last executing test programs: 6m30.881255763s ago: executing program 3 (id=136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}}, 0x8000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x2080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x3c}}, 0x0) connect$inet6(r2, &(0x7f00000005c0)={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, '\x00', 0xe}}, 0x1c) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc5}, 0x0) 6m30.881045674s ago: executing program 3 (id=137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x20002) chdir(&(0x7f0000000240)='./file0\x00') ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000200)={0x91a6, 0xf4e, 0x1, 0x3c, &(0x7f0000000100)=""/60, 0x36, &(0x7f0000000140)=""/54, 0x59, &(0x7f0000000180)=""/89}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c1f0000000000000000006020000000000000004500010087"], 0x1c}}, 0x51) 6m30.798611827s ago: executing program 3 (id=138): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x600, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r2, 0x303, 0x0, 0xfffffff8}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f00000000c0)="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", 0xfd) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) 6m28.020108584s ago: executing program 3 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pread64(r0, &(0x7f00000000c0)=""/211, 0xd3, 0x10001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) (async) socket(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)) (async) ppoll(&(0x7f00000003c0)=[{r1, 0x80a0}], 0x1, 0x0, 0x0, 0x0) (async) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00') 6m27.924155689s ago: executing program 3 (id=170): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000180)=0x5) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0xfffffffd, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000}, {0x0, 0x4, 0x40000000, 0xfffffffffffffffc}, {0x40}, 0x0, 0x0, 0xa, 0x2, 0x1, 0xe0}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x4810) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r10}, &(0x7f0000000600), &(0x7f0000000640)=r9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r11 = dup(r7) mmap(&(0x7f000079a000/0x3000)=nil, 0x3000, 0x1000006, 0x28011, r11, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) read(r7, &(0x7f0000000600)=""/4096, 0x1000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='ne'], 0x2d, 0xfffffffffffffff9) write$6lowpan_control(r11, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$can_bcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) 6m27.647103219s ago: executing program 3 (id=173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pread64(r4, &(0x7f0000000080)=""/221, 0xdd, 0x7fffffffffffffff) getpeername$inet(r4, &(0x7f0000000100), &(0x7f0000000180)=0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) 6m27.599977278s ago: executing program 32 (id=173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pread64(r4, &(0x7f0000000080)=""/221, 0xdd, 0x7fffffffffffffff) getpeername$inet(r4, &(0x7f0000000100), &(0x7f0000000180)=0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) 5m55.741287615s ago: executing program 0 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x82081fc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000340)="05004305", 0x4, 0x20000080, &(0x7f0000000080)={0x11, 0x8100, r2, 0x306, 0x7}, 0x14) r4 = open(&(0x7f0000000780)='./bus\x00', 0x50d83c, 0x48) write$FUSE_BMAP(r4, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x2}}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) mmap(&(0x7f0000158000/0x4000)=nil, 0x4000, 0x7ffffe, 0x4002011, r4, 0x0) fcntl$setlease(r5, 0x400, 0x0) 5m55.741103894s ago: executing program 0 (id=579): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1802000000000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 5m55.677146403s ago: executing program 0 (id=580): socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket(0x2b, 0x80801, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x200}}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xfffd}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c90010000c00050017a5081f0e000080"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=virtio,', {[{@ignoreqv}]}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) 5m55.676604095s ago: executing program 0 (id=581): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000220008022abd7000ffdbdf25000049832257c7d6085801720d9db60000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01010000000000000000000000090900010073797a31000000000c00034000000000000000050c010000180a010200000000000000000000000009"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffa, @mcast1, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f0000000040)=0x2, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5d41141a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r5, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r9 = accept4(r2, 0x0, 0x0, 0x80800) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r10, 0x0) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m52.943739663s ago: executing program 0 (id=600): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000000c0)=0x7) syz_io_uring_setup(0xa8c, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x4}, 0x68) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000580)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$binfmt_aout(r6, 0x0, 0x1000) r7 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r7, 0x80184132, &(0x7f0000000240)={0x0, 0x0}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r10, 0x0) stat(&(0x7f0000004b80)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) 5m52.567737574s ago: executing program 0 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1, 0x0, 0xfffffffffffffff7}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r3 = io_uring_setup(0x2ea4, &(0x7f0000000500)={0x0, 0xafa, 0x1000, 0x2, 0xc4}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 5m36.287856922s ago: executing program 33 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1, 0x0, 0xfffffffffffffff7}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r3 = io_uring_setup(0x2ea4, &(0x7f0000000500)={0x0, 0xafa, 0x1000, 0x2, 0xc4}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 1m22.012344354s ago: executing program 5 (id=4591): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x24008094) accept4$unix(r0, 0x0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRES32], 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) getpeername$packet(r0, &(0x7f0000000340), &(0x7f00000003c0)=0x14) bind$xdp(r0, 0x0, 0x0) 1m21.92586244s ago: executing program 5 (id=4592): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x7000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1m17.205548223s ago: executing program 5 (id=4595): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000fe1300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1m16.976631506s ago: executing program 5 (id=4598): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$sock_int(r4, 0x1, 0x27, &(0x7f0000000000)=0x9, 0x4) 1m16.8681284s ago: executing program 5 (id=4599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000000), &(0x7f0000000ec0)=0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r2, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m16.193805488s ago: executing program 5 (id=4607): clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x77, 0xb00, 0x100000000000000, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x6}) 1m16.106417045s ago: executing program 34 (id=4607): clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x77, 0xb00, 0x100000000000000, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x6}) 51.784665546s ago: executing program 2 (id=4901): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8f91461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) 51.682333503s ago: executing program 2 (id=4906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 51.682143028s ago: executing program 2 (id=4907): r0 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0xfffffffc, 0x3}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0x10) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x3, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x3, 0xdf, 0x0, 0x8000000000000001}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x8, 0xfc, 0x0, 0x0, 0x0, 0x800000100000000}, {0x9, 0x5, 0x76, 0x24, 0x0, 0x40, 0x4, 0x0, 0x1, 0xff, 0x0, 0x0, 0x8}]}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x8, 0xeeef0000, 0x1}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0x4, 0x0, 0x40, 0x80000001, 0x1, 0x2100000002004cb, 0x0, 0x0, 0x7, 0x0, 0xe2, 0xb62, 0x1ffffd, 0x2, 0x1], 0x5000, 0x202}) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x40002000) ioctl$KVM_RUN(r5, 0xae80, 0xff010000) 51.634302255s ago: executing program 2 (id=4908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01010000000000000000000000090900010073797a31000000000c00034000000000000000050c010000180a010200000000000000000000000009"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000f8ff0000"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r6 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 51.422181071s ago: executing program 2 (id=4910): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r4 = getpgid(0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, 0xffffffffffffffff, 0x12, 0x0, @val=@uprobe_multi={&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=[0xb, 0x8, 0x6, 0x7f, 0x180000000000, 0xb36, 0x9], &(0x7f00000001c0)=[0x4, 0x3], 0x5, 0x7, 0x0, r4}}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x502, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x404c084}, 0x40800) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c0}, 0xc040810) accept4(r5, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xe7c2, 0x32315241, 0x3, @stepwise={0xfffffff7, 0x3, 0x3, 0x3ff, 0x6, 0xfffffffd}}) 51.017978413s ago: executing program 2 (id=4921): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000107000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 50.93932687s ago: executing program 35 (id=4921): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000107000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 49.854821673s ago: executing program 6 (id=4948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000fff080006000a000000080003"], 0x84}}, 0x0) 49.689086865s ago: executing program 6 (id=4949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 49.503840261s ago: executing program 6 (id=4950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x10012, r4, 0x4000) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x56}], 0x1, 0x4, &(0x7f0000000180)=[@cr4={0x1, 0x88}], 0x1) 49.384930192s ago: executing program 6 (id=4951): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80700a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0xc0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000b0601020000000000000000030000000900020073797a30000000000500010007000000580008800c00078007001a00242e0000100007800c001840fffffffffffffffd100007800c001b4000000000000000100c00078008000a400000ffff100007800c00028008000140ac1414aa0c000780060001"], 0x80}}, 0x40800) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0x4800) 49.275391149s ago: executing program 6 (id=4952): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 48.825294841s ago: executing program 6 (id=4955): r0 = socket(0x1e, 0x2, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x10f, 0x6, 0x0, &(0x7f0000001800)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x34c, 0x1b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000001500010028bd7000fcdbdf25e0000001000000000000000000000000fc0000000000000000000000000000014e2300004e2100090a0020a06c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b56b6e00010000000a0010006a"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 48.71262273s ago: executing program 36 (id=4955): r0 = socket(0x1e, 0x2, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x10f, 0x6, 0x0, &(0x7f0000001800)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x34c, 0x1b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000001500010028bd7000fcdbdf25e0000001000000000000000000000000fc0000000000000000000000000000014e2300004e2100090a0020a06c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b56b6e00010000000a0010006a"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 27.961779081s ago: executing program 8 (id=5255): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="021800001e000080ff0000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000080012000000000000000000000000001b0000000000000000000000000000000a010100000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc010000000000000000000000000000000000000000000008001900000000000a004e22000000030000000000ffffffe000000000000001080000000a000000000000000000000000000000000000000000000100000000020010"], 0xf0}}, 0x4000) 27.960588773s ago: executing program 8 (id=5258): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001100)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000a80"], 0x2c}}, 0x0) 27.863703825s ago: executing program 8 (id=5259): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='timerslack_ns\x00') read$FUSE(r0, &(0x7f0000003140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) accept4(0xffffffffffffffff, 0x0, &(0x7f00000015c0), 0x26ba219a187d88cd) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000200)=@req3={0x3, 0x4, 0x2, 0x3, 0xfffffffc, 0x7, 0xfff}, 0x1c) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg$can_j1939(r4, &(0x7f00000001c0)={0x0, 0x51, &(0x7f0000001600)=[{&(0x7f0000001640)=""/233, 0xf0}], 0x1000000000000028}, 0x20) (async) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x20, &(0x7f0000000000), 0x4) (async) syz_emit_ethernet(0xde, &(0x7f0000001480)=ANY=[@ANYRES16=r1], 0x0) (async) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000040)={0x59000000, 0x2, 0xd61, @random="cb0d99b0316f", 'ip6gre0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0x8000, 0x8, @local, @local, 0x27, 0x7, 0xffff, 0xf205}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8005}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xe4ffffff, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001a80)}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f00000016c0)=""/215, 0xd7}, {&(0x7f00000017c0)=""/106, 0x6a}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/141, 0x8d}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x62, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xffffffb6, 0xffffffff}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a00)=@getqdisc={0x44, 0x26, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0xc}, {0xfff1, 0xb}, {0xa, 0x5}}, [{0x4}, {0xfffffffffffffd9c}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}}, 0x40) (rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000020000000305000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="511afdd84d4c07003b0012800800010068737200480002800500030008000000050003000500000005000300f008000200000000", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0) 27.778256628s ago: executing program 8 (id=5262): r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x101) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x31) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000240)={"89334957", 0x0, 0x0, 0x0, 0x0, 0x0, "ddc65fbb23fea261896b699c0a0a8c", "0dabf5d6", "84ec4500", "b8ea9c27", ["1a475e1f925abfe0d25668c9", "3d5d1dc2d1c96ef8089fab7e", "1b2b6b9ccc0ef9bc0fafac7e", "e7d52b69c3304927cdfc24fb"]}) 27.723187688s ago: executing program 8 (id=5264): setreuid(0xee01, 0xee01) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r2}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x2000, '\x00', r4, r2, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) creat(&(0x7f00000004c0)='./file0\x00', 0x124) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r6) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0"], 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) close_range(r8, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) creat(&(0x7f0000000300)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x10c) 27.456690349s ago: executing program 8 (id=5272): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e14060200f8ffff0d000a001000000002165980000012", 0x2f}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000200), 0xd) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @initdev}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400, 0x0, 0x8, 0x400, 0x6, 0x2, r3}) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 27.382743115s ago: executing program 37 (id=5272): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e14060200f8ffff0d000a001000000002165980000012", 0x2f}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000200), 0xd) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @initdev}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400, 0x0, 0x8, 0x400, 0x6, 0x2, r3}) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 10.671941616s ago: executing program 4 (id=5583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}}], {0x14, 0x10, 0x1, 0x0, 0xfff5, {0x0, 0x84}}}, 0x3c}}, 0x40000) 10.609379501s ago: executing program 4 (id=5584): syz_open_dev$tty20(0xc, 0x4, 0x0) (async) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) (async) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) (async) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='iso9660\x00', 0x405, 0x0) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000a, 0x89010, r2, 0xf0afb000) 10.555450007s ago: executing program 4 (id=5585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20, 0x1220}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x38}}, 0x1000000) 10.553507349s ago: executing program 4 (id=5586): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}}, 0xc000) syz_emit_ethernet(0x55, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x47, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote, "53f683785c5b987df5ff06000000007ee410f074b2c89256c505b9fc63538d19dba32efd618d4756028ea9"}}}}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70537f851e0}, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) 10.468792399s ago: executing program 4 (id=5587): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000200)={0x20, 0xe, 0x47, "962fa2117bb11eb5083ee9112ebe2e076bc66c19c043f1a458de7de8a088e14255a4a6d26f20fa1249ad4af1ab4a643680273fbf69af4f913046d6767bdd0267a07400cdead90a"}, 0x0, 0x0}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40603d10, &(0x7f0000000200)={{0x9}, {0x4, 0x20}, 0x0, 0x4000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x4aa8, &(0x7f0000000040)={0x0, 0x28a7, 0x80, 0x2, 0x111}) syz_io_uring_setup(0x3e96, &(0x7f0000001680)={0x0, 0x4627, 0x20, 0x3, 0x326, 0x0, r1}, &(0x7f0000001700), &(0x7f0000001740)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000740)={0xfffffffc, 0x1, 0x400, 0x3, 0x44, "0a12f3cb33e8450000000200006a00"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r5 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='iocharset', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0x9, 0xffffff07, 0x1400c, 0x1, 0x5, '\x00', r3, r4, 0x5, 0x5, 0x4, 0xa, @void, @value, @value=r6}, 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfb}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0xfff, @mcast1, 0x2}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e23, 0x401, @mcast2, 0x7fffffff}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000080)={r9, 0xffff8000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r10}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) bind$packet(r7, &(0x7f0000000100)={0x11, 0x9, r11, 0x1, 0x8, 0x6, @random="5f9e1eb8eb24"}, 0x14) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) dup(r2) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 9.838526225s ago: executing program 4 (id=5589): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000082"], 0x34}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000580)={0x1, 0x4, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x5, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0x35fe7901]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) getpid() r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4210, r8, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000000c00)={0x0, "4682df837a1d1fa6f5eedf2577036af1"}) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r9, 0x101, 0x8, &(0x7f0000000000), 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x130, 0xa, 0xd0e0000, 0x0, 0x100, 0x268, 0x1d8, 0x1d8, 0x268, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x1, 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x3202, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x0, 0x4]}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x10, [], 0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 2.89796103s ago: executing program 9 (id=5705): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x4000, {0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.803724391s ago: executing program 9 (id=5707): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x1f4, 0x0, 0x54}, 0x9c) 2.632529174s ago: executing program 9 (id=5709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000009c0)={0xdb, 0x0, 0x3}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000001fc0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) close(0x3) poll(&(0x7f0000000f80)=[{r2, 0x110}], 0x1, 0x4) listen(r2, 0x4) 2.247416971s ago: executing program 9 (id=5711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000f2000040"]) gettid() r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000000)) recvfrom$inet(r6, &(0x7f00000001c0)=""/211, 0xd3, 0x20, 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)={0x10, 0x0, 0x3}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000", @ANYRES32=r10, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x74, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x5}, {0xc, 0x4}, {0xffeb}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xd, 0x10, 0xffffffff, 0x1, 0x0, 0x3, 0x2}}, {0x8, 0x2, [0x4, 0x5]}}, {{0x1c, 0x1, {0x7, 0x1c, 0x9, 0xfffffff1, 0x0, 0xbd, 0x5, 0x3}}, {0xa, 0x2, [0x43, 0x3, 0xfff5]}}]}]}, 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x400) mkdir(&(0x7f0000000340)='./file1\x00', 0xfffffffffffffffe) 1.041091221s ago: executing program 9 (id=5728): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x2, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6ac6acd41ff800"}}, 0x48}}, 0x20000400) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "18f19185e9e9e293"}}, 0x38}}, 0xff000000) 880.155954ms ago: executing program 9 (id=5729): socket$inet_icmp_raw(0x2, 0x3, 0x1) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_create_resource$binfmt(0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket(0x2b, 0x80801, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x200}}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xfffd}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[], 0x70}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c90010000c00050017a5"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 822.601504ms ago: executing program 1 (id=5731): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="d800000019008111e0020f060d6607040a60090000020000000455a1bc00090008000699e3ffffff140015000800000006000500009bcb95e8a44b2f443300f7d1cebbef4fa27100a007a2f7457f01896c9e481326ebcd734e7d856034277ce06bbace58be93548c76f1f5fd0e920a8017cb39b62ee5a7cef4090000001fb791643a5e83b1ff02b2a10000000014d6d930dfe1d90022fe040000005025acca26260fe89d7b1deedc6551aa77d9d69254263eb23409ed062f3d40fad95667e006dcdf634c1f21ac76efb42a9ecbee5de6ccd44b42f4d643f6", 0xd8}], 0x1}, 0x48800) 717.98275ms ago: executing program 1 (id=5732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x40000, 0x8000}, 0x0) 435.706304ms ago: executing program 1 (id=5734): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) r2 = socket(0x40000000015, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002ac0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 435.471842ms ago: executing program 1 (id=5736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14, 0x10, 0x1, 0x1400}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40000) 433.892535ms ago: executing program 7 (id=5737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0xff0f0000) 433.783058ms ago: executing program 1 (id=5738): socket(0x200000000000011, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r1}, 0x38) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r3}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000070000000a00000000000000000000001400050000000000000000000000000000000002ed"], 0x30}, 0x1, 0x11}, 0x0) 372.335825ms ago: executing program 7 (id=5739): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000940)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x1) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x110, r6, 0x180000000) pread64(r3, &(0x7f00000000c0)=""/187, 0xbb, 0x80000000) 371.981288ms ago: executing program 1 (id=5740): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2c010000, @loopback}, 0x1c) 371.823152ms ago: executing program 7 (id=5741): ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 291.67906ms ago: executing program 7 (id=5742): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xffffffa4}}], 0x1, 0x0) 290.523001ms ago: executing program 7 (id=5743): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340)={0x2, 0x0, @rand_addr=0x60}, 0x10) 0s ago: executing program 7 (id=5744): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000040)) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x1010, r1, 0x80000000) r2 = inotify_init1(0x80000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000000c0)=0x1) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x2, @time={0x3, 0xffffffff}, {0x0, 0xb8}, {0x1, 0x9}, @control={0xb, 0x4}}, {0x8, 0x0, 0x0, 0x0, @tick=0x5a1, {0xa, 0xfd}, {0xff, 0x3}, @ext={0x6a, &(0x7f0000000180)="5bf3df48b5d60cc665a53fbc4385fbe85ea6bee5f5a5945992ddcbcbc15d1a7dd6406233ff5156dfad487dbb3fda4978c8a970d4207c9526766ff418f525dd811b1bfc75ac0fdd105553303387ed9441aa81e713d6ad61db92b1a78430c4251cc905ae584182b4857249"}}], 0x38) write$sndseq(r4, &(0x7f0000000080)=[{0x5, 0xfd, 0x0, 0x78, @tick=0x101, {0x7, 0x6}, {0x5, 0x51}, @time=@tick=0x2}], 0x1c) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004d00)={0x2020}, 0x2020) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f0000000040)={0x4b5a9da54893e123, 0xf, 0x8, 0x2}, 0x8, 0xea, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x180000}) close_range(r2, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r4, &(0x7f00000005c0)={0x8, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): entered blocking state [ 372.403436][T19263] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.405634][T19263] bridge_slave_0: entered allmulticast mode [ 372.418072][T19263] bridge_slave_0: entered promiscuous mode [ 372.490487][T19263] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.493023][T19263] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.495371][ T5947] Bluetooth: hci0: command tx timeout [ 372.498585][T19263] bridge_slave_1: entered allmulticast mode [ 372.501093][T19263] bridge_slave_1: entered promiscuous mode [ 372.519696][ T62] usb 7-1: USB disconnect, device number 29 [ 372.522214][T19318] Invalid ELF header type: 0 != 1 [ 372.524313][ T39] audit: type=1400 audit(350.407:1464): avc: denied { module_load } for pid=19317 comm="syz.4.4630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 372.603303][ T39] audit: type=1400 audit(350.491:1465): avc: denied { accept } for pid=19323 comm="syz.4.4632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 372.646342][T19324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4631'. [ 372.718215][T19263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.780161][T19331] overlayfs: failed to clone upperpath [ 372.847382][T19263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.901110][T13817] hsr_slave_0: left promiscuous mode [ 372.906888][T13817] hsr_slave_1: left promiscuous mode [ 372.938074][T13817] veth1_macvtap: left promiscuous mode [ 372.939734][T13817] veth0_macvtap: left promiscuous mode [ 372.941414][T13817] veth1_vlan: left promiscuous mode [ 372.942968][T13817] veth0_vlan: left promiscuous mode [ 373.010359][T13817] pim6reg (unregistering): left allmulticast mode [ 373.156532][T19350] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 373.222674][ T75] smc: removing ib device syz1 [ 373.425136][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.182689][T13817] team0 (unregistering): Port device team_slave_1 removed [ 374.301332][T13817] team0 (unregistering): Port device team_slave_0 removed [ 374.537018][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.718727][ T5947] Bluetooth: hci0: command tx timeout [ 375.180029][T19263] team0: Port device team_slave_0 added [ 375.185540][T19344] dvmrp0: entered allmulticast mode [ 375.229208][T19361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.231408][T19361] IPv6: NLM_F_CREATE should be set when creating new route [ 375.233568][T19361] IPv6: NLM_F_CREATE should be set when creating new route [ 375.279300][T19263] team0: Port device team_slave_1 added [ 375.356935][ T6465] IPVS: starting estimator thread 0... [ 375.396101][T19263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.398210][T19375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4650'. [ 375.399993][T19263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.427024][T19263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.434267][T19375] ipvlan0: entered allmulticast mode [ 375.437375][T19375] veth0_vlan: entered allmulticast mode [ 375.439669][T19263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.442359][T19263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.455028][T19263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.459274][T19373] IPVS: using max 38 ests per chain, 91200 per kthread [ 375.531244][ T6006] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 375.557508][T19263] hsr_slave_0: entered promiscuous mode [ 375.560958][T19263] hsr_slave_1: entered promiscuous mode [ 375.576431][ T39] audit: type=1400 audit(609.255:1466): avc: denied { bind } for pid=19379 comm="syz.1.4652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 375.590085][T19263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.592883][T19263] Cannot create hsr debugfs directory [ 375.633658][ T39] audit: type=1400 audit(609.320:1467): avc: denied { bind } for pid=19382 comm="syz.1.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 375.650019][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.702748][ T6006] usb 7-1: Using ep0 maxpacket: 16 [ 375.708869][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.712137][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.717207][ T6006] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 375.721305][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.734772][ T6006] usb 7-1: config 0 descriptor?? [ 375.812974][T13817] IPVS: stop unused estimator thread 0... [ 375.891608][T19263] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 375.896634][T19263] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 375.907179][T19263] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 375.918070][T19263] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 375.974634][T19263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.029753][T19263] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.042173][T13817] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.045140][T13817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.056036][T13817] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.058219][T13817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.155644][T19263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.175080][ T6006] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 376.178702][ T6006] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 376.180772][ T6006] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 376.182794][ T6006] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 376.185790][ T6006] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 376.188456][ T6006] appleir 0003:05AC:8241.0007: No inputs registered, leaving [ 376.194523][ T6006] appleir 0003:05AC:8241.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 376.279875][T19263] veth0_vlan: entered promiscuous mode [ 376.288976][T19263] veth1_vlan: entered promiscuous mode [ 376.312913][T19263] veth0_macvtap: entered promiscuous mode [ 376.316307][T19263] veth1_macvtap: entered promiscuous mode [ 376.330166][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.335336][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.338208][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.341209][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.344984][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.347991][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.350810][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.353916][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.356744][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.359653][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.362535][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.366206][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.369711][T19263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.379431][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.382430][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.385340][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.389209][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.392012][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.395009][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.398126][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.401131][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.403945][T19263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.406952][T19263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.415869][T19263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.420415][T19263] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.422959][T19263] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.425485][T19263] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.427986][T19263] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.461984][T19366] tmpfs: Bad value for 'mpol' [ 376.468103][ T1021] usb 7-1: USB disconnect, device number 30 [ 376.480673][T13817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.486303][T13817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.508304][T13841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.510746][T13841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.666647][T19448] netlink: 'syz.4.4661': attribute type 12 has an invalid length. [ 376.668976][T19448] netlink: 'syz.4.4661': attribute type 28 has an invalid length. [ 376.671207][T19448] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4661'. [ 376.709407][T19451] netlink: 'syz.6.4660': attribute type 1 has an invalid length. [ 376.714211][T19450] netlink: 'syz.6.4660': attribute type 1 has an invalid length. [ 376.716783][T19450] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4660'. [ 376.749882][T19458] pipefs: Unknown parameter 'grpquota' [ 376.771302][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.834323][T19466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4666'. [ 376.942525][ T5947] Bluetooth: hci0: command tx timeout [ 376.943795][T19474] netlink: 'syz.1.4669': attribute type 9 has an invalid length. [ 376.946460][T19474] netlink: 201384 bytes leftover after parsing attributes in process `syz.1.4669'. [ 376.949206][T19474] openvswitch: netlink: Message has 6 unknown bytes. [ 376.985314][ T1021] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 377.141396][T19495] x_tables: duplicate underflow at hook 1 [ 377.160472][ T1021] usb 11-1: config index 0 descriptor too short (expected 16420, got 36) [ 377.163291][ T1021] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.166322][ T1021] usb 11-1: config 0 has no interfaces? [ 377.168863][ T1021] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.171597][ T1021] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.176073][ T1021] usb 11-1: config 0 descriptor?? [ 377.215701][ T39] audit: type=1400 audit(610.798:1468): avc: denied { sys_chroot } for pid=19501 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 377.241753][ T39] audit: type=1400 audit(610.798:1469): avc: denied { setgid } for pid=19501 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 377.248084][ T39] audit: type=1400 audit(610.798:1470): avc: denied { setrlimit } for pid=19501 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 377.299305][ T39] audit: type=1400 audit(610.873:1471): avc: denied { read } for pid=19507 comm="syz.2.4680" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 377.872539][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.908477][T19527] syz_tun: entered allmulticast mode [ 377.911591][T19526] syz_tun: left allmulticast mode [ 378.040013][ T39] audit: type=1400 audit(611.565:1472): avc: denied { accept } for pid=19534 comm="syz.4.4688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 378.055293][ T1021] usb 11-1: string descriptor 0 read error: -71 [ 378.065210][ T1021] usb 11-1: USB disconnect, device number 2 [ 378.123226][T19539] overlayfs: failed to clone upperpath [ 378.148426][ T39] audit: type=1400 audit(611.668:1473): avc: denied { append } for pid=19540 comm="syz.6.4691" name="hidraw0" dev="devtmpfs" ino=3091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 378.720900][T19558] netlink: 'syz.4.4698': attribute type 16 has an invalid length. [ 378.723166][T19558] netlink: 'syz.4.4698': attribute type 17 has an invalid length. [ 378.736248][T19558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.984210][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.013931][T19565] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 379.054395][T19565] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 379.155576][ T5947] Bluetooth: hci0: command tx timeout [ 379.176096][T19571] Mount JFS Failure: -22 [ 379.179190][T19571] jfs_mount failed w/return code = -22 [ 379.223849][T19571] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 379.298347][T19571] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 379.303388][ T39] audit: type=1400 audit(612.744:1474): avc: denied { setopt } for pid=19580 comm="syz.1.4707" lport=34010 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 379.933752][T19610] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 379.977561][T19610] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 379.981129][ T39] audit: type=1326 audit(613.389:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19609 comm="syz.2.4716" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25ad38d169 code=0x0 [ 380.096118][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.135712][ T5947] Bluetooth: hci3: Unknown advertising packet type: 0x11 [ 380.135788][ T5947] Bluetooth: hci3: Unknown advertising packet type: 0x17 [ 380.140297][ T5947] Bluetooth: hci3: Unknown advertising packet type: 0x1d [ 380.143241][ T5947] Bluetooth: hci3: Malformed LE Event: 0x0d [ 380.811854][T13848] bond0: left allmulticast mode [ 380.817272][T13848] batadv0: left allmulticast mode [ 380.885927][T13848] bond8 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 380.889630][T13848] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 380.902384][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4726'. [ 381.001460][T13848] bond3 (unregistering): (slave gretap1): Releasing active interface [ 381.161540][T19643] Cannot find set identified by id 0 to match [ 381.169845][ T39] audit: type=1400 audit(614.493:1476): avc: denied { write } for pid=19642 comm="syz.4.4728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.218578][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.443856][T13848] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 381.448114][T13848] bond0 (unregistering): Released all slaves [ 381.590525][T13848] bond1 (unregistering): (slave bond2): Releasing backup interface [ 381.595058][T13848] bond1 (unregistering): Released all slaves [ 381.780974][T13848] bond2 (unregistering): Released all slaves [ 381.788146][T13848] bond3 (unregistering): Released all slaves [ 381.893364][ T39] audit: type=1400 audit(615.167:1477): avc: denied { append } for pid=19657 comm="syz.6.4732" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 381.942262][T13848] bond4 (unregistering): Released all slaves [ 382.091982][T13848] bond5 (unregistering): (slave bond6): Releasing backup interface [ 382.096725][T13848] bond5 (unregistering): Released all slaves [ 382.214949][T13848] bond6 (unregistering): Released all slaves [ 382.319791][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.342096][T13848] bond7 (unregistering): Released all slaves [ 382.428208][T19663] 9pnet_fd: Insufficient options for proto=fd [ 382.482654][T13848] bond8 (unregistering): Released all slaves [ 382.495414][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4726'. [ 382.500367][T19640] syz_tun: entered promiscuous mode [ 382.506493][T19640] syz_tun: left promiscuous mode [ 382.526155][T19649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.672582][T13848] tipc: Disabling bearer [ 382.676551][T13848] tipc: Disabling bearer [ 382.699818][T13848] tipc: Left network mode [ 382.957906][ T5947] Bluetooth: hci3: Unknown advertising packet type: 0x19 [ 382.957926][ T5947] Bluetooth: hci3: Unknown advertising packet type: 0x1f [ 382.961495][ T5947] Bluetooth: hci3: Unknown advertising packet type: 0x31 [ 382.963762][ T5947] Bluetooth: hci3: Malformed LE Event: 0x0d [ 383.046897][T13848] veth1_macvtap: left promiscuous mode [ 383.048676][T13848] veth0_macvtap: left promiscuous mode [ 383.050405][T13848] veth1_vlan: left promiscuous mode [ 383.052021][T13848] veth0_vlan: left promiscuous mode [ 383.845506][ T39] audit: type=1400 audit(617.000:1478): avc: denied { write } for pid=19731 comm="syz.6.4758" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 383.845540][T19732] random: crng reseeded on system resumption [ 384.037816][ T39] audit: type=1400 audit(617.178:1479): avc: denied { ioctl } for pid=19731 comm="syz.6.4758" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 385.825625][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4770'. [ 385.913299][T19766] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4771'. [ 385.978641][T19770] overlayfs: failed to clone upperpath [ 385.994859][T13848] IPVS: stop unused estimator thread 0... [ 385.997459][ T39] audit: type=1400 audit(619.002:1480): avc: denied { bind } for pid=19772 comm="syz.4.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 386.079068][T19778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4776'. [ 386.095479][T19780] syz_tun: entered allmulticast mode [ 386.098788][T19779] syz_tun: left allmulticast mode [ 386.108127][T19778] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19778 comm=syz.4.4776 [ 386.302454][T13848] bridge_slave_1: left allmulticast mode [ 386.304798][T13848] bridge_slave_1: left promiscuous mode [ 386.307153][T13848] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.316278][T13848] bridge_slave_0: left allmulticast mode [ 386.318891][T13848] bridge_slave_0: left promiscuous mode [ 386.321274][T13848] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.369170][T19800] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4784'. [ 386.484667][T19802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4784'. [ 386.549019][ T39] audit: type=1400 audit(619.526:1481): avc: denied { bind } for pid=19803 comm="syz.6.4786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 387.160965][T13848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.170722][T13848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.177491][T13848] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 387.181838][T13848] bond0 (unregistering): Released all slaves [ 387.321333][T13848] bond1 (unregistering): (slave bond2): Releasing backup interface [ 387.325524][T13848] bond1 (unregistering): Released all slaves [ 387.467301][T13848] bond2 (unregistering): Released all slaves [ 387.608831][T13848] bond3 (unregistering): (slave bond4): Releasing backup interface [ 387.617909][T13848] bond3 (unregistering): Released all slaves [ 387.786008][T13848] bond4 (unregistering): Released all slaves [ 388.193679][ T39] audit: type=1400 audit(621.069:1482): avc: denied { name_bind 0x1000000 } for pid=19862 comm="syz.4.4805" path="socket:[73286]" dev="sockfs" ino=73286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 388.221404][ T64] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 388.340152][T13848] hsr_slave_0: left promiscuous mode [ 388.345682][T13848] hsr_slave_1: left promiscuous mode [ 388.347690][T13848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.350585][T13848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.355235][T13848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.357444][T13848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.385866][ T64] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.389121][ T64] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 388.392691][ T64] usb 11-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 388.395505][ T64] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.403121][ T64] usb 11-1: config 0 descriptor?? [ 388.406782][T19838] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 388.418970][T13848] veth0_to_batadv: left allmulticast mode [ 388.422944][T13848] veth1_macvtap: left promiscuous mode [ 388.425352][T13848] veth0_macvtap: left promiscuous mode [ 388.428864][T13848] veth1_vlan: left promiscuous mode [ 388.430473][T13848] veth0_vlan: left promiscuous mode [ 388.449841][ T39] audit: type=1400 audit(621.303:1483): avc: denied { setattr } for pid=19883 comm="syz.2.4810" name="" dev="pipefs" ino=74881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 388.459430][ T39] audit: type=1400 audit(621.312:1484): avc: denied { shutdown } for pid=19883 comm="syz.2.4810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.506658][T13848] pimreg (unregistering): left allmulticast mode [ 388.720289][T19840] cgroup: fork rejected by pids controller in /syz6 [ 388.741010][ T64] usbhid 11-1:0.0: can't add hid device: -71 [ 388.742863][ T64] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 388.750993][ T64] usb 11-1: USB disconnect, device number 3 [ 389.217140][T19924] netlink: 'syz.1.4812': attribute type 1 has an invalid length. [ 389.219502][T19924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4812'. [ 389.691400][T13848] team0 (unregistering): Port device team_slave_1 removed [ 389.837293][T13848] team0 (unregistering): Port device team_slave_0 removed [ 390.899794][T19937] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 390.961713][T19947] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4816'. [ 390.966974][T19937] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 391.123374][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4819'. [ 391.416553][T19980] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 391.458289][T19990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4826'. [ 391.465687][T19990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4826'. [ 391.533049][ T39] audit: type=1400 audit(624.184:1485): avc: denied { write } for pid=19993 comm="syz.2.4827" lport=58236 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 391.610694][T13848] IPVS: stop unused estimator thread 0... [ 391.637230][T20001] 9pnet_fd: Insufficient options for proto=fd [ 391.683782][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4829'. [ 391.688350][T20004] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4829'. [ 391.691711][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4829'. [ 391.729953][ T39] audit: type=1400 audit(624.380:1486): avc: denied { create } for pid=20003 comm="syz.6.4829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 391.742365][T20004] kAFS: Can only specify source 'none' with -o dyn [ 391.744089][ T39] audit: type=1400 audit(624.380:1487): avc: denied { append } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 391.754262][ T5947] Bluetooth: hci0: Unknown advertising packet type: 0x16 [ 391.754304][ T5947] Bluetooth: hci0: Unknown advertising packet type: 0x1c [ 391.757138][ T5947] Bluetooth: hci0: Unknown advertising packet type: 0x34 [ 391.759860][ T5947] Bluetooth: hci0: Malformed LE Event: 0x0d [ 391.762224][ T39] audit: type=1400 audit(624.390:1488): avc: denied { mounton } for pid=20003 comm="syz.6.4829" path="/25/file0" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 391.770603][ T39] audit: type=1400 audit(624.390:1489): avc: denied { read } for pid=20003 comm="syz.6.4829" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 391.777065][ T39] audit: type=1400 audit(624.390:1490): avc: denied { open } for pid=20003 comm="syz.6.4829" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 391.913007][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 391.913024][ T39] audit: type=1400 audit(624.549:1502): avc: denied { prog_load } for pid=20018 comm="syz.4.4834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.922365][ T39] audit: type=1400 audit(624.549:1503): avc: denied { perfmon } for pid=20018 comm="syz.4.4834" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 391.928913][ T39] audit: type=1400 audit(624.549:1504): avc: denied { prog_run } for pid=20018 comm="syz.4.4834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 392.033670][ T39] audit: type=1400 audit(624.661:1505): avc: denied { create } for pid=20020 comm="syz.4.4835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.040886][ T39] audit: type=1400 audit(624.670:1506): avc: denied { ioctl } for pid=20020 comm="syz.4.4835" path="socket:[74308]" dev="sockfs" ino=74308 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.118168][ T39] audit: type=1400 audit(624.736:1507): avc: denied { setopt } for pid=20027 comm="syz.2.4837" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 392.126450][T20028] syz_tun: entered allmulticast mode [ 392.132321][T20027] syz_tun: left allmulticast mode [ 392.145368][ T39] audit: type=1400 audit(624.736:1508): avc: denied { create } for pid=20029 comm="syz.4.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 392.166198][ T39] audit: type=1400 audit(624.736:1509): avc: denied { write } for pid=20029 comm="syz.4.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 392.174308][ T39] audit: type=1400 audit(624.736:1510): avc: denied { nlmsg_write } for pid=20029 comm="syz.4.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 392.195346][ T39] audit: type=1400 audit(624.773:1511): avc: denied { mounton } for pid=20031 comm="syz.4.4839" path="/541" dev="tmpfs" ino=2894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 393.013622][T20100] __nla_validate_parse: 2 callbacks suppressed [ 393.013640][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4865'. [ 393.665981][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4871'. [ 393.668601][T20117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4871'. [ 393.700474][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4872'. [ 393.703134][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4872'. [ 394.094652][T20146] xt_cgroup: path and classid specified [ 394.157033][T20155] 9pnet_fd: Insufficient options for proto=fd [ 394.195849][T20155] 9pnet_fd: Insufficient options for proto=fd [ 394.239296][T20169] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 1, id = 0 [ 394.279349][T20176] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4897'. [ 394.511253][T20191] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 394.553817][T20191] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 394.972922][T20216] syz_tun: entered allmulticast mode [ 394.975696][T20215] syz_tun: left allmulticast mode [ 395.269804][T11526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.381411][T20236] netlink: 'syz.1.4925': attribute type 1 has an invalid length. [ 395.407393][T11526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.427397][T20236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.488807][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.497300][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.500439][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.503078][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.505516][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 395.511958][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 395.552310][T20245] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 395.613567][T20252] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 395.615103][T20245] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 395.672580][T20259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7955 sclass=netlink_route_socket pid=20259 comm=syz.6.4932 [ 395.770910][T11526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.793684][T20252] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 395.816417][T20245] chnl_net:caif_netlink_parms(): no params data found [ 395.988836][T11526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.107459][T20245] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.109481][T20245] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.113252][T20245] bridge_slave_0: entered allmulticast mode [ 396.115507][T20245] bridge_slave_0: entered promiscuous mode [ 396.123507][T20245] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.125631][T20245] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.127768][T20245] bridge_slave_1: entered allmulticast mode [ 396.130088][T20245] bridge_slave_1: entered promiscuous mode [ 396.146655][T20298] program syz.6.4945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.267684][T20245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.274710][T20245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.330945][T20245] team0: Port device team_slave_0 added [ 396.334992][T20307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20307 comm=syz.1.4947 [ 396.353745][T20245] team0: Port device team_slave_1 added [ 396.387143][T11526] bridge_slave_1: left allmulticast mode [ 396.391372][T11526] bridge_slave_1: left promiscuous mode [ 396.393763][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.412306][T11526] bridge_slave_0: left allmulticast mode [ 396.414733][T11526] bridge_slave_0: left promiscuous mode [ 396.417117][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.069745][T11526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.076302][T11526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.081113][T11526] bond0 (unregistering): Released all slaves [ 397.163761][T20245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.166423][T20245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.175834][T20245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.182957][T20245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.185255][T20245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.196047][T20245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.321805][T20245] hsr_slave_0: entered promiscuous mode [ 397.324945][T20245] hsr_slave_1: entered promiscuous mode [ 397.326876][T20245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.331101][T20245] Cannot create hsr debugfs directory [ 397.388810][ T39] kauditd_printk_skb: 118 callbacks suppressed [ 397.388822][ T39] audit: type=1400 audit(629.665:1630): avc: denied { search } for pid=5654 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.400451][ T39] audit: type=1400 audit(629.675:1631): avc: denied { read } for pid=5654 comm="dhcpcd" name="n156" dev="tmpfs" ino=6709 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.408781][ T39] audit: type=1400 audit(629.675:1632): avc: denied { open } for pid=5654 comm="dhcpcd" path="/run/udev/data/n156" dev="tmpfs" ino=6709 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.416474][ T39] audit: type=1400 audit(629.675:1633): avc: denied { getattr } for pid=5654 comm="dhcpcd" path="/run/udev/data/n156" dev="tmpfs" ino=6709 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 397.439561][ T39] audit: type=1400 audit(629.712:1634): avc: denied { create } for pid=20325 comm="syz.1.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 397.582539][ T39] audit: type=1400 audit(629.843:1635): avc: denied { getopt } for pid=20328 comm="syz.1.4958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 397.666196][ T39] audit: type=1400 audit(629.927:1636): avc: denied { read } for pid=20337 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.690026][ T39] audit: type=1400 audit(629.927:1637): avc: denied { open } for pid=20337 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.713465][ T39] audit: type=1400 audit(629.927:1638): avc: denied { getattr } for pid=20337 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.714733][ T66] Bluetooth: hci3: command tx timeout [ 397.715091][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 397.727735][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 397.729275][ T39] audit: type=1400 audit(629.946:1639): avc: denied { write } for pid=20333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.739045][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 397.746813][T20245] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 397.749388][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 397.751969][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 397.754443][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 397.767692][T20245] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 397.814404][T11526] hsr_slave_0: left promiscuous mode [ 397.819413][T11526] hsr_slave_1: left promiscuous mode [ 397.821456][T11526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.823671][T11526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.828409][T11526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.830496][T11526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.867074][T11526] veth1_macvtap: left promiscuous mode [ 397.869206][T11526] veth0_macvtap: left promiscuous mode [ 397.871438][T11526] veth1_vlan: left promiscuous mode [ 397.873452][T11526] veth0_vlan: left promiscuous mode [ 399.363779][T11526] team0 (unregistering): Port device team_slave_1 removed [ 399.526868][T11526] team0 (unregistering): Port device team_slave_0 removed [ 399.938048][ T5957] Bluetooth: hci3: command tx timeout [ 399.939350][ T66] Bluetooth: hci0: command tx timeout [ 400.609946][T20245] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 400.615940][T20245] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 400.656385][T20363] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 400.704490][T20363] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 400.723466][T20339] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 400.751974][T20245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.758514][T20245] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.777198][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.779259][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.858822][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.860999][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.872466][T20339] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 401.009106][T20339] chnl_net:caif_netlink_parms(): no params data found [ 401.026307][T20245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.215992][T20339] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.218139][T20339] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.220239][T20339] bridge_slave_0: entered allmulticast mode [ 401.232974][T20339] bridge_slave_0: entered promiscuous mode [ 401.239445][T20339] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.242404][T20339] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.245232][T20339] bridge_slave_1: entered allmulticast mode [ 401.253585][T20339] bridge_slave_1: entered promiscuous mode [ 401.296610][T20415] ip6tnl1: entered allmulticast mode [ 401.307474][T20339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.332259][T20339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.382789][T20339] team0: Port device team_slave_0 added [ 401.388163][T20339] team0: Port device team_slave_1 added [ 401.428480][T20339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.430614][T20339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.444370][T20339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.483190][T20339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.485292][T20339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.495081][T20339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.565300][T11526] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.597507][T20339] hsr_slave_0: entered promiscuous mode [ 401.599791][T20339] hsr_slave_1: entered promiscuous mode [ 401.601926][T20339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.604195][T20339] Cannot create hsr debugfs directory [ 401.647440][T20245] veth0_vlan: entered promiscuous mode [ 401.693810][T11526] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.732900][T20245] veth1_vlan: entered promiscuous mode [ 401.822118][T11526] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.859716][T20245] veth0_macvtap: entered promiscuous mode [ 401.864247][T20245] veth1_macvtap: entered promiscuous mode [ 401.909131][T20440] hfs: unable to load iocharset "io#harsetencer2" [ 401.952888][T20449] netlink: 'syz.1.4982': attribute type 10 has an invalid length. [ 401.987654][T11526] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.005056][T20449] macvlan0: entered allmulticast mode [ 402.009407][T20451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4982'. [ 402.013370][T20449] veth1_vlan: entered allmulticast mode [ 402.015034][T20449] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 402.044825][T20245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.048450][T20245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.051476][T20245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.054428][T20245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.060003][T20245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.062854][T20245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.066634][T20245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.069770][T20245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.072351][T20245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.075188][T20245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.079649][T20245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.090717][T20245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.094667][T20245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.097723][T20245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.101524][T20245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.104837][T20245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.107823][T20245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.111404][T20245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.115159][T20245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.120125][T20245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.141799][T20245] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.157471][T20245] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.160237][T20245] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.163235][ T66] Bluetooth: hci0: command tx timeout [ 402.163259][T20245] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.172440][ T66] Bluetooth: hci3: command tx timeout [ 402.312118][T11526] bridge_slave_1: left allmulticast mode [ 402.313774][T11526] bridge_slave_1: left promiscuous mode [ 402.315639][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.322830][T11526] bridge_slave_0: left allmulticast mode [ 402.324528][T11526] bridge_slave_0: left promiscuous mode [ 402.326235][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.510570][T20463] overlayfs: failed to clone upperpath [ 402.592962][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.905823][T11526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.912752][T11526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.919336][T11526] bond0 (unregistering): Released all slaves [ 402.930110][T20339] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 402.935620][T20339] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 402.940805][T20339] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 402.946044][T20339] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 403.132567][T20473] uprobe: syz.4.4989:20473 failed to unregister, leaking uprobe [ 403.166557][T13837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.175788][T13837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.186235][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 403.186247][ T39] audit: type=1400 audit(635.091:1657): avc: denied { sys_chroot } for pid=20475 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 403.197621][ T39] audit: type=1400 audit(635.091:1658): avc: denied { setgid } for pid=20475 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 403.209189][ T39] audit: type=1400 audit(635.091:1659): avc: denied { setrlimit } for pid=20475 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 403.214130][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.220257][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.225275][T20339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.254145][ T39] audit: type=1400 audit(635.147:1660): avc: denied { mounton } for pid=20245 comm="syz-executor" path="/syzkaller.voU81n/syz-tmp" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 403.260859][ T39] audit: type=1400 audit(635.147:1661): avc: denied { mount } for pid=20245 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 403.278844][ T39] audit: type=1400 audit(635.147:1662): avc: denied { mounton } for pid=20245 comm="syz-executor" path="/syzkaller.voU81n/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 403.288153][T20339] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.295112][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.297803][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.300859][ T39] audit: type=1400 audit(635.147:1663): avc: denied { mounton } for pid=20245 comm="syz-executor" path="/syzkaller.voU81n/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=77876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 403.308932][ T39] audit: type=1400 audit(635.147:1664): avc: denied { unmount } for pid=20245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 403.314583][ T39] audit: type=1400 audit(635.156:1665): avc: denied { mounton } for pid=20245 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 403.327872][ T39] audit: type=1400 audit(635.166:1666): avc: denied { mount } for pid=20245 comm="syz-executor" name="/" dev="gadgetfs" ino=77877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 403.377942][T13838] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.380205][T13838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.413500][T20339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.564008][T11526] hsr_slave_0: left promiscuous mode [ 403.568343][T11526] hsr_slave_1: left promiscuous mode [ 403.570588][T11526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.575491][T11526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.582890][T11526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.585777][T11526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.597854][T20499] xt_hashlimit: size too large, truncated to 1048576 [ 403.630596][T11526] veth1_macvtap: left promiscuous mode [ 403.632289][T11526] veth0_macvtap: left promiscuous mode [ 403.633932][T11526] veth1_vlan: left promiscuous mode [ 403.635546][T11526] veth0_vlan: left promiscuous mode [ 404.385221][ T66] Bluetooth: hci3: command tx timeout [ 404.386863][ T66] Bluetooth: hci0: command tx timeout [ 404.508910][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5001'. [ 404.512295][T20520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5001'. [ 405.017068][T11526] team0 (unregistering): Port device team_slave_1 removed [ 405.184123][T11526] team0 (unregistering): Port device team_slave_0 removed [ 406.273867][T20339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.379776][T20528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5003'. [ 406.460665][T20546] syz_tun: entered allmulticast mode [ 406.471510][T20544] syz_tun: left allmulticast mode [ 406.551827][T20339] veth0_vlan: entered promiscuous mode [ 406.560407][T20339] veth1_vlan: entered promiscuous mode [ 406.584985][T20339] veth0_macvtap: entered promiscuous mode [ 406.591780][T20339] veth1_macvtap: entered promiscuous mode [ 406.602214][T20339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.605242][T20339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.608058][T20339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.611482][ T5957] Bluetooth: hci0: command tx timeout [ 406.614176][T20339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.617054][T20339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.620900][T20339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.623802][T20339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.626785][T20339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.629638][T20339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.632831][T20339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.638001][T20339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.693671][T20339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.699588][T20339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.702534][T20339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.706422][T20339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.709340][T20339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.712378][T20339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.715234][T20339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.719366][T20339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.726829][T20339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.739675][T20339] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.742726][T20339] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.745402][T20339] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.748097][T20339] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.807893][T20577] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 406.848780][ T8146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.851758][ T8146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.865790][T20580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16147 sclass=netlink_route_socket pid=20580 comm=syz.4.5017 [ 406.882972][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.885302][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.902642][T20577] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 406.928251][T20586] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 407.119666][T20586] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 407.283462][T20613] netlink: 'syz.4.5027': attribute type 12 has an invalid length. [ 407.286491][T20613] netlink: 'syz.4.5027': attribute type 28 has an invalid length. [ 407.289458][T20613] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5027'. [ 407.573983][T20636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5035'. [ 407.578321][T20636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5035'. [ 407.581032][T20636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5035'. [ 407.583944][T20636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5035'. [ 407.596302][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.600996][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.608301][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.611861][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.614852][ T66] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 407.619152][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.642781][T20637] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 407.783652][T20642] ip6tnl1: entered allmulticast mode [ 407.795691][T20637] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 407.968192][T20637] chnl_net:caif_netlink_parms(): no params data found [ 408.378725][T20637] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.381683][T20637] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.388792][T20637] bridge_slave_0: entered allmulticast mode [ 408.391693][T20637] bridge_slave_0: entered promiscuous mode [ 408.395539][T20637] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.398382][T20637] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.400523][T20637] bridge_slave_1: entered allmulticast mode [ 408.403687][T20637] bridge_slave_1: entered promiscuous mode [ 408.480350][T20683] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5041'. [ 408.497413][T20637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.510011][T20637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.552619][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 408.552629][ T39] audit: type=1400 audit(640.104:1689): avc: denied { read } for pid=20684 comm="syz.8.5045" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 408.563570][ T39] audit: type=1400 audit(640.114:1690): avc: denied { open } for pid=20684 comm="syz.8.5045" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 408.588593][ T39] audit: type=1400 audit(640.142:1691): avc: denied { ioctl } for pid=20684 comm="syz.8.5045" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x5540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 408.611028][ T39] audit: type=1400 audit(640.142:1692): avc: denied { getopt } for pid=20684 comm="syz.8.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.616513][ T39] audit: type=1400 audit(640.142:1693): avc: denied { create } for pid=20684 comm="syz.8.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 408.624555][ T39] audit: type=1400 audit(640.179:1694): avc: denied { write } for pid=5336 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.637545][T20637] team0: Port device team_slave_0 added [ 408.640406][ T39] audit: type=1400 audit(640.179:1695): avc: denied { remove_name } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.650533][T20637] team0: Port device team_slave_1 added [ 408.657054][ T39] audit: type=1400 audit(640.179:1696): avc: denied { rename } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 408.668169][ T39] audit: type=1400 audit(640.189:1697): avc: denied { add_name } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.676739][ T39] audit: type=1400 audit(640.189:1698): avc: denied { unlink } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 408.723017][T20637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.726594][T20637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.735563][T20637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.740513][T20637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.742657][T20637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.752604][T20637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.818390][T20637] hsr_slave_0: entered promiscuous mode [ 408.835166][T20637] hsr_slave_1: entered promiscuous mode [ 408.838188][T20637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.843768][T20637] Cannot create hsr debugfs directory [ 408.975861][T20637] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.128080][T20637] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.128653][T20711] misc userio: Invalid payload size [ 409.215484][T20716] input: syz0 as /devices/virtual/input/input32 [ 409.286547][T20637] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.306346][T20722] uprobe: syz.8.5055:20722 failed to unregister, leaking uprobe [ 409.509674][T20637] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.607089][T20742] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 409.810450][T20637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.813804][T20759] Bluetooth: hci1: Frame reassembly failed (-90) [ 409.825400][T11526] Bluetooth: hci1: Frame reassembly failed (-84) [ 409.828116][T20637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.849241][T20637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.855545][T20637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.858927][ T5957] Bluetooth: hci4: command tx timeout [ 409.892431][T20637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.904757][T20637] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.912833][T20763] netfs: Couldn't get user pages (rc=-14) [ 409.916238][T13818] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.918422][T13818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.944031][T13818] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.946184][T13818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.027984][T20637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.196127][T20637] veth0_vlan: entered promiscuous mode [ 410.205010][T20637] veth1_vlan: entered promiscuous mode [ 410.228902][T20785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5063'. [ 410.230908][T20637] veth0_macvtap: entered promiscuous mode [ 410.238147][T20637] veth1_macvtap: entered promiscuous mode [ 410.246252][T20637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.249533][T20637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.252461][T20637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.255681][T20637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.258707][T20637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.261811][T20637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.264713][T20637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.268174][T20637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.271235][T20637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.274329][T20637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.280581][T20637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.283747][T20637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.288047][T20637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.294806][T20637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.298459][T20637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.301572][T20637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.304876][T20637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.308240][T20637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.311330][T20637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.314147][T20637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.317136][T20637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.321017][T20637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.323955][T20637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.327545][T20637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.331906][T20637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.334594][T20637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.337191][T20637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.340296][T20637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.401215][ T8146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.404668][ T8146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.422298][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.424739][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.752336][T20814] loop9: detected capacity change from 0 to 1 [ 410.756154][T20814] Dev loop9: unable to read RDB block 1 [ 410.758058][T20814] loop9: AHDI p2 p3 [ 410.759249][T20814] loop9: partition table partially beyond EOD, truncated [ 410.761796][T20814] loop9: p2 start 1273113715 is beyond EOD, truncated [ 411.396021][T20850] netem: incorrect gi model size [ 411.397973][T20850] netem: change failed [ 411.401858][T20850] netem: incorrect gi model size [ 411.403426][T20850] netem: change failed [ 411.406019][T20850] netem: incorrect gi model size [ 411.407794][T20851] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5083'. [ 411.411738][T20850] netem: change failed [ 411.414616][T20850] netem: incorrect gi model size [ 411.416422][T20850] netem: change failed [ 411.650919][T20855] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 411.704179][T20855] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 411.997353][ T66] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 411.997423][ T5957] Bluetooth: hci1: command 0x1003 tx timeout [ 412.082593][ T66] Bluetooth: hci4: command tx timeout [ 412.131256][T20901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5098'. [ 412.264691][T20911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5105'. [ 412.440028][T20932] netlink: 'syz.4.5113': attribute type 10 has an invalid length. [ 412.533224][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5115'. [ 412.589157][T20948] ip6tnl1: entered allmulticast mode [ 412.929998][T20967] Cannot find del_set index 128 as target [ 413.676964][T21006] No control pipe specified [ 413.751054][T21010] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 413.884371][T21029] fuse: blksize only supported for fuseblk [ 414.025250][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5156'. [ 414.030060][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5156'. [ 414.035774][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5156'. [ 414.062366][T21052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.070511][T21052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=21052 comm=syz.7.5158 [ 414.148875][T21063] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 414.209196][T21063] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 414.303814][ T39] kauditd_printk_skb: 47 callbacks suppressed [ 414.303826][ T39] audit: type=1400 audit(645.483:1746): avc: denied { read } for pid=21073 comm="syz.4.5163" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 414.306119][ T66] Bluetooth: hci4: command tx timeout [ 414.326139][ T39] audit: type=1400 audit(645.483:1747): avc: denied { open } for pid=21073 comm="syz.4.5163" path="/dev/usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 414.337525][ T39] audit: type=1400 audit(645.492:1748): avc: denied { ioctl } for pid=21073 comm="syz.4.5163" path="/dev/usbmon6" dev="devtmpfs" ino=756 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 414.466432][ T64] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 414.626708][ T64] usb 13-1: Using ep0 maxpacket: 8 [ 414.637868][ T64] usb 13-1: config index 0 descriptor too short (expected 5138, got 18) [ 414.641607][ T64] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.648385][ T64] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 414.656783][ T64] usb 13-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 414.673244][ T64] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.675275][ T39] audit: type=1400 audit(645.838:1749): avc: denied { create } for pid=21083 comm="syz.7.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 414.675823][ T64] usb 13-1: Product: syz [ 414.684253][ T39] audit: type=1400 audit(645.838:1750): avc: denied { listen } for pid=21083 comm="syz.7.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 414.686637][ T64] usb 13-1: Manufacturer: syz [ 414.689719][ T39] audit: type=1400 audit(645.838:1751): avc: denied { accept } for pid=21083 comm="syz.7.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 414.695821][ T64] usb 13-1: SerialNumber: syz [ 414.703168][ T64] usb 13-1: config 0 descriptor?? [ 414.928877][ T39] audit: type=1400 audit(646.072:1752): avc: denied { write } for pid=21067 comm="syz.8.5162" name="tcp" dev="proc" ino=4026534406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 414.933009][T21068] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5162'. [ 414.950811][T21068] bridge0: port 3(batadv1) entered blocking state [ 414.953355][T21068] bridge0: port 3(batadv1) entered disabled state [ 414.956171][T21068] batadv1: entered allmulticast mode [ 414.966830][T21068] batadv1: entered promiscuous mode [ 414.972548][ T64] usb 13-1: USB disconnect, device number 2 [ 414.978591][T21086] netlink: 'syz.1.5167': attribute type 1 has an invalid length. [ 414.988157][T21086] bond3: entered promiscuous mode [ 414.989888][T21086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 415.013554][T21086] bond4: entered promiscuous mode [ 415.015140][T21086] bond4: entered allmulticast mode [ 415.017551][T21086] 8021q: adding VLAN 0 to HW filter on device bond4 [ 415.026571][T21086] bond3: (slave bond4): making interface the new active one [ 415.029513][T21086] bond3: (slave bond4): Enslaving as an active interface with an up link [ 415.504494][ T11] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 415.507533][ T11] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 415.684923][T21105] tmpfs: Bad value for 'mpol' [ 415.705093][T21105] nvme_fabrics: missing parameter 'transport=%s' [ 415.705691][T21109] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 415.708251][T21105] nvme_fabrics: missing parameter 'nqn=%s' [ 415.769779][T21115] netlink: 'syz.4.5178': attribute type 12 has an invalid length. [ 415.776244][T21114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65043 sclass=netlink_route_socket pid=21114 comm=syz.1.5174 [ 415.780066][T21115] netlink: 'syz.4.5178': attribute type 28 has an invalid length. [ 415.786897][T21115] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5178'. [ 415.809058][T21109] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 415.915048][ T39] audit: type=1400 audit(646.998:1753): avc: denied { unlink } for pid=21127 comm="syz.4.5184" name="#4d" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 415.935137][ T39] audit: type=1400 audit(646.998:1754): avc: denied { create } for pid=21127 comm="syz.4.5184" name="#4f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 415.941071][ T39] audit: type=1400 audit(646.998:1755): avc: denied { link } for pid=21127 comm="syz.4.5184" name="#4f" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 416.070389][T21140] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 416.147895][T21152] tmpfs: Bad value for 'mpol' [ 416.190317][T21152] nvme_fabrics: missing parameter 'transport=%s' [ 416.192212][T21152] nvme_fabrics: missing parameter 'nqn=%s' [ 416.325752][T21169] overlayfs: missing 'workdir' [ 416.529747][ T66] Bluetooth: hci4: command tx timeout [ 416.715830][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5205'. [ 416.718560][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5205'. [ 416.978720][ T1021] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 417.070648][T21213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=21213 comm=syz.8.5213 [ 417.078173][T21213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=21213 comm=syz.8.5213 [ 417.083304][T21213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=21213 comm=syz.8.5213 [ 417.088485][T21213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=21213 comm=syz.8.5213 [ 417.093623][T21213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=21213 comm=syz.8.5213 [ 417.103929][T21213] vlan2: entered allmulticast mode [ 417.106098][T21213] veth0_to_batadv: entered allmulticast mode [ 417.109752][T21213] bridge0: port 4(vlan2) entered blocking state [ 417.112311][T21213] bridge0: port 4(vlan2) entered disabled state [ 417.116677][T21213] vlan2: entered promiscuous mode [ 417.119413][T21213] veth0_to_batadv: entered promiscuous mode [ 417.122275][T21213] bridge0: port 4(vlan2) entered blocking state [ 417.124739][T21213] bridge0: port 4(vlan2) entered forwarding state [ 417.139116][ T1021] usb 9-1: Using ep0 maxpacket: 16 [ 417.145651][ T1021] usb 9-1: too many configurations: 215, using maximum allowed: 8 [ 417.183125][ T1021] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 417.186152][ T1021] usb 9-1: can't read configurations, error -61 [ 417.331744][ T1021] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 417.334919][T21231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21231 comm=syz.7.5219 [ 417.388803][T21238] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5223'. [ 417.513301][ T1021] usb 9-1: Using ep0 maxpacket: 16 [ 417.516080][ T1021] usb 9-1: too many configurations: 215, using maximum allowed: 8 [ 417.525323][ T1021] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 417.528590][ T1021] usb 9-1: can't read configurations, error -61 [ 417.528919][T21252] netlink: 'syz.8.5230': attribute type 29 has an invalid length. [ 417.539082][ T1021] usb usb9-port1: attempt power cycle [ 417.550896][T21252] netlink: 'syz.8.5230': attribute type 29 has an invalid length. [ 417.551229][T21250] netlink: 'syz.1.5229': attribute type 1 has an invalid length. [ 417.620966][T21261] syz_tun: entered allmulticast mode [ 417.647287][T21265] syz_tun: left allmulticast mode [ 417.685863][T21271] macvtap0: entered promiscuous mode [ 417.688130][T21271] macvtap0: left promiscuous mode [ 417.718068][T21275] netlink: 'syz.8.5239': attribute type 1 has an invalid length. [ 417.739345][T21275] bond1: entered promiscuous mode [ 417.741207][T21275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.762715][T21275] bond2: entered promiscuous mode [ 417.764897][T21275] bond2: entered allmulticast mode [ 417.767922][T21275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.772927][T21275] bond1: (slave bond2): making interface the new active one [ 417.775504][T21275] bond1: (slave bond2): Enslaving as an active interface with an up link [ 417.919529][ T1021] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 417.942100][ T1021] usb 9-1: Using ep0 maxpacket: 16 [ 417.942730][ T1021] usb 9-1: too many configurations: 215, using maximum allowed: 8 [ 417.949776][ T1021] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 417.949804][ T1021] usb 9-1: can't read configurations, error -61 [ 418.079856][ T1021] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 418.102091][ T1021] usb 9-1: Using ep0 maxpacket: 16 [ 418.104371][ T1021] usb 9-1: too many configurations: 215, using maximum allowed: 8 [ 418.108067][ T1021] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 418.111084][ T1021] usb 9-1: can't read configurations, error -61 [ 418.133534][ T1021] usb usb9-port1: unable to enumerate USB device [ 418.237298][T21318] ip6gretap1: entered allmulticast mode [ 418.563529][T21339] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 418.610374][T21343] overlayfs: failed to clone upperpath [ 418.621739][T21339] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 418.624496][T21344] netlink: 'syz.7.5266': attribute type 4 has an invalid length. [ 418.952737][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 418.963739][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 418.968547][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 418.971772][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 418.974891][ T5957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 418.977839][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.008929][T21358] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 419.105791][T11526] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.118879][T21358] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 419.219055][T11526] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.248272][T21358] chnl_net:caif_netlink_parms(): no params data found [ 419.349868][T11526] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.491214][T11526] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.498049][T21358] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.500867][T21358] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.503942][T21358] bridge_slave_0: entered allmulticast mode [ 419.508068][T21358] bridge_slave_0: entered promiscuous mode [ 419.511823][T21358] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.515496][T21358] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.518426][T21358] bridge_slave_1: entered allmulticast mode [ 419.521317][T21358] bridge_slave_1: entered promiscuous mode [ 419.546227][T21358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.550446][T21358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.581888][T21358] team0: Port device team_slave_0 added [ 419.592346][T21358] team0: Port device team_slave_1 added [ 419.641771][T21358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.643853][T21358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.652010][T21358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.661495][T21358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.663718][T21358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.671136][T21358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.696215][T11526] vlan2: left promiscuous mode [ 419.698299][T11526] veth0_to_batadv: left promiscuous mode [ 419.701192][T11526] bridge0: port 4(vlan2) entered disabled state [ 419.705698][T11526] batadv1: left allmulticast mode [ 419.707617][T11526] batadv1: left promiscuous mode [ 419.709538][T11526] bridge0: port 3(batadv1) entered disabled state [ 419.714452][T11526] bridge_slave_1: left allmulticast mode [ 419.717497][T11526] bridge_slave_1: left promiscuous mode [ 419.719663][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.727779][T11526] bridge_slave_0: left allmulticast mode [ 419.729558][T11526] bridge_slave_0: left promiscuous mode [ 419.731782][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.816836][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 419.816846][ T39] audit: type=1326 audit(650.646:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21192 comm="syz.4.5205" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63cf8d169 code=0x7fc00000 [ 419.981709][T21376] program syz.7.5279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.052482][ T39] audit: type=1400 audit(650.871:1770): avc: denied { connect } for pid=21383 comm="syz.7.5282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 420.248227][ T39] audit: type=1400 audit(651.049:1771): avc: denied { mount } for pid=21404 comm="syz.4.5288" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 420.321145][ T39] audit: type=1400 audit(651.114:1772): avc: denied { ioctl } for pid=21404 comm="syz.4.5288" path="socket:[82148]" dev="sockfs" ino=82148 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 420.452873][T11526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.460188][T11526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.464794][T11526] bond0 (unregistering): Released all slaves [ 420.602198][T11526] bond1 (unregistering): (slave bond2): Releasing backup interface [ 420.607252][T11526] bond1 (unregistering): Released all slaves [ 420.731380][T11526] bond2 (unregistering): Released all slaves [ 420.751177][T21358] hsr_slave_0: entered promiscuous mode [ 420.760220][T21358] hsr_slave_1: entered promiscuous mode [ 420.764288][T21358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.766884][T21358] Cannot create hsr debugfs directory [ 420.769500][T21405] tc_dump_action: action bad kind [ 420.782379][ T39] audit: type=1400 audit(651.544:1773): avc: denied { unmount } for pid=20637 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 420.869867][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5290'. [ 421.156316][ T39] audit: type=1400 audit(651.890:1774): avc: denied { write } for pid=21433 comm="syz.4.5300" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 421.169446][ T66] Bluetooth: hci0: command tx timeout [ 421.406213][T21358] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 421.419846][T21358] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 421.436955][T21358] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 421.442316][T21358] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 421.532140][T21454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5305'. [ 421.588846][T21458] uprobe: syz.4.5306:21458 failed to unregister, leaking uprobe [ 421.591263][T21454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21454 comm=syz.7.5305 [ 421.609409][T21454] netlink: 'syz.7.5305': attribute type 2 has an invalid length. [ 421.611694][T21454] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5305'. [ 421.616284][T21358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.635444][T21358] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.639627][T13838] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.641919][T13838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.680740][T11526] hsr_slave_0: left promiscuous mode [ 421.693335][T11526] hsr_slave_1: left promiscuous mode [ 421.695256][T11526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.703996][T11526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.708831][T11526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.711037][T11526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.791037][T11526] veth0_to_batadv: left allmulticast mode [ 421.792809][T11526] veth1_macvtap: left promiscuous mode [ 421.794428][T11526] veth0_macvtap: left promiscuous mode [ 421.796084][T11526] veth1_vlan: left promiscuous mode [ 421.797661][T11526] veth0_vlan: left promiscuous mode [ 422.957821][T11526] team0 (unregistering): Port device team_slave_1 removed [ 423.115665][T11526] team0 (unregistering): Port device team_slave_0 removed [ 423.376591][ T66] Bluetooth: hci0: command tx timeout [ 424.050874][T13837] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.053004][T13837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.097444][T21358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 424.107245][T21358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.231327][T21358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.362896][T21520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5319'. [ 424.375184][T21520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5319'. [ 424.380035][T21521] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21521 comm=syz.4.5319 [ 424.384413][ T39] audit: type=1400 audit(654.912:1775): avc: denied { mounton } for pid=21518 comm="syz.4.5319" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 424.396075][T21358] veth0_vlan: entered promiscuous mode [ 424.404687][T21358] veth1_vlan: entered promiscuous mode [ 424.418398][T21358] veth0_macvtap: entered promiscuous mode [ 424.424862][T21358] veth1_macvtap: entered promiscuous mode [ 424.435007][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.438047][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.441275][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.444281][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.447225][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.451566][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.454404][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.456637][T21526] netlink: 'syz.7.5320': attribute type 1 has an invalid length. [ 424.457390][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.457408][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.470266][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.473686][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.476755][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.481871][T21358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.495731][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.498868][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.501757][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.508905][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.516647][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.520014][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.522860][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.525902][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.533267][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.537518][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.541254][T21358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.568217][T21526] bond1: entered promiscuous mode [ 424.570524][T21526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.615200][T21532] bond2: entered promiscuous mode [ 424.616801][T21532] bond2: entered allmulticast mode [ 424.619269][T21532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.630085][T21532] bond1: (slave bond2): making interface the new active one [ 424.632926][T21532] bond1: (slave bond2): Enslaving as an active interface with an up link [ 424.661779][T21358] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.665682][T21358] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.669144][T21358] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.672601][T21358] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.775097][ T39] audit: type=1400 audit(655.286:1776): avc: denied { setopt } for pid=21517 comm="syz.1.5317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 424.783851][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.787005][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.813563][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.824311][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.877426][T21554] netlink: 'syz.1.5326': attribute type 21 has an invalid length. [ 424.973773][T21561] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 425.081115][T21584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5333'. [ 425.083959][T21584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5333'. [ 425.086553][T21584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5333'. [ 425.089257][T21584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5333'. [ 425.138441][T21582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5332'. [ 425.191318][T21598] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 425.259769][T21603] netlink: 'syz.4.5334': attribute type 4 has an invalid length. [ 425.402726][T21598] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 425.595644][ T66] Bluetooth: hci0: command tx timeout [ 425.932093][T21664] nftables ruleset with unbound chain [ 425.948776][T21664] netlink: 'syz.7.5352': attribute type 1 has an invalid length. [ 426.364014][T21716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5365'. [ 426.372829][T21716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5365'. [ 426.511597][T21724] sp0: Synchronizing with TNC [ 426.623954][T21724] [U] è [ 426.792680][ T39] audit: type=1400 audit(657.166:1777): avc: denied { setopt } for pid=21743 comm="syz.9.5372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 426.877656][ T39] audit: type=1400 audit(657.250:1778): avc: denied { bind } for pid=21747 comm="syz.1.5374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 427.109924][ T39] audit: type=1400 audit(657.465:1779): avc: denied { accept } for pid=21767 comm="syz.4.5378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 427.127204][ T39] audit: type=1400 audit(657.465:1780): avc: denied { write } for pid=21767 comm="syz.4.5378" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 427.133946][ T39] audit: type=1400 audit(657.465:1781): avc: denied { ioctl } for pid=21767 comm="syz.4.5378" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 427.151941][ T39] audit: type=1400 audit(657.503:1782): avc: denied { create } for pid=21772 comm="syz.9.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 427.158780][ T39] audit: type=1400 audit(657.503:1783): avc: denied { getopt } for pid=21772 comm="syz.9.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 427.565455][T21808] uprobe: syz.9.5392:21808 failed to unregister, leaking uprobe [ 427.782525][ T39] audit: type=1400 audit(658.092:1784): avc: denied { map } for pid=21823 comm="syz.7.5396" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 427.789481][ T39] audit: type=1400 audit(658.092:1785): avc: denied { execute } for pid=21823 comm="syz.7.5396" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 427.819013][ T66] Bluetooth: hci0: command tx timeout [ 428.028793][ T39] audit: type=1400 audit(658.326:1786): avc: denied { append } for pid=21838 comm="syz.7.5399" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 428.057788][T21839] dlm: Unknown command passed to DLM device : 8 [ 428.057788][T21839] [ 428.123102][T21847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5402'. [ 428.265990][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5406'. [ 428.269403][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5406'. [ 428.515613][T21887] netlink: 'syz.4.5412': attribute type 1 has an invalid length. [ 428.518225][T21887] netlink: 'syz.4.5412': attribute type 2 has an invalid length. [ 428.520598][T21887] netlink: 16074 bytes leftover after parsing attributes in process `syz.4.5412'. [ 428.546058][ T64] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 428.718188][ T64] usb 12-1: Using ep0 maxpacket: 16 [ 428.721484][ T64] usb 12-1: too many configurations: 215, using maximum allowed: 8 [ 428.725885][T21899] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5416'. [ 428.726874][ T64] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 428.732038][ T64] usb 12-1: can't read configurations, error -61 [ 428.877367][ T64] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 429.059819][ T64] usb 12-1: Using ep0 maxpacket: 16 [ 429.061820][ T64] usb 12-1: too many configurations: 215, using maximum allowed: 8 [ 429.065254][ T64] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 429.068117][ T64] usb 12-1: can't read configurations, error -61 [ 429.071870][ T64] usb usb12-port1: attempt power cycle [ 429.478120][ T64] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 429.504684][T21965] netlink: 'syz.4.5440': attribute type 25 has an invalid length. [ 429.509854][ T64] usb 12-1: Using ep0 maxpacket: 16 [ 429.511927][ T64] usb 12-1: too many configurations: 215, using maximum allowed: 8 [ 429.517573][T21966] netlink: 'syz.4.5440': attribute type 25 has an invalid length. [ 429.518130][ T64] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 429.522829][ T64] usb 12-1: can't read configurations, error -61 [ 429.617773][T21975] netlink: 'syz.4.5444': attribute type 12 has an invalid length. [ 429.620414][T21975] netlink: 'syz.4.5444': attribute type 28 has an invalid length. [ 429.622641][T21975] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5444'. [ 429.679722][ T64] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 429.702019][ T64] usb 12-1: Using ep0 maxpacket: 16 [ 429.703985][ T64] usb 12-1: too many configurations: 215, using maximum allowed: 8 [ 429.707428][ T64] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 429.709708][ T64] usb 12-1: can't read configurations, error -61 [ 429.715326][ T64] usb usb12-port1: unable to enumerate USB device [ 429.742722][T21989] gtp0: entered promiscuous mode [ 429.807219][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5453'. [ 430.383677][T22031] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 430.388195][T22031] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 430.571790][T22038] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 430.622887][T22041] validate_nla: 1 callbacks suppressed [ 430.622900][T22041] netlink: 'syz.4.5470': attribute type 4 has an invalid length. [ 430.660593][T22038] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 430.875641][T22055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5477'. [ 432.205788][T22113] __nla_validate_parse: 1 callbacks suppressed [ 432.205801][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5498'. [ 432.211123][T22113] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5498'. [ 432.554496][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 432.554511][ T39] audit: type=1400 audit(662.554:1806): avc: denied { read write } for pid=22130 comm="syz.4.5506" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 432.563131][ T39] audit: type=1400 audit(662.563:1807): avc: denied { open } for pid=22130 comm="syz.4.5506" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 432.655503][ T39] audit: type=1800 audit(662.657:1808): pid=22139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5510" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 432.665024][T22137] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 432.765976][T22137] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 432.851195][ T39] audit: type=1400 audit(662.825:1809): avc: denied { read } for pid=22154 comm="syz.4.5515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.077738][ T39] audit: type=1400 audit(663.050:1810): avc: denied { connect } for pid=22167 comm="syz.7.5519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.083460][ T39] audit: type=1400 audit(663.050:1811): avc: denied { write } for pid=22167 comm="syz.7.5519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.175749][T22173] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5521'. [ 433.235483][ T39] audit: type=1400 audit(663.199:1812): avc: denied { setopt } for pid=22176 comm="syz.9.5522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 433.473968][ T39] audit: type=1400 audit(663.415:1813): avc: denied { mounton } for pid=22187 comm="syz.9.5527" path="/64/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 433.513233][ T39] audit: type=1400 audit(663.452:1814): avc: denied { unmount } for pid=21358 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 433.690279][T22195] xt_l2tp: unknown flags: 17 [ 433.933689][ T39] audit: type=1400 audit(663.845:1815): avc: denied { map } for pid=22206 comm="syz.9.5535" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 434.380792][T22218] syz.9.5540 (22218): drop_caches: 2 [ 434.571298][T22243] Cannot find add_set index 4 as target [ 434.573245][T22243] Cannot find add_set index 4 as target [ 434.574965][T22243] Cannot find add_set index 4 as target [ 434.582044][T22243] Cannot find add_set index 4 as target [ 434.583772][T22243] Cannot find add_set index 4 as target [ 434.585475][T22243] Cannot find add_set index 4 as target [ 434.607640][T22243] Cannot find add_set index 4 as target [ 434.618365][T22243] Cannot find add_set index 4 as target [ 434.625391][T22243] Cannot find add_set index 4 as target [ 434.627107][T22243] Cannot find add_set index 4 as target [ 434.761444][T22256] FAULT_INJECTION: forcing a failure. [ 434.761444][T22256] name failslab, interval 1, probability 0, space 0, times 0 [ 434.765111][T22256] CPU: 2 UID: 0 PID: 22256 Comm: syz.4.5556 Not tainted 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 434.765125][T22256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 434.765131][T22256] Call Trace: [ 434.765156][T22256] [ 434.765161][T22256] dump_stack_lvl+0x16c/0x1f0 [ 434.765220][T22256] should_fail_ex+0x50a/0x650 [ 434.765243][T22256] ? fs_reclaim_acquire+0xae/0x150 [ 434.765278][T22256] should_failslab+0xc2/0x120 [ 434.765305][T22256] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 434.765318][T22256] ? vm_area_dup+0x53/0x2f0 [ 434.765351][T22256] vm_area_dup+0x53/0x2f0 [ 434.765367][T22256] __split_vma+0x181/0x1160 [ 434.765377][T22256] ? vma_merge_existing_range+0xaf8/0x2070 [ 434.765390][T22256] ? __pfx___split_vma+0x10/0x10 [ 434.765404][T22256] ? hlock_class+0x4e/0x130 [ 434.765432][T22256] vma_modify.constprop.0+0x1f9/0x3b0 [ 434.765445][T22256] vma_modify_flags_name+0x243/0x300 [ 434.765458][T22256] ? __pfx_vma_modify_flags_name+0x10/0x10 [ 434.765475][T22256] ? hlock_class+0x4e/0x130 [ 434.765486][T22256] ? __lock_acquire+0xcc5/0x3c40 [ 434.765503][T22256] madvise_update_vma+0x14c/0xbb0 [ 434.765518][T22256] ? __pfx_madvise_update_vma+0x10/0x10 [ 434.765539][T22256] madvise_vma_behavior+0x7a2/0x1de0 [ 434.765555][T22256] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 434.765569][T22256] ? find_vma_prev+0xdb/0x160 [ 434.765586][T22256] ? __pfx_find_vma_prev+0x10/0x10 [ 434.765606][T22256] ? trace_lock_acquire+0x14e/0x1f0 [ 434.765618][T22256] ? ksys_write+0x191/0x250 [ 434.765649][T22256] ? do_madvise+0x207/0x7c0 [ 434.765663][T22256] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 434.765676][T22256] madvise_walk_vmas+0x1cf/0x2c0 [ 434.765690][T22256] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 434.765706][T22256] do_madvise+0x366/0x7c0 [ 434.765721][T22256] ? __pfx_do_madvise+0x10/0x10 [ 434.765738][T22256] ? ksys_write+0x1ba/0x250 [ 434.765754][T22256] ? __pfx_ksys_write+0x10/0x10 [ 434.765777][T22256] __x64_sys_madvise+0xa9/0x110 [ 434.765790][T22256] ? lockdep_hardirqs_on+0x7c/0x110 [ 434.765804][T22256] do_syscall_64+0xcd/0x250 [ 434.765818][T22256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.765834][T22256] RIP: 0033:0x7ff63cf8d169 [ 434.765843][T22256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.765854][T22256] RSP: 002b:00007ff63dd56038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 434.765882][T22256] RAX: ffffffffffffffda RBX: 00007ff63d1a5fa0 RCX: 00007ff63cf8d169 [ 434.765889][T22256] RDX: 000000000000000a RSI: 86ac726dff2f4713 RDI: 0000400000bdc000 [ 434.765895][T22256] RBP: 00007ff63dd56090 R08: 0000000000000000 R09: 0000000000000000 [ 434.765902][T22256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.765908][T22256] R13: 0000000000000000 R14: 00007ff63d1a5fa0 R15: 00007ffc5020d7b8 [ 434.765921][T22256] [ 434.833212][T22261] binfmt_misc: register: failed to install interpreter file ./file0 [ 434.934854][T22270] sctp: [Deprecated]: syz.9.5561 (pid 22270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.934854][T22270] Use struct sctp_sack_info instead [ 435.214603][T22294] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 435.261382][T22299] netlink: 'syz.7.5571': attribute type 4 has an invalid length. [ 435.289914][T22294] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 435.300387][T22305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5575'. [ 435.311432][T22305] syz.4.5575: attempt to access beyond end of device [ 435.311432][T22305] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 435.323786][T22305] SQUASHFS error: Failed to read block 0x0: -5 [ 435.325666][T22305] unable to read squashfs_super_block [ 435.373012][T21482] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 435.418781][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5580'. [ 435.526899][T21482] usb 14-1: Using ep0 maxpacket: 8 [ 435.532932][T21482] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 435.545534][T21482] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 435.550923][T21482] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.556431][T21482] usb 14-1: config 0 descriptor?? [ 435.689181][T22337] : entered promiscuous mode [ 435.764973][T22339] sctp: [Deprecated]: syz.4.5587 (pid 22339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.764973][T22339] Use struct sctp_sack_info instead [ 435.791249][T21482] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 436.302608][T22287] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 436.374018][T22287] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 436.434493][ T64] usb 14-1: USB disconnect, device number 2 [ 436.758071][T22368] FAULT_INJECTION: forcing a failure. [ 436.758071][T22368] name failslab, interval 1, probability 0, space 0, times 0 [ 436.762680][T22368] CPU: 3 UID: 0 PID: 22368 Comm: syz.7.5601 Not tainted 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 436.762701][T22368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 436.762711][T22368] Call Trace: [ 436.762718][T22368] [ 436.762725][T22368] dump_stack_lvl+0x16c/0x1f0 [ 436.762751][T22368] should_fail_ex+0x50a/0x650 [ 436.762774][T22368] ? fs_reclaim_acquire+0xae/0x150 [ 436.762800][T22368] should_failslab+0xc2/0x120 [ 436.762818][T22368] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 436.762845][T22368] ? mas_alloc_nodes+0x18b/0x8b0 [ 436.762866][T22368] mas_alloc_nodes+0x18b/0x8b0 [ 436.762887][T22368] mas_node_count_gfp+0x105/0x130 [ 436.762905][T22368] mas_preallocate+0x53f/0xce0 [ 436.762931][T22368] ? __pfx_mas_preallocate+0x10/0x10 [ 436.762961][T22368] ? anon_vma_name+0x75/0x100 [ 436.762982][T22368] __split_vma+0x474/0x1160 [ 436.763003][T22368] ? __pfx___split_vma+0x10/0x10 [ 436.763025][T22368] ? hlock_class+0x4e/0x130 [ 436.763047][T22368] vma_modify.constprop.0+0x1f9/0x3b0 [ 436.763066][T22368] vma_modify_flags_name+0x243/0x300 [ 436.763085][T22368] ? __pfx_vma_modify_flags_name+0x10/0x10 [ 436.763111][T22368] ? hlock_class+0x4e/0x130 [ 436.763126][T22368] ? __lock_acquire+0xcc5/0x3c40 [ 436.763151][T22368] madvise_update_vma+0x14c/0xbb0 [ 436.763172][T22368] ? __pfx_madvise_update_vma+0x10/0x10 [ 436.763206][T22368] madvise_vma_behavior+0x7a2/0x1de0 [ 436.763228][T22368] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 436.763248][T22368] ? find_vma_prev+0xdb/0x160 [ 436.763271][T22368] ? __pfx_find_vma_prev+0x10/0x10 [ 436.763300][T22368] ? trace_lock_acquire+0x14e/0x1f0 [ 436.763317][T22368] ? ksys_write+0x191/0x250 [ 436.763340][T22368] ? do_madvise+0x207/0x7c0 [ 436.763360][T22368] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 436.763378][T22368] madvise_walk_vmas+0x1cf/0x2c0 [ 436.763398][T22368] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 436.763423][T22368] do_madvise+0x366/0x7c0 [ 436.763445][T22368] ? __pfx_do_madvise+0x10/0x10 [ 436.763470][T22368] ? ksys_write+0x1ba/0x250 [ 436.763492][T22368] ? __pfx_ksys_write+0x10/0x10 [ 436.763518][T22368] __x64_sys_madvise+0xa9/0x110 [ 436.763537][T22368] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.763556][T22368] do_syscall_64+0xcd/0x250 [ 436.763576][T22368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.763598][T22368] RIP: 0033:0x7f3aa7d8d169 [ 436.763613][T22368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.763628][T22368] RSP: 002b:00007f3aa8bb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 436.763644][T22368] RAX: ffffffffffffffda RBX: 00007f3aa7fa5fa0 RCX: 00007f3aa7d8d169 [ 436.763655][T22368] RDX: 000000000000000a RSI: 86ac726dff2f4713 RDI: 0000400000bdc000 [ 436.763665][T22368] RBP: 00007f3aa8bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 436.763675][T22368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.763685][T22368] R13: 0000000000000000 R14: 00007f3aa7fa5fa0 R15: 00007ffccef5cc28 [ 436.763707][T22368] [ 436.912288][T22372] pimreg: entered allmulticast mode [ 437.039040][T22383] netlink: 'syz.9.5607': attribute type 1 has an invalid length. [ 437.065829][T22383] bond1: entered promiscuous mode [ 437.068222][T22383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.116156][T22383] bond2: entered promiscuous mode [ 437.117758][T22383] bond2: entered allmulticast mode [ 437.125285][T22385] uprobe: syz.1.5609:22385 failed to unregister, leaking uprobe [ 437.146911][T22383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.163682][T22383] bond1: (slave bond2): making interface the new active one [ 437.167156][T22383] bond1: (slave bond2): Enslaving as an active interface with an up link [ 437.324458][T22389] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 437.626479][T22400] ipvlan2: entered promiscuous mode [ 437.628127][T22400] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 437.631523][T22400] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 437.634523][T22400] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 437.689834][T22403] IPv6: addrconf: prefix option has invalid lifetime [ 437.727926][T22401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.875578][T22409] netlink: 'syz.9.5618': attribute type 12 has an invalid length. [ 438.199328][T22430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5628'. [ 438.204237][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5628'. [ 438.204794][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 438.204803][ T39] audit: type=1400 audit(667.848:1825): avc: denied { ioctl } for pid=22428 comm="syz.7.5626" path="socket:[87400]" dev="sockfs" ino=87400 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.216535][T22429] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5626'. [ 438.227613][ T39] audit: type=1400 audit(667.867:1826): avc: denied { write } for pid=22428 comm="syz.7.5626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 438.334361][ T62] hid-generic 0005:046D:FFF9.0008: item fetching failed at offset 0/1 [ 438.338122][ T62] hid-generic 0005:046D:FFF9.0008: probe with driver hid-generic failed with error -22 [ 438.389284][T22446] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5633'. [ 438.395844][T22446] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5633'. [ 438.399041][T22446] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5633'. [ 438.401924][T22446] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5633'. [ 438.566279][T22459] overlayfs: workdir and upperdir must be separate subtrees [ 438.733913][T22463] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 438.801193][T22463] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 439.067893][T22473] FAULT_INJECTION: forcing a failure. [ 439.067893][T22473] name failslab, interval 1, probability 0, space 0, times 0 [ 439.072650][T22473] CPU: 0 UID: 0 PID: 22473 Comm: syz.7.5643 Not tainted 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 439.072665][T22473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 439.072672][T22473] Call Trace: [ 439.072676][T22473] [ 439.072681][T22473] dump_stack_lvl+0x16c/0x1f0 [ 439.072699][T22473] should_fail_ex+0x50a/0x650 [ 439.072717][T22473] ? fs_reclaim_acquire+0xae/0x150 [ 439.072734][T22473] should_failslab+0xc2/0x120 [ 439.072747][T22473] kmem_cache_alloc_bulk_noprof+0x7e/0xb10 [ 439.072760][T22473] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 439.072775][T22473] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 439.072792][T22473] ? mas_alloc_nodes+0x18b/0x8b0 [ 439.072804][T22473] ? mas_alloc_nodes+0x2f1/0x8b0 [ 439.072815][T22473] mas_alloc_nodes+0x2f1/0x8b0 [ 439.072828][T22473] mas_node_count_gfp+0x105/0x130 [ 439.072840][T22473] mas_preallocate+0x53f/0xce0 [ 439.072857][T22473] ? __pfx_mas_preallocate+0x10/0x10 [ 439.072877][T22473] ? anon_vma_name+0x75/0x100 [ 439.072891][T22473] __split_vma+0x474/0x1160 [ 439.072904][T22473] ? __pfx___split_vma+0x10/0x10 [ 439.072918][T22473] ? hlock_class+0x4e/0x130 [ 439.072932][T22473] vma_modify.constprop.0+0x1f9/0x3b0 [ 439.072945][T22473] vma_modify_flags_name+0x243/0x300 [ 439.072958][T22473] ? __pfx_vma_modify_flags_name+0x10/0x10 [ 439.072975][T22473] ? hlock_class+0x4e/0x130 [ 439.072985][T22473] ? __lock_acquire+0xcc5/0x3c40 [ 439.073002][T22473] madvise_update_vma+0x14c/0xbb0 [ 439.073017][T22473] ? __pfx_madvise_update_vma+0x10/0x10 [ 439.073037][T22473] madvise_vma_behavior+0x7a2/0x1de0 [ 439.073053][T22473] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 439.073067][T22473] ? find_vma_prev+0xdb/0x160 [ 439.073083][T22473] ? __pfx_find_vma_prev+0x10/0x10 [ 439.073103][T22473] ? trace_lock_acquire+0x14e/0x1f0 [ 439.073115][T22473] ? ksys_write+0x191/0x250 [ 439.073131][T22473] ? do_madvise+0x207/0x7c0 [ 439.073145][T22473] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 439.073158][T22473] madvise_walk_vmas+0x1cf/0x2c0 [ 439.073171][T22473] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 439.073187][T22473] do_madvise+0x366/0x7c0 [ 439.073202][T22473] ? __pfx_do_madvise+0x10/0x10 [ 439.073218][T22473] ? ksys_write+0x1ba/0x250 [ 439.073234][T22473] ? __pfx_ksys_write+0x10/0x10 [ 439.073253][T22473] __x64_sys_madvise+0xa9/0x110 [ 439.073266][T22473] ? lockdep_hardirqs_on+0x7c/0x110 [ 439.073278][T22473] do_syscall_64+0xcd/0x250 [ 439.073292][T22473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.073308][T22473] RIP: 0033:0x7f3aa7d8d169 [ 439.073316][T22473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.073326][T22473] RSP: 002b:00007f3aa8bb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 439.073337][T22473] RAX: ffffffffffffffda RBX: 00007f3aa7fa5fa0 RCX: 00007f3aa7d8d169 [ 439.073343][T22473] RDX: 000000000000000a RSI: 86ac726dff2f4713 RDI: 0000400000bdc000 [ 439.073350][T22473] RBP: 00007f3aa8bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 439.073355][T22473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.073361][T22473] R13: 0000000000000000 R14: 00007f3aa7fa5fa0 R15: 00007ffccef5cc28 [ 439.073375][T22473] [ 439.171039][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.236077][T22479] ip6tnl1: entered allmulticast mode [ 439.346109][ T39] audit: type=1400 audit(668.915:1827): avc: denied { write } for pid=22484 comm="syz.9.5648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 439.496158][T22496] netlink: 'syz.9.5651': attribute type 1 has an invalid length. [ 439.558224][T22496] bond3: entered promiscuous mode [ 439.559951][T22496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.611406][T22500] bond4: entered promiscuous mode [ 439.612955][T22500] bond4: entered allmulticast mode [ 439.626051][T22500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.631110][T22500] bond3: (slave bond4): making interface the new active one [ 439.643179][T22500] bond3: (slave bond4): Enslaving as an active interface with an up link [ 439.861647][T22516] uprobe: syz.1.5656:22516 failed to unregister, leaking uprobe [ 440.032571][T22529] "syz.7.5657" (22529) uses obsolete ecb(arc4) skcipher [ 440.060047][T22529] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 440.147903][T22542] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 440.196941][T22542] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 440.202719][T22545] netlink: 'syz.7.5662': attribute type 4 has an invalid length. [ 440.305775][ T66] Bluetooth: Unknown LE signaling command 0x09 [ 440.308208][ T66] Bluetooth: Wrong link type (-22) [ 440.333139][T22556] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 440.377749][T22558] netlink: 'syz.1.5666': attribute type 4 has an invalid length. [ 440.405388][T22556] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 440.463491][T22569] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 440.471509][T22569] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 440.474648][T22569] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 440.896978][T22594] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5675'. [ 440.971321][T22604] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5671'. [ 440.990066][T22603] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5677'. [ 441.549269][T22622] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 441.555302][T22622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.764269][ T39] audit: type=1400 audit(671.178:1828): avc: denied { bind } for pid=22634 comm="syz.9.5684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 442.260644][T22655] bond3: entered promiscuous mode [ 442.271070][T22655] bond3: entered allmulticast mode [ 442.276702][T22655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.383674][T22660] program syz.7.5693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.386441][T22660] ata1.00: invalid command format 0 [ 442.459484][ T39] audit: type=1400 audit(671.824:1829): avc: denied { listen } for pid=22659 comm="syz.7.5693" lport=46237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 442.478179][ T39] audit: type=1400 audit(671.843:1830): avc: denied { accept } for pid=22659 comm="syz.7.5693" lport=46237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 442.486758][ T39] audit: type=1400 audit(671.852:1831): avc: denied { getopt } for pid=22659 comm="syz.7.5693" lport=46237 faddr=100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 442.660189][T22675] kAFS: unparsable volume name [ 442.669238][T22677] overlayfs: conflicting options: userxattr,metacopy=on [ 443.182492][T22692] netlink: 'syz.9.5705': attribute type 1 has an invalid length. [ 443.206087][T22692] bond7: entered promiscuous mode [ 443.207723][T22692] 8021q: adding VLAN 0 to HW filter on device bond7 [ 443.232152][T22692] bond8: entered promiscuous mode [ 443.233695][T22692] bond8: entered allmulticast mode [ 443.243154][T22692] 8021q: adding VLAN 0 to HW filter on device bond8 [ 443.257030][T22692] bond7: (slave bond8): making interface the new active one [ 443.259627][T22692] bond7: (slave bond8): Enslaving as an active interface with an up link [ 443.605156][ T39] audit: type=1400 audit(672.900:1832): avc: denied { listen } for pid=22706 comm="syz.9.5709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 443.717404][T22711] netlink: 'syz.7.5716': attribute type 10 has an invalid length. [ 443.732972][T22711] team0: Device ipvlan1 failed to register rx_handler [ 443.936876][ T39] audit: type=1400 audit(673.208:1833): avc: denied { read } for pid=22721 comm="syz.7.5715" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 443.951278][T22722] 9pnet_fd: Insufficient options for proto=fd [ 443.954831][ T39] audit: type=1400 audit(673.218:1834): avc: denied { read write } for pid=22721 comm="syz.7.5715" dev="sockfs" ino=87927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 444.091645][T22727] __nla_validate_parse: 5 callbacks suppressed [ 444.091663][T22727] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5711'. [ 444.356788][T22734] ipvlan2: entered promiscuous mode [ 444.358645][T22734] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 444.362379][T22734] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 444.365618][T22734] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 444.891330][T22748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5725'. [ 444.903229][T22748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5725'. [ 444.984927][T22750] 9pnet: Unknown protocol version 9p20\++} [ 445.011156][T22750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=22750 comm=syz.1.5726 [ 445.833541][ T39] audit: type=1400 audit(674.976:1835): avc: denied { map } for pid=22780 comm="syz.7.5739" path="/proc/467/fdinfo/4" dev="proc" ino=84956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 445.963564][T22789] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 446.005368][T22789] ÿÿÿÿÿÿ speed is unknown, defaulting to 1000 [ 446.283328][ T39] audit: type=1400 audit(675.406:1836): avc: denied { map } for pid=22792 comm="syz.7.5744" path="socket:[39362]" dev="sockfs" ino=39362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 446.289808][ T39] audit: type=1400 audit(675.406:1837): avc: denied { read accept } for pid=22792 comm="syz.7.5744" path="socket:[39362]" dev="sockfs" ino=39362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 446.349778][ T39] audit: type=1400 audit(675.463:1838): avc: denied { append } for pid=22792 comm="syz.7.5744" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 446.353755][T22795] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 446.360206][ T43] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0xffff888000660f00 pfn:0x660 [ 446.366337][ T104] slab kmalloc-96 start ffff888029834700 pointer offset 0 size 96 [ 446.369905][ T104] list_add corruption. next->prev should be prev (ffffe8fefc9392f0), but was ffffffff848cff60. (next=ffff888029834700). [ 446.373828][ T104] ------------[ cut here ]------------ [ 446.375521][ T104] kernel BUG at lib/list_debug.c:29! [ 446.377106][ T104] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 446.379330][ T104] CPU: 3 UID: 0 PID: 104 Comm: kworker/u32:5 Not tainted 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 446.384477][ T104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 446.387552][ T104] Workqueue: zswap1 compact_page_work [ 446.389143][ T104] RIP: 0010:__list_add_valid_or_report+0xec/0x190 [ 446.391020][ T104] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 a5 00 00 00 48 8b 55 08 48 89 e9 48 c7 c7 00 58 d3 8b e8 45 87 cf fc 90 <0f> 0b 48 89 f7 48 89 34 24 e8 b6 eb 31 fd 48 8b 34 24 48 b8 00 00 [ 446.396552][ T104] RSP: 0018:ffffc9000165fb88 EFLAGS: 00010282 [ 446.398349][ T104] RAX: 0000000000000075 RBX: ffff888000660000 RCX: ffffffff819944e9 [ 446.400650][ T104] RDX: 0000000000000000 RSI: ffffffff8199a85e RDI: 0000000000000005 [ 446.402932][ T104] RBP: ffff888029834700 R08: 0000000000000005 R09: 0000000000000000 [ 446.405217][ T104] R10: 0000000000000002 R11: 0000000000000004 R12: ffff888000660000 [ 446.407532][ T104] R13: ffff888029834708 R14: ffffea0000019800 R15: ffff888000660008 [ 446.409796][ T104] FS: 0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 446.412360][ T104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.414278][ T104] CR2: 00007f3aa8b95d58 CR3: 000000004fb6a000 CR4: 0000000000352ef0 [ 446.416571][ T104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.418879][ T104] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.421176][ T104] Call Trace: [ 446.422165][ T104] [ 446.423041][ T104] ? die+0x31/0x80 [ 446.424179][ T104] ? do_trap+0x232/0x430 [ 446.425378][ T104] ? __list_add_valid_or_report+0xec/0x190 [ 446.427054][ T104] ? __list_add_valid_or_report+0xec/0x190 [ 446.428778][ T104] ? do_error_trap+0xf4/0x230 [ 446.430159][ T104] ? __list_add_valid_or_report+0xec/0x190 [ 446.431857][ T104] ? handle_invalid_op+0x34/0x40 [ 446.433314][ T104] ? __list_add_valid_or_report+0xec/0x190 [ 446.435007][ T104] ? exc_invalid_op+0x2e/0x50 [ 446.436401][ T104] ? asm_exc_invalid_op+0x1a/0x20 [ 446.437946][ T104] ? __wake_up_klogd.part.0+0x99/0xf0 [ 446.439522][ T104] ? vprintk_emit+0x39e/0x6f0 [ 446.440915][ T104] ? __list_add_valid_or_report+0xec/0x190 [ 446.442611][ T104] ? __list_add_valid_or_report+0xeb/0x190 [ 446.444311][ T104] do_compact_page+0x10f2/0x27b0 [ 446.445752][ T104] ? lock_acquire+0x2f/0xb0 [ 446.447083][ T104] ? process_one_work+0x921/0x1ba0 [ 446.448616][ T104] process_one_work+0x9c5/0x1ba0 [ 446.450068][ T104] ? __pfx_compact_page_work+0x10/0x10 [ 446.451657][ T104] ? __pfx_process_one_work+0x10/0x10 [ 446.453252][ T104] ? assign_work+0x1a0/0x250 [ 446.454610][ T104] worker_thread+0x6c8/0xf00 [ 446.455985][ T104] ? __pfx_worker_thread+0x10/0x10 [ 446.457501][ T104] kthread+0x3af/0x750 [ 446.458724][ T104] ? __pfx_kthread+0x10/0x10 [ 446.460079][ T104] ? lock_acquire+0x2f/0xb0 [ 446.461390][ T104] ? __pfx_kthread+0x10/0x10 [ 446.462681][ T104] ret_from_fork+0x45/0x80 [ 446.464018][ T104] ? __pfx_kthread+0x10/0x10 [ 446.465384][ T104] ret_from_fork_asm+0x1a/0x30 [ 446.466776][ T104] [ 446.467660][ T104] Modules linked in: [ 446.469232][ T104] ---[ end trace 0000000000000000 ]--- [ 446.470847][ T104] RIP: 0010:__list_add_valid_or_report+0xec/0x190 [ 446.472722][ T104] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 a5 00 00 00 48 8b 55 08 48 89 e9 48 c7 c7 00 58 d3 8b e8 45 87 cf fc 90 <0f> 0b 48 89 f7 48 89 34 24 e8 b6 eb 31 fd 48 8b 34 24 48 b8 00 00 [ 446.478401][ T104] RSP: 0018:ffffc9000165fb88 EFLAGS: 00010282 [ 446.480158][ T104] RAX: 0000000000000075 RBX: ffff888000660000 RCX: ffffffff819944e9 [ 446.482437][ T104] RDX: 0000000000000000 RSI: ffffffff8199a85e RDI: 0000000000000005 [ 446.484779][ T104] RBP: ffff888029834700 R08: 0000000000000005 R09: 0000000000000000 [ 446.486995][ T104] R10: 0000000000000002 R11: 0000000000000004 R12: ffff888000660000 [ 446.489327][ T104] R13: ffff888029834708 R14: ffffea0000019800 R15: ffff888000660008 [ 446.491635][ T104] FS: 0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 446.494153][ T104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.496141][ T104] CR2: 00007f3aa8b95d58 CR3: 000000004fb6a000 CR4: 0000000000352ef0 [ 446.498477][ T104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.500787][ T104] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.503075][ T104] Kernel panic - not syncing: Fatal exception [ 446.505457][ T104] Kernel Offset: disabled [ 446.506740][ T104] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:56:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000539b34 RBX=0000000000000000 RCX=ffffffff8b574469 RDX=ffffed100d4c6f86 RSI=ffffffff8bd35600 RDI=ffffffff81907399 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6f85 R10=ffff88806a637c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90625510 R15=0000000000000000 RIP=ffffffff8b57584f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3aa7f64008 CR3=0000000031dca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179500f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179500f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179500f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179500f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179500f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179500f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179517c488 00007f179517c480 00007f179517c478 00007f179517c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1795cdd100 00007f179517c440 00007f1795170004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f179517c498 00007f179517c490 00007f179517c488 00007f179517c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000084 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff9103dde8 RBX=ffffffff907c7e14 RCX=dffffc0000000000 RDX=1ffffffff20f8fc2 RSI=0000000000000000 RDI=ffffffff907c7dd0 RBP=ffffffff907c7e00 RSP=ffffc900006b01d8 R8 =ffffffff9103de78 R9 =ffffffff9103dd02 R10=ffffc900006b0288 R11=0000000000011cc8 R12=ffffffff907c7e2c R13=ffffffff821cc8d8 R14=ffffffff907c7dd0 R15=ffffffff907c7dfc RIP=ffffffff81691fa0 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3aa7d70f20 CR3=00000000321e8000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000000b DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=739bda6d618ef48f 1281ca5821b8eaa8 739bda6d618ef48f 1281ca5821b8eaa8 739bda6d618ef48f 1281ca5821b8eaa8 739bda6d618ef48f 1281ca5821b8eaa8 ZMM18=da03246ab28cbcf7 fd3be156bd994e2a da03246ab28cbcf7 fd3be156bd994e2a da03246ab28cbcf7 fd3be156bd994e2a da03246ab28cbcf7 fd3be156bd994e2a ZMM19=5019000000000000 0000000000000009 5019000000000000 0000000000000008 5019000000000000 0000000000000007 5019000000000000 0000000000000006 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=1281ca581281ca58 1281ca581281ca58 1281ca581281ca58 1281ca581281ca58 1281ca581281ca58 1281ca581281ca58 1281ca581281ca58 1281ca581281ca58 ZMM22=618ef48f618ef48f 618ef48f618ef48f 618ef48f618ef48f 618ef48f618ef48f 618ef48f618ef48f 618ef48f618ef48f 618ef48f618ef48f 618ef48f618ef48f ZMM23=739bda6d739bda6d 739bda6d739bda6d 739bda6d739bda6d 739bda6d739bda6d 739bda6d739bda6d 739bda6d739bda6d 739bda6d739bda6d 739bda6d739bda6d ZMM24=bd994e2abd994e2a bd994e2abd994e2a bd994e2abd994e2a bd994e2abd994e2a bd994e2abd994e2a bd994e2abd994e2a bd994e2abd994e2a bd994e2abd994e2a ZMM25=fd3be156fd3be156 fd3be156fd3be156 fd3be156fd3be156 fd3be156fd3be156 fd3be156fd3be156 fd3be156fd3be156 fd3be156fd3be156 fd3be156fd3be156 ZMM26=b28cbcf7b28cbcf7 b28cbcf7b28cbcf7 b28cbcf7b28cbcf7 b28cbcf7b28cbcf7 b28cbcf7b28cbcf7 b28cbcf7b28cbcf7 b28cbcf7b28cbcf7 b28cbcf7b28cbcf7 ZMM27=da03246ada03246a da03246ada03246a da03246ada03246a da03246ada03246a da03246ada03246a da03246ada03246a da03246ada03246a da03246ada03246a ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4f1900004f190000 4f1900004f190000 4f1900004f190000 4f1900004f190000 4f1900004f190000 4f1900004f190000 4f1900004f190000 4f1900004f190000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000001000 RCX=0000000000000037 RDX=0000000000001000 RSI=0000000000000000 RDI=ffff88803c7d4200 RBP=ffffc9000406fa90 RSP=ffffc9000406fa28 R8 =0000000000000000 R9 =0000000000000000 R10=ffff88803c7d4000 R11=0000000000000000 R12=ffff88801b043040 R13=0000000000000c40 R14=0000000000001000 R15=ffffffff84859349 RIP=ffffffff8b5757c2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555774b3500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3aa8b94f98 CR3=000000002d51c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5020ca50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff63d00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff63d00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff63d00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff63d00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff63d00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff63d00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854072b5 RDI=ffffffff9ab80780 RBP=ffffffff9ab80740 RSP=ffffc9000165f4c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6b726f776b205043 R12=0000000000000000 R13=000000000000002d R14=ffffffff9ab80740 R15=0000000000000000 RIP=ffffffff854072df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3aa8b95d58 CR3=000000004fb6a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb78e0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb78e0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb78e0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb78e0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb78e0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb78e0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb78f7c488 00007ffb78f7c480 00007ffb78f7c478 00007ffb78f7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb79add100 00007ffb78f7c440 00007ffb78f70004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb78f7c498 00007ffb78f7c490 00007ffb78f7c488 00007ffb78f7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000