last executing test programs: 1m44.55927096s ago: executing program 3 (id=357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @remote}, 0x10) close(0x3) r7 = eventfd(0x1) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000180)={0x2, r7, 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000100)) 1m44.250432105s ago: executing program 3 (id=365): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/185) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x4}]}, 0x30}}, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x280200, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f0000000100)={0x4, 0x8000, 0x40, 0x14, 0x4, 0x616b}) 1m44.131291105s ago: executing program 3 (id=367): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x8, 0x867a, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="03c900271e37"], 0x12b) 1m44.129971317s ago: executing program 3 (id=369): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000100080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x9, 0x1, {{0x2a, 0x4, 0x1, 0x3b, 0xa8, 0x68, 0x0, 0x7, 0x0, 0x0, @private=0xa010100, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0xc, [{@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}, {@remote, 0xaecf}]}, @cipso={0x86, 0x2d, 0x1, [{0x1, 0xe, "0823b908ae9ab8b5d98666f3"}, {0x7, 0xd, "b78bf68770aea3ad834dfa"}, {0x7, 0xc, "7bf4cf73310175750b7f"}]}, @lsrr={0x83, 0x17, 0x5, [@empty, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1f, 0x93, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @remote, @remote]}, @lsrr={0x83, 0xf, 0x91, [@dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x6, 0xc, 0x3, 0xffffff4e, 0x10, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x80, 0x1, 0x4}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000c40)={0x8e0, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "ed61127086278a402e58cb52bc27701e6821bfeb8910fe50ef8f9d33c2c919dba1b54f72a1e681216bcf225be93ee28ee67ae0623e2cef7da85680dd8f6408e581f15cba9192a2777483bf4f16794bee628340fbfa71"}, @ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "81c6ccf3ffe78490d6a81a64b5ce2183c949fab9a3972416742188eb20a2c6617ed6793c"}, @ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "a0d97dc3f271efaa592ec285b148c20fa7b563d9dbbdcaceca60f5899c51bd530e200099a508f40fe93c2f6c542a0bd2c1e651c2db01b6199c9872c53eb3b40fdc89afa403fa7a9b3b4ddaeb9c244205ebc0f6c3c40a821f4898485fe6989ac6f4cb8d74e3ee13f5ca7c238257e6370cc60c1c9b3fd1c414b3b29f81128ed66e76bd8572b20a3b770d3c1b4112d2194af884c96881d3b426fcbcd1797e0f19345694dc4492919359d052d0a314ac8fdd615659e605"}, @ETHTOOL_A_BITSET_MASK={0xbf, 0x5, "e537ff8f65fbd19a1b7ae8948a102035fb449c1dd4bd86fcc3c448b760b1c73e8fb9b718a22866496d0eb36f4f5d9c35a878c717ca9fc0e2dfddf7ed39b504af38b59cb47b2e630f9a219945d29fa8c0a30dbc2aad2d2d298d17557248b233db7881f7f1412908e4e4f6c8b9bd7eac8d5526c452e4ca511ec5dad48782806620cd51771839aac498c944cf208b3f69ad36c52f81eb806d5b1035ab96afcda7f27eb19fd6ccabeeb7d54148d8e96cda96e3ce90446ebdd97f4326d3"}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "8af6aa815a6e615d97243d4ed905cad38e3ee3484b3bae347ed99c199e57f6823bc209a81b38f6d736a8e82f08bb98d447d2b650b6e2829b7cdf4e38dc9fb5d8f84465dade753b2566bd7610123ae0635e46166f35b075742dee134de1fd82476bcbc3a714ebdec715816f277e19e9fd7a42c816f317f6e7a1d17d882aff52851a1aad98eb0a8f043bc636cfc79b7e8f9bf4c8a3f8d6b98f77b1fe4eb820991c5e9f4fcc24a2b0e8dc2dcebe3714b71c73"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x98, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "b17e9411e6fd6c6d487f1f3f49a41e823c23fe44e4c599a124cb675e2bc2a69ac8272b2375f2e522c4fe304e822455efdd902ca3c773af7e820ec792920b16a34a616432358ce4528ebe73254b1be3a721bd9d03db95c86c68ab313c5e4d3edae74bca0886434ebfd2fbdfb12ef875d766794292a77dc8f46812fbbae2b9c730c7511a7e6de1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbd}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x488, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa0e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'cpuset.effective_cpus\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'syz\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x97, 0x4, "f5683ce122070e9c93cafcc46bd295a5618325377eab280ed713b133c84a9712858887ace21a4c864f0dc03750674c9282449e0b9e5d2cd680b329ba4ce204942098e0a0dced8edb9feb1f9484f80751c545aaa04127f0bb0b23026eb1cb91f23be975062f3b81bb5da44b3bbee51a7607fb03f13919c14aaa0849947becef415c75fed8f6613af2c29a506f21e48ec02403cf"}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/!}\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 't\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'syz\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'cpuset.effective_cpus\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "34f0cd956da7b60f8ba98ce1fc46ab5c3d869352f7af77f1c46bce7c1a48300386dd132a849209745ce141dc690f442f7b59ea815a4fd21b5d39cf9a7ec602e6e57bb6c01a913649d7b21659849ade49e8e0ba72a0f99a8dc393aeea83ebe5a0d16c786538d4fa1207085c1b8cf517047da17b6d7a42507101c0ae700deb3eb11b1ef995f69a99c88d1d3d331726a20f17a769a675fab2d49b2eb0a0a0fd49ea3dec5ac870e92a73c015eb46fd6bd596fe2b38e23323a45fc862a23c02bf3fe0ada42f59d18993f207e075c0c0ff8bd1361a50"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'cpuset.effective_cpus\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-.@:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x46d0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xea}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'cpuset.effective_cpus\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'syz\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, '.\\&{[#&[\\\xa7*!{-$!]+&!(]\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xa9, 0x4, "31bdead97f24d9f6aea756a9546f2b5b8ff3ec9a5be19a708b7fa9ac8f731ae12918b1c1f8432797884628853451173c8a58581d56185ae570efc090502d7dbc718c20179df2bfdcc1a07bcea4d731f66460eed3ab71d33fa9a81c55febeff6092cdbd60ecac636922c8e95907069d36b199965e65732d0e19ef7bf9060d2b6ce1c82a19c65e9196fbbd79a0b9b6d7e2e4988bb12f717c1eb819c733d167b14d0a16a21c22"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x88, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "c905fcffb17207146cf548d3ac247726715fef3a6be968ba702fa7887ac2df13277f2c38e70b6a7481b605b1fb5c8f71291f564959b3d7dcd02370afa7e00812ab2ef108bc2bbdd70ba8ce263e1ca4ba49928c865ac2aa989a0c99ed531429052987c8d620bd004163d32ebcac6ccf54c7865972834b8b362f78fd07e8"}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0xa010) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x309200, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) rt_tgsigqueueinfo(r8, r8, 0x41, &(0x7f0000000140)={0x3d, 0x4003, 0xfffffff9}) tkill(r8, 0x2e) r9 = getpgrp(r8) ptrace$peeksig(0x4209, r9, &(0x7f0000000380)={0x1}, &(0x7f00000001c0)) ioctl$BINDER_GET_FROZEN_INFO(r7, 0xc00c620f, &(0x7f00000000c0)={r8}) ppoll(&(0x7f00000002c0)=[{r7}, {r7, 0x85}, {r7, 0x4}, {r7, 0x100}, {r7, 0x2000}], 0x5, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0xfffffffffffff801]}, 0x8) 1m44.011544463s ago: executing program 3 (id=370): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x98, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc0}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x42}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}}]}]}, 0x98}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000380)=0x10, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xb}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x3, 0xffffffffffffffff, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436042a", 0x2a}], 0x1) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0x2000}], 0x2) syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x10, 0x1}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x42, 0x0, r0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)="96206c909554e2e10e81c9b851a93d9c65", 0x11}], 0x1}, 0x0, 0xc0, 0x0, {0x0, r10}}) (async) r11 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e44", 0x4}], 0x2}], 0x1, 0x40800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m43.620635378s ago: executing program 3 (id=377): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="c60d51797dcfa3552185d2ae327cf3edb76b52ed8a5e8df34b7f7b2cd2fb26b0b75c32a098e9fde51e07f48caaee3fb6e21922815fa87dcd9f4581b342cbf526f251c1dd3109e5f3bebb9e043ebbc35f89e13fc1f7dbc269898b5868b133ccfcf532588c3b09ab1ec5f10c1577190e46e882b440cf9790b8adf67024ff6128d007f4324eb9b415eb784516a937d51ed8df930108cb66fed5980ff39ac90a1783574fa45dee573495f525c9ab8aa2f1b6b01c755d26", 0xb5}, {&(0x7f00000002c0)="906839c1a41fa7fc5d6e827019b12f64379f2bda7a36713f35f752bdfdb80c866479b4c647ebcef4dbd0a4ce543ce247c83c82297da396cf5aacd36403baeda944a89d745f9983be52a1ae6eb4d7c6ad204d5a1e1c47f7e4e8634567a0c06d", 0x5f}, {&(0x7f0000000480)="64f8cd16ba247d12238c857018266a4d587c90a90849b81bc06318aff7900a4fd6b702b64c15ce9daebbf29000eb8bb168c8218d198a6a9e15e13ad5b47013e92975cfb76783c2444110c0e633b8f0ab3ea87a1d0f9a93eaeb35f17323851c25f70365e672e60b20484be6ea90d42ea10d9dbff78425b94588f4d20d60a2f9eafb0d23d70ea00c39dceb85ff1abc4a0806ae3145ac436c4c26db28af8a294950f977acc90c273830a70ab86f22fa794e47ae3d39a38c0ea6ab30569d31d53aacdcfb72fc30aa2b98c6741d74e4aeed666abbd1dac73af9b509b7ab5127b33f4bd854fc33096d75da", 0xe8}], 0x3) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x6, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000020000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r8, 0x1, 0x3d, 0x0, &(0x7f0000000100)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000305ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="01c00000000000001c0012800b0001006d616373656300000c00028005000f000100000008000500", @ANYRES32=r7, @ANYBLOB="cf8c43f8f1a026989b09fc965b6b305352447dd8d1d5f2861d"], 0x44}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x1d, r7}, 0x10, &(0x7f0000000580)={&(0x7f00000003c0)={0x7, 0x400, 0x7, {r10, r11/1000+10000}, {}, {0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "e175760d92bdd014a93cc78275da261c6387c54bca802a3805de5c0b016f1578d2d0834d21c868d4da59c289087a35a6e7efaead1642a674bf9455783789cb9f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @loopback}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0xffff, 0x1}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r12, 0xc020f509, &(0x7f0000000000)={r12, 0x81, 0x5a8, 0x4}) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000000c0), 0x1, 0x0, 0x25}, 0x84) 1m43.573935188s ago: executing program 32 (id=377): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="c60d51797dcfa3552185d2ae327cf3edb76b52ed8a5e8df34b7f7b2cd2fb26b0b75c32a098e9fde51e07f48caaee3fb6e21922815fa87dcd9f4581b342cbf526f251c1dd3109e5f3bebb9e043ebbc35f89e13fc1f7dbc269898b5868b133ccfcf532588c3b09ab1ec5f10c1577190e46e882b440cf9790b8adf67024ff6128d007f4324eb9b415eb784516a937d51ed8df930108cb66fed5980ff39ac90a1783574fa45dee573495f525c9ab8aa2f1b6b01c755d26", 0xb5}, {&(0x7f00000002c0)="906839c1a41fa7fc5d6e827019b12f64379f2bda7a36713f35f752bdfdb80c866479b4c647ebcef4dbd0a4ce543ce247c83c82297da396cf5aacd36403baeda944a89d745f9983be52a1ae6eb4d7c6ad204d5a1e1c47f7e4e8634567a0c06d", 0x5f}, {&(0x7f0000000480)="64f8cd16ba247d12238c857018266a4d587c90a90849b81bc06318aff7900a4fd6b702b64c15ce9daebbf29000eb8bb168c8218d198a6a9e15e13ad5b47013e92975cfb76783c2444110c0e633b8f0ab3ea87a1d0f9a93eaeb35f17323851c25f70365e672e60b20484be6ea90d42ea10d9dbff78425b94588f4d20d60a2f9eafb0d23d70ea00c39dceb85ff1abc4a0806ae3145ac436c4c26db28af8a294950f977acc90c273830a70ab86f22fa794e47ae3d39a38c0ea6ab30569d31d53aacdcfb72fc30aa2b98c6741d74e4aeed666abbd1dac73af9b509b7ab5127b33f4bd854fc33096d75da", 0xe8}], 0x3) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x6, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000020000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r8, 0x1, 0x3d, 0x0, &(0x7f0000000100)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000305ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="01c00000000000001c0012800b0001006d616373656300000c00028005000f000100000008000500", @ANYRES32=r7, @ANYBLOB="cf8c43f8f1a026989b09fc965b6b305352447dd8d1d5f2861d"], 0x44}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x1d, r7}, 0x10, &(0x7f0000000580)={&(0x7f00000003c0)={0x7, 0x400, 0x7, {r10, r11/1000+10000}, {}, {0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "e175760d92bdd014a93cc78275da261c6387c54bca802a3805de5c0b016f1578d2d0834d21c868d4da59c289087a35a6e7efaead1642a674bf9455783789cb9f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @loopback}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0xffff, 0x1}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r12, 0xc020f509, &(0x7f0000000000)={r12, 0x81, 0x5a8, 0x4}) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000000c0), 0x1, 0x0, 0x25}, 0x84) 1m16.681112206s ago: executing program 4 (id=789): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) syz_emit_ethernet(0x56, &(0x7f0000005900)=ANY=[@ANYBLOB="aaaaaaaaaaaa8f064ab6bf7c86dd606410a60020000020010000000000000000000000000001fe8000000000000000000000000000aa0003000000000000050200000710"], 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001600000126bd7000ffdbdf25ac1e0101000000000000000000000000fc0100000000000000000000000000014e2000004e2300080a0080a02f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8fffffffdffffff0300000000000000ec0300000000000002000000000000000700000000000000060000000000000005000000000000000800000000000000112c0000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd700000000000020002020000000000000000000000001d1b00000c000f00f8ffffffffffffff"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1m16.68071129s ago: executing program 4 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000140)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m16.470341558s ago: executing program 4 (id=797): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)={0x28, 0x4, 0x0, {0x2, 0x1}}, 0x28) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) close(r1) 1m16.391711624s ago: executing program 4 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000140001000000000000000000021fc800", @ANYRES32=r1, @ANYBLOB="080002007f0000011400060006000000018000000400000008000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e601bae74656e642c6163638173733d616e792c63616368653d66736361636865"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, 0x0) r6 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xb4b98c1b0abec916, 0x86, 0xe}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0x5, 0x9, 0x1, 0x9, "58b654", 0x1d}}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) open(&(0x7f0000000300)='./file0\x00', 0x40000, 0x10) ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000340)=0x4) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0x18) ioctl$KVM_RUN(r4, 0xae80, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$kcm(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$input_event(r10, &(0x7f0000000180)={{}, 0x1f, 0x4, 0x7}, 0x18) 1m16.328626472s ago: executing program 4 (id=803): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) fcntl$lock(r0, 0x26, &(0x7f0000000680)={0x0, 0x2, 0x6d9, 0x8000000000000000, r1}) (async) fstat(r0, &(0x7f00000005c0)) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async) socket$inet(0x2, 0x8, 0x3956) 1m16.178655939s ago: executing program 4 (id=807): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000006"], 0x0, 0x26}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@ipv4_newaddr={0x28, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x50, 0xff, r2}, [@IFA_LOCAL={0xfffffffffffffe8f, 0x2, @initdev={0xac, 0x1e, 0xfd, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x4001) 1m1.201091427s ago: executing program 33 (id=807): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000006"], 0x0, 0x26}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@ipv4_newaddr={0x28, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x50, 0xff, r2}, [@IFA_LOCAL={0xfffffffffffffe8f, 0x2, @initdev={0xac, 0x1e, 0xfd, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x4001) 36.168737652s ago: executing program 0 (id=1124): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000300)={0x1, 0xdd, "9bb0de8dacfd52fbd0899cf06f65bc0491fab485aa21a80a2ab666ad1c73e8efb9e97ff26c6dc96f0c12c2dff3174af320377de105ffcd4ecec357a754f9096f85e23a3a8f18b0c4f6b9b6e73ffb609fc6a7258a834ac76d279b9a9b8f6aa7ecc2eb53df5f6592893c28c1cdd9bd0c89bd724cac1e69e13b76dea26651fd8cf076011f26eaf0bd5c17fa9f055c4dcf558173586d649e5b1295551eb2a6ff029ec92b7f315e37a2ed01faffb7595ac234ee5f13ada1aaebec36b547f7edd82ef99065dd7f352b33e0a2d724d19f06fb5ac8b93be703955ad122c63bceb3"}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xc) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) getdents(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x11) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) mincore(&(0x7f0000a4a000/0xb000)=nil, 0xb000, &(0x7f0000000280)=""/87) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) 29.918804833s ago: executing program 0 (id=1124): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000300)={0x1, 0xdd, "9bb0de8dacfd52fbd0899cf06f65bc0491fab485aa21a80a2ab666ad1c73e8efb9e97ff26c6dc96f0c12c2dff3174af320377de105ffcd4ecec357a754f9096f85e23a3a8f18b0c4f6b9b6e73ffb609fc6a7258a834ac76d279b9a9b8f6aa7ecc2eb53df5f6592893c28c1cdd9bd0c89bd724cac1e69e13b76dea26651fd8cf076011f26eaf0bd5c17fa9f055c4dcf558173586d649e5b1295551eb2a6ff029ec92b7f315e37a2ed01faffb7595ac234ee5f13ada1aaebec36b547f7edd82ef99065dd7f352b33e0a2d724d19f06fb5ac8b93be703955ad122c63bceb3"}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xc) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) getdents(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x11) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) mincore(&(0x7f0000a4a000/0xb000)=nil, 0xb000, &(0x7f0000000280)=""/87) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) 23.279298255s ago: executing program 0 (id=1124): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000300)={0x1, 0xdd, "9bb0de8dacfd52fbd0899cf06f65bc0491fab485aa21a80a2ab666ad1c73e8efb9e97ff26c6dc96f0c12c2dff3174af320377de105ffcd4ecec357a754f9096f85e23a3a8f18b0c4f6b9b6e73ffb609fc6a7258a834ac76d279b9a9b8f6aa7ecc2eb53df5f6592893c28c1cdd9bd0c89bd724cac1e69e13b76dea26651fd8cf076011f26eaf0bd5c17fa9f055c4dcf558173586d649e5b1295551eb2a6ff029ec92b7f315e37a2ed01faffb7595ac234ee5f13ada1aaebec36b547f7edd82ef99065dd7f352b33e0a2d724d19f06fb5ac8b93be703955ad122c63bceb3"}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xc) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) getdents(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x11) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) mincore(&(0x7f0000a4a000/0xb000)=nil, 0xb000, &(0x7f0000000280)=""/87) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) 16.819661668s ago: executing program 0 (id=1124): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000300)={0x1, 0xdd, "9bb0de8dacfd52fbd0899cf06f65bc0491fab485aa21a80a2ab666ad1c73e8efb9e97ff26c6dc96f0c12c2dff3174af320377de105ffcd4ecec357a754f9096f85e23a3a8f18b0c4f6b9b6e73ffb609fc6a7258a834ac76d279b9a9b8f6aa7ecc2eb53df5f6592893c28c1cdd9bd0c89bd724cac1e69e13b76dea26651fd8cf076011f26eaf0bd5c17fa9f055c4dcf558173586d649e5b1295551eb2a6ff029ec92b7f315e37a2ed01faffb7595ac234ee5f13ada1aaebec36b547f7edd82ef99065dd7f352b33e0a2d724d19f06fb5ac8b93be703955ad122c63bceb3"}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xc) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) getdents(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x11) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) mincore(&(0x7f0000a4a000/0xb000)=nil, 0xb000, &(0x7f0000000280)=""/87) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) 10.529245998s ago: executing program 0 (id=1124): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000300)={0x1, 0xdd, "9bb0de8dacfd52fbd0899cf06f65bc0491fab485aa21a80a2ab666ad1c73e8efb9e97ff26c6dc96f0c12c2dff3174af320377de105ffcd4ecec357a754f9096f85e23a3a8f18b0c4f6b9b6e73ffb609fc6a7258a834ac76d279b9a9b8f6aa7ecc2eb53df5f6592893c28c1cdd9bd0c89bd724cac1e69e13b76dea26651fd8cf076011f26eaf0bd5c17fa9f055c4dcf558173586d649e5b1295551eb2a6ff029ec92b7f315e37a2ed01faffb7595ac234ee5f13ada1aaebec36b547f7edd82ef99065dd7f352b33e0a2d724d19f06fb5ac8b93be703955ad122c63bceb3"}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xc) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) getdents(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x11) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) mincore(&(0x7f0000a4a000/0xb000)=nil, 0xb000, &(0x7f0000000280)=""/87) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) 6.190405177s ago: executing program 2 (id=1455): epoll_create1(0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6}) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x8e, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x51, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000000)="d215ea18915d38", 0x7) 4.180369751s ago: executing program 0 (id=1124): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000300)={0x1, 0xdd, "9bb0de8dacfd52fbd0899cf06f65bc0491fab485aa21a80a2ab666ad1c73e8efb9e97ff26c6dc96f0c12c2dff3174af320377de105ffcd4ecec357a754f9096f85e23a3a8f18b0c4f6b9b6e73ffb609fc6a7258a834ac76d279b9a9b8f6aa7ecc2eb53df5f6592893c28c1cdd9bd0c89bd724cac1e69e13b76dea26651fd8cf076011f26eaf0bd5c17fa9f055c4dcf558173586d649e5b1295551eb2a6ff029ec92b7f315e37a2ed01faffb7595ac234ee5f13ada1aaebec36b547f7edd82ef99065dd7f352b33e0a2d724d19f06fb5ac8b93be703955ad122c63bceb3"}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xc) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) getdents(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x11) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) mincore(&(0x7f0000a4a000/0xb000)=nil, 0xb000, &(0x7f0000000280)=""/87) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) 3.109038225s ago: executing program 2 (id=1493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x3c}, 0x1, 0xf2ff, 0x0, 0x81}, 0x800) 3.061014373s ago: executing program 2 (id=1495): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x2}, 'port1\x00', 0xe3, 0x1b1c07}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setresuid(0x0, 0xee00, 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r3 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/62, 0x3e}], 0x1) (async) close_range(r2, r2, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 3.060814808s ago: executing program 2 (id=1496): mkdir(&(0x7f0000000100)='./file0\x00', 0x91) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0600ff0300000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r4 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={&(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, r6}, 0x38) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000340)=ANY=[@ANYBLOB="647938c373"]) 2.941115333s ago: executing program 1 (id=1499): r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xb8d5, 0x80, 0x3, 0x289}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) close_range(r0, 0xffffffffffffffff, 0xfe) 2.801119928s ago: executing program 1 (id=1500): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r3 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xb8d5, 0x80, 0x3, 0x289}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x4) close_range(r3, 0xffffffffffffffff, 0x0) 2.631157343s ago: executing program 1 (id=1501): epoll_create1(0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523033529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717ed76b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce3c4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa1557cfcfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865074e5dde3177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309877816048f24"}, 0x418, 0x6}) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x8e, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x51, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000000)="d215ea18915d38", 0x7) 1.940870047s ago: executing program 5 (id=1504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x10, 0x145, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @fd}]}]}, @typed={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4040040) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000400), 0x0}, 0x50) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (rerun: 32) 1.940570066s ago: executing program 5 (id=1505): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x169b000000, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x200, 0x0, 0x1, 0x45e, '\x00', 0x0, r0, 0x0, 0x1, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000016c0)={0x78, r3, 0x20, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}}, 0x40010) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x13, 0x10000, 0x0, 0x8000, 0x4086, r1, 0x3b55, '\x00', r4, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) userfaultfd(0x80800) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001380)={0x1, 0xffffffffffffffff}, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup(r10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r11, 0x4068aea3, &(0x7f0000001980)={0xbe, 0x0, 0x80001}) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000034d564b"]) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='Qt\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050d000004000000000000000000000000000000000000006070e75756c8954f4b3d8ba87821471f69caa832f88c15519337162f1405ed11aa2e19ed17964d725402d7089f7590a24c93b3abef6e7ba5f0bfd05078aa1c5ba77fee9d70d976b3cdcf8059d0738de57ce2b6ad2f27894da35db2573d08be9395"], 0x50) r13 = syz_open_dev$vcsn(&(0x7f0000001440), 0x9, 0x40080) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1e000000f25d0000070000000600000000200000", @ANYRES32, @ANYBLOB="437714607e06003dff0100000020000000000000000000000043c51786a60000e0ac380be04d61fb594cbeab1cf49ae648934df2ff57a3a5c09aa7d20ff6604e2ad0631a3c7b7af60c09fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000020000000700"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x1b, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x1, 0x1, 0x4, 0xb, 0x28, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0xae, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x87, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000012c0)={0x2, 0x5, 0x7, 0x1ff}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001500)=[r5, r6, r7, r11, r12, r13, r14], &(0x7f0000001540)=[{0x2, 0x1, 0x6, 0x5}, {0x0, 0x2, 0xa}, {0x4, 0x5, 0xb, 0x7}, {0x5, 0x5, 0xa, 0xf}, {0x5, 0x1, 0x8, 0xb}, {0x5, 0x4, 0x7, 0x8}, {0x4, 0x1, 0xc, 0xa}, {0x3, 0x1, 0x7, 0xa}, {0x2, 0x3, 0x4006, 0xb}, {0x0, 0x5, 0x10, 0x7}], 0x10, 0x8}, 0x94) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x6, &(0x7f0000000080)={0x21, "cbc19de8d51fc1a057020ccfd7da422ceb02449515512b2bde3ea4bdb44a7af50b"}}) r15 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$BTRFS_IOC_ADD_DEV(r15, 0xb701, 0x0) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) r17 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r17, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r17, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x100, 0x10000000, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) sendmsg$nl_xfrm(r16, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000002000000000ac1414bb0000000000000000000000000000001600"/55, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x6) 1.720987023s ago: executing program 5 (id=1506): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x70bd2c, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @in=@initdev={0xac, 0x1e, 0xfa, 0x0}, @in=@broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x3, 0x2f}]}, 0xc0}}, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x4f) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001800dd8d0000000000000000020000000100000600000000060015000500000058001680540001"], 0x7c}}, 0x20000810) 1.41746255s ago: executing program 5 (id=1507): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c050}, 0x0) 1.167631167s ago: executing program 5 (id=1508): setreuid(0x0, 0xee00) r0 = syz_io_uring_setup(0x24fc, &(0x7f00000000c0)={0x0, 0x0, 0x10100, 0x1, 0xe6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update ecryptfs\x00'], 0x1a, 0xfffffffffffffffc) syz_emit_vhci(&(0x7f00000027c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x3, 0x0, 0x6, 0x0, 0xa, 0x0, 0xf1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.091161118s ago: executing program 5 (id=1509): r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xb8d5, 0x80, 0x3, 0x289}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) close_range(r0, 0xffffffffffffffff, 0x500) 1.028891185s ago: executing program 1 (id=1510): r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xb8d5, 0x80, 0x3, 0x289}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = dup3(r0, r1, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x5) sendto(r2, &(0x7f0000000100)="787772a5fbe5ee6d20b930488641482cf85eced4ee02523a51ef50bbd7a985d077a6badb42ca37e3a3742bc763bd95bcbd810492f3b9a03e03f98672add3ac61ebd3296bb37e478a34133f019420fd49452f842506b1349afbe67c0abd9e98fcc5c7ebf46e74ac19d1431b927ec2bc6e96234c7b13951b9e85172e802636b17567c843c0841be57c709a65d21b7ccd61bca9e12cd5b9b54fef96cc8f6d7bc1399bc217f612a0fcd049dae38dd68c87550057de72", 0xb4, 0x8080, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.028753036s ago: executing program 1 (id=1511): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') exit(0x1ff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 131.176722ms ago: executing program 1 (id=1512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x3c}, 0x1, 0xfff2, 0x0, 0x81}, 0x800) 560.947µs ago: executing program 2 (id=1513): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 0s ago: executing program 2 (id=1514): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000500)={0x0, 0xcd1d, 0x10100, 0xfffffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2d, 0x0, &(0x7f00000017c0)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)="5c00000012006bab9a3fe3d86e17aa0e076b876c1d0048007ea60864160af3650400410838001d001931a0e69ee517d34460bc06000000a76a5e2453375fa82e9d63c5d17405251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000200000100c28000080005000300000008000500", @ANYRES32=r7, @ANYBLOB="4de0542d72f9b73674f621555e1a010b"], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r8 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace(0x4211, r8) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002100)=[{&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000780)=""/184, 0xb8}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000002000)=""/194, 0xc2}], 0x9) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df", 0x2e) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fb"], 0x125) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000004c0)='htcp\x00', 0x5) close(r4) 0s ago: executing program 2 (id=1516): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x1) (async) fcntl$setlease(r4, 0x400, 0x1) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000019580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x7}]}}]}, 0x40}}, 0x800) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000019580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x7}]}}]}, 0x40}}, 0x800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x80, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$alg(0x26, 0x5, 0x0) (async) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000200), 0xf, 0x400000) (async) r14 = syz_open_dev$vcsa(&(0x7f0000000200), 0xf, 0x400000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xcc, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2000000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000900)={[{@metacopy_on}, {@userxattr}]}) kernel console output (not intermixed with test programs): x+0x512/0x640 [ 131.214503][ T9885] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 131.214519][ T9885] should_failslab+0xc2/0x120 [ 131.214536][ T9885] __kmalloc_cache_noprof+0x6a/0x3e0 [ 131.214550][ T9885] ? tcf_exts_init_ex+0x119/0x610 [ 131.214569][ T9885] tcf_exts_init_ex+0x119/0x610 [ 131.214586][ T9885] basic_change+0x263/0x1400 [ 131.214605][ T9885] ? __pfx_basic_change+0x10/0x10 [ 131.214623][ T9885] ? __pfx_basic_change+0x10/0x10 [ 131.214633][ T9885] tc_new_tfilter+0xa35/0x2340 [ 131.214651][ T9885] ? avc_has_perm_noaudit+0x117/0x3b0 [ 131.214664][ T9885] ? __pfx_tc_new_tfilter+0x10/0x10 [ 131.214689][ T9885] ? find_held_lock+0x2b/0x80 [ 131.214704][ T9885] ? __pfx_tc_new_tfilter+0x10/0x10 [ 131.214714][ T9885] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 131.214732][ T9885] ? __pfx_tc_new_tfilter+0x10/0x10 [ 131.214744][ T9885] rtnetlink_rcv_msg+0x95b/0xe90 [ 131.214761][ T9885] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.214782][ T9885] ? ref_tracker_free+0x37c/0x830 [ 131.214799][ T9885] netlink_rcv_skb+0x158/0x420 [ 131.214811][ T9885] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.214829][ T9885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.214845][ T9885] ? netlink_deliver_tap+0x1ae/0xd30 [ 131.214865][ T9885] netlink_unicast+0x53a/0x7f0 [ 131.214878][ T9885] ? __pfx_netlink_unicast+0x10/0x10 [ 131.214893][ T9885] netlink_sendmsg+0x8d1/0xdd0 [ 131.214906][ T9885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.214923][ T9885] ____sys_sendmsg+0xa95/0xc70 [ 131.214935][ T9885] ? copy_msghdr_from_user+0x10a/0x160 [ 131.214951][ T9885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.214969][ T9885] ___sys_sendmsg+0x134/0x1d0 [ 131.214985][ T9885] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.214999][ T9885] ? __lock_acquire+0x622/0x1c90 [ 131.215027][ T9885] __sys_sendmsg+0x16d/0x220 [ 131.215043][ T9885] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.215064][ T9885] ? fput+0x70/0xf0 [ 131.215077][ T9885] do_syscall_64+0xcd/0x4c0 [ 131.215094][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.215105][ T9885] RIP: 0033:0x7f84bcd8e929 [ 131.215114][ T9885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.215125][ T9885] RSP: 002b:00007f84bdc0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.215136][ T9885] RAX: ffffffffffffffda RBX: 00007f84bcfb5fa0 RCX: 00007f84bcd8e929 [ 131.215142][ T9885] RDX: 0000000000000800 RSI: 0000200000006040 RDI: 0000000000000006 [ 131.215149][ T9885] RBP: 00007f84bdc0f090 R08: 0000000000000000 R09: 0000000000000000 [ 131.215155][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.215161][ T9885] R13: 0000000000000000 R14: 00007f84bcfb5fa0 R15: 00007ffeeb4292c8 [ 131.215175][ T9885] [ 131.318491][ C2] vkms_vblank_simulate: vblank timer overrun [ 131.341953][ T1330] usb 10-1: Using ep0 maxpacket: 32 [ 131.345527][ T1330] usb 10-1: config 0 has an invalid interface number: 231 but max is 0 [ 131.348279][ T1330] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.351476][ T1330] usb 10-1: config 0 has no interface number 0 [ 131.354359][ T1330] usb 10-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 131.357529][ T1330] usb 10-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 131.361063][ T9889] program syz.2.1037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.363174][ T1330] usb 10-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 131.368522][ T1330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.371041][ T1330] usb 10-1: Product: syz [ 131.372484][ T1330] usb 10-1: Manufacturer: syz [ 131.373987][ T1330] usb 10-1: SerialNumber: syz [ 131.376710][ T1330] usb 10-1: config 0 descriptor?? [ 131.378813][ T9869] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 131.382116][ T1330] usb-storage 10-1:0.231: USB Mass Storage device detected [ 131.395068][ T9807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.443157][ T9807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.663813][ T53] usb 10-1: USB disconnect, device number 2 [ 131.731916][ T6019] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 131.871958][ T6019] usb 5-1: device descriptor read/64, error -71 [ 132.111981][ T6019] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 132.192722][ T9907] can0: slcan on ptm0. [ 132.241938][ T6019] usb 5-1: device descriptor read/64, error -71 [ 132.282893][ T9906] can0 (unregistered): slcan off ptm0. [ 132.352052][ T6019] usb usb5-port1: attempt power cycle [ 132.354558][ T9923] FAULT_INJECTION: forcing a failure. [ 132.354558][ T9923] name failslab, interval 1, probability 0, space 0, times 0 [ 132.359364][ T9923] CPU: 1 UID: 0 PID: 9923 Comm: syz.1.1045 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 132.359401][ T9923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.359412][ T9923] Call Trace: [ 132.359417][ T9923] [ 132.359422][ T9923] dump_stack_lvl+0x16c/0x1f0 [ 132.359457][ T9923] should_fail_ex+0x512/0x640 [ 132.359477][ T9923] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 132.359493][ T9923] ? __pfx_basic_classify+0x10/0x10 [ 132.359511][ T9923] should_failslab+0xc2/0x120 [ 132.359527][ T9923] __kmalloc_cache_noprof+0x6a/0x3e0 [ 132.359541][ T9923] ? _raw_read_unlock+0x28/0x50 [ 132.359556][ T9923] ? basic_init+0x43/0x1f0 [ 132.359574][ T9923] ? __pfx_basic_classify+0x10/0x10 [ 132.359595][ T9923] basic_init+0x43/0x1f0 [ 132.359611][ T9923] tc_new_tfilter+0x1147/0x2340 [ 132.359630][ T9923] ? avc_has_perm_noaudit+0x117/0x3b0 [ 132.359643][ T9923] ? __pfx_tc_new_tfilter+0x10/0x10 [ 132.359668][ T9923] ? find_held_lock+0x2b/0x80 [ 132.359682][ T9923] ? __pfx_tc_new_tfilter+0x10/0x10 [ 132.359693][ T9923] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 132.359710][ T9923] ? __pfx_tc_new_tfilter+0x10/0x10 [ 132.359722][ T9923] rtnetlink_rcv_msg+0x95b/0xe90 [ 132.359740][ T9923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.359760][ T9923] ? ref_tracker_free+0x37c/0x830 [ 132.359778][ T9923] netlink_rcv_skb+0x158/0x420 [ 132.359789][ T9923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.359806][ T9923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.359822][ T9923] ? netlink_deliver_tap+0x1ae/0xd30 [ 132.359843][ T9923] netlink_unicast+0x53a/0x7f0 [ 132.359855][ T9923] ? __pfx_netlink_unicast+0x10/0x10 [ 132.359871][ T9923] netlink_sendmsg+0x8d1/0xdd0 [ 132.359884][ T9923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.359900][ T9923] ____sys_sendmsg+0xa95/0xc70 [ 132.359913][ T9923] ? copy_msghdr_from_user+0x10a/0x160 [ 132.359929][ T9923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.359946][ T9923] ___sys_sendmsg+0x134/0x1d0 [ 132.359962][ T9923] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.359977][ T9923] ? __lock_acquire+0x622/0x1c90 [ 132.360004][ T9923] __sys_sendmsg+0x16d/0x220 [ 132.360019][ T9923] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.360044][ T9923] do_syscall_64+0xcd/0x4c0 [ 132.360061][ T9923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.360072][ T9923] RIP: 0033:0x7f0b2578e929 [ 132.360082][ T9923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.360093][ T9923] RSP: 002b:00007f0b26519038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.360103][ T9923] RAX: ffffffffffffffda RBX: 00007f0b259b5fa0 RCX: 00007f0b2578e929 [ 132.360110][ T9923] RDX: 0000000000000800 RSI: 0000200000006040 RDI: 0000000000000006 [ 132.360116][ T9923] RBP: 00007f0b26519090 R08: 0000000000000000 R09: 0000000000000000 [ 132.360123][ T9923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.360129][ T9923] R13: 0000000000000000 R14: 00007f0b259b5fa0 R15: 00007ffe25b87458 [ 132.360143][ T9923] [ 132.543864][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.556993][ T9943] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 132.565173][ T9946] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 132.567040][ T9946] syzkaller1: persist disabled [ 132.691937][ T6019] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 132.712317][ T6019] usb 5-1: device descriptor read/8, error -71 [ 132.746141][ T9953] netlink: 'syz.5.1053': attribute type 1 has an invalid length. [ 132.792215][ T5961] Bluetooth: hci2: command tx timeout [ 132.806377][ T9961] gretap1: entered promiscuous mode [ 132.816899][ T9965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9965 comm=syz.2.1057 [ 132.816922][ T9964] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9964 comm=syz.2.1057 [ 132.823600][ T9957] kvm: user requested TSC rate below hardware speed [ 132.827235][ T9963] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=9963 comm=syz.2.1057 [ 132.951931][ T6019] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 132.972353][ T6019] usb 5-1: device descriptor read/8, error -71 [ 133.012673][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'. [ 133.015829][ T9971] FAULT_INJECTION: forcing a failure. [ 133.015829][ T9971] name failslab, interval 1, probability 0, space 0, times 0 [ 133.019849][ T9971] CPU: 2 UID: 0 PID: 9971 Comm: syz.1.1059 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 133.019864][ T9971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.019871][ T9971] Call Trace: [ 133.019877][ T9971] [ 133.019882][ T9971] dump_stack_lvl+0x16c/0x1f0 [ 133.019901][ T9971] should_fail_ex+0x512/0x640 [ 133.019917][ T9971] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 133.019933][ T9971] should_failslab+0xc2/0x120 [ 133.019950][ T9971] __kmalloc_cache_noprof+0x6a/0x3e0 [ 133.019963][ T9971] ? __nla_parse+0x40/0x60 [ 133.019972][ T9971] ? basic_change+0x226/0x1400 [ 133.019986][ T9971] basic_change+0x226/0x1400 [ 133.019999][ T9971] ? __pfx_basic_change+0x10/0x10 [ 133.020016][ T9971] ? __pfx_basic_change+0x10/0x10 [ 133.020026][ T9971] tc_new_tfilter+0xa35/0x2340 [ 133.020047][ T9971] ? __pfx_tc_new_tfilter+0x10/0x10 [ 133.020072][ T9971] ? find_held_lock+0x2b/0x80 [ 133.020087][ T9971] ? __pfx_tc_new_tfilter+0x10/0x10 [ 133.020097][ T9971] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 133.020114][ T9971] ? __pfx_tc_new_tfilter+0x10/0x10 [ 133.020126][ T9971] rtnetlink_rcv_msg+0x95b/0xe90 [ 133.020144][ T9971] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.020164][ T9971] ? ref_tracker_free+0x37c/0x830 [ 133.020182][ T9971] netlink_rcv_skb+0x158/0x420 [ 133.020193][ T9971] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.020211][ T9971] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.020227][ T9971] ? netlink_deliver_tap+0x1ae/0xd30 [ 133.020247][ T9971] netlink_unicast+0x53a/0x7f0 [ 133.020259][ T9971] ? __pfx_netlink_unicast+0x10/0x10 [ 133.020275][ T9971] netlink_sendmsg+0x8d1/0xdd0 [ 133.020288][ T9971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.020304][ T9971] ____sys_sendmsg+0xa95/0xc70 [ 133.020316][ T9971] ? copy_msghdr_from_user+0x10a/0x160 [ 133.020332][ T9971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.020350][ T9971] ___sys_sendmsg+0x134/0x1d0 [ 133.020366][ T9971] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.020380][ T9971] ? __lock_acquire+0x622/0x1c90 [ 133.020407][ T9971] __sys_sendmsg+0x16d/0x220 [ 133.020423][ T9971] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.020447][ T9971] do_syscall_64+0xcd/0x4c0 [ 133.020465][ T9971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.020476][ T9971] RIP: 0033:0x7f0b2578e929 [ 133.020485][ T9971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.020496][ T9971] RSP: 002b:00007f0b26519038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.020507][ T9971] RAX: ffffffffffffffda RBX: 00007f0b259b5fa0 RCX: 00007f0b2578e929 [ 133.020514][ T9971] RDX: 0000000000000800 RSI: 0000200000006040 RDI: 0000000000000006 [ 133.020520][ T9971] RBP: 00007f0b26519090 R08: 0000000000000000 R09: 0000000000000000 [ 133.020526][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.020533][ T9971] R13: 0000000000000000 R14: 00007f0b259b5fa0 R15: 00007ffe25b87458 [ 133.020546][ T9971] [ 133.083622][ T6019] usb usb5-port1: unable to enumerate USB device [ 133.975410][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1065'. [ 134.091713][ T9999] netlink: 'syz.5.1067': attribute type 10 has an invalid length. [ 134.096129][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.098758][ T9999] bridge_slave_1: left allmulticast mode [ 134.100570][ T9999] bridge_slave_1: left promiscuous mode [ 134.102588][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.108345][ T9999] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 134.111549][ T9985] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 134.401970][ T2032] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 134.573455][ T2032] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 134.577081][ T2032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.580494][ T2032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.584152][ T2032] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 134.589768][ T2032] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 134.592968][ T2032] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 134.595726][ T2032] usb 6-1: Manufacturer: syz [ 134.598918][ T2032] usb 6-1: config 0 descriptor?? [ 134.862171][ T5961] Bluetooth: hci2: command tx timeout [ 134.901799][T10032] FAULT_INJECTION: forcing a failure. [ 134.901799][T10032] name failslab, interval 1, probability 0, space 0, times 0 [ 134.909755][T10032] CPU: 3 UID: 0 PID: 10032 Comm: syz.5.1077 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 134.909781][T10032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.909791][T10032] Call Trace: [ 134.909797][T10032] [ 134.909803][T10032] dump_stack_lvl+0x16c/0x1f0 [ 134.909832][T10032] should_fail_ex+0x512/0x640 [ 134.909855][T10032] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 134.909881][T10032] should_failslab+0xc2/0x120 [ 134.909906][T10032] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 134.909929][T10032] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 134.909954][T10032] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 134.909979][T10032] idr_get_free+0x528/0xa30 [ 134.910011][T10032] idr_alloc_u32+0x190/0x2f0 [ 134.910034][T10032] ? __pfx_idr_alloc_u32+0x10/0x10 [ 134.910059][T10032] ? tcf_exts_init_ex+0x1bc/0x610 [ 134.910087][T10032] basic_change+0xcb1/0x1400 [ 134.910108][T10032] ? __pfx_basic_change+0x10/0x10 [ 134.910137][T10032] ? __pfx_basic_change+0x10/0x10 [ 134.910151][T10032] tc_new_tfilter+0xa35/0x2340 [ 134.910186][T10032] ? __pfx_tc_new_tfilter+0x10/0x10 [ 134.910230][T10032] ? find_held_lock+0x2b/0x80 [ 134.910251][T10032] ? __pfx_tc_new_tfilter+0x10/0x10 [ 134.910267][T10032] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 134.910293][T10032] ? __pfx_tc_new_tfilter+0x10/0x10 [ 134.910312][T10032] rtnetlink_rcv_msg+0x95b/0xe90 [ 134.910338][T10032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.910370][T10032] ? ref_tracker_free+0x37c/0x830 [ 134.910397][T10032] netlink_rcv_skb+0x158/0x420 [ 134.910413][T10032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.910440][T10032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.910466][T10032] ? netlink_deliver_tap+0x1ae/0xd30 [ 134.910498][T10032] netlink_unicast+0x53a/0x7f0 [ 134.910519][T10032] ? __pfx_netlink_unicast+0x10/0x10 [ 134.910544][T10032] netlink_sendmsg+0x8d1/0xdd0 [ 134.910592][T10032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.910619][T10032] ____sys_sendmsg+0xa95/0xc70 [ 134.910638][T10032] ? copy_msghdr_from_user+0x10a/0x160 [ 134.910660][T10032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.910689][T10032] ___sys_sendmsg+0x134/0x1d0 [ 134.910713][T10032] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.910733][T10032] ? __lock_acquire+0x622/0x1c90 [ 134.910779][T10032] __sys_sendmsg+0x16d/0x220 [ 134.910802][T10032] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.910843][T10032] do_syscall_64+0xcd/0x4c0 [ 134.910869][T10032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.910886][T10032] RIP: 0033:0x7f61b9d8e929 [ 134.910899][T10032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.910914][T10032] RSP: 002b:00007f61bac08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.910931][T10032] RAX: ffffffffffffffda RBX: 00007f61b9fb5fa0 RCX: 00007f61b9d8e929 [ 134.910942][T10032] RDX: 0000000000000800 RSI: 0000200000006040 RDI: 0000000000000006 [ 134.910952][T10032] RBP: 00007f61bac08090 R08: 0000000000000000 R09: 0000000000000000 [ 134.910962][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.910972][T10032] R13: 0000000000000000 R14: 00007f61b9fb5fa0 R15: 00007ffd030360b8 [ 134.910996][T10032] [ 135.014611][ T2032] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 135.021174][ T2032] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 135.043751][T10039] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.277129][ T2032] usb 6-1: USB disconnect, device number 10 [ 135.342081][ T7035] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 135.344522][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'. [ 135.471933][ T7035] usb 10-1: device descriptor read/64, error -71 [ 135.721991][ T7035] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 135.824891][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 135.824906][ T40] audit: type=1400 audit(2000000329.623:888): avc: denied { ioctl } for pid=10061 comm="syz.1.1085" path="socket:[40031]" dev="sockfs" ino=40031 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.851951][ T7035] usb 10-1: device descriptor read/64, error -71 [ 135.962686][ T7035] usb usb10-port1: attempt power cycle [ 136.001463][T10073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=10073 comm=syz.0.1088 [ 136.001933][T10072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=10072 comm=syz.0.1088 [ 136.008079][T10073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1088'. [ 136.045525][ T40] audit: type=1400 audit(2000000329.843:889): avc: denied { getopt } for pid=10071 comm="syz.0.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.312059][ T7035] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 136.333548][ T7035] usb 10-1: device descriptor read/8, error -71 [ 136.444303][T10079] FAULT_INJECTION: forcing a failure. [ 136.444303][T10079] name failslab, interval 1, probability 0, space 0, times 0 [ 136.448634][T10079] CPU: 3 UID: 0 PID: 10079 Comm: syz.0.1089 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 136.448658][T10079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.448668][T10079] Call Trace: [ 136.448674][T10079] [ 136.448680][T10079] dump_stack_lvl+0x16c/0x1f0 [ 136.448706][T10079] should_fail_ex+0x512/0x640 [ 136.448731][T10079] should_failslab+0xc2/0x120 [ 136.448756][T10079] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 136.448778][T10079] ? skb_clone+0x190/0x3f0 [ 136.448801][T10079] skb_clone+0x190/0x3f0 [ 136.448824][T10079] netlink_deliver_tap+0xabd/0xd30 [ 136.448857][T10079] netlink_unicast+0x6b2/0x7f0 [ 136.448874][T10079] ? __pfx_netlink_unicast+0x10/0x10 [ 136.448890][T10079] ? tfilter_notify_prep+0x1b4/0x200 [ 136.448920][T10079] nlmsg_notify+0x1c6/0x220 [ 136.448939][T10079] tfilter_notify+0x23b/0x2d0 [ 136.448963][T10079] tc_new_tfilter+0x174b/0x2340 [ 136.448995][T10079] ? avc_has_perm_noaudit+0x117/0x3b0 [ 136.449014][T10079] ? __pfx_tc_new_tfilter+0x10/0x10 [ 136.449047][T10079] ? find_held_lock+0x2b/0x80 [ 136.449069][T10079] ? __pfx_tc_new_tfilter+0x10/0x10 [ 136.449084][T10079] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 136.449108][T10079] ? __pfx_tc_new_tfilter+0x10/0x10 [ 136.449124][T10079] rtnetlink_rcv_msg+0x95b/0xe90 [ 136.449147][T10079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.449178][T10079] ? ref_tracker_free+0x37c/0x830 [ 136.449203][T10079] netlink_rcv_skb+0x158/0x420 [ 136.449214][T10079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.449240][T10079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.449266][T10079] ? netlink_deliver_tap+0x1ae/0xd30 [ 136.449292][T10079] netlink_unicast+0x53a/0x7f0 [ 136.449309][T10079] ? __pfx_netlink_unicast+0x10/0x10 [ 136.449333][T10079] netlink_sendmsg+0x8d1/0xdd0 [ 136.449354][T10079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.449376][T10079] ____sys_sendmsg+0xa95/0xc70 [ 136.449388][T10079] ? copy_msghdr_from_user+0x10a/0x160 [ 136.449403][T10079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.449421][T10079] ___sys_sendmsg+0x134/0x1d0 [ 136.449441][T10079] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.449461][T10079] ? __lock_acquire+0x622/0x1c90 [ 136.449506][T10079] __sys_sendmsg+0x16d/0x220 [ 136.449525][T10079] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.449557][T10079] ? fput+0x70/0xf0 [ 136.449584][T10079] do_syscall_64+0xcd/0x4c0 [ 136.449606][T10079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.449622][T10079] RIP: 0033:0x7fd05a58e929 [ 136.449635][T10079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.449650][T10079] RSP: 002b:00007fd05b38c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.449666][T10079] RAX: ffffffffffffffda RBX: 00007fd05a7b5fa0 RCX: 00007fd05a58e929 [ 136.449675][T10079] RDX: 0000000000000800 RSI: 0000200000006040 RDI: 0000000000000006 [ 136.449681][T10079] RBP: 00007fd05b38c090 R08: 0000000000000000 R09: 0000000000000000 [ 136.449691][T10079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.449701][T10079] R13: 0000000000000000 R14: 00007fd05a7b5fa0 R15: 00007ffe14aeec78 [ 136.449724][T10079] [ 136.583519][ T7035] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 136.612467][ T7035] usb 10-1: device descriptor read/8, error -71 [ 136.732240][ T7035] usb usb10-port1: unable to enumerate USB device [ 136.739789][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 136.743623][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'. [ 137.161222][T10105] overlay: Bad value for 'workdir' [ 137.248580][T10097] hsr0: entered promiscuous mode [ 137.250747][T10097] macsec2: entered allmulticast mode [ 137.252707][T10097] hsr0: entered allmulticast mode [ 137.254565][T10097] hsr_slave_0: entered allmulticast mode [ 137.256627][T10097] hsr_slave_1: entered allmulticast mode [ 137.518602][ T40] audit: type=1400 audit(2000000331.313:890): avc: denied { watch } for pid=10119 comm="syz.2.1102" path="/260/file1" dev="autofs" ino=40159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 137.642013][ T837] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 137.674778][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1103'. [ 137.801993][ T837] usb 5-1: Using ep0 maxpacket: 16 [ 137.804972][ T837] usb 5-1: config 0 has no interfaces? [ 137.806797][ T837] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 137.809722][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.814589][ T837] usb 5-1: config 0 descriptor?? [ 138.019704][ T40] audit: type=1400 audit(2000000331.813:891): avc: denied { create } for pid=10111 comm="syz.0.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 138.025766][ T6157] usb 5-1: USB disconnect, device number 23 [ 138.299870][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1106'. [ 138.303090][T10134] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1106'. [ 138.335144][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1107'. [ 138.393398][ T40] audit: type=1400 audit(2000000332.193:892): avc: denied { write } for pid=10135 comm="syz.5.1107" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.529929][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1107'. [ 138.534393][T10136] bridge_slave_0: left allmulticast mode [ 138.536560][T10136] bridge_slave_0: left promiscuous mode [ 138.539977][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.764943][ T40] audit: type=1400 audit(2000000332.563:893): avc: denied { getopt } for pid=10159 comm="syz.0.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 138.861783][ T40] audit: type=1400 audit(2000000332.653:894): avc: denied { bind } for pid=10168 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.098971][T10179] kvm: MWAIT instruction emulated as NOP! [ 139.206087][T10182] Invalid source name [ 139.207462][T10182] UBIFS error (pid: 10182): cannot open "/dev/sg0", error -22 [ 139.267995][T10182] kvm: pic: non byte write [ 139.545743][ T1181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.616378][ T1181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.688662][ T5965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.689267][ T1181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.692665][ T5965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.697548][ T5965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.701936][ T5965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.705500][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.759106][ T1181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.816031][T10186] chnl_net:caif_netlink_parms(): no params data found [ 139.889699][T10186] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.892054][T10186] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.894388][T10186] bridge_slave_0: entered allmulticast mode [ 139.897025][T10186] bridge_slave_0: entered promiscuous mode [ 139.909505][T10186] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.911786][T10186] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.914630][T10186] bridge_slave_1: entered allmulticast mode [ 139.917824][T10186] bridge_slave_1: entered promiscuous mode [ 139.974457][T10186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.977844][ T1181] bridge_slave_1: left allmulticast mode [ 139.979633][ T1181] bridge_slave_1: left promiscuous mode [ 139.982798][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.986081][ T1181] bridge_slave_0: left allmulticast mode [ 139.987858][ T1181] bridge_slave_0: left promiscuous mode [ 139.989675][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.307819][ T40] audit: type=1400 audit(2000000334.103:895): avc: denied { ioctl } for pid=10204 comm="syz.1.1130" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.358960][T10209] program syz.1.1130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.368754][ T1181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.373780][ T1181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.377290][ T1181] bond0 (unregistering): Released all slaves [ 140.384286][T10186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.456861][T10186] team0: Port device team_slave_0 added [ 140.463670][T10186] team0: Port device team_slave_1 added [ 140.499738][T10186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.502316][T10186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.515866][T10186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.520054][T10186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.524181][T10186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.532287][T10186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.604941][T10222] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1133'. [ 140.609288][ T40] audit: type=1400 audit(2000000334.403:896): avc: denied { sqpoll } for pid=10220 comm="syz.5.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 140.630636][T10186] hsr_slave_0: entered promiscuous mode [ 140.639465][T10186] hsr_slave_1: entered promiscuous mode [ 140.642102][T10186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.645755][T10186] Cannot create hsr debugfs directory [ 140.670361][T10226] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1134'. [ 140.813443][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.816338][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.819776][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.822892][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.847383][ T1181] hsr0: left allmulticast mode [ 140.849088][ T1181] veth1_macvtap: left promiscuous mode [ 140.850838][ T1181] veth0_macvtap: left promiscuous mode [ 140.852814][ T1181] veth1_vlan: left promiscuous mode [ 140.854512][ T1181] veth0_vlan: left promiscuous mode [ 141.413246][ T1181] team0 (unregistering): Port device team_slave_1 removed [ 141.480939][ T1181] team0 (unregistering): Port device team_slave_0 removed [ 141.752017][ T5961] Bluetooth: hci1: command tx timeout [ 141.861274][ T40] audit: type=1326 audit(2000000335.653:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10245 comm="syz.2.1139" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x0 [ 142.048466][T10248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'. [ 142.093756][T10264] CIFS mount error: No usable UNC path provided in device string! [ 142.093756][T10264] [ 142.097624][T10264] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 142.107232][ T40] audit: type=1400 audit(2000000335.903:898): avc: denied { append } for pid=10263 comm="syz.1.1142" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 142.155231][T10268] misc userio: No port type given on /dev/userio [ 142.161953][ T40] audit: type=1400 audit(2000000335.953:899): avc: denied { accept } for pid=10267 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 142.243874][ T1181] IPVS: stop unused estimator thread 0... [ 142.304763][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'. [ 142.310321][ T40] audit: type=1400 audit(2000000336.103:900): avc: denied { read } for pid=10287 comm="syz.1.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.322383][T10291] xt_limit: Overflow, try lower: 1207959552/384 [ 142.369349][ T40] audit: type=1400 audit(2000000336.163:901): avc: denied { mount } for pid=10298 comm="syz.1.1150" name="/" dev="rpc_pipefs" ino=41241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 142.399795][ T40] audit: type=1400 audit(2000000336.193:902): avc: denied { bind } for pid=10306 comm="syz.5.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.449410][ T40] audit: type=1400 audit(2000000336.243:903): avc: denied { getopt } for pid=10306 comm="syz.5.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.608048][T10186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.618413][T10186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.627666][T10186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.637003][T10186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.657249][T10329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.689129][T10186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.699161][ T6157] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 142.700194][T10186] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.711305][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.714163][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.717484][ T6157] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 142.718719][T10340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.721240][ T1181] wlan1: authenticated [ 142.724259][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.727341][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.732664][ T1181] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 142.759059][T10186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.780208][ T79] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 142.782245][T10329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.785145][ T79] wlan1: associated [ 142.859138][T10186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.895710][T10186] veth0_vlan: entered promiscuous mode [ 142.903589][T10186] veth1_vlan: entered promiscuous mode [ 142.926816][T10186] veth0_macvtap: entered promiscuous mode [ 142.931389][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 142.935619][T10186] veth1_macvtap: entered promiscuous mode [ 142.952294][T10186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.959007][T10186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.964630][T10186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.967395][T10186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.970088][T10186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.973401][T10186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.979405][T10361] binder: 10359:10361 ioctl ae41 2 returned -22 [ 143.032600][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.035053][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.059319][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.061763][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.178918][T10366] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1160'. [ 143.327014][T10370] netlink: 292 bytes leftover after parsing attributes in process `syz.5.1161'. [ 143.336325][T10371] netlink: 292 bytes leftover after parsing attributes in process `syz.5.1161'. [ 143.366112][T10375] x_tables: duplicate underflow at hook 1 [ 143.622022][ T60] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 143.761966][ T60] usb 10-1: device descriptor read/64, error -71 [ 143.928570][ T40] audit: type=1400 audit(2000000337.723:904): avc: denied { accept } for pid=10377 comm="syz.2.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.022140][ T60] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 144.162048][ T60] usb 10-1: device descriptor read/64, error -71 [ 144.282238][ T60] usb usb10-port1: attempt power cycle [ 144.431343][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 144.438105][T10413] sg_write: process 814 (syz.2.1170) changed security contexts after opening file descriptor, this is not allowed. [ 144.468440][T10418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10418 comm=syz.2.1171 [ 144.472002][T10419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10419 comm=syz.2.1171 [ 144.476492][T10418] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 144.490904][T10418] bond3: (slave bridge2): making interface the new active one [ 144.496068][T10418] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 144.575689][T10426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1172'. [ 144.643126][ T60] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 144.662561][ T60] usb 10-1: device descriptor read/8, error -71 [ 144.884271][T10443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45060 sclass=netlink_route_socket pid=10443 comm=syz.2.1176 [ 144.922689][ T60] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 144.927151][ T40] audit: type=1400 audit(2000000338.723:905): avc: denied { remount } for pid=10444 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 144.947073][ T60] usb 10-1: device descriptor read/8, error -71 [ 144.950840][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.003048][ T40] audit: type=1400 audit(2000000338.803:906): avc: denied { getopt } for pid=10447 comm="syz.2.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.060399][T10449] IPVS: set_ctl: invalid protocol: 41376 172.20.20.170:20001 [ 145.063026][ T60] usb usb10-port1: unable to enumerate USB device [ 145.116221][ T5965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.120253][ T5965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.123579][ T5965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.126468][ T5965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.130284][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.226452][T10451] chnl_net:caif_netlink_parms(): no params data found [ 145.293370][T10451] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.296029][T10451] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.298353][T10451] bridge_slave_0: entered allmulticast mode [ 145.301060][T10451] bridge_slave_0: entered promiscuous mode [ 145.304933][T10451] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.307309][T10451] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.309621][T10451] bridge_slave_1: entered allmulticast mode [ 145.313155][T10451] bridge_slave_1: entered promiscuous mode [ 145.348112][T10451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.352828][T10451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.386360][T10451] team0: Port device team_slave_0 added [ 145.390165][T10451] team0: Port device team_slave_1 added [ 145.421405][T10451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.424928][T10451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.432915][T10451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.437036][T10451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.439199][T10451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.448282][T10451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.483078][T10451] hsr_slave_0: entered promiscuous mode [ 145.485289][T10451] hsr_slave_1: entered promiscuous mode [ 145.923487][T10461] veth0_vlan: mtu less than device minimum [ 146.452589][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.515856][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.607886][T10472] bond0: entered promiscuous mode [ 146.609660][T10472] bond_slave_0: entered promiscuous mode [ 146.611635][T10472] bond_slave_1: entered promiscuous mode [ 146.613654][T10472] bridge_slave_1: entered promiscuous mode [ 146.615818][T10472] bond0: entered allmulticast mode [ 146.617763][T10472] bond_slave_0: entered allmulticast mode [ 146.619656][T10472] bond_slave_1: entered allmulticast mode [ 146.621554][T10472] bridge_slave_1: entered allmulticast mode [ 146.640611][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.774739][ T46] bridge_slave_1: left allmulticast mode [ 146.776597][ T46] bridge_slave_1: left promiscuous mode [ 146.779348][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.788885][ T46] bridge_slave_0: left allmulticast mode [ 146.791316][ T46] bridge_slave_0: left promiscuous mode [ 146.794476][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.134358][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.139140][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.143632][ T46] bond0 (unregistering): Released all slaves [ 147.185676][T10484] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 147.192723][ T5965] Bluetooth: hci1: command tx timeout [ 147.204861][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 147.204871][ T40] audit: type=1400 audit(2000000341.003:908): avc: denied { watch } for pid=10486 comm="syz.2.1188" path="/293" dev="tmpfs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 147.214427][T10487] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 147.218019][T10487] overlayfs: missing 'lowerdir' [ 147.220328][ T40] audit: type=1400 audit(2000000341.003:909): avc: denied { watch_sb } for pid=10486 comm="syz.2.1188" path="/293" dev="tmpfs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 147.421821][T10507] MINIX-fs: blocksize too small for device [ 147.518710][ T46] hsr_slave_0: left promiscuous mode [ 147.520832][ T46] hsr_slave_1: left promiscuous mode [ 147.523816][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.526196][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.530769][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.533205][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.544862][T10513] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1196'. [ 147.556950][ T46] veth1_macvtap: left promiscuous mode [ 147.558828][ T46] veth0_macvtap: left promiscuous mode [ 147.560688][ T46] veth1_vlan: left promiscuous mode [ 147.562438][ T46] veth0_vlan: left promiscuous mode [ 148.189256][ T46] team0 (unregistering): Port device team_slave_1 removed [ 148.262142][ T46] team0 (unregistering): Port device team_slave_0 removed [ 148.802102][ T40] audit: type=1400 audit(2000000342.593:910): avc: denied { ioctl } for pid=10529 comm="syz.1.1201" path="socket:[44072]" dev="sockfs" ino=44072 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 148.821413][T10532] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 148.833350][T10451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.850240][T10451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.856475][T10451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.861626][T10451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.931179][T10451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.964896][T10451] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.976107][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.978913][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.995079][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.997729][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.018348][T10566] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 149.024060][ T40] audit: type=1400 audit(2000000342.823:911): avc: denied { lock } for pid=10567 comm="syz.1.1210" path="socket:[42125]" dev="sockfs" ino=42125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.033931][T10571] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 149.075427][ T40] audit: type=1400 audit(2000000342.873:912): avc: denied { block_suspend } for pid=10567 comm="syz.1.1210" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.138737][T10451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.165454][T10451] veth0_vlan: entered promiscuous mode [ 149.170098][T10451] veth1_vlan: entered promiscuous mode [ 149.185096][T10451] veth0_macvtap: entered promiscuous mode [ 149.188635][T10451] veth1_macvtap: entered promiscuous mode [ 149.200846][T10451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.205686][T10451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.215005][T10451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.218029][T10451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.220979][T10451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.223802][T10451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.230364][ T40] audit: type=1400 audit(2000000343.023:913): avc: denied { watch } for pid=10584 comm="syz.1.1212" path="/233/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 149.244792][ T40] audit: type=1400 audit(2000000343.023:914): avc: denied { watch_sb watch_reads } for pid=10584 comm="syz.1.1212" path="/233/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 149.262282][ T5965] Bluetooth: hci1: command tx timeout [ 149.294685][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.297509][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.313286][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.316173][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.337019][T10589] netlink: 'syz.1.1214': attribute type 10 has an invalid length. [ 149.346112][T10589] hsr_slave_0: left promiscuous mode [ 149.352174][T10589] hsr_slave_1: left promiscuous mode [ 149.394381][ T40] audit: type=1400 audit(2000000343.193:915): avc: denied { mount } for pid=10588 comm="syz.1.1214" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 149.479823][T10594] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 149.482196][T10594] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 149.492850][T10594] vhci_hcd vhci_hcd.0: Device attached [ 149.498276][ T40] audit: type=1400 audit(2000000343.293:916): avc: denied { unmount } for pid=7024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 149.499602][T10594] vhci_hcd vhci_hcd.0: port 0 already used [ 149.532361][T10601] SELinux: ebitmap: truncated map [ 149.537183][T10601] SELinux: failed to load policy [ 149.541754][T10602] SELinux: ebitmap: truncated map [ 149.548682][T10602] SELinux: failed to load policy [ 149.782065][ T53] usb 42-1: SetAddress Request (2) to port 0 [ 149.784838][ T53] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 149.959048][ T40] audit: type=1400 audit(2000000343.753:917): avc: denied { bind } for pid=10623 comm="syz.1.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 149.968463][T10624] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.040629][T10596] vhci_hcd: connection reset by peer [ 150.043850][ T13] vhci_hcd: stop threads [ 150.045202][ T13] vhci_hcd: release socket [ 150.047957][ T13] vhci_hcd: disconnect device [ 150.074806][T10635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1226'. [ 150.079587][T10635] tmpfs: Bad value for 'mpol' [ 150.081447][T10635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=10635 comm=syz.2.1226 [ 150.353309][T10651] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1232'. [ 150.691664][T10669] netlink: 'syz.2.1238': attribute type 5 has an invalid length. [ 150.709405][T10669] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.712311][T10669] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.715553][T10669] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.718256][T10669] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.721538][T10669] vxlan0: entered promiscuous mode [ 150.723505][T10669] vxlan0: entered allmulticast mode [ 151.035991][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'. [ 151.274721][T10692] block nbd5: shutting down sockets [ 151.339141][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 151.367254][T10705] netlink: 'syz.2.1250': attribute type 4 has an invalid length. [ 151.444506][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.631921][ T61] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 151.640384][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.644118][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.647051][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.651635][ T5961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.654665][ T5961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.681381][T10727] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1256'. [ 151.757833][T10721] chnl_net:caif_netlink_parms(): no params data found [ 151.802920][ T61] usb 10-1: Using ep0 maxpacket: 8 [ 151.811112][ T61] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 151.813787][ T61] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 151.817409][ T61] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 151.820579][ T61] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 151.825665][ T61] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 151.831905][ T61] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.836378][ T61] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.839255][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.860695][T10721] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.863167][T10721] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.865404][T10721] bridge_slave_0: entered allmulticast mode [ 151.868279][T10721] bridge_slave_0: entered promiscuous mode [ 151.871726][T10721] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.874406][T10721] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.876864][T10721] bridge_slave_1: entered allmulticast mode [ 151.879711][T10721] bridge_slave_1: entered promiscuous mode [ 151.923676][T10721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.928777][T10721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.937482][T10745] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 151.975619][T10721] team0: Port device team_slave_0 added [ 151.979847][T10721] team0: Port device team_slave_1 added [ 152.014373][T10721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.017252][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.026006][T10721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.030218][T10721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.033301][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.043472][T10721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.051572][ T61] usb 10-1: GET_CAPABILITIES returned 0 [ 152.053774][ T61] usbtmc 10-1:16.0: can't read capabilities [ 152.094144][T10721] hsr_slave_0: entered promiscuous mode [ 152.096404][T10721] hsr_slave_1: entered promiscuous mode [ 152.098433][T10721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.100803][T10721] Cannot create hsr debugfs directory [ 152.259076][ C3] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 152.262795][T10709] usbtmc 10-1:16.0: Unable to send data, error -71 [ 152.266575][ T61] usb 10-1: USB disconnect, device number 11 [ 152.777159][T10751] lo speed is unknown, defaulting to 1000 [ 152.779639][T10751] lo speed is unknown, defaulting to 1000 [ 152.792087][T10751] lo speed is unknown, defaulting to 1000 [ 152.813095][T10751] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 152.824760][T10751] lo speed is unknown, defaulting to 1000 [ 152.827535][T10751] lo speed is unknown, defaulting to 1000 [ 152.829995][T10751] lo speed is unknown, defaulting to 1000 [ 152.833455][T10751] lo speed is unknown, defaulting to 1000 [ 152.836090][T10751] lo speed is unknown, defaulting to 1000 [ 152.855107][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 152.855118][ T40] audit: type=1400 audit(2000000346.653:923): avc: denied { read } for pid=10759 comm="syz.1.1265" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 152.867532][ T40] audit: type=1400 audit(2000000346.653:924): avc: denied { open } for pid=10759 comm="syz.1.1265" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 152.879133][ T40] audit: type=1400 audit(2000000346.653:925): avc: denied { ioctl } for pid=10759 comm="syz.1.1265" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 152.891454][T10760] kvm: Disabled LAPIC found during irq injection [ 152.913415][T10764] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1266'. [ 152.918770][T10768] batadv_slave_1: entered promiscuous mode [ 152.921253][T10768] batadv_slave_1: left promiscuous mode [ 153.010369][T10779] uprobe: syz.1.1270:10779 failed to unregister, leaking uprobe [ 153.021120][T10778] mkiss: ax0: crc mode is auto. [ 153.027127][T10778] binder: 10776:10778 ioctl 40345410 200000000280 returned -22 [ 153.054756][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.132732][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.215369][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.319100][ T59] bridge_slave_1: left allmulticast mode [ 153.321909][ T59] bridge_slave_1: left promiscuous mode [ 153.324895][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.328485][ T59] bridge_slave_0: left allmulticast mode [ 153.330253][ T59] bridge_slave_0: left promiscuous mode [ 153.332379][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.412006][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 153.553019][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.557173][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.560972][ T59] bond0 (unregistering): Released all slaves [ 153.578191][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 153.584779][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.588278][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.591430][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 153.596839][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 153.599896][ T24] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 153.603604][ T24] usb 6-1: Manufacturer: syz [ 153.607948][ T24] usb 6-1: config 0 descriptor?? [ 153.741960][ T5961] Bluetooth: hci1: command tx timeout [ 153.916197][T10809] 9pnet: Could not find request transport: v [ 153.927456][ T59] hsr_slave_0: left promiscuous mode [ 153.929507][ T59] hsr_slave_1: left promiscuous mode [ 153.931486][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.934325][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.937131][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.939452][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.963271][ T59] veth1_macvtap: left promiscuous mode [ 153.965469][ T59] veth0_macvtap: left promiscuous mode [ 153.967704][ T59] veth1_vlan: left promiscuous mode [ 153.970340][ T59] veth0_vlan: left promiscuous mode [ 153.975273][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 154.015611][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 154.018786][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 154.027473][ T24] usb 6-1: USB disconnect, device number 11 [ 154.566391][T10837] new mount options do not match the existing superblock, will be ignored [ 154.570024][T10837] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 154.572814][T10837] dlm: Unknown command passed to DLM device : 255 [ 154.572814][T10837] [ 154.582202][ T59] team0 (unregistering): Port device team_slave_1 removed [ 154.654938][ T59] team0 (unregistering): Port device team_slave_0 removed [ 154.660166][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1281'. [ 154.664142][ T40] audit: type=1400 audit(2000000348.463:926): avc: denied { read write } for pid=10838 comm="syz.1.1281" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 154.671556][ T40] audit: type=1400 audit(2000000348.463:927): avc: denied { open } for pid=10838 comm="syz.1.1281" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 154.689069][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.697059][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.699514][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.703133][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.705615][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.708086][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.710524][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.713561][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.716030][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.718445][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.720956][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.723738][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.731123][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.733861][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.736344][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.738759][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.741278][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.744054][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.747951][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.750384][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.753138][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.755661][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x2 [ 154.758081][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.760503][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.763482][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.766472][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.769047][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.772151][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.774983][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.777963][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.781008][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.784110][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.786986][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.790112][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.793275][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.796146][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.799022][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.801955][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.804814][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.807877][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.810944][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.814255][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 154.846533][ T1330] hid-generic 0000:007F:FFFFFFFE.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 154.872365][ T53] usb 42-1: device descriptor read/8, error -110 [ 155.278545][ T53] usb usb42-port1: attempt power cycle [ 155.306598][T10721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.324553][T10721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.353454][T10721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.363644][T10721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.367433][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1283'. [ 155.433338][T10721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.458475][T10721] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.467453][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.469731][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.470275][T10870] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 155.480910][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.510537][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.566315][T10876] can0: slcan on ttyS3. [ 155.628202][T10721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.644555][T10876] can0 (unregistered): slcan off ttyS3. [ 155.667576][T10721] veth0_vlan: entered promiscuous mode [ 155.675317][T10721] veth1_vlan: entered promiscuous mode [ 155.675840][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1287'. [ 155.693751][T10721] veth0_macvtap: entered promiscuous mode [ 155.697522][T10721] veth1_macvtap: entered promiscuous mode [ 155.706418][T10721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.712238][T10721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.718224][T10721] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.721102][T10721] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.724188][T10721] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.726991][T10721] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.756753][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.759228][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.771629][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.774960][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.843832][ T53] usb usb42-port1: unable to enumerate USB device [ 156.082106][ T837] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 156.233261][ T837] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 156.236802][ T837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.240239][ T837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.243472][ T837] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 156.248300][ T837] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 156.251409][ T837] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 156.254133][ T837] usb 10-1: Manufacturer: syz [ 156.257671][ T837] usb 10-1: config 0 descriptor?? [ 156.505409][T10907] 9pnet_fd: Insufficient options for proto=fd [ 156.664383][ T837] usbhid 10-1:0.0: can't add hid device: -71 [ 156.666438][ T837] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 156.672651][ T837] usb 10-1: USB disconnect, device number 12 [ 156.751910][T10916] netlink: 'syz.1.1295': attribute type 32 has an invalid length. [ 157.204182][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1298'. [ 157.578041][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1304'. [ 157.578948][ T59] Bluetooth: hci1: Frame reassembly failed (-84) [ 157.583858][T10949] Bluetooth: hci1: Frame reassembly failed (-84) [ 157.604014][T10946] netlink: 'syz.1.1301': attribute type 10 has an invalid length. [ 157.606500][T10946] hsr_slave_0: entered allmulticast mode [ 157.608532][T10946] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 157.708187][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.289705][ T5956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.294878][ T5956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.297818][ T5956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.303820][ T5956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.306802][ T5956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.334046][T10954] lo speed is unknown, defaulting to 1000 [ 158.422703][T10954] chnl_net:caif_netlink_parms(): no params data found [ 158.489163][T10954] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.491529][T10954] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.494133][T10954] bridge_slave_0: entered allmulticast mode [ 158.497403][T10954] bridge_slave_0: entered promiscuous mode [ 158.500528][T10954] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.503236][T10954] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.505805][T10954] bridge_slave_1: entered allmulticast mode [ 158.508478][T10954] bridge_slave_1: entered promiscuous mode [ 158.540804][T10954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.545909][T10954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.583074][T10954] team0: Port device team_slave_0 added [ 158.587322][T10954] team0: Port device team_slave_1 added [ 158.623848][T10954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.626071][T10954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.634753][T10954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.639026][T10954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.641264][T10954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.650045][T10954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.693236][T10954] hsr_slave_0: entered promiscuous mode [ 158.695497][T10954] hsr_slave_1: entered promiscuous mode [ 159.236259][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.357299][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.414258][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.512681][ T12] bridge_slave_1: left allmulticast mode [ 159.514434][ T12] bridge_slave_1: left promiscuous mode [ 159.517553][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.521037][ T12] bridge_slave_0: left allmulticast mode [ 159.522970][ T12] bridge_slave_0: left promiscuous mode [ 159.524821][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.594076][ T5956] Bluetooth: hci1: command 0x1003 tx timeout [ 159.595490][ T5961] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 159.835354][T10982] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 159.844552][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.850085][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.855019][ T12] bond0 (unregistering): Released all slaves [ 160.174656][ T12] hsr_slave_0: left promiscuous mode [ 160.176899][ T12] hsr_slave_1: left promiscuous mode [ 160.178859][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.181209][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.184224][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.186533][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.206894][ T12] veth1_macvtap: left promiscuous mode [ 160.208671][ T12] veth0_macvtap: left promiscuous mode [ 160.210423][ T12] veth1_vlan: left promiscuous mode [ 160.213190][ T12] veth0_vlan: left promiscuous mode [ 160.383461][ T5961] Bluetooth: hci4: command tx timeout [ 160.819741][ T12] team0 (unregistering): Port device team_slave_1 removed [ 160.888192][ T12] team0 (unregistering): Port device team_slave_0 removed [ 160.938101][T11011] rdma_rxe: rxe_newlink: failed to add lo [ 161.571733][T10954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.576694][T10954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.582623][T10954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.589227][T10954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.590622][T11029] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 161.660378][T11042] syz.2.1315: attempt to access beyond end of device [ 161.660378][T11042] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 161.665765][T11042] exFAT-fs (nbd2): unable to read boot sector [ 161.667749][T11042] exFAT-fs (nbd2): failed to read boot sector [ 161.669908][T11042] exFAT-fs (nbd2): failed to recognize exfat type [ 161.681240][T11042] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.691951][T11042] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.703817][T11042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1315'. [ 161.706625][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 161.706922][T10954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.735419][T10954] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.752862][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.755037][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.760290][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.763041][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.859380][T11062] usb usb8: usbfs: process 11062 (syz.1.1322) did not claim interface 0 before use [ 161.892330][T10954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.919078][T10954] veth0_vlan: entered promiscuous mode [ 161.926016][T10954] veth1_vlan: entered promiscuous mode [ 161.932167][T11074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11074 comm=syz.2.1326 [ 161.942637][T10954] veth0_macvtap: entered promiscuous mode [ 161.946311][T10954] veth1_macvtap: entered promiscuous mode [ 161.955283][T10954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.960889][T10954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.965479][T10954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.966853][T11079] netlink: 'syz.2.1327': attribute type 1 has an invalid length. [ 161.968439][T10954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.975422][T10954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.978159][T10954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.001802][ T40] audit: type=1400 audit(2000000355.793:928): avc: denied { listen } for pid=11080 comm="syz.2.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 162.009418][ T40] audit: type=1400 audit(2000000355.793:929): avc: denied { accept } for pid=11080 comm="syz.2.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 162.023481][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.026278][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.040038][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.043315][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.064418][ T40] audit: type=1400 audit(2000000355.863:930): avc: denied { setattr } for pid=11080 comm="syz.2.1328" name="ALG" dev="sockfs" ino=45033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 162.082076][ T53] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 162.254947][ T53] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 162.258896][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.262762][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.265979][ T53] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 162.271436][ T53] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 162.275666][ T53] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 162.276742][ T40] audit: type=1400 audit(2000000356.073:931): avc: denied { create } for pid=11087 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 162.285409][ T53] usb 10-1: Manufacturer: syz [ 162.287443][ T40] audit: type=1400 audit(2000000356.073:932): avc: denied { write } for pid=11087 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 162.293043][ T53] usb 10-1: config 0 descriptor?? [ 162.402390][ T40] audit: type=1400 audit(2000000356.193:933): avc: denied { name_connect } for pid=11093 comm="syz.1.1333" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 162.439425][ T40] audit: type=1400 audit(2000000356.233:934): avc: denied { setopt } for pid=11095 comm="syz.1.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.583545][T11098] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1335'. [ 162.701947][ T53] usbhid 10-1:0.0: can't add hid device: -71 [ 162.704440][ T53] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 162.709066][ T53] usb 10-1: USB disconnect, device number 13 [ 162.866106][T11104] kernel profiling enabled (shift: 7) [ 162.887429][T11104] libceph: resolve '4' (ret=-3): failed [ 163.229165][T11113] vim2m vim2m.0: vidioc_s_fmt queue busy [ 163.318276][ T5961] Bluetooth: hci2: unexpected event 0x03 length: 32 > 11 [ 164.307150][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.009296][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.014311][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.019819][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.025414][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.029037][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.054559][T11151] lo speed is unknown, defaulting to 1000 [ 165.151232][T11151] chnl_net:caif_netlink_parms(): no params data found [ 165.169414][T11164] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1351'. [ 165.187159][ T40] audit: type=1400 audit(2000000358.983:935): avc: denied { listen } for pid=11163 comm="syz.1.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.224591][T11151] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.226790][T11151] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.229325][T11151] bridge_slave_0: entered allmulticast mode [ 165.232017][T11151] bridge_slave_0: entered promiscuous mode [ 165.235194][T11151] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.237381][T11151] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.239590][T11151] bridge_slave_1: entered allmulticast mode [ 165.242247][T11151] bridge_slave_1: entered promiscuous mode [ 165.245041][T11168] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1351'. [ 165.273927][T11151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.278449][T11151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.300068][T11172] random: crng reseeded on system resumption [ 165.337336][T11151] team0: Port device team_slave_0 added [ 165.340770][T11151] team0: Port device team_slave_1 added [ 165.379232][T11151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.381426][T11151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.389561][T11151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.393976][T11151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.396183][T11151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.404856][T11151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.446222][T11151] hsr_slave_0: entered promiscuous mode [ 165.448676][T11151] hsr_slave_1: entered promiscuous mode [ 165.450907][T11151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.453444][T11151] Cannot create hsr debugfs directory [ 165.564719][ T53] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 165.692036][ T53] usb 6-1: device descriptor read/64, error -71 [ 165.867288][T11177] overlayfs: conflicting options: userxattr,metacopy=on [ 165.925157][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.936765][T11180] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 165.942208][ T53] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 165.994690][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.074424][ T53] usb 6-1: device descriptor read/64, error -71 [ 166.079520][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.182274][ T53] usb usb6-port1: attempt power cycle [ 166.242963][ T79] bridge_slave_1: left allmulticast mode [ 166.244920][ T79] bridge_slave_1: left promiscuous mode [ 166.246729][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.251413][ T79] bridge_slave_0: left allmulticast mode [ 166.253434][ T79] bridge_slave_0: left promiscuous mode [ 166.255327][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.382132][ T40] audit: type=1400 audit(2000000360.183:936): avc: denied { getopt } for pid=11185 comm="syz.5.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.499645][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.504098][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.508436][ T79] bond0 (unregistering): Released all slaves [ 166.534373][ T53] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 166.555226][ T53] usb 6-1: device descriptor read/8, error -71 [ 166.792102][ T53] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 166.812517][ T53] usb 6-1: device descriptor read/8, error -71 [ 166.846878][ T79] hsr_slave_0: left promiscuous mode [ 166.849042][ T79] hsr_slave_1: left promiscuous mode [ 166.850993][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.853688][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.857464][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.859749][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.881097][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1364'. [ 166.886285][ T79] veth1_macvtap: left promiscuous mode [ 166.888049][ T79] veth0_macvtap: left promiscuous mode [ 166.889813][ T79] veth1_vlan: left promiscuous mode [ 166.891439][ T79] veth0_vlan: left promiscuous mode [ 166.936620][ T53] usb usb6-port1: unable to enumerate USB device [ 166.986224][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1364'. [ 167.104128][ T5961] Bluetooth: hci1: command tx timeout [ 167.488641][ T79] team0 (unregistering): Port device team_slave_1 removed [ 167.561444][ T79] team0 (unregistering): Port device team_slave_0 removed [ 168.266824][T11151] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.271096][T11151] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.282284][T11151] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.288548][T11151] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.362673][T11151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.364448][T11241] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1367'. [ 168.365660][T11242] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1367'. [ 168.386559][T11151] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.393222][ T238] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.396107][ T238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.406542][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.408781][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.527807][T11151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.547730][T11151] veth0_vlan: entered promiscuous mode [ 168.553255][T11151] veth1_vlan: entered promiscuous mode [ 168.567362][T11151] veth0_macvtap: entered promiscuous mode [ 168.571271][T11151] veth1_macvtap: entered promiscuous mode [ 168.580254][T11151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.588068][T11151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.593531][T11151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.596291][T11151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.598937][T11151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.601570][T11151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.636010][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.638429][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.657227][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.659672][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.062219][ T53] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 169.213820][ T53] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 169.217990][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.222321][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.226053][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 169.231745][ T53] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 169.235567][ T53] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 169.238632][ T53] usb 6-1: Manufacturer: syz [ 169.242691][ T53] usb 6-1: config 0 descriptor?? [ 169.419404][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.424160][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.649790][ T53] usbhid 6-1:0.0: can't add hid device: -71 [ 169.652398][ T53] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 169.658183][ T53] usb 6-1: USB disconnect, device number 16 [ 170.122908][T11282] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 170.127146][T11282] netlink: zone id is out of range [ 170.128889][T11282] netlink: zone id is out of range [ 170.130461][T11282] netlink: zone id is out of range [ 170.132534][T11282] netlink: zone id is out of range [ 170.136279][T11282] netlink: zone id is out of range [ 170.138582][T11282] netlink: zone id is out of range [ 170.140224][T11282] netlink: zone id is out of range [ 170.142346][T11282] netlink: zone id is out of range [ 170.144205][T11282] netlink: zone id is out of range [ 170.145860][T11282] netlink: zone id is out of range [ 170.403131][T11304] netlink: 'syz.5.1383': attribute type 2 has an invalid length. [ 170.405654][T11304] netlink: 784 bytes leftover after parsing attributes in process `syz.5.1383'. [ 170.411817][T11304] geneve2: entered promiscuous mode [ 170.413669][T11304] geneve2: entered allmulticast mode [ 170.654413][T11311] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1386'. [ 170.816728][ T1181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.932089][ T1330] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 171.093417][ T1330] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 171.096447][ T1330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.099497][ T1330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.102498][ T1330] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 171.106972][ T1330] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 171.109463][ T1330] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 171.111682][ T1330] usb 10-1: Manufacturer: syz [ 171.114737][ T1330] usb 10-1: config 0 descriptor?? [ 171.522029][ T1330] usbhid 10-1:0.0: can't add hid device: -71 [ 171.523864][ T1330] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 171.527363][ T1330] usb 10-1: USB disconnect, device number 14 [ 171.600353][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.604034][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.606850][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.610140][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.613945][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.634546][T11318] lo speed is unknown, defaulting to 1000 [ 171.708644][T11318] chnl_net:caif_netlink_parms(): no params data found [ 171.772311][T11318] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.774330][T11318] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.776320][T11318] bridge_slave_0: entered allmulticast mode [ 171.778717][T11318] bridge_slave_0: entered promiscuous mode [ 171.781704][T11318] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.783951][T11318] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.785952][T11318] bridge_slave_1: entered allmulticast mode [ 171.788299][T11318] bridge_slave_1: entered promiscuous mode [ 171.817946][T11318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.822560][T11318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.860033][T11318] team0: Port device team_slave_0 added [ 171.865613][T11318] team0: Port device team_slave_1 added [ 171.895918][T11318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.898079][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.906348][T11318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.910388][T11318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.912646][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.920327][T11318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.955458][T11318] hsr_slave_0: entered promiscuous mode [ 171.957669][T11318] hsr_slave_1: entered promiscuous mode [ 172.128752][T11331] : entered promiscuous mode [ 172.599269][ T1181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.656104][ T1181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.749175][ T1181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.867868][ T1181] bridge_slave_1: left allmulticast mode [ 172.869690][ T1181] bridge_slave_1: left promiscuous mode [ 172.871552][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.875773][ T1181] bridge_slave_0: left allmulticast mode [ 172.877569][ T1181] bridge_slave_0: left promiscuous mode [ 172.879399][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.125685][ T1181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.129858][ T1181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.134349][ T1181] bond0 (unregistering): Released all slaves [ 173.205371][T11347] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1398'. [ 173.208126][T11347] netlink: 'syz.5.1398': attribute type 7 has an invalid length. [ 173.210460][T11347] netlink: 'syz.5.1398': attribute type 8 has an invalid length. [ 173.214082][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1398'. [ 173.221795][T11347] syz_tun: entered promiscuous mode [ 173.237730][T11347] syz_tun: left promiscuous mode [ 173.427473][T11360] netlink: 'syz.5.1399': attribute type 13 has an invalid length. [ 173.490160][ T1181] hsr_slave_0: left promiscuous mode [ 173.493234][ T1181] hsr_slave_1: left promiscuous mode [ 173.495216][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.497463][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.500184][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.502827][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.524764][ T1181] veth1_macvtap: left promiscuous mode [ 173.526607][ T1181] veth0_macvtap: left promiscuous mode [ 173.528778][ T1181] veth1_vlan: left promiscuous mode [ 173.530611][ T1181] veth0_vlan: left promiscuous mode [ 173.663508][ T5961] Bluetooth: hci1: command tx timeout [ 174.141616][ T1181] team0 (unregistering): Port device team_slave_1 removed [ 174.204371][ T1181] team0 (unregistering): Port device team_slave_0 removed [ 174.727373][T11318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.735267][T11318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.743833][T11318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.748743][T11318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.794203][T11318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.803302][T11318] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.808654][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.810895][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.814871][ T40] audit: type=1400 audit(2000000368.613:937): avc: denied { read write } for pid=11388 comm="syz.5.1404" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 174.822395][ T40] audit: type=1400 audit(2000000368.613:938): avc: denied { open } for pid=11388 comm="syz.5.1404" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 174.822545][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.832134][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.903396][ T1330] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 174.965325][T11318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.988464][T11318] veth0_vlan: entered promiscuous mode [ 174.994799][T11318] veth1_vlan: entered promiscuous mode [ 175.008443][T11318] veth0_macvtap: entered promiscuous mode [ 175.012632][T11318] veth1_macvtap: entered promiscuous mode [ 175.020227][T11318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.024390][T11318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.030110][T11318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.034077][T11318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.036702][T11318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.039336][T11318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.052052][ T1330] usb 6-1: Using ep0 maxpacket: 32 [ 175.061107][ T1330] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 175.068498][ T1330] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 175.071530][ T1330] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 175.074346][ T1330] usb 6-1: Product: syz [ 175.075766][ T1330] usb 6-1: Manufacturer: syz [ 175.077245][ T1330] usb 6-1: SerialNumber: syz [ 175.079974][ T1330] usb 6-1: config 0 descriptor?? [ 175.084441][T11375] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 175.088800][ T1330] hub 6-1:0.0: bad descriptor, ignoring hub [ 175.090677][ T1330] hub 6-1:0.0: probe with driver hub failed with error -5 [ 175.106231][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.109019][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.128827][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.131206][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.250923][T11426] hub 2-0:1.0: USB hub found [ 175.253612][T11426] hub 2-0:1.0: 2 ports detected [ 175.388335][T11437] vlan1: entered allmulticast mode [ 175.390013][T11437] veth0_vlan: entered allmulticast mode [ 175.401620][T11437] fuse: Unknown parameter 'smackfsfloor' [ 175.405177][ T40] audit: type=1400 audit(2000000369.203:939): avc: denied { write } for pid=11436 comm="syz.5.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.573893][ T40] audit: type=1400 audit(2000000369.373:940): avc: denied { mount } for pid=11446 comm="syz.5.1418" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 175.593490][T11447] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.793025][ T40] audit: type=1400 audit(2000000369.593:941): avc: denied { unmount } for pid=9603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 175.868113][T11467] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 175.870302][T11467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.873220][T11467] vhci_hcd vhci_hcd.0: Device attached [ 175.908629][T11467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.916355][T11467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.920127][ T40] audit: type=1400 audit(2000000369.713:942): avc: denied { bind } for pid=11466 comm="syz.5.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 175.995007][T11375] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 175.999041][T11375] usb 6-1: device reset changed ep0 maxpacket size! [ 176.005311][ T1330] usb 6-1: USB disconnect, device number 17 [ 176.056016][T11468] vhci_hcd: connection closed [ 176.057734][ T12] vhci_hcd: stop threads [ 176.060592][ T12] vhci_hcd: release socket [ 176.062502][ T12] vhci_hcd: disconnect device [ 176.111930][ T10] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 176.114270][ T10] usb 47-1: enqueue for inactive port 0 [ 176.152022][ T1330] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 176.181983][ T10] vhci_hcd: vhci_device speed not set [ 176.315830][ T1330] usb 6-1: config 0 has no interfaces? [ 176.319962][ T1330] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.323693][ T1330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.326939][ T1330] usb 6-1: Product: syz [ 176.328705][ T1330] usb 6-1: Manufacturer: syz [ 176.330596][ T1330] usb 6-1: SerialNumber: syz [ 176.334445][ T1330] usb 6-1: config 0 descriptor?? [ 176.647916][ T40] audit: type=1400 audit(2000000370.443:943): avc: denied { getopt } for pid=11482 comm="syz.2.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 176.654018][ T40] audit: type=1400 audit(2000000370.443:944): avc: denied { mounton } for pid=11482 comm="syz.2.1427" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.823701][T10892] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 176.973229][T10892] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 176.976653][T10892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.980083][T10892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.983508][T10892] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 176.988405][T10892] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 176.991318][T10892] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 176.994034][T10892] usb 10-1: Manufacturer: syz [ 176.996813][T10892] usb 10-1: config 0 descriptor?? [ 177.105590][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.405892][T10892] usbhid 10-1:0.0: can't add hid device: -71 [ 177.407922][T10892] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 177.412146][T10892] usb 10-1: USB disconnect, device number 15 [ 177.656365][ T53] usb 6-1: USB disconnect, device number 18 [ 178.003708][ T40] audit: type=1400 audit(2000000371.803:945): avc: denied { ioctl } for pid=11497 comm="syz.5.1434" path="socket:[51305]" dev="sockfs" ino=51305 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 178.017608][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.023350][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.026185][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.028738][T11502] IPVS: Unknown mcast interface: bond_slave_1 [ 178.031252][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.034494][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.043715][T11504] netlink: 'syz.5.1436': attribute type 1 has an invalid length. [ 178.071249][T11499] lo speed is unknown, defaulting to 1000 [ 178.168281][T11499] chnl_net:caif_netlink_parms(): no params data found [ 178.175904][ T40] audit: type=1400 audit(2000000371.973:946): avc: denied { append } for pid=11514 comm="syz.1.1439" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.263147][T11499] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.265494][T11499] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.267866][T11499] bridge_slave_0: entered allmulticast mode [ 178.270545][T11499] bridge_slave_0: entered promiscuous mode [ 178.274065][T11499] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.276326][T11499] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.278539][T11499] bridge_slave_1: entered allmulticast mode [ 178.281126][T11499] bridge_slave_1: entered promiscuous mode [ 178.312531][T11499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.316869][T11499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.356028][T11499] team0: Port device team_slave_0 added [ 178.364489][T11499] team0: Port device team_slave_1 added [ 178.406654][T11499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.408830][T11499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.416963][T11499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.424892][T11499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.427045][T11499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.435074][T11499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.451927][ T1330] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 178.471993][T11499] hsr_slave_0: entered promiscuous mode [ 178.474440][T11499] hsr_slave_1: entered promiscuous mode [ 178.476428][T11499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.478751][T11499] Cannot create hsr debugfs directory [ 178.604386][ T1330] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 178.607762][ T1330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.611531][ T1330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.615353][ T1330] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 178.620091][ T1330] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 178.624209][ T1330] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 178.626863][ T1330] usb 10-1: Manufacturer: syz [ 178.634825][ T1330] usb 10-1: config 0 descriptor?? [ 178.824220][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.905164][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.959215][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.047568][ T1330] usbhid 10-1:0.0: can't add hid device: -71 [ 179.051694][ T1330] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 179.060657][ T1330] usb 10-1: USB disconnect, device number 16 [ 179.118540][ T59] bridge_slave_1: left allmulticast mode [ 179.120841][ T59] bridge_slave_1: left promiscuous mode [ 179.123207][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.127318][ T59] bridge_slave_0: left allmulticast mode [ 179.129156][ T59] bridge_slave_0: left promiscuous mode [ 179.130989][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.363068][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.367156][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.370625][ T59] bond0 (unregistering): Released all slaves [ 179.767055][ T59] hsr_slave_0: left promiscuous mode [ 179.769449][ T59] hsr_slave_1: left promiscuous mode [ 179.771432][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.774469][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.777341][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.779943][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.809485][ T59] veth1_macvtap: left promiscuous mode [ 179.811274][ T59] veth0_macvtap: left promiscuous mode [ 179.813424][ T59] veth1_vlan: left promiscuous mode [ 179.815136][ T59] veth0_vlan: left promiscuous mode [ 180.072689][ T5956] Bluetooth: hci1: command tx timeout [ 180.404587][ T59] team0 (unregistering): Port device team_slave_1 removed [ 180.468950][ T59] team0 (unregistering): Port device team_slave_0 removed [ 180.948694][T11567] lo speed is unknown, defaulting to 1000 [ 181.019605][T11499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.024119][T11499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.027997][T11499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.031642][T11499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.104594][T11499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.128554][T11499] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.137355][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.139597][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.146765][ T238] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.149598][ T238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.277877][T11499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.298099][T11499] veth0_vlan: entered promiscuous mode [ 181.303276][T11499] veth1_vlan: entered promiscuous mode [ 181.315872][T11499] veth0_macvtap: entered promiscuous mode [ 181.319415][T11499] veth1_macvtap: entered promiscuous mode [ 181.328787][T11499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.335359][T11499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.338985][T11499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.341678][T11499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.345177][T11499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.347850][T11499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.377345][T11598] netlink: 'syz.5.1454': attribute type 11 has an invalid length. [ 181.381217][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 181.381227][ T40] audit: type=1400 audit(2000000375.173:948): avc: denied { getopt } for pid=11597 comm="syz.5.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.381441][T11598] binder: 11597:11598 ioctl c0306201 200000000640 returned -22 [ 181.407490][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.409932][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.426538][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.429618][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.144166][T11660] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1477'. [ 183.146981][T11660] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1477'. [ 183.191291][ T40] audit: type=1400 audit(2000000376.983:949): avc: denied { connect } for pid=11668 comm="syz.5.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.268597][T11678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=11678 comm=syz.5.1483 [ 183.303535][T11678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11678 comm=syz.5.1483 [ 183.321350][T11680] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 183.367638][T11684] comedi comedi3: comedi_config --init_data is deprecated [ 183.427254][T11688] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 183.436791][ T40] audit: type=1400 audit(2000000377.233:950): avc: denied { accept } for pid=11682 comm="syz.5.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.444149][ T40] audit: type=1400 audit(2000000377.233:951): avc: denied { read } for pid=11682 comm="syz.5.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.445217][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.361598][ T40] audit: type=1400 audit(2000000378.153:952): avc: denied { accept } for pid=11697 comm="syz.5.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 184.393950][ T1181] tipc: Subscription rejected, illegal request [ 184.417289][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.421451][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.425121][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.428325][ T5961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.430864][ T5961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.457150][T11701] lo speed is unknown, defaulting to 1000 [ 184.472535][T11700] kvm: pic: non byte write [ 184.504003][T11715] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 184.540907][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1496'. [ 184.556198][T11701] chnl_net:caif_netlink_parms(): no params data found [ 184.574399][ T40] audit: type=1326 audit(2000000378.373:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 184.583708][ T40] audit: type=1326 audit(2000000378.373:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 184.592255][ T40] audit: type=1326 audit(2000000378.373:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 184.599314][ T40] audit: type=1326 audit(2000000378.373:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 184.606770][ T40] audit: type=1326 audit(2000000378.373:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 184.664410][T11701] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.666729][T11701] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.669040][T11701] bridge_slave_0: entered allmulticast mode [ 184.671618][T11701] bridge_slave_0: entered promiscuous mode [ 184.677760][T11701] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.680171][T11701] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.682881][T11701] bridge_slave_1: entered allmulticast mode [ 184.685479][T11701] bridge_slave_1: entered promiscuous mode [ 184.718955][T11701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.723754][T11701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.729064][T11740] team0: Device gtp0 is of different type [ 184.804784][T11701] team0: Port device team_slave_0 added [ 184.809119][T11701] team0: Port device team_slave_1 added [ 184.843524][T11701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.845682][T11701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.854831][T11701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.859137][T11701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.861357][T11701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.870538][T11701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.917808][T11701] hsr_slave_0: entered promiscuous mode [ 184.920668][T11701] hsr_slave_1: entered promiscuous mode [ 185.191963][ T5324] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 185.364007][ T5324] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 185.367531][ T5324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.370919][ T5324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.376085][ T5324] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 185.381076][ T5324] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 185.384175][ T5324] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 185.386698][ T5324] usb 6-1: Manufacturer: syz [ 185.389984][ T5324] usb 6-1: config 0 descriptor?? [ 185.505907][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.563467][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.693575][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.698148][T11757] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1505'. [ 185.841597][ T46] bridge_slave_1: left allmulticast mode [ 185.843593][ T46] bridge_slave_1: left promiscuous mode [ 185.845385][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.849571][ T46] bridge_slave_0: left allmulticast mode [ 185.851382][ T46] bridge_slave_0: left promiscuous mode [ 185.854127][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.003238][ T5324] usbhid 6-1:0.0: can't add hid device: -71 [ 186.005256][ T5324] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 186.011709][ T5324] usb 6-1: USB disconnect, device number 19 [ 186.096409][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.100710][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.104719][ T46] bond0 (unregistering): Released all slaves [ 186.235928][T11765] macvlan2: entered promiscuous mode [ 186.237658][T11765] bridge0: entered promiscuous mode [ 186.387069][ T40] kauditd_printk_skb: 21326 callbacks suppressed [ 186.387080][ T40] audit: type=1326 audit(2000000380.173:22284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 186.396316][ T40] audit: type=1326 audit(2000000380.183:22285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 186.404295][ T40] audit: type=1326 audit(2000000380.183:22286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 186.411364][ T40] audit: type=1326 audit(2000000380.183:22287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 186.418717][ T40] audit: type=1326 audit(2000000380.183:22288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 186.424669][T11775] trusted_key: encrypted_key: master key parameter is missing [ 186.426160][ T40] audit: type=1326 audit(2000000380.183:22289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 186.436462][ T40] audit: type=1326 audit(2000000380.183:22290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 186.444650][ T40] audit: type=1326 audit(2000000380.183:22291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 186.451722][ T40] audit: type=1326 audit(2000000380.183:22292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 186.459165][ T40] audit: type=1326 audit(2000000380.183:22293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11726 comm="syz.2.1496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd8e929 code=0x7ff00000 [ 186.467180][ T46] hsr_slave_0: left promiscuous mode [ 186.469432][ T46] hsr_slave_1: left promiscuous mode [ 186.471467][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.474375][ T5956] Bluetooth: hci1: command tx timeout [ 186.482275][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.488184][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.490522][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.513874][ T46] veth1_macvtap: left promiscuous mode [ 186.515751][ T46] veth0_macvtap: left promiscuous mode [ 186.517548][ T46] veth1_vlan: left promiscuous mode [ 186.519285][ T46] veth0_vlan: left promiscuous mode [ 187.134070][ T46] team0 (unregistering): Port device team_slave_1 removed [ 187.200841][ T46] team0 (unregistering): Port device team_slave_0 removed [ 187.573372][T11791] net_ratelimit: 7 callbacks suppressed [ 187.573383][T11791] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 187.742135][T11793] netlink: 'syz.2.1514': attribute type 29 has an invalid length. [ 187.777267][T11701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.781377][T11701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.785463][T11701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.789900][T11701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.800368][T11806] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN NOPTI [ 187.804102][T11806] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef] [ 187.807857][T11806] CPU: 2 UID: 0 PID: 11806 Comm: syz.2.1516 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.811776][T11806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.815231][T11806] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 187.816988][T11806] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 50 18 2d f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 187.822937][T11806] RSP: 0018:ffffc90003b272e0 EFLAGS: 00010203 [ 187.824920][T11806] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11004a77eb8 [ 187.827396][T11806] RDX: 000000000000005d RSI: ffffffff898f0830 RDI: 00000000000002ec [ 187.829850][T11806] RBP: 00000000000afff2 R08: 0000000000000005 R09: 0000000000000000 [ 187.832352][T11806] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce89320 [ 187.835464][T11806] R13: 0000000000000000 R14: ffffffff8ce89300 R15: ffff8880253bf000 [ 187.838217][T11806] FS: 00007f84bdbee6c0(0000) GS:ffff8880d6915000(0000) knlGS:0000000000000000 [ 187.841012][T11806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.843108][T11806] CR2: 0000200000019580 CR3: 000000004b625000 CR4: 0000000000352ef0 [ 187.846260][T11806] Call Trace: [ 187.847644][T11806] [ 187.848858][T11806] qdisc_tree_reduce_backlog+0x224/0x500 [ 187.850802][T11806] fq_codel_change+0xb1a/0x11b0 [ 187.852381][T11806] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 187.854267][T11806] ? __pfx_fq_codel_change+0x10/0x10 [ 187.855944][T11806] ? tc_modify_qdisc+0x12bb/0x2130 [ 187.857560][T11806] ? lockdep_init_map_type+0x5c/0x280 [ 187.859245][T11806] fq_codel_init+0x4ce/0xa60 [ 187.860708][T11806] ? lockdep_rtnl_is_held+0x26/0x40 [ 187.862341][T11806] ? __pfx_fq_codel_init+0x10/0x10 [ 187.863983][T11806] qdisc_create+0x457/0xfc0 [ 187.865422][T11806] tc_modify_qdisc+0x12bb/0x2130 [ 187.866993][T11806] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 187.868657][T11806] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 187.870308][T11806] rtnetlink_rcv_msg+0x3c9/0xe90 [ 187.871881][T11806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.873628][T11806] ? ref_tracker_free+0x37c/0x830 [ 187.875217][T11806] netlink_rcv_skb+0x158/0x420 [ 187.876721][T11806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.878426][T11806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.880086][T11806] ? netlink_deliver_tap+0x1ae/0xd30 [ 187.881748][T11806] netlink_unicast+0x53a/0x7f0 [ 187.883365][T11806] ? __pfx_netlink_unicast+0x10/0x10 [ 187.885131][T11806] netlink_sendmsg+0x8d1/0xdd0 [ 187.886635][T11806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.888294][T11806] ____sys_sendmsg+0xa95/0xc70 [ 187.889797][T11806] ? copy_msghdr_from_user+0x10a/0x160 [ 187.891511][T11806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.893454][T11806] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.895115][T11806] ___sys_sendmsg+0x134/0x1d0 [ 187.896600][T11806] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.898232][T11806] ? __lock_acquire+0x622/0x1c90 [ 187.899810][T11806] __sys_sendmsg+0x16d/0x220 [ 187.901295][T11806] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.902920][T11806] ? __x64_sys_futex+0x1e0/0x4c0 [ 187.904706][T11806] do_syscall_64+0xcd/0x4c0 [ 187.906100][T11806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.907944][T11806] RIP: 0033:0x7f84bcd8e929 [ 187.909349][T11806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.915441][T11806] RSP: 002b:00007f84bdbee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.918000][T11806] RAX: ffffffffffffffda RBX: 00007f84bcfb6080 RCX: 00007f84bcd8e929 [ 187.920419][T11806] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 000000000000000a [ 187.922855][T11806] RBP: 00007f84bce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.925364][T11806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.927808][T11806] R13: 0000000000000000 R14: 00007f84bcfb6080 R15: 00007ffeeb4292c8 [ 187.930248][T11806] [ 187.931241][T11806] Modules linked in: [ 187.932605][T11806] ---[ end trace 0000000000000000 ]--- [ 187.934374][T11806] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 187.934481][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 187.936115][T11806] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 50 18 2d f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 187.944920][T11806] RSP: 0018:ffffc90003b272e0 EFLAGS: 00010203 [ 187.946950][T11806] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11004a77eb8 [ 187.949444][T11806] RDX: 000000000000005d RSI: ffffffff898f0830 RDI: 00000000000002ec [ 187.951971][T11806] RBP: 00000000000afff2 R08: 0000000000000005 R09: 0000000000000000 [ 187.954858][T11806] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce89320 [ 187.957681][T11806] R13: 0000000000000000 R14: ffffffff8ce89300 R15: ffff8880253bf000 [ 187.960140][T11806] FS: 00007f84bdbee6c0(0000) GS:ffff8880d6915000(0000) knlGS:0000000000000000 [ 187.962988][T11806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.965119][T11806] CR2: 0000200000019580 CR3: 000000004b625000 CR4: 0000000000352ef0 [ 187.967627][T11806] Kernel panic - not syncing: Fatal exception in interrupt [ 187.970667][T11806] Kernel Offset: disabled [ 187.972047][T11806] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:02:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000160c0c RBX=0000000000000000 RCX=ffffffff8b884c69 RDX=ffffed100d486646 RSI=ffffffff8c158760 RDI=ffffffff8191fc61 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a97550 R15=0000000000000000 RIP=ffffffff8b8837cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6715000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f84bdbedf98 CR3=0000000046d39000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000e0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe25b877e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b25811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b25811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b25811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b25811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b25811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b25811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006900000 RBX=ffff8881063e8000 RCX=ffffffff819c9c17 RDX=1ffff11020c7d25a RSI=ffffffff86a88eff RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc900006a0eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc900006a0ff8 R12=ffffffff90a97260 R13=dffffc0000000000 R14=ffff8881063e92d0 R15=0000000000000000 RIP=ffffffff86a88f27 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6815000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3dc08e7d60 CR3=000000002ab23000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3dbfd856a3 00007f3dbfd856a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd685d1420 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555679c9919 00005555679c9550 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555679d329d 00005555679d2600 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9408000100000008 06060127ea03c482 040001a003000000 0000003072656c6c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616b7a797301ffff ffffffffffffdf08 0180030004000008 0009800401c71000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9408000100000008 06060127ea03c482 040001a003000000 0000003072656c6c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000060470ea0008 0006100020808080 8080a0100006026f fc0180040880a2d3 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0120801000038180 0401000008080606 0168920282080003 81e0030010000381 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bee55 RDI=ffffffff9b0c52e0 RBP=ffffffff9b0c52a0 RSP=ffffc90003b26ce0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0c52a0 R15=ffffffff855bedf0 RIP=ffffffff855bee7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f84bdbee6c0 ffffffff 00c00000 GS =0000 ffff8880d6915000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000019580 CR3=000000004b625000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff8 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bcf85488 00007f84bcf85480 00007f84bcf85478 00007f84bcf85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bdaed100 00007f84bcf85440 00007f84bcf85458 00007f84bcf854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bcf85498 00007f84bcf85490 00007f84bcf85488 00007f84bcf85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000013981c RBX=0000000000000003 RCX=ffffffff8b884c69 RDX=ffffed100d4e6646 RSI=ffffffff8c158760 RDI=ffffffff8191fc61 RBP=ffffed1003c5b000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2d8000 R14=ffffffff90a97550 R15=0000000000000000 RIP=ffffffff8b8837cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a15000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f84bcd746c0 CR3=00000000617b8000 CR4=00352ef0 DR0=000003fffffffffe DR1=0000000000000ddb DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeeb429650 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84bce11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000