ioctl } for pid=7086 comm="syz.0.276" path="socket:[15446]" dev="sockfs" ino=15446 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.081276][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 81.116549][ T40] audit: type=1400 audit(1747681942.487:397): avc: denied { create } for pid=7091 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.118214][ T7092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.122889][ T40] audit: type=1400 audit(1747681942.497:398): avc: denied { setopt } for pid=7091 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.145603][ T65] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 81.149476][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.280'. [ 81.152730][ T7096] netlink: 'syz.0.280': attribute type 7 has an invalid length. [ 81.155396][ T7096] netlink: 'syz.0.280': attribute type 8 has an invalid length. [ 81.158727][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 81.168027][ T7096] ip6gretap0: entered promiscuous mode [ 81.170552][ T7096] syz_tun: entered promiscuous mode [ 81.172734][ T7096] gretap0: entered promiscuous mode [ 81.285688][ T65] usb 9-1: device descriptor read/64, error -71 [ 81.374427][ T40] audit: type=1400 audit(1747681942.747:399): avc: denied { read } for pid=7112 comm="syz.2.285" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.384126][ T40] audit: type=1400 audit(1747681942.757:400): avc: denied { watch watch_reads } for pid=7112 comm="syz.2.285" path="/proc/230" dev="proc" ino=13028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 81.393577][ T40] audit: type=1400 audit(1747681942.757:401): avc: denied { open } for pid=7112 comm="syz.2.285" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.464597][ T7121] geneve2: entered promiscuous mode [ 81.475571][ T7121] geneve2: entered allmulticast mode [ 81.535742][ T65] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 81.676020][ T65] usb 9-1: device descriptor read/64, error -71 [ 81.722940][ T7138] netlink: zone id is out of range [ 81.724719][ T7138] netlink: zone id is out of range [ 81.727687][ T7138] netlink: zone id is out of range [ 81.729906][ T7138] netlink: zone id is out of range [ 81.795934][ T65] usb usb9-port1: attempt power cycle [ 81.888073][ T7145] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 81.888526][ T7147] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 82.002730][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.298'. [ 82.005879][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.298'. [ 82.145752][ T65] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 82.166033][ T65] usb 9-1: device descriptor read/8, error -71 [ 82.246123][ T6358] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 82.397091][ T6358] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.400888][ T6358] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.404135][ T6358] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.406123][ T65] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 82.408571][ T6358] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.414009][ T6358] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.426050][ T6358] usb 8-1: config 0 descriptor?? [ 82.426415][ T65] usb 9-1: device descriptor read/8, error -71 [ 82.448383][ T7154] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 82.467430][ T7154] 8021q: adding VLAN 0 to HW filter on device bond4 [ 82.473742][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 82.509459][ T7157] batadv_slave_1: entered promiscuous mode [ 82.536484][ T65] usb usb9-port1: unable to enumerate USB device [ 82.587609][ T7156] batadv_slave_1: left promiscuous mode [ 82.832820][ T6358] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 82.837275][ T6358] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 82.847885][ T6358] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 83.259864][ T65] usb 8-1: USB disconnect, device number 8 [ 83.484028][ T7177] tmpfs: Unknown parameter 'ÿÿ0x00000000000000040x0000000000000005' [ 83.512592][ T7177] tipc: Started in network mode [ 83.514795][ T7177] tipc: Node identity , cluster identity 4711 [ 83.518126][ T7177] tipc: Failed to obtain node identity [ 83.520478][ T7177] tipc: Enabling of bearer rejected, failed to enable media [ 83.618861][ T7179] netlink: 'syz.0.306': attribute type 1 has an invalid length. [ 83.682474][ T7186] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 83.707084][ T7186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.713241][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 83.722036][ T7179] 8021q: adding VLAN 0 to HW filter on device bond6 [ 83.727389][ T7179] bond5: (slave bond6): making interface the new active one [ 83.730876][ T7179] bond5: (slave bond6): Enslaving as an active interface with an up link [ 83.810682][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 83.940589][ T7215] bridge_slave_1: left allmulticast mode [ 83.943203][ T7215] bridge_slave_1: left promiscuous mode [ 83.947838][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.966674][ T7215] bridge_slave_0: left allmulticast mode [ 83.969764][ T7215] bridge_slave_0: left promiscuous mode [ 83.972317][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.987989][ T7221] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 83.990493][ T7221] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.997115][ T7221] vhci_hcd vhci_hcd.0: Device attached [ 84.002565][ T7222] vhci_hcd: connection closed [ 84.003059][ T6010] vhci_hcd: stop threads [ 84.007237][ T6010] vhci_hcd: release socket [ 84.008763][ T6010] vhci_hcd: disconnect device [ 84.065396][ T7226] block nbd0: shutting down sockets [ 84.140105][ T7237] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 84.152112][ T7237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 84.187843][ T7242] overlayfs: workdir and upperdir must be separate subtrees [ 84.356104][ T7262] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.436822][ T7275] netlink: 'syz.3.329': attribute type 1 has an invalid length. [ 84.466048][ T6358] e1000 0000:00:06.0 eth0: Reset adapter [ 84.473574][ T7275] 8021q: adding VLAN 0 to HW filter on device bond5 [ 84.585882][ T6358] e1000 0000:00:06.0 eth0: Reset adapter [ 84.685993][ T6358] e1000 0000:00:06.0 eth0: Reset adapter [ 86.817241][ T5802] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 98.121089][ T7345] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 98.137890][ T7345] 8021q: adding VLAN 0 to HW filter on device bond6 [ 98.145408][ T7345] __nla_validate_parse: 5 callbacks suppressed [ 98.145419][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 98.156027][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 98.156037][ T40] audit: type=1400 audit(1747681959.527:428): avc: denied { create } for pid=7349 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.164282][ T40] audit: type=1400 audit(1747681959.527:429): avc: denied { read } for pid=7349 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.203447][ T40] audit: type=1400 audit(1747681959.577:430): avc: denied { write } for pid=7356 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.215940][ T40] audit: type=1400 audit(1747681959.587:431): avc: denied { listen } for pid=7356 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.222748][ T40] audit: type=1400 audit(1747681959.587:432): avc: denied { setopt } for pid=7349 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.229769][ T40] audit: type=1400 audit(1747681959.587:433): avc: denied { write } for pid=7349 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.236549][ T40] audit: type=1400 audit(1747681959.597:434): avc: denied { write } for pid=7356 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 98.302862][ T40] audit: type=1400 audit(1747681959.677:435): avc: denied { associate } for pid=7370 comm="syz.4.345" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.314006][ T7374] nftables ruleset with unbound set [ 98.321456][ T40] audit: type=1400 audit(1747681959.697:436): avc: denied { map } for pid=7370 comm="syz.4.345" path="/41/file0/memory.events" dev="9p" ino=37880157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.328691][ T7374] 9pnet_virtio: no channels available for device syz [ 98.382023][ T7382] netlink: 'syz.3.347': attribute type 10 has an invalid length. [ 98.385383][ T7382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.347'. [ 98.402954][ T7382] dummy0: entered promiscuous mode [ 98.411931][ T7382] bridge0: port 4(dummy0) entered blocking state [ 98.414163][ T7382] bridge0: port 4(dummy0) entered disabled state [ 98.419278][ T7382] dummy0: entered allmulticast mode [ 98.590891][ T7404] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.698228][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 98.813496][ T7420] netlink: 328 bytes leftover after parsing attributes in process `syz.2.355'. [ 98.849009][ T40] audit: type=1400 audit(1747681960.227:437): avc: denied { bind } for pid=7421 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.305387][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.370'. [ 99.339877][ T7465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=7465 comm=syz.4.371 [ 99.432512][ T7468] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 99.537029][ T7468] /dev/sr0: Can't open blockdev [ 99.576428][ T7471] overlay: Unknown parameter 'mask' [ 100.079507][ T7482] netlink: 128 bytes leftover after parsing attributes in process `syz.4.377'. [ 100.144999][ T7485] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 100.147096][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.378'. [ 100.177283][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.219553][ T7496] usb usb8: usbfs: process 7496 (syz.4.382) did not claim interface 0 before use [ 100.304561][ T7505] binder: BINDER_SET_CONTEXT_MGR already set [ 100.308250][ T7505] binder: 7503:7505 ioctl 4018620d 200000000040 returned -16 [ 100.312270][ T7505] binder: 7503:7505 ioctl c0306201 2000000003c0 returned -14 [ 100.317855][ T7508] binder: 7503:7508 ioctl c0306201 2000000001c0 returned -14 [ 100.319519][ T7505] binder: 7503:7505 ioctl c0306201 2000000001c0 returned -14 [ 100.324409][ T7505] binder: 7503:7505 ioctl c0306201 2000000006c0 returned -14 [ 100.381610][ T7519] macsec0: entered promiscuous mode [ 100.383523][ T7519] macsec0: entered allmulticast mode [ 100.385449][ T7519] veth1_macvtap: entered allmulticast mode [ 100.460655][ T7527] capability: warning: `syz.4.392' uses 32-bit capabilities (legacy support in use) [ 100.508805][ T7532] can0: slcan on ttyS3. [ 100.514913][ T5342] udevd[5342]: worker [7351] terminated by signal 33 (Unknown signal 33) [ 100.518030][ T5342] udevd[5342]: worker [7351] failed while handling '/devices/virtual/net/can0' [ 100.552560][ T7536] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 100.576231][ T5931] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 100.577895][ T67] Bluetooth: hci4: command 0xfc11 tx timeout [ 100.593853][ T7397] sp0: Synchronizing with TNC [ 100.607197][ T7532] can0 (unregistered): slcan off ttyS3. [ 100.627268][ T7543] netlink: 'syz.0.397': attribute type 16 has an invalid length. [ 100.629906][ T7543] netlink: 'syz.0.397': attribute type 3 has an invalid length. [ 100.632441][ T7543] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 100.634990][ T7543] netlink: 'syz.0.397': attribute type 2 has an invalid length. [ 100.637987][ T7543] netlink: 64022 bytes leftover after parsing attributes in process `syz.0.397'. [ 100.644154][ T7541] netlink: 'syz.4.396': attribute type 11 has an invalid length. [ 100.676113][ T7547] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 100.683732][ T7545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.685267][ T7550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.400'. [ 100.700360][ T7547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.704942][ T7547] netlink: 68 bytes leftover after parsing attributes in process `syz.2.399'. [ 100.745123][ T7559] sit0: entered promiscuous mode [ 100.748681][ T7559] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 100.849796][ T7558] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 100.852863][ T7558] overlayfs: missing 'lowerdir' [ 100.882455][ T7570] syzkaller1: entered promiscuous mode [ 100.884348][ T7570] syzkaller1: entered allmulticast mode [ 100.948216][ T7572] use of bytesused == 0 is deprecated and will be removed in the future, [ 100.951370][ T7572] use the actual size instead. [ 101.014236][ T7578] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.072763][ T7590] syz.2.414(7590): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 101.099512][ T7592] bad cache= option: loose³EÜÊÆCçß>Roðx3²‘2-Jtˆ.Ötv2Úêì •ò­Ö³Ùý>þŽN¨µìtHÝÖ£!YḖ f¯–² [ 101.099512][ T7592] [ 101.104615][ T7592] CIFS: VFS: bad cache= option: loose³EÜÊÆCçß>Roðx3²‘2-Jtˆ.Ötv2Úêì •ò­Ö³Ùý>þŽN¨µìtHÝÖ£!YḖ f¯–² [ 101.245947][ T7604] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 101.248394][ T7604] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.288177][ T7607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.430773][ T7619] XFS (nullb0): Invalid superblock magic number [ 101.445624][ T5802] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.583393][ T7641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 101.589984][ T7645] Bluetooth: MGMT ver 1.23 [ 101.598193][ T5802] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.603335][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 101.608782][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.612489][ T5802] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.622261][ T5802] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.625307][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.635941][ T5802] usb 5-1: config 0 descriptor?? [ 101.638188][ T7600] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.741241][ T7676] usb usb8: usbfs: process 7676 (syz.2.440) did not claim interface 0 before use [ 101.825904][ T7683] tmpfs: Invalid uid '0x00000000ffffffff' [ 101.866434][ T5802] usbhid 5-1:0.0: can't add hid device: -71 [ 101.868495][ T5802] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 101.881894][ T5802] usb 5-1: USB disconnect, device number 4 [ 101.921216][ T7692] 8021q: adding VLAN 0 to HW filter on device bond7 [ 102.020109][ T7702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.062333][ T7704] mkiss: ax0: crc mode is auto. [ 102.065662][ T5996] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 102.132431][ T6023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.217212][ T5996] usb 8-1: config 0 has an invalid interface number: 18 but max is 2 [ 102.220006][ T5996] usb 8-1: config 0 has an invalid interface number: 210 but max is 2 [ 102.222686][ T5996] usb 8-1: config 0 has an invalid interface number: 96 but max is 2 [ 102.225492][ T5996] usb 8-1: config 0 has no interface number 0 [ 102.228385][ T5996] usb 8-1: config 0 has no interface number 1 [ 102.230470][ T5996] usb 8-1: config 0 has no interface number 2 [ 102.232485][ T5996] usb 8-1: config 0 interface 18 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 102.236168][ T5996] usb 8-1: config 0 interface 18 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 102.239817][ T5996] usb 8-1: config 0 interface 210 altsetting 9 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 102.243336][ T5996] usb 8-1: config 0 interface 210 altsetting 9 has an endpoint descriptor with address 0x51, changing to 0x1 [ 102.247344][ T5996] usb 8-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 102.251331][ T5996] usb 8-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 102.254774][ T5996] usb 8-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 102.258973][ T5996] usb 8-1: config 0 interface 210 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 102.262637][ T5996] usb 8-1: config 0 interface 210 altsetting 9 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 102.266528][ T5996] usb 8-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 102.270290][ T5996] usb 8-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 102.273829][ T5996] usb 8-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 102.277702][ T5996] usb 8-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 102.281313][ T5996] usb 8-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 102.284911][ T5996] usb 8-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 102.288863][ T5996] usb 8-1: config 0 interface 96 altsetting 127 has a duplicate endpoint with address 0xA, skipping [ 102.292943][ T5996] usb 8-1: config 0 interface 96 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 102.296955][ T5996] usb 8-1: config 0 interface 96 altsetting 127 endpoint 0x6 has invalid maxpacket 1064, setting to 64 [ 102.300653][ T5996] usb 8-1: config 0 interface 96 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 102.304294][ T5996] usb 8-1: config 0 interface 96 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 102.308135][ T5996] usb 8-1: config 0 interface 96 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 102.309219][ T6023] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.311724][ T5996] usb 8-1: config 0 interface 96 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 102.311745][ T5996] usb 8-1: config 0 interface 96 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 102.321784][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.323080][ T5996] usb 8-1: config 0 interface 96 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 102.327704][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.329265][ T5996] usb 8-1: config 0 interface 96 altsetting 127 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 102.332814][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.335979][ T5996] usb 8-1: config 0 interface 18 has no altsetting 0 [ 102.335992][ T5996] usb 8-1: config 0 interface 210 has no altsetting 0 [ 102.336002][ T5996] usb 8-1: config 0 interface 96 has no altsetting 0 [ 102.337606][ T5996] usb 8-1: New USB device found, idVendor=093b, idProduct=a003, bcdDevice=66.3d [ 102.340857][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.343009][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.346378][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.348262][ T5996] usb 8-1: Product: syz [ 102.356973][ T5996] usb 8-1: Manufacturer: syz [ 102.358560][ T5996] usb 8-1: SerialNumber: syz [ 102.361399][ T5996] usb 8-1: config 0 descriptor?? [ 102.376963][ T6023] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.410839][ T7714] binder: 7712:7714 ioctl c018620c 200000000000 returned -1 [ 102.480587][ T6023] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.509388][ T7722] 8021q: adding VLAN 0 to HW filter on device bond8 [ 102.564158][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 102.588830][ T5996] usb 8-1: USB disconnect, device number 9 [ 102.705851][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.708278][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.710676][ T7710] bridge_slave_0: entered allmulticast mode [ 102.713405][ T7710] bridge_slave_0: entered promiscuous mode [ 102.716745][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.719300][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.721659][ T7710] bridge_slave_1: entered allmulticast mode [ 102.724537][ T7710] bridge_slave_1: entered promiscuous mode [ 102.787810][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.801554][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.061890][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.066960][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.071443][ T6023] bond0 (unregistering): Released all slaves [ 103.141116][ T6023] bond1 (unregistering): Released all slaves [ 103.163995][ T7750] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 103.167757][ T7750] overlayfs: missing 'lowerdir' [ 103.203411][ T6023] bond2 (unregistering): Released all slaves [ 103.277040][ T6023] bond3 (unregistering): Released all slaves [ 103.286360][ T7710] team0: Port device team_slave_0 added [ 103.290046][ T7745] __nla_validate_parse: 18 callbacks suppressed [ 103.290060][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 103.295257][ T7744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.297958][ T7744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.321496][ T7710] team0: Port device team_slave_1 added [ 103.355825][ T7757] validate_nla: 11 callbacks suppressed [ 103.355837][ T7757] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 103.395093][ T7757] 8021q: adding VLAN 0 to HW filter on device bond8 [ 103.399821][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.402091][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 103.402157][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.406720][ T7757] netlink: 48 bytes leftover after parsing attributes in process `syz.3.466'. [ 103.415413][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.422319][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.424625][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.434459][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.488061][ T7766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.467'. [ 103.488119][ T7770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.468'. [ 103.530989][ T7710] hsr_slave_0: entered promiscuous mode [ 103.533295][ T7710] hsr_slave_1: entered promiscuous mode [ 103.535446][ T7710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.543317][ T7710] Cannot create hsr debugfs directory [ 103.676739][ T6023] hsr_slave_0: left promiscuous mode [ 103.679004][ T6023] hsr_slave_1: left promiscuous mode [ 103.681007][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.683447][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.686854][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.689333][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.708712][ T6023] veth1_macvtap: left promiscuous mode [ 103.710579][ T6023] veth0_macvtap: left promiscuous mode [ 103.712447][ T6023] veth1_vlan: left promiscuous mode [ 103.714207][ T6023] veth0_vlan: left promiscuous mode [ 104.262827][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 104.318552][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 104.425601][ T5931] Bluetooth: hci3: command tx timeout [ 104.960047][ T7803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53264 sclass=netlink_route_socket pid=7803 comm=syz.4.473 [ 104.975974][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 104.975985][ T40] audit: type=1400 audit(1747681966.357:470): avc: denied { create } for pid=7802 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 104.991630][ T40] audit: type=1400 audit(1747681966.367:471): avc: denied { read write } for pid=7802 comm="syz.4.473" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 105.005033][ T40] audit: type=1400 audit(1747681966.377:472): avc: denied { open } for pid=7802 comm="syz.4.473" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 105.099742][ T40] audit: type=1400 audit(1747681966.477:473): avc: denied { execute } for pid=7813 comm="syz.4.475" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.152951][ T40] audit: type=1400 audit(1747681966.527:474): avc: denied { read } for pid=7817 comm="syz.4.476" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.169298][ T7820] netlink: 'syz.3.477': attribute type 10 has an invalid length. [ 105.171946][ T7820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'. [ 105.190877][ T6023] IPVS: stop unused estimator thread 0... [ 105.204278][ T40] audit: type=1400 audit(1747681966.547:475): avc: denied { open } for pid=7817 comm="syz.4.476" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.220810][ T7710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.237870][ T7710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.242430][ T7710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.246950][ T40] audit: type=1400 audit(1747681966.557:476): avc: denied { read } for pid=7817 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.258087][ T7710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.315873][ T40] audit: type=1400 audit(1747681966.687:477): avc: denied { ioctl } for pid=7831 comm="syz.3.480" path="socket:[19565]" dev="sockfs" ino=19565 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.340365][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.356899][ T40] audit: type=1400 audit(1747681966.737:478): avc: denied { shutdown } for pid=7838 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.360308][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.386262][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.388858][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.392107][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.394943][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.445029][ T7710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.556361][ T7843] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 105.564177][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.610688][ T7710] veth0_vlan: entered promiscuous mode [ 105.629656][ T7710] veth1_vlan: entered promiscuous mode [ 105.677291][ T7710] veth0_macvtap: entered promiscuous mode [ 105.681321][ T7710] veth1_macvtap: entered promiscuous mode [ 105.698108][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.705077][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.711167][ T7710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.714118][ T7710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.718467][ T7710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.721336][ T7710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.770424][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.773020][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.786298][ T40] audit: type=1400 audit(1747681967.157:479): avc: denied { setopt } for pid=7865 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.795360][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.800644][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.872939][ T7880] kernel read not supported for file /policy (pid: 7880 comm: syz.4.486) [ 105.920530][ T7891] Bluetooth: (null): Invalid header checksum [ 105.924214][ T7891] fuse: Unknown parameter '017777777777777777777770x0000000000000006' [ 105.965071][ T7897] xt_hashlimit: size too large, truncated to 1048576 [ 106.017042][ T7899] netlink: 32 bytes leftover after parsing attributes in process `syz.0.491'. [ 106.027759][ T6023] Bluetooth: (null): Invalid header checksum [ 106.030329][ T6023] Bluetooth: (null): Invalid header checksum [ 106.063304][ T7901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7901 comm=syz.0.492 [ 106.096739][ T7906] warning: `syz.0.493' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.193100][ T7912] nbd: must specify a device to reconfigure [ 106.197495][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 106.203320][ T7912] ipip0: entered promiscuous mode [ 106.254864][ T7917] netlink: 'syz.0.498': attribute type 7 has an invalid length. [ 106.257916][ T7917] netlink: 'syz.0.498': attribute type 8 has an invalid length. [ 106.501956][ T7930] netlink: 'syz.4.502': attribute type 1 has an invalid length. [ 106.513333][ T7930] 8021q: adding VLAN 0 to HW filter on device bond4 [ 106.517936][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 106.520830][ T7930] netlink: 48 bytes leftover after parsing attributes in process `syz.4.502'. [ 106.547568][ T7935] netlink: 'syz.4.503': attribute type 1 has an invalid length. [ 106.560690][ T7935] 8021q: adding VLAN 0 to HW filter on device bond5 [ 107.140185][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.143061][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.168432][ T7969] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 107.185058][ T7969] 8021q: adding VLAN 0 to HW filter on device bond9 [ 107.225661][ T7978] overlay: filesystem on ./bus not supported as upperdir [ 107.264236][ T7982] QAT: failed to copy from user cfg_data. [ 107.291280][ T7986] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.339490][ T7989] vivid-002: disconnect [ 107.380779][ T7990] vivid-002: reconnect [ 107.611684][ T1141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.814099][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.818277][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.821336][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.827057][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.830002][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.946280][ T8027] chnl_net:caif_netlink_parms(): no params data found [ 107.995616][ T5802] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.054829][ T8027] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.057477][ T8027] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.059959][ T8027] bridge_slave_0: entered allmulticast mode [ 108.062779][ T8027] bridge_slave_0: entered promiscuous mode [ 108.066863][ T8027] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.070043][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.072524][ T8027] bridge_slave_1: entered allmulticast mode [ 108.075377][ T8027] bridge_slave_1: entered promiscuous mode [ 108.106247][ T8027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.110947][ T8027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.147706][ T8027] team0: Port device team_slave_0 added [ 108.151913][ T8027] team0: Port device team_slave_1 added [ 108.155725][ T5802] usb 5-1: Using ep0 maxpacket: 16 [ 108.161619][ T5802] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.166918][ T5802] usb 5-1: config 0 has no interfaces? [ 108.171340][ T5802] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 108.174437][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 108.178183][ T5802] usb 5-1: Product: syz [ 108.179867][ T5802] usb 5-1: SerialNumber: syz [ 108.183354][ T5802] usb 5-1: config 0 descriptor?? [ 108.208509][ T8027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.211627][ T8027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.222979][ T8027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.230305][ T8027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.233141][ T8027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.244275][ T8027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.307781][ T8027] hsr_slave_0: entered promiscuous mode [ 108.310200][ T8027] hsr_slave_1: entered promiscuous mode [ 108.312378][ T8027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.314950][ T8027] Cannot create hsr debugfs directory [ 108.394942][ T5802] usb 5-1: USB disconnect, device number 5 [ 108.467139][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.470721][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.695702][ T5969] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 108.825655][ T5969] usb 9-1: device descriptor read/64, error -71 [ 109.085739][ T5969] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 109.120360][ T1141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.164202][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.196376][ T1141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.200444][ T8066] __nla_validate_parse: 5 callbacks suppressed [ 109.200456][ T8066] netlink: 48 bytes leftover after parsing attributes in process `syz.0.538'. [ 109.213134][ T8066] affs: No valid root block on device nullb0 [ 109.216193][ T5969] usb 9-1: device descriptor read/64, error -71 [ 109.301881][ T1141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.326652][ T5969] usb usb9-port1: attempt power cycle [ 109.406369][ T1141] bridge_slave_1: left allmulticast mode [ 109.408273][ T1141] bridge_slave_1: left promiscuous mode [ 109.410250][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.414715][ T1141] bridge_slave_0: left allmulticast mode [ 109.416846][ T1141] bridge_slave_0: left promiscuous mode [ 109.418778][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.642764][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.647236][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.650930][ T1141] bond0 (unregistering): Released all slaves [ 109.676065][ T5969] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 109.706748][ T5969] usb 9-1: device descriptor read/8, error -71 [ 109.865742][ T5931] Bluetooth: hci3: command tx timeout [ 109.955669][ T5969] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 109.977109][ T5969] usb 9-1: device descriptor read/8, error -71 [ 109.994711][ T1141] hsr_slave_0: left promiscuous mode [ 110.004937][ T1141] hsr_slave_1: left promiscuous mode [ 110.009794][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.012887][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.017489][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.020573][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.057453][ T1141] veth1_macvtap: left promiscuous mode [ 110.059848][ T1141] veth0_macvtap: left promiscuous mode [ 110.063147][ T1141] veth1_vlan: left promiscuous mode [ 110.065446][ T1141] veth0_vlan: left promiscuous mode [ 110.102720][ T5969] usb usb9-port1: unable to enumerate USB device [ 110.129096][ T8089] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 110.156659][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 110.156672][ T40] audit: type=1400 audit(1747681971.527:504): avc: denied { ioctl } for pid=8090 comm="syz.3.543" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 110.183980][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 110.263886][ T8094] program syz.3.543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.621850][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 110.679386][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 110.992940][ T8091] Falling back ldisc for ptm0. [ 111.290061][ T8089] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 111.394415][ T8111] input: syz0 as /devices/virtual/input/input9 [ 111.432318][ T8027] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.440824][ T8027] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.450048][ T8027] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.458026][ T8027] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.548241][ T8131] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 111.571094][ T8131] 8021q: adding VLAN 0 to HW filter on device bond10 [ 111.576712][ T8027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.578632][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 111.590748][ T8129] syz_tun (unregistering): left promiscuous mode [ 111.602071][ T8027] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.611307][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.613838][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.626014][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.628314][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.655185][ T8027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.666638][ T8027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.774700][ T8027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.799957][ T8027] veth0_vlan: entered promiscuous mode [ 111.805868][ T8027] veth1_vlan: entered promiscuous mode [ 111.821187][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'. [ 111.832965][ T8027] veth0_macvtap: entered promiscuous mode [ 111.837944][ T8027] veth1_macvtap: entered promiscuous mode [ 111.850120][ T8027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.861004][ T8027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.868150][ T8027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.871513][ T8027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.871539][ T8027] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.871562][ T8027] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.907089][ T6024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.907107][ T6024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.928174][ T6024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.928194][ T6024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.941966][ T40] audit: type=1400 audit(1747681973.317:505): avc: denied { mounton } for pid=8027 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 111.945763][ T5931] Bluetooth: hci3: command tx timeout [ 112.068201][ T8167] netlink: 'syz.3.562': attribute type 1 has an invalid length. [ 112.079924][ T8167] 8021q: adding VLAN 0 to HW filter on device bond11 [ 112.085277][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 112.088295][ T8167] netlink: 48 bytes leftover after parsing attributes in process `syz.3.562'. [ 112.365689][ T836] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 112.390610][ T8172] input: syz0 as /devices/virtual/input/input10 [ 112.518811][ T836] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 112.522387][ T836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.528540][ T836] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 112.533070][ T836] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 112.536992][ T836] usb 8-1: Manufacturer: syz [ 112.541974][ T836] usb 8-1: config 0 descriptor?? [ 112.595608][ T836] rc_core: IR keymap rc-hauppauge not found [ 112.598112][ T836] Registered IR keymap rc-empty [ 112.602036][ T836] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 112.608232][ T836] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input11 [ 112.758598][ T836] usb 8-1: USB disconnect, device number 10 [ 112.947778][ T40] audit: type=1400 audit(1747681974.327:506): avc: denied { read write } for pid=8189 comm="syz.4.569" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 112.948805][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 112.958185][ T40] audit: type=1400 audit(1747681974.327:507): avc: denied { open } for pid=8189 comm="syz.4.569" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 113.128384][ T8196] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 113.140666][ T8196] 8021q: adding VLAN 0 to HW filter on device bond6 [ 113.145289][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 113.148825][ T8196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.571'. [ 113.308046][ T40] audit: type=1400 audit(1747681974.687:508): avc: denied { create } for pid=8202 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.314318][ T40] audit: type=1400 audit(1747681974.687:509): avc: denied { read } for pid=8202 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.127843][ T6024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.269489][ T8294] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 114.292535][ T8294] 8021q: adding VLAN 0 to HW filter on device bond9 [ 114.297794][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 114.327183][ T40] audit: type=1400 audit(1747681975.707:510): avc: denied { bind } for pid=8302 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.334920][ T40] audit: type=1400 audit(1747681975.707:511): avc: denied { getopt } for pid=8302 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.345188][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.349275][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.354661][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.361142][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.364083][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.490370][ T8305] chnl_net:caif_netlink_parms(): no params data found [ 114.505377][ T40] audit: type=1400 audit(1747681975.877:512): avc: denied { write } for pid=8326 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.596490][ T8305] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.599707][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.602906][ T8305] bridge_slave_0: entered allmulticast mode [ 114.607513][ T8305] bridge_slave_0: entered promiscuous mode [ 114.607592][ T40] audit: type=1400 audit(1747681975.987:513): avc: denied { getopt } for pid=8326 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.613168][ T8305] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.620120][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.622460][ T8305] bridge_slave_1: entered allmulticast mode [ 114.625130][ T8305] bridge_slave_1: entered promiscuous mode [ 114.660601][ T8305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.667955][ T8305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.713556][ T8305] team0: Port device team_slave_0 added [ 114.717384][ T8305] team0: Port device team_slave_1 added [ 114.749121][ T8305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.751525][ T8305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.762046][ T8305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.766892][ T8305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.769564][ T8305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.779830][ T8305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.794868][ T8346] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 114.811435][ T8346] 8021q: adding VLAN 0 to HW filter on device bond10 [ 114.816278][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 114.819257][ T8346] netlink: 48 bytes leftover after parsing attributes in process `syz.0.590'. [ 114.832679][ T8305] hsr_slave_0: entered promiscuous mode [ 114.835131][ T8305] hsr_slave_1: entered promiscuous mode [ 114.837492][ T8305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.839959][ T8305] Cannot create hsr debugfs directory [ 115.220041][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 115.220054][ T40] audit: type=1400 audit(1747681976.597:524): avc: denied { name_connect } for pid=8369 comm="syz.0.598" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 115.229370][ T8367] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 115.258413][ T8373] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 115.269590][ T8373] 8021q: adding VLAN 0 to HW filter on device bond7 [ 115.274057][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 115.277665][ T8373] netlink: 48 bytes leftover after parsing attributes in process `syz.4.599'. [ 115.277861][ T40] audit: type=1400 audit(1747681976.667:525): avc: denied { setopt } for pid=8369 comm="syz.0.598" lport=44082 faddr=::ffff:172.30.0.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 115.277952][ T8370] sctp: [Deprecated]: syz.0.598 (pid 8370) Use of int in max_burst socket option deprecated. [ 115.277952][ T8370] Use struct sctp_assoc_value instead [ 115.448220][ T8384] syz.4.602: attempt to access beyond end of device [ 115.448220][ T8384] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 115.455188][ T8384] syz.4.602: attempt to access beyond end of device [ 115.455188][ T8384] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 115.465213][ T8384] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 115.468896][ T8384] syz.4.602: attempt to access beyond end of device [ 115.468896][ T8384] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 115.473259][ T8384] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 115.477553][ T8384] syz.4.602: attempt to access beyond end of device [ 115.477553][ T8384] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 115.482132][ T8384] syz.4.602: attempt to access beyond end of device [ 115.482132][ T8384] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 115.486467][ T8384] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 115.489567][ T8384] syz.4.602: attempt to access beyond end of device [ 115.489567][ T8384] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 115.493724][ T8384] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 115.497521][ T8384] syz.4.602: attempt to access beyond end of device [ 115.497521][ T8384] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 115.502489][ T8384] syz.4.602: attempt to access beyond end of device [ 115.502489][ T8384] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 115.507433][ T8384] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 115.510618][ T8384] syz.4.602: attempt to access beyond end of device [ 115.510618][ T8384] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 115.514752][ T8384] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 115.518382][ T8384] syz.4.602: attempt to access beyond end of device [ 115.518382][ T8384] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 115.522933][ T8384] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 115.527344][ T8384] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 115.530502][ T8384] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 115.615256][ T8401] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 115.619491][ T40] audit: type=1400 audit(1747681976.997:526): avc: denied { map } for pid=8400 comm="syz.3.607" path="socket:[23884]" dev="sockfs" ino=23884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 115.642118][ T8401] 8021q: adding VLAN 0 to HW filter on device bond11 [ 115.647111][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 115.650011][ T8401] netlink: 48 bytes leftover after parsing attributes in process `syz.0.608'. [ 115.686630][ T8392] netlink: 36 bytes leftover after parsing attributes in process `syz.4.604'. [ 115.740243][ T40] audit: type=1400 audit(1747681977.117:527): avc: denied { bind } for pid=8418 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.778871][ T8419] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 115.810232][ T40] audit: type=1400 audit(1747681977.187:528): avc: denied { append } for pid=8424 comm="syz.3.616" name="video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 115.818000][ T40] audit: type=1400 audit(1747681977.187:529): avc: denied { getopt } for pid=8426 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.847140][ T8434] netlink: 'syz.3.619': attribute type 3 has an invalid length. [ 115.850548][ T8434] netlink: 'syz.3.619': attribute type 1 has an invalid length. [ 115.853247][ T8434] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.619'. [ 115.857426][ T40] audit: type=1400 audit(1747681977.237:530): avc: denied { append } for pid=8431 comm="syz.0.618" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.859155][ T8434] xt_TCPMSS: Only works on TCP SYN packets [ 115.991490][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 115.994462][ T8440] netlink: 'syz.3.619': attribute type 11 has an invalid length. [ 116.013241][ T8434] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 116.014565][ T8443] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 116.020925][ T8434] exFAT-fs (nullb0): invalid boot record signature [ 116.023413][ T8434] exFAT-fs (nullb0): failed to read boot sector [ 116.027223][ T8434] exFAT-fs (nullb0): failed to recognize exfat type [ 116.032798][ T8434] Cannot find del_set index 4 as target [ 116.033106][ T8443] 8021q: adding VLAN 0 to HW filter on device bond12 [ 116.058851][ T6024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.126764][ T6024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.198757][ T6024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.322074][ T6024] bridge_slave_1: left allmulticast mode [ 116.323958][ T6024] bridge_slave_1: left promiscuous mode [ 116.327832][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.332439][ T6024] bridge_slave_0: left allmulticast mode [ 116.334208][ T6024] bridge_slave_0: left promiscuous mode [ 116.337227][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.344909][ T40] audit: type=1400 audit(1747681977.717:531): avc: denied { write } for pid=8472 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.415617][ T67] Bluetooth: hci3: command tx timeout [ 116.452975][ T40] audit: type=1400 audit(1747681977.837:532): avc: denied { mount } for pid=8485 comm="syz.0.634" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 116.571010][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.574964][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.579009][ T6024] bond0 (unregistering): Released all slaves [ 116.861829][ T6024] hsr_slave_0: left promiscuous mode [ 116.864106][ T6024] hsr_slave_1: left promiscuous mode [ 116.867531][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.870049][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.873874][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.876481][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.888012][ T8516] 9pnet: Could not find request transport: virtio8!<3î)¹any [ 116.926504][ T6024] veth1_macvtap: left promiscuous mode [ 116.928895][ T6024] veth0_macvtap: left promiscuous mode [ 116.931552][ T6024] veth1_vlan: left promiscuous mode [ 116.934027][ T6024] veth0_vlan: left promiscuous mode [ 117.152490][ T8504] delete_channel: no stack [ 117.326195][ T8537] netlink: 'syz.0.640': attribute type 4 has an invalid length. [ 117.593586][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 117.664278][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 118.168172][ T8305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.179092][ T8305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.192174][ T8305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.203435][ T8305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.215148][ T8555] FAT-fs (nbd3): unable to read boot sector [ 118.255193][ T8305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.274115][ T8305] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.280839][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.284016][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.292936][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.296161][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.454878][ T8305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.484017][ T8305] veth0_vlan: entered promiscuous mode [ 118.486532][ T5996] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 118.493374][ T8305] veth1_vlan: entered promiscuous mode [ 118.495698][ T67] Bluetooth: hci3: command tx timeout [ 118.533796][ T8305] veth0_macvtap: entered promiscuous mode [ 118.537779][ T8305] veth1_macvtap: entered promiscuous mode [ 118.546552][ T8305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.552417][ T8305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.557238][ T8305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.560136][ T8305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.562972][ T8305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.566066][ T8305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.615995][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.619272][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.633071][ T6024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.637117][ T6024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.647077][ T5996] usb 9-1: Invalid ep0 maxpacket: 16 [ 118.693847][ T8577] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 118.708634][ T8577] 8021q: adding VLAN 0 to HW filter on device bond13 [ 118.775689][ T5996] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 118.925877][ T5996] usb 9-1: Invalid ep0 maxpacket: 16 [ 118.928557][ T5996] usb usb9-port1: attempt power cycle [ 119.267253][ T5996] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 119.286300][ T5996] usb 9-1: Invalid ep0 maxpacket: 16 [ 119.411444][ T8607] netlink: 'syz.3.657': attribute type 1 has an invalid length. [ 119.416271][ T8609] __nla_validate_parse: 7 callbacks suppressed [ 119.416281][ T8609] netlink: 52 bytes leftover after parsing attributes in process `syz.0.658'. [ 119.427100][ T5996] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 119.430976][ T8607] 8021q: adding VLAN 0 to HW filter on device bond12 [ 119.438523][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 119.446415][ T5996] usb 9-1: Invalid ep0 maxpacket: 16 [ 119.448948][ T5996] usb usb9-port1: unable to enumerate USB device [ 119.599230][ T40] audit: type=1400 audit(1747681980.977:533): avc: denied { bind } for pid=8624 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.649367][ T8628] netpci0: tun_chr_ioctl cmd 1074025672 [ 119.651338][ T8628] netpci0: ignored: set checksum disabled [ 119.683942][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 120.600335][ T93] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.124102][ T8670] validate_nla: 2 callbacks suppressed [ 121.124114][ T8670] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 121.129967][ T8670] hsr0: entered promiscuous mode [ 121.133016][ T8670] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 121.146634][ T8670] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 121.151901][ T8670] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 121.192935][ T5931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.196899][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.200311][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.203335][ T5931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.207277][ T5931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.352529][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 121.406900][ T40] audit: type=1400 audit(1747681982.787:534): avc: denied { setopt } for pid=8703 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.414324][ T40] audit: type=1400 audit(1747681982.787:535): avc: denied { read write } for pid=8703 comm="syz.0.681" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.423220][ T40] audit: type=1400 audit(1747681982.787:536): avc: denied { open } for pid=8703 comm="syz.0.681" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.432340][ T40] audit: type=1400 audit(1747681982.797:537): avc: denied { map } for pid=8703 comm="syz.0.681" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.441408][ T40] audit: type=1400 audit(1747681982.797:538): avc: denied { execute } for pid=8703 comm="syz.0.681" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.458330][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.460785][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.463242][ T8674] bridge_slave_0: entered allmulticast mode [ 121.467520][ T8674] bridge_slave_0: entered promiscuous mode [ 121.474422][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.476920][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.479327][ T8674] bridge_slave_1: entered allmulticast mode [ 121.481924][ T8674] bridge_slave_1: entered promiscuous mode [ 121.506865][ T40] audit: type=1400 audit(1747681982.887:539): avc: denied { read append open } for pid=8710 comm="syz.0.682" path="/200/bus/bus" dev="9p" ino=37880160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.518169][ T40] audit: type=1800 audit(1747681982.887:540): pid=8712 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.682" name="bus" dev="9p" ino=37880160 res=0 errno=0 [ 121.523014][ T8712] fuse: Unknown parameter 'fS0x000000000000000a' [ 121.525794][ T40] audit: type=1400 audit(1747681982.897:541): avc: denied { mounton } for pid=8710 comm="syz.0.682" path="/200/bus/file0" dev="9p" ino=37880074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.539660][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.545482][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.590965][ T8674] team0: Port device team_slave_0 added [ 121.595352][ T8674] team0: Port device team_slave_1 added [ 121.596274][ T40] audit: type=1400 audit(1747681982.977:542): avc: denied { ioctl } for pid=8719 comm="syz.3.683" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.628384][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.630784][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.636615][ T5802] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 121.640241][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.646704][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.649039][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.657719][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.662564][ T8730] (syz.3.685,8730,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 121.666684][ T8730] (syz.3.685,8730,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 121.714204][ T8674] hsr_slave_0: entered promiscuous mode [ 121.719264][ T8674] hsr_slave_1: entered promiscuous mode [ 121.721316][ T8674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.723831][ T8674] Cannot create hsr debugfs directory [ 121.761881][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 121.802141][ T5802] usb 9-1: config 0 has no interfaces? [ 121.804193][ T5802] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 121.807460][ T5802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.811444][ T5802] usb 9-1: config 0 descriptor?? [ 121.869870][ T40] audit: type=1400 audit(1747681983.247:543): avc: denied { attach_queue } for pid=8745 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 122.035872][ T836] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 122.185593][ T836] usb 8-1: Using ep0 maxpacket: 8 [ 122.188584][ T836] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 122.191389][ T836] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 122.194085][ T836] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 122.198364][ T836] usb 8-1: config 250 has no interface number 0 [ 122.200618][ T836] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 122.204371][ T836] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 122.208258][ T836] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.211650][ T836] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.214897][ T836] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 122.216704][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.219339][ T836] usb 8-1: config 250 interface 228 has no altsetting 0 [ 122.224743][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.228412][ T836] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 122.231606][ T836] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 122.234275][ T836] usb 8-1: Product: syz [ 122.235909][ T836] usb 8-1: SerialNumber: syz [ 122.243236][ T836] hub 8-1:250.228: bad descriptor, ignoring hub [ 122.245312][ T836] hub 8-1:250.228: probe with driver hub failed with error -5 [ 122.429843][ T93] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.446036][ T836] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 122.515457][ T93] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.625593][ T93] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.678279][ T8764] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 122.727918][ T8767] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 122.745127][ T8767] 8021q: adding VLAN 0 to HW filter on device bond14 [ 122.751077][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 122.803164][ T8683] syz.4.677 (8683): drop_caches: 2 [ 122.820626][ T8683] syz.4.677 (8683): drop_caches: 2 [ 122.837415][ T34] usb 9-1: USB disconnect, device number 19 [ 122.848496][ T93] bridge_slave_1: left allmulticast mode [ 122.850439][ T93] bridge_slave_1: left promiscuous mode [ 122.852362][ T93] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.863577][ T93] bridge_slave_0: left allmulticast mode [ 122.865491][ T93] bridge_slave_0: left promiscuous mode [ 122.867551][ T93] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.893219][ T8773] netlink: 104 bytes leftover after parsing attributes in process `syz.0.698'. [ 123.084422][ T8740] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 123.112801][ T93] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.117980][ T93] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.121579][ T93] bond0 (unregistering): Released all slaves [ 123.218161][ T5931] Bluetooth: hci3: command tx timeout [ 123.421982][ T8796] netlink: 64 bytes leftover after parsing attributes in process `syz.4.703'. [ 123.479920][ T8765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.688'. [ 123.502114][ T93] hsr_slave_0: left promiscuous mode [ 123.504449][ T93] hsr_slave_1: left promiscuous mode [ 123.507710][ T93] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.510969][ T93] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.517898][ T93] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.521231][ T93] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.565192][ T93] veth1_macvtap: left promiscuous mode [ 123.579728][ T93] veth0_macvtap: left promiscuous mode [ 123.582347][ T93] veth1_vlan: left promiscuous mode [ 123.584805][ T93] veth0_vlan: left promiscuous mode [ 123.655256][ T8818] QAT: Stopping all acceleration devices. [ 123.718420][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 123.785764][ T836] usb 8-1: USB disconnect, device number 11 [ 123.789631][ T836] usblp0: removed [ 124.170530][ T93] team0 (unregistering): Port device team_slave_1 removed [ 124.233198][ T8827] netlink: 'syz.3.709': attribute type 105 has an invalid length. [ 124.236790][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 124.250343][ T93] team0 (unregistering): Port device team_slave_0 removed [ 124.772488][ T8835] 9pnet_fd: Insufficient options for proto=fd [ 124.799365][ T8674] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.813678][ T8674] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.816892][ T8844] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.713'. [ 124.832250][ T8674] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.846053][ T8674] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.888045][ T8859] netlink: zone id is out of range [ 124.905807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.939565][ T8867] netlink: 'syz.0.720': attribute type 4 has an invalid length. [ 124.954083][ T8857] netlink: 204 bytes leftover after parsing attributes in process `syz.4.718'. [ 125.015643][ T8873] netlink: 'syz.0.720': attribute type 4 has an invalid length. [ 125.120174][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.132063][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.139499][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.141832][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.157260][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.159834][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.160668][ T8888] qnx6: unable to set blocksize [ 125.162588][ T8890] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 125.177812][ T8888] /dev/sr0: Can't open blockdev [ 125.179971][ T8890] cramfs: wrong magic [ 125.271145][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.295688][ T5931] Bluetooth: hci3: command tx timeout [ 125.308672][ T8674] veth0_vlan: entered promiscuous mode [ 125.313658][ T8674] veth1_vlan: entered promiscuous mode [ 125.328534][ T8674] veth0_macvtap: entered promiscuous mode [ 125.332270][ T8674] veth1_macvtap: entered promiscuous mode [ 125.340417][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.347524][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.352356][ T8674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.355227][ T8674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.358644][ T8674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.361923][ T8674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.402313][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.404924][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.420730][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.423329][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.519351][ T8921] Invalid ELF header magic: != ELF [ 125.540051][ T8919] netlink: 204 bytes leftover after parsing attributes in process `syz.3.731'. [ 125.558335][ T8924] binder: 8922:8924 ioctl c0306201 0 returned -14 [ 125.668149][ T8933] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 125.680518][ T8933] 8021q: adding VLAN 0 to HW filter on device bond13 [ 125.685098][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 126.027838][ T8961] netlink: 204 bytes leftover after parsing attributes in process `syz.0.744'. [ 126.111357][ T8968] netlink: 'syz.0.747': attribute type 1 has an invalid length. [ 126.124100][ T8968] 8021q: adding VLAN 0 to HW filter on device bond15 [ 126.130332][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 126.442284][ T8997] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 126.464176][ T8997] syz.3.755 (8997): drop_caches: 2 [ 126.471664][ T8997] syz.3.755 (8997): drop_caches: 2 [ 126.509303][ T8999] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 126.530772][ T8999] 8021q: adding VLAN 0 to HW filter on device bond14 [ 126.655869][ T5996] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 126.808078][ T5996] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.812469][ T5996] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 126.816731][ T5996] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 126.821792][ T5996] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 126.826641][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.833180][ T8995] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 126.839616][ T5996] hub 9-1:1.0: bad descriptor, ignoring hub [ 126.841689][ T5996] hub 9-1:1.0: probe with driver hub failed with error -5 [ 126.844551][ T5996] cdc_wdm 9-1:1.0: skipping garbage [ 126.846560][ T5996] cdc_wdm 9-1:1.0: skipping garbage [ 126.850906][ T5996] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 126.853280][ T5996] cdc_wdm 9-1:1.0: Unknown control protocol [ 127.020917][ T9005] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 127.034586][ T9005] 8021q: adding VLAN 0 to HW filter on device bond16 [ 127.038922][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 127.038938][ T40] audit: type=1400 audit(1747681988.417:557): avc: denied { read write } for pid=8989 comm="syz.4.754" name="cdc-wdm0" dev="devtmpfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 127.041929][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 127.051888][ T40] audit: type=1400 audit(1747681988.417:558): avc: denied { open } for pid=8989 comm="syz.4.754" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 127.129730][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 127.132051][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 127.134478][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 127.137202][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 127.139355][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 127.232752][ T6010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.236720][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 127.238924][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 127.241298][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 127.243459][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 127.245649][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 127.247810][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 127.249977][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 127.252128][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 127.325688][ T836] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.356715][ T10] usb 9-1: USB disconnect, device number 20 [ 127.457195][ T836] usb 5-1: device descriptor read/64, error -71 [ 127.705893][ T836] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.835692][ T836] usb 5-1: device descriptor read/64, error -71 [ 127.869725][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 127.872696][ T9011] netlink: 'syz.4.759': attribute type 10 has an invalid length. [ 127.875161][ T9011] netlink: 40 bytes leftover after parsing attributes in process `syz.4.759'. [ 127.884843][ T9011] team0: Port device geneve0 added [ 127.923296][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.926823][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.929610][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.933556][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.936890][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.946853][ T836] usb usb5-port1: attempt power cycle [ 127.954384][ T9021] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 128.062008][ T9014] chnl_net:caif_netlink_parms(): no params data found [ 128.074578][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 128.184980][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.187598][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.190125][ T9014] bridge_slave_0: entered allmulticast mode [ 128.192837][ T9014] bridge_slave_0: entered promiscuous mode [ 128.198592][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.200997][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.203355][ T9014] bridge_slave_1: entered allmulticast mode [ 128.206735][ T9014] bridge_slave_1: entered promiscuous mode [ 128.249295][ T9014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.253825][ T9014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.289687][ T9014] team0: Port device team_slave_0 added [ 128.293598][ T9014] team0: Port device team_slave_1 added [ 128.295763][ T836] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 128.316090][ T836] usb 5-1: device descriptor read/8, error -71 [ 128.330385][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.332701][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.342944][ T9014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.347952][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.350104][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.359204][ T9014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.396627][ T9014] hsr_slave_0: entered promiscuous mode [ 128.397149][ T40] audit: type=1400 audit(1747681989.777:559): avc: denied { read } for pid=9039 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.399185][ T9014] hsr_slave_1: entered promiscuous mode [ 128.407009][ T9014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.409412][ T9014] Cannot create hsr debugfs directory [ 128.575662][ T836] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.596119][ T836] usb 5-1: device descriptor read/8, error -71 [ 128.705794][ T836] usb usb5-port1: unable to enumerate USB device [ 128.999823][ T6010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.069003][ T6010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.149966][ T6010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.199354][ T9046] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 129.212265][ T9046] 8021q: adding VLAN 0 to HW filter on device bond8 [ 129.250831][ T40] audit: type=1400 audit(1747681990.627:560): avc: denied { checkpoint_restore } for pid=9048 comm="syz.4.767" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.268103][ T6010] bridge_slave_1: left allmulticast mode [ 129.270164][ T6010] bridge_slave_1: left promiscuous mode [ 129.272135][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.276493][ T6010] bridge_slave_0: left allmulticast mode [ 129.278413][ T6010] bridge_slave_0: left promiscuous mode [ 129.280389][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.528009][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.536176][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.540380][ T6010] bond0 (unregistering): Released all slaves [ 129.729763][ T40] audit: type=1400 audit(1747681991.107:561): avc: denied { mount } for pid=9072 comm="syz.3.770" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 129.742864][ T40] audit: type=1400 audit(1747681991.117:562): avc: denied { remount } for pid=9072 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 129.751587][ T40] audit: type=1400 audit(1747681991.127:563): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 129.900486][ T6010] hsr_slave_0: left promiscuous mode [ 129.902659][ T6010] hsr_slave_1: left promiscuous mode [ 129.904769][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.908710][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.911572][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.913992][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.938743][ T6010] veth1_macvtap: left promiscuous mode [ 129.940628][ T6010] veth0_macvtap: left promiscuous mode [ 129.942503][ T6010] veth1_vlan: left promiscuous mode [ 129.945139][ T6010] veth0_vlan: left promiscuous mode [ 130.024676][ T67] Bluetooth: hci3: command tx timeout [ 130.199016][ T9108] __nla_validate_parse: 1 callbacks suppressed [ 130.199027][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'. [ 130.229481][ T9111] netlink: 'syz.4.782': attribute type 1 has an invalid length. [ 130.571208][ T6010] team0 (unregistering): Port device team_slave_1 removed [ 130.633094][ T6010] team0 (unregistering): Port device team_slave_0 removed [ 131.095177][ T9085] tap0: tun_chr_ioctl cmd 1074025677 [ 131.097737][ T9085] tap0: linktype set to 0 [ 131.110582][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.170210][ T9121] netlink: 'syz.4.784': attribute type 1 has an invalid length. [ 131.195143][ T9121] 8021q: adding VLAN 0 to HW filter on device bond9 [ 131.208043][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 131.214826][ T9014] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 131.228782][ T9014] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 131.239774][ T9125] ip6erspan0: entered promiscuous mode [ 131.256583][ T9014] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.260894][ T9014] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.333871][ T40] audit: type=1400 audit(1747681992.707:564): avc: denied { create } for pid=9129 comm="syz.3.786" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.339910][ T9014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.343797][ T40] audit: type=1400 audit(1747681992.717:565): avc: denied { unlink } for pid=9129 comm="syz.3.786" name="file0" dev="tmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.352774][ T40] audit: type=1400 audit(1747681992.717:566): avc: denied { accept } for pid=9129 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.354891][ T9014] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.376742][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.379123][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.389918][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.392386][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.419643][ T9014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.494218][ T9154] netfs: Duplicate cookie detected [ 131.496226][ T9154] netfs: O-cookie c=00000004 [fl=4000 na=0 nA=0 s=-] [ 131.498468][ T9154] netfs: O-cookie V=00000004 [9p,syz,] [ 131.500291][ T9154] netfs: O-key=[8] '0801420200000000' [ 131.502043][ T9154] netfs: N-cookie c=00000005 [fl=8 na=0 nA=0 s=-] [ 131.504145][ T9154] netfs: N-cookie V=00000004 [9p,syz,] [ 131.506032][ T9154] netfs: N-key=[8] '0801420200000000' [ 131.530335][ T9163] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 131.542969][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.563851][ T9014] veth0_vlan: entered promiscuous mode [ 131.577525][ T9014] veth1_vlan: entered promiscuous mode [ 131.591982][ T9014] veth0_macvtap: entered promiscuous mode [ 131.597821][ T9014] veth1_macvtap: entered promiscuous mode [ 131.606631][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.613680][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.618442][ T9014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.621895][ T9014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.627054][ T9014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.630830][ T9014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.671971][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.674547][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.696077][ T6024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.698777][ T6024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.732924][ T9183] netlink: 72 bytes leftover after parsing attributes in process `syz.4.795'. [ 132.120260][ T9194] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9194 comm=syz.4.798 [ 132.294434][ T9199] binder: 9198:9199 ioctl c00c620f 200000000100 returned -22 [ 132.489714][ T9204] netlink: 132 bytes leftover after parsing attributes in process `syz.0.802'. [ 132.496441][ T9206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.802'. [ 132.527251][ T9208] netlink: 56 bytes leftover after parsing attributes in process `syz.0.803'. [ 132.534787][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'. [ 132.552598][ T9208] nfs: Unknown parameter 'acl+þ>”»âo•Å_Ù¯ãÚñ[¶oP‹’žÙ„-ãV){‡I@ð+Ë' [ 132.627619][ T9212] x_tables: duplicate underflow at hook 2 [ 132.658618][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.660716][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.800876][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 132.800895][ T40] audit: type=1400 audit(1747681994.177:571): avc: denied { create } for pid=9219 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 132.812255][ T40] audit: type=1400 audit(1747681994.177:572): avc: denied { connect } for pid=9219 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.048424][ T40] audit: type=1400 audit(1747681994.427:573): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 133.080142][ T9252] vivid-001: ================= START STATUS ================= [ 133.082758][ T9252] vivid-001: Radio HW Seek Mode: Bounded [ 133.084892][ T9252] vivid-001: Radio Programmable HW Seek: false [ 133.089151][ T9252] vivid-001: RDS Rx I/O Mode: Block I/O [ 133.091652][ T9251] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 133.094675][ T9252] vivid-001: Generate RBDS Instead of RDS: false [ 133.099026][ T9252] vivid-001: RDS Reception: true [ 133.100688][ T9252] vivid-001: RDS Program Type: 0 inactive [ 133.102561][ T9252] vivid-001: RDS PS Name: inactive [ 133.104304][ T9252] vivid-001: RDS Radio Text: inactive [ 133.106446][ T9252] vivid-001: RDS Traffic Announcement: false inactive [ 133.109465][ T9252] vivid-001: RDS Traffic Program: false inactive [ 133.111549][ T9252] vivid-001: RDS Music: false inactive [ 133.113348][ T9252] vivid-001: ================== END STATUS ================== [ 133.147994][ T9259] fuse: Bad value for 'fd' [ 133.180865][ T40] audit: type=1400 audit(1747681994.557:574): avc: denied { ioctl } for pid=9261 comm="syz.3.821" path="socket:[27644]" dev="sockfs" ino=27644 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.186031][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 133.219638][ T40] audit: type=1400 audit(1747681994.597:575): avc: denied { ioctl } for pid=9265 comm="syz.3.823" path="socket:[30725]" dev="sockfs" ino=30725 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 133.296078][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 133.297133][ T5931] ------------[ cut here ]------------ [ 133.300566][ T5931] WARNING: CPU: 1 PID: 5931 at net/bluetooth/hci_conn.c:568 hci_conn_timeout+0x11a/0x210 [ 133.303748][ T5931] Modules linked in: [ 133.305755][ T5931] CPU: 1 UID: 0 PID: 5931 Comm: kworker/u33:2 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 133.310260][ T5931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.314067][ T5931] Workqueue: hci1 hci_conn_timeout [ 133.316518][ T5931] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 133.318489][ T5931] Code: 00 e8 8a 08 52 f7 4c 89 f1 4c 89 e2 48 c7 c6 00 cf d8 8c 48 c7 c7 68 c1 80 90 e8 81 29 98 fa e9 4d ff ff ff e8 67 08 52 f7 90 <0f> 0b 90 e8 5e 08 52 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 133.325228][ T5931] RSP: 0018:ffffc9000424fc38 EFLAGS: 00010293 [ 133.327992][ T5931] RAX: 0000000000000000 RBX: ffff88804d44c948 RCX: ffffffff8a693cdf [ 133.330579][ T5931] RDX: ffff88802ff10000 RSI: ffffffff8a693d89 RDI: 0000000000000005 [ 133.333199][ T5931] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 133.336194][ T5931] R10: 00000000ffffffff R11: 0000000000002bb0 R12: ffff88804d44c000 [ 133.338855][ T5931] R13: 0000000000000000 R14: ffffffff90855db4 R15: ffffc9000424fd18 [ 133.341436][ T5931] FS: 0000000000000000(0000) GS:ffff8880d6ada000(0000) knlGS:0000000000000000 [ 133.344370][ T5931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.346800][ T5931] CR2: 00007f8633579d58 CR3: 0000000025d52000 CR4: 0000000000352ef0 [ 133.349451][ T5931] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 133.352071][ T5931] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 133.354695][ T5931] Call Trace: [ 133.355878][ T5931] [ 133.356894][ T5931] process_one_work+0x9cf/0x1b70 [ 133.358588][ T5931] ? __pfx_process_one_work+0x10/0x10 [ 133.360376][ T5931] ? assign_work+0x1a0/0x250 [ 133.361938][ T5931] worker_thread+0x6c8/0xf10 [ 133.363498][ T5931] ? __pfx_worker_thread+0x10/0x10 [ 133.365407][ T5931] kthread+0x3c2/0x780 [ 133.366947][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.368512][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.370063][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.371639][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.373166][ T5931] ? rcu_is_watching+0x12/0xc0 [ 133.374764][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.376413][ T5931] ret_from_fork+0x45/0x80 [ 133.378121][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.379773][ T5931] ret_from_fork_asm+0x1a/0x30 [ 133.381431][ T5931] [ 133.382492][ T5931] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 133.384918][ T5931] CPU: 1 UID: 0 PID: 5931 Comm: kworker/u33:2 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 133.388364][ T5931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.391902][ T5931] Workqueue: hci1 hci_conn_timeout [ 133.393620][ T5931] Call Trace: [ 133.394760][ T5931] [ 133.395795][ T5931] dump_stack_lvl+0x3d/0x1f0 [ 133.397359][ T5931] panic+0x71c/0x800 [ 133.398716][ T5931] ? __pfx_panic+0x10/0x10 [ 133.400215][ T5931] ? show_trace_log_lvl+0x29b/0x3e0 [ 133.401941][ T5931] ? check_panic_on_warn+0x1f/0xb0 [ 133.403641][ T5931] ? hci_conn_timeout+0x11a/0x210 [ 133.405320][ T5931] check_panic_on_warn+0xab/0xb0 [ 133.406994][ T5931] __warn+0xf6/0x3c0 [ 133.408314][ T5931] ? hci_conn_timeout+0x11a/0x210 [ 133.409995][ T5931] report_bug+0x3c3/0x580 [ 133.411449][ T5931] ? hci_conn_timeout+0x11a/0x210 [ 133.413122][ T5931] handle_bug+0x184/0x210 [ 133.414566][ T5931] exc_invalid_op+0x17/0x50 [ 133.416096][ T5931] asm_exc_invalid_op+0x1a/0x20 [ 133.417709][ T5931] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 133.419573][ T5931] Code: 00 e8 8a 08 52 f7 4c 89 f1 4c 89 e2 48 c7 c6 00 cf d8 8c 48 c7 c7 68 c1 80 90 e8 81 29 98 fa e9 4d ff ff ff e8 67 08 52 f7 90 <0f> 0b 90 e8 5e 08 52 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 133.425870][ T5931] RSP: 0018:ffffc9000424fc38 EFLAGS: 00010293 [ 133.427888][ T5931] RAX: 0000000000000000 RBX: ffff88804d44c948 RCX: ffffffff8a693cdf [ 133.430521][ T5931] RDX: ffff88802ff10000 RSI: ffffffff8a693d89 RDI: 0000000000000005 [ 133.433168][ T5931] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 133.435828][ T5931] R10: 00000000ffffffff R11: 0000000000002bb0 R12: ffff88804d44c000 [ 133.438442][ T5931] R13: 0000000000000000 R14: ffffffff90855db4 R15: ffffc9000424fd18 [ 133.441066][ T5931] ? hci_conn_timeout+0x6f/0x210 [ 133.442723][ T5931] ? hci_conn_timeout+0x119/0x210 [ 133.444639][ T5931] ? hci_conn_timeout+0x119/0x210 [ 133.446626][ T5931] process_one_work+0x9cf/0x1b70 [ 133.448325][ T5931] ? __pfx_process_one_work+0x10/0x10 [ 133.450097][ T5931] ? assign_work+0x1a0/0x250 [ 133.451638][ T5931] worker_thread+0x6c8/0xf10 [ 133.453181][ T5931] ? __pfx_worker_thread+0x10/0x10 [ 133.454860][ T5931] kthread+0x3c2/0x780 [ 133.456216][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.457746][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.459316][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.460848][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.462383][ T5931] ? rcu_is_watching+0x12/0xc0 [ 133.464001][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.465530][ T5931] ret_from_fork+0x45/0x80 [ 133.467022][ T5931] ? __pfx_kthread+0x10/0x10 [ 133.468588][ T5931] ret_from_fork_asm+0x1a/0x30 [ 133.470191][ T5931] [ 133.471935][ T5931] Kernel Offset: disabled [ 133.473384][ T5931] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:13:14 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff89ec95a0 RBX=ffff8880342e5340 RCX=ffffffff893ee7ac RDX=1ffffffff199bf45 RSI=0000000000000001 RDI=ffff888039046000 RBP=ffffffff8ccdf9c0 RSP=ffffc90003fffed8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff8880342e5340 R13=0000000000000001 R14=ffff888039046000 R15=0000000000000000 RIP=ffffffffa001912a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd3c3a05300 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8633578f98 CR3=0000000023440000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000033f 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657268742f636f72 702f01ffffffffff ffffffbd0800033c 000045f600000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0302080002800300 100005b882080001 080006021dce4a10 0001800401000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080606017bda0035 2d6c6f72746e6f63 2d6e6f697373696d 2f7968746170656c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65742f62696c2f72 73752f01ffffffff ffffffffb5080180 0300040004080000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401c71000080049 9600657461657263 79656b2f72747461 2f666c65732d6461 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2da7f50000000000 000fff4008048803 0208000480030004 00000800000401c7 ZMM25=9d3d4bf99d3d4bf9 9d3d4bf99d3d4bf9 9d3d4bf99d3d4bf9 9d3d4bf99d3d4bf9 9d3d4bf99d3d4bf9 9d3d4bf99d3d4bf9 9d3d4bf99d3d4bf9 9d3d4bf99d3d4bf9 ZMM26=d547ae25d547ae25 d547ae25d547ae25 d547ae25d547ae25 d547ae25d547ae25 d547ae25d547ae25 d547ae25d547ae25 d547ae25d547ae25 d547ae25d547ae25 ZMM27=6670891e6670891e 6670891e6670891e 6670891e6670891e 6670891e6670891e 6670891e6670891e 6670891e6670891e 6670891e6670891e 6670891e6670891e ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8504000085040000 8504000085040000 8504000085040000 8504000085040000 8504000085040000 8504000085040000 8504000085040000 8504000085040000 info registers vcpu 1 CPU#1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f9c75 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc9000424f5a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9adfe560 R15=ffffffff854f9c10 RIP=ffffffff854f9c9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8633579d58 CR3=0000000025d52000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8632811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8632811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8632811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8632811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8632811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8632811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636a0d2854249871 b9e3a47a920585a2 835a23ce9fc173f8 b7bd797eb466baef ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b035626afb0d69ce bc622283cd17a0b5 1153a2ffb6220004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1709b6d7549a7be4 950c33365f5d28d5 8c3c47f0e5840dd1 38bc5ad676e03732 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0df0344e92d32856 d2e9da1709b6d754 9a7be4950c33365f 5d28d58c3c47f0e5 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 840dd138bc5ad676 e03732b035626afb 0d69cebc622283cd 17a0b51153a2ffb6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2251dc1dfaa7af8d d8febf636a0d2854 249871b9e3a47a92 0585a2835a23ce9f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c173f8b7bd797eb4 66baefbf09d20fb6 9423cc7e0712fa26 e3e4abfb030bf11f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000d527d RBX=0000000000000002 RCX=ffffffff8b6d3419 RDX=0000000000000000 RSI=ffffffff8dbe41e5 RDI=ffffffff8bf4a220 RBP=ffffed1003ada910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6d4880 R14=ffffffff90852e10 R15=0000000000000000 RIP=ffffffff8b6d1caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f343675ff98 CR3=00000000226c3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000001 Opmask01=0000000000000200 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe445d5b1b 00007ffe445d5b1b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe445d6020 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe445d6020 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e343c002d2d2d2d 2d2d2d2d2d2d2d2d 5d20657265682074 7563205b2d2d2d00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3434360027272727 2727272727272727 5720657265622074 7563205127272700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e35312e362064 65746e6961742074 6f4e20323a333375 2f72656b726f776b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f735f353278613d 7373616c63742074 5f6d64617379733a 725f6d6461737973 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f35327861 3d7373616c637420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f6d6461737973 3a725f6d64617379 733a746f6f723d74 7865746e6f637420 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f6d6461737973 3a725f6d64617379 733a746f6f723d74 7865746e6f637320 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3165393878303d64 6d636c74636f6920 35323730333d6f6e 69202273666b636f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 EAX=00000000 EBX=00000000 ECX=00000000 EDX=00000600 ESI=00000000 EDI=00000000 EBP=00000000 ESP=0000d6ae EIP=0000ed3c EFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 00000000 0000ffff 00009300 CS =ef66 000ef660 0000ffff 00009b00 SS =0000 00000000 0000ffff 00009300 DS =0000 00000000 0000ffff 00009300 FS =0000 00000000 0000ffff 00009300 GS =0000 00000000 0000ffff 00009300 LDT=0000 00000000 0000ffff 00008200 TR =0000 00000000 0000ffff 00008b00 GDT= 00000000 0000ffff IDT= 00000000 0000ffff CR0=00000030 CR2=00000000 CR3=00000000 CR4=00002040 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000000 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8632811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8632811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8632811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8632811aa5