last executing test programs: 47.828559111s ago: executing program 2 (id=110): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f00000003c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "c32f8eb431aec50cc674296f3f6b053627c0b3d32cef2b01b5891f9e6641f0054089dcc24abeec19b2ed79c244d8f55f56b9f122c45980deb0b8fb453a1e80cf70"}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r7 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000000c0), 0x6db6e559) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r9, r4, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x5a, &(0x7f0000000480)=ANY=[], 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r10, &(0x7f0000000300)={0x2020}, 0x2020) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000d73000/0x4000)=nil], 0x0, &(0x7f00000003c0), 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a040, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 47.697712487s ago: executing program 2 (id=114): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) munmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_delrule={0x6c, 0x21, 0x100, 0x70bd2b, 0x25dfdbfd, {0xa, 0x14, 0x20, 0x2, 0x5, 0x0, 0x0, 0x3, 0x10004}, [@FRA_DST={0x14, 0x1, @private2}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'lo\x00'}, @FRA_DST={0x14, 0x1, @mcast1}, @FRA_DST={0x14, 0x1, @remote}]}, 0x6c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 47.580454309s ago: executing program 2 (id=115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000000)={0x8, "6c531c78b3583b3a"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x3, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000000c0)={0xc9, 0x0, 0xc}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}, 0x1, 0x4801000000000000}, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) 47.45041908s ago: executing program 2 (id=116): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x0, 0x4ee}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000ddf5c6d10df210000000100000000800000000000000000000010000000010007e070000"], &(0x7f0000000040)=""/71, 0x30, 0x47, 0x0, 0x1724, 0x10000, @value=r1}, 0x28) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000"], 0x120}}, 0x0) read$usbmon(r5, &(0x7f0000000180)=""/16, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1d, r6}, 0xfe32, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2bd600c7ed2890"}, 0x10}, 0x2, 0x0, 0x0, 0xe0}, 0x24000890) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208001800000004825f7fef1de7d15e1f87d701040016000a00104006001025006010fab94dcf5c0461c1d67f6f94007134036ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d938dfe1d9d322fe7c9f8775730d16a4683f4d360000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951e215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x0) 47.448305583s ago: executing program 2 (id=117): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)={0x28, 0x140b, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') write$cgroup_subtree(r0, &(0x7f0000000580)={[{0x2d, 'net_prio'}, {0x2b, 'rlimit'}, {0x2b, 'cpuset'}, {0x0, 'rlimit'}, {0x2b, 'net'}]}, 0x27) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) read$FUSE(r5, &(0x7f0000000880)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) execve(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)={[&(0x7f0000000200)='workdir']}, &(0x7f0000000540)={[&(0x7f0000000380)='overlay\x00', &(0x7f0000000440)='9p\x00', &(0x7f0000000480)='pids.current\x00', &(0x7f0000000500)='nicvf0\x00']}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x40, r2, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x400049}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x40}}, 0x0) setns(r5, 0x20000) 47.320393066s ago: executing program 2 (id=118): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000200000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb301a913bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd5441110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5e080eaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffda707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c7fdffffffffffffff0000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe030000008e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000f1e2be1b2290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be479998cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa39596443447671971868345e92e4b33079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166fa3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9cdfd008c898d73bb97168ca390ef5398000000000000000000000000a454f930ada97e4d7460bf0d3312c03639870f8b33fa044a805867e88bf164474513ec0cd466baf22573597c7bf340d67a6854e39371fb671a46be4942b49cc28ac921188461979e530c8a90dcfacdad19469540b9deb65290e786e53a715e6b712642087c9a0640b6910f4c07cde1ba22c2224cd9c8c39dd73a9b0a15c743b6c29c7635d96dee702dce815913a7ad9b661da02d7decc1649d06d55c9a8f24dc63f02c3bc2d6ad0425cf71147d0efa8a255819a1c3b54fffe7f2cb3629990f034cae989dd1dfebc50a2a7ed4fbaa267e7c4cd6f11511a12a7116ca9a78e83a59d90a4abe6b0aafc9c9e408c324f67910b938765e0bf7e80d6e306b6827ae12ecae85472d88ad4646256329b6ae3b3974b420504c6df932eb45506db7d0d5d838aeb7ad7b90a38a24ba58e67e8c6845cd16e294fb25681c3c752d02862feb48bb7c67fde3ab4035c78df647dad5244275866c5106ca19ffa5fb282b71f3d71b2e61fe32bb50b00e68caf69bf9a7de42fd5b7f471a18b815cd9da87f4556519432598be2064e01cf6e0893bb5ce0155618612deb6a648de40a7f7c7d5559986c5f44f585fb0ddcbea266d150adc7fd647fd0aa96b295c715aa935e7d92d698ac8ced7226af8fd71834e61aabd6db2e83ee89deb9ca22134c57d8ae485925d30bbba23d22ceebcc0d9cac531453955a5b70afa5655d704b4a8517fef7b4376801a2704e2b2e4413974405e4a6789675ebf0398a90ed4dc2f72021c83ad54ab23e05f38dbc430313"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) 32.188270694s ago: executing program 32 (id=118): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) 11.079998199s ago: executing program 3 (id=641): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x2}}, 0x1c}}, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) read(r5, &(0x7f0000000140)=""/237, 0x20) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080), 0x200000, 0x4) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 10.169045035s ago: executing program 3 (id=652): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a000100000000100000000081800000000000000000000014000200fc0200"/48], 0x30}}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x2}]}, 0x4, 0x3}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$key(0xf, 0x3, 0x2) munlock(&(0x7f0000001000/0x2000)=nil, 0x2000) sendmsg$key(r6, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6, 0x40000000000002, 0x0, 0x0, 0x0, 0x0, 0x53b0}, {}, 0x0, 0x9, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x2, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x100000b, 0x80010, 0xffffffffffffffff, 0x8f5bc000) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000016500)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000016540)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.650311798s ago: executing program 3 (id=671): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x16, 0x6, 0x3, 0x7ff}]}, 0x10) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) (async) syz_emit_ethernet(0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60010700004d1100fc010000000000000000000000e75500ff02000000000000000000000000000100000e22004d90"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0) 8.650023917s ago: executing program 3 (id=672): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000002c0)="e263c46fd365c0c8337e2e89e78ece92c7ebae90f4afeca14b01ee89471bbc10", 0x20, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x85, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x74, @empty}}, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={r4, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f00000000c0)=0x84) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x8c, 0x52, 0xa01, 0x0, 0x0, {0xa}, [@generic="69afef3b8a68c4b90dc123a03deaacabf84b5b4b86cdc11f4c755cbbf22f3c554085f25414808001da04f66bcbcf164c44800598ad343b8c058b9a467e4f16337991810000000000000050b03184847dc9b6a6070655d7fd133f675cb6c573db396ce163c9dea542ae2684f2dee8d94be76fcb9cbb3fd6"]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 7.740050597s ago: executing program 3 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4452000010000104280101000007000000000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000180012800e000100697036677265746170000000040002800a000100aaaaaaaaaa410000"], 0x44}}, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x6c0, 0x120, 0x120, 0xffffffff, 0x0, 0x120, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xf}, @local, [0x0, 0xffffff00, 0xff000000, 0xff], [], 'nr0\x00', 'gretap0\x00', {}, {}, 0xc, 0x24, 0x3, 0x77}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0x80, 0x1, 0xad, 0x7, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, @ipv4=@broadcast, @icmp_id=0x67, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1d}, @local, [0xff000000, 0x0, 0xff000000], [0x0, 0xffffffff, 0x0, 0xff], 'veth0_to_team\x00', 'bond_slave_1\x00', {0xff}, {}, 0x73, 0x7, 0x1, 0x41}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, 'W+'}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x14, @ipv6=@empty, @ipv6=@mcast1, @icmp_id=0x67, @port=0x4e20}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 'veth0_to_team\x00', '\x00', {}, {0xff}, 0x89, 0xfb, 0x0, 0x68}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0xb, 0x5], 0x1, 0x1, 0x5}}, @common=@icmp6={{0x28}, {0xd, "54fe"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x19, @ipv4=@remote, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @port=0x4e22, @icmp_id=0x66}}}, {{@ipv6={@empty, @private1, [0xffffffff, 0x0, 0x0, 0xff000000], [0xff, 0xff, 0xffffff00, 0xff], 'syz_tun\x00', 'batadv0\x00', {0xff}, {}, 0x3a, 0x2c, 0x4, 0x48}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "e64d", 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'bond0\x00', {0x59b8, 0x3, 0x0, 0x6c37, 0x16051d15, 0xbff, 0xa4c5, 0x4, 0x0, 0x80}, {0x3}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e20, @gre_key=0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 7.489934943s ago: executing program 3 (id=682): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000600)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000200)=""/237, 0xed}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/45, 0x2d}], 0x6, &(0x7f0000000580)=""/128, 0x80}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffe5ab}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="97000100ffffffff9500000000000000"], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.467371258s ago: executing program 33 (id=682): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000600)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000200)=""/237, 0xed}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/45, 0x2d}], 0x6, &(0x7f0000000580)=""/128, 0x80}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffe5ab}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="97000100ffffffff9500000000000000"], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.789084853s ago: executing program 5 (id=717): r0 = socket$nl_route(0x10, 0x3, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)='X\x00\x00', 0x3}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x8e54}, 0x10) recvmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x102, 0x0) write(r4, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000030a08000a00", @ANYRES32=r2, @ANYBLOB="5512fe23132d31ace211cc578a6e952e5b0ccb3d7fd6a1cd9fcd576d7c11d3c4cf8d287b3bbbcac5acd8d778e310fd8bccbb07d215343081e42983c6"], 0x48}}, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DVD_READ_STRUCT(r5, 0x127c, &(0x7f0000000900)=@disckey={0x2, 0x0, "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"}) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) 2.089533461s ago: executing program 0 (id=734): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xde, 0x15, 0xffff, 0xe, 0x2, 0x5d23608d, &(0x7f0000000140)="e3d6"}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) 2.089017625s ago: executing program 0 (id=735): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r2) r3 = io_uring_setup(0x6db7, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x0, 0x31e}) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x200, 0xaf5812c27930c58a, r4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000340)="0f22a5b93a090000b8433e0000ba000000000f300f2063f30fc735977f00008fc9e093ae3e4600000f01769c660f38100e66baf80cb890e55383ef66bafc0cb8540a0000ef36670f0172750f20d835200000000f22d8", 0x56}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.198719252s ago: executing program 0 (id=737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000180001"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000000000fdffffff950000000000000085100000fcffffff9500000000000000fa80af0e7e9f0c1f5e8d0748e790541088d3cd78f74cf6e6cc343c10569f20f99f65df5913ea6a86196c16157e68e041b822c6320f3c9f1592f4674f80459e457d72678339158322b02004d95f1fc265b9ca1dbfe1bf5977707b29557decaae34f41e9c64c902aa75c58e737d7d46380081a4952187514a387fb39b3e4226c591fa6f37eebb71e315344cd1500"/209], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.197033083s ago: executing program 0 (id=738): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0xfffffffe, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20048000) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x3, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='macsec0\x00', 0x10) write(r2, &(0x7f0000000280)="822a0a65bd", 0x5) 939.487239ms ago: executing program 0 (id=739): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX], 0x1c}}, 0x14040011) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) 938.516665ms ago: executing program 5 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r1, 0x0, 0x2, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x164, 0x30, 0x871a15abc695fa3d, 0x0, 0xe4ffffff, {}, [{0x150, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x104, 0x17, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'ctinfo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7, 0x0, 0x7, 0x1}}]}, {0xb4, 0x6, "d43e40e7abe4c210bfda1186d6dffc8ee1876d5906b730a49f986795c4556ce2ece4556b8a89a7cf754f6aa546416a93d0446c5b35ef344ec66bcc43b24742787282778853f1fb45ac5219d1482862b29f857a6e85ab6c08c9925b2847b961d12aa55ce9187aaa09664e5e05c152dbab4c47b11c83bebc4e5661850512d87a9feb92c7202ed1fb97cafd41345f1597d4a03fc653786e7540aff3c9409dc8169fa13e8a5bc5528762986032c7b5fba385"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x164}}, 0x4000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="dcacb5a34a88660f0d34831e8c13ae794204b4b44e20d87d3cdc3a20d50d342a2ed55be7d0e79bc6bcfd7c4a252116855e15fa9de590545bf3c5c888a01fdcc4f9c3d614599eaaecc7966d11fce25f16022d79eef5733af9bb4c0000cc4b053267a10d", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) sendto$netrom(r1, 0x0, 0x2, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x164, 0x30, 0x871a15abc695fa3d, 0x0, 0xe4ffffff, {}, [{0x150, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x104, 0x17, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'ctinfo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7, 0x0, 0x7, 0x1}}]}, {0xb4, 0x6, "d43e40e7abe4c210bfda1186d6dffc8ee1876d5906b730a49f986795c4556ce2ece4556b8a89a7cf754f6aa546416a93d0446c5b35ef344ec66bcc43b24742787282778853f1fb45ac5219d1482862b29f857a6e85ab6c08c9925b2847b961d12aa55ce9187aaa09664e5e05c152dbab4c47b11c83bebc4e5661850512d87a9feb92c7202ed1fb97cafd41345f1597d4a03fc653786e7540aff3c9409dc8169fa13e8a5bc5528762986032c7b5fba385"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x164}}, 0x4000) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="dcacb5a34a88660f0d34831e8c13ae794204b4b44e20d87d3cdc3a20d50d342a2ed55be7d0e79bc6bcfd7c4a252116855e15fa9de590545bf3c5c888a01fdcc4f9c3d614599eaaecc7966d11fce25f16022d79eef5733af9bb4c0000cc4b053267a10d", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) 937.284662ms ago: executing program 0 (id=741): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x1) write$tun(r0, &(0x7f0000000080)={@void, @val={0x2, 0x80, 0x2, 0x9, 0xfffa, 0x800}, @eth={@remote, @random="bf4613bfc4d7", @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@can={0xc, {{0x2, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "3b2613703d156185"}}}}}, 0x2c) r1 = socket$netlink(0x10, 0x3, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @private=0xa010101}, @in6={0xa, 0x4e24, 0x4, @local, 0x663}}}, 0x118) setsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f0000000280)="4e9338bdd11b7e877a", 0x9) syz_usb_connect$cdc_ecm(0x1, 0x57, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0xb1, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "bd"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xc, 0x6, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x18, 0xfe, 0x44}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xf, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x2, 0x3, 0x6d, 0x8, 0x62}, 0x19, &(0x7f0000000380)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xa7, "b3840ca1a62730a6013d9e2304a0d2b1"}]}, 0x9, [{0x78, &(0x7f00000003c0)=@string={0x78, 0x3, "cf07c40b2887f67fa283d77a746fc55ce744ebde4fb1302ac14d6018120c3cb6cce7daaad1f2f1d0d542e19378e0dfae7a06bd3efc2c9607b82ebce11a8012e91de39907a32a5708820c878138c6a3e81843de6ab4970366945d2896ccbd7a98233b065af39fab52446fc67e20deac12017f7b349ec2"}}, {0x55, &(0x7f0000000440)=@string={0x55, 0x3, "5750a24beb6f9579028932628203c2ce128634569836fc0298438c94492adca65a4f103601cb63985e72d862d0ac15df82c78df7aa2b41cc113e661cd230f0df58db82f29707e62b4ad14d429f8d87319f18a9"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42c}}, {0xb0, &(0x7f0000000500)=@string={0xb0, 0x3, "e733cd7d56aeb702abb100c9348fc20056a6cef4b14759cca9cd6c58fd5c246739e4005b1f50b04086e0fc0c41e31dbb8ebdb539ad6f3dddbcce1baf955065d42981892d2802d0819753f431f164c2fa4500cf6bd4e03a409e6f43b2e8dd6ed46df78dcec3a4c444b41763136f5698bd3742ce7388fcd1169abcf2376749b9e70f9691d0cbfe61ba34c266e47271dc0588b27542836c468148bd89c8ca10be739eae7e8650ecebe3d6ae40fb6300"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0xcc, &(0x7f0000000640)=@string={0xcc, 0x3, "679cd9d142868721fcb8993537515c41766aec3f8a0f85d07637b87e208b378b44482b98779a74dbc4dde3805605760eae08ea2a9d97546ef96d1a101cbea2b91dbb95840bb1949bbe2445b0f7160899dc01983f1223d06b63aacc17050d290c215e8ec3595c065733a52e03bc6fd6332f6ed65d10fef07f366430a6c55002f18ee9d18dff7f88fe2736b076cd497e5e9037c888a5bfb671999120ae2ae6c8bc1037bc027c5aa4f16564f43cb9573f52a678b688f2032f75ead46b45f2b587170f2849c29ff2dcbdc8cb"}}, {0x84, &(0x7f0000000740)=@string={0x84, 0x3, "2de7eb3dbf8a0a009528e6a5a5121118149d332966a1c4827e3a392d5cf38e7bb99be6015531265e66ff67f2a014ab6d926bb86e2edc5f0b0f298e55b00d5fb5d12be9a961537b4c2b0a15fc78a0ece85fa70ac714d557cd00689a72bfd8142be3dd88b8f216977921edc55c5fb5f4c7f11c1e632d82ee3aa05a69039412a6f1053b"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1409}}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000900)={0x0, 0x2, 0x20, 0x1, 0xfff}, &(0x7f0000000940)=0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000980)={r4, 0x2}, &(0x7f00000009c0)=0x8) syz_io_uring_setup(0x62e, &(0x7f0000000a00)={0x0, 0xba4a, 0x400, 0x3, 0x1f1, 0x0, r0}, &(0x7f0000000a80), &(0x7f0000000ac0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000b00)={r4, 0x101, 0x8000}, &(0x7f0000000b40)=0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000b80)='veth1_to_hsr\x00', 0x10) clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000020c0)=[{{&(0x7f0000000bc0)=@isdn, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000c40)=""/40, 0x28}, {&(0x7f0000000c80)=""/42, 0x2a}, {&(0x7f0000000cc0)=""/177, 0xb1}, {&(0x7f0000000d80)=""/232, 0xe8}, {&(0x7f0000000e80)=""/64, 0x40}, {&(0x7f0000000ec0)=""/163, 0xa3}], 0x6, &(0x7f0000001000)=""/139, 0x8b}, 0x2}, {{&(0x7f00000010c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001140)=""/89, 0x59}, {&(0x7f00000011c0)=""/147, 0x93}, {&(0x7f0000001280)=""/23, 0x17}, {&(0x7f00000012c0)=""/70, 0x46}, {&(0x7f0000001340)=""/48, 0x30}, {&(0x7f0000001380)=""/223, 0xdf}, {&(0x7f0000001480)=""/80, 0x50}], 0x7, &(0x7f0000001580)=""/156, 0x9c}, 0x9}, {{&(0x7f0000001640)=@nl, 0x80, &(0x7f0000001d00)=[{&(0x7f00000016c0)=""/184, 0xb8}, {&(0x7f0000001780)=""/170, 0xaa}, {&(0x7f0000001840)=""/111, 0x6f}, {&(0x7f00000018c0)=""/141, 0x8d}, {&(0x7f0000001980)=""/162, 0xa2}, {&(0x7f0000001a40)=""/193, 0xc1}, {&(0x7f0000001b40)=""/179, 0xb3}, {&(0x7f0000001c00)=""/205, 0xcd}], 0x8, &(0x7f0000001d80)=""/164, 0xa4}, 0xe}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e40)=""/37, 0x25}, {&(0x7f0000001e80)=""/239, 0xef}], 0x2, &(0x7f0000001fc0)=""/213, 0xd5}, 0x3}], 0x4, 0x0, &(0x7f0000002200)={r6, r7+60000000}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000002240)={r5, 0x3}, &(0x7f0000002280)=0x8) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000022c0)={0x0, 0x8000, 0x1}) ioctl$SNAPSHOT_FREE(r0, 0x3305) r10 = getpid() fcntl$setown(r8, 0x8, r10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002300)={0x7, 0x8, 0xfa00, {r2, 0x4}}, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000002340)={r5, 0x69}, &(0x7f0000002380)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000023c0)={0x5, 0x8204, 0x200, 0xf, r9}, &(0x7f0000002400)=0x10) rmdir(&(0x7f0000002440)='./file0\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000002480)={0x6, 0x0, '\x00', {0x0, @bt={0xfffffff9, 0x10000, 0x1, 0x0, 0x1, 0x80, 0x2, 0x7, 0x1, 0x2, 0x26, 0xd, 0xf, 0x401, 0x19, 0x0, {0x8, 0xfffffc01}, 0x8, 0x7}}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002680)={&(0x7f00000025c0)={0xb8, r11, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42e6458a90aeb4bd06d58b1931bd245212e4edd7633ba2cf"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "217719efc7fc6b20564b48d8bdf03ae46f1585d40658b0b2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3b6f66502c0894aa15e396cd5509f589a94341be46829713"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002740), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x30, r12, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 819.005732ms ago: executing program 4 (id=743): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, '.\x02\x00'}) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='.\x02\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000180)={'trans=virtio,', {[{@loose}, {@dfltgid={'dfltgid', 0x3d, r0}}, {@uname={'uname', 0x3d, 'lowerdir'}}], [{@dont_appraise}, {@fsname={'fsname', 0x3d, ']&-'}}]}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10002, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') 818.670136ms ago: executing program 5 (id=744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x101) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001340)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x2e}) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000040)) 759.990196ms ago: executing program 4 (id=746): r0 = epoll_create(0x2e3) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x1c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r1, r1, 0x0, 0x30) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x7f, 0x2, &(0x7f0000000000)={0x1c, "c341e76785a0dcfc0a376600a9b7ac17e8f6aedd3529753bf4bb55e3232925c693"}}) 754.718528ms ago: executing program 4 (id=749): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r1, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) tee(r0, r2, 0x400, 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x5e, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'rr\x00', 0x34, 0x8000, 0x4e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4, 0x6, 0x8, 0x8}}, 0x44) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) 746.008559ms ago: executing program 5 (id=750): socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f00000087c0), &(0x7f0000008800)=0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}}, 0x20008040) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 659.1952ms ago: executing program 4 (id=751): arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x5) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x9) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @random="5369e0ef4962"}, 0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x72}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x800}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 658.951761ms ago: executing program 4 (id=752): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r1) fcntl$setlease(r0, 0x400, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000050000000800020000000001"], 0x1c}}, 0x0) (async) sendto$inet6(r2, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) (async) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x2, 0x125842) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r6 = io_uring_setup(0x67bb, &(0x7f0000000280)) io_uring_enter(r6, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) (async) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f0000000040)=0x1) (async) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1201b9008000", 0x0, 0x0, 0x0, 0x0, 0x0}) 594.937828ms ago: executing program 4 (id=755): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x20040000) r1 = msgget$private(0x0, 0x0) r2 = fsopen(&(0x7f0000000380)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xc, 0x0) msgrcv(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) setrlimit(0x5, &(0x7f00000000c0)={0xfffffffffffffff8, 0x1}) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r3, 0x30d, &(0x7f00000001c0)={0xa1, 0x16, 0xc2, 0xff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x100000000) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x8, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x40a4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRES16=r1]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x1a081, 0xe5) 594.659694ms ago: executing program 1 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5120b, 0x2459}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 390.19183ms ago: executing program 1 (id=757): mount$bind(0x0, 0x0, 0x0, 0x1144a0, 0xfffffffffffff000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000220010000080000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0xc122, r0}, 0x38) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 189.953309ms ago: executing program 1 (id=758): set_mempolicy(0x1, &(0x7f0000000000)=0x9, 0x1007fffefff) unshare(0x6a040000) 120.103716ms ago: executing program 1 (id=759): r0 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b", 0x1, 0xfffffffffffffffe) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x560fb000) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, 0x0) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) 119.892161ms ago: executing program 1 (id=760): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffffff}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0xc8a1, 0xffff5ef5, 0x0, 0x419, 0x3, 0x60}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c00c) 69.739583ms ago: executing program 5 (id=761): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20280, 0x0) getitimer(0x0, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) r1 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f00000000c0)=0x8) listen(r1, 0x9) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x9, 0x5, 0xd80a, 0x101, 0x8, "6b8cdc3d8edf35f1b639f962b5cb3620a16fa7", 0x6, 0x3ae}) 67.197931ms ago: executing program 5 (id=762): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x42180, 0x158) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) socket(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r6) 0s ago: executing program 1 (id=763): syz_emit_ethernet(0xff97, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x4, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) unshare(0x68040200) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x48, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): 8.669:197): avc: denied { read } for pid=6093 comm="syz.3.18" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.440809][ T5952] Bluetooth: Frame is too long (len 16, expected len 4) [ 51.447326][ T39] audit: type=1400 audit(1738894668.669:198): avc: denied { open } for pid=6093 comm="syz.3.18" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.484594][ T6092] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 51.499945][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 51.519010][ T39] audit: type=1400 audit(1738894668.749:199): avc: denied { create } for pid=6095 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.519896][ T6102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 51.526101][ T39] audit: type=1400 audit(1738894668.749:200): avc: denied { write } for pid=6095 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.528545][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 51.538617][ T39] audit: type=1400 audit(1738894668.749:201): avc: denied { nlmsg_write } for pid=6095 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.629467][ T6115] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.682857][ T5952] Bluetooth: hci0: command tx timeout [ 51.682880][ T5294] Bluetooth: hci1: command tx timeout [ 51.752095][ T5294] Bluetooth: hci2: command tx timeout [ 51.752132][ T5952] Bluetooth: hci3: command tx timeout [ 51.783656][ T6120] xt_CONNSECMARK: invalid mode: 0 [ 51.813084][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 51.957050][ T6124] mmap: syz.1.29 (6124): VmData 37597184 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 52.072998][ T6132] syz.1.31: attempt to access beyond end of device [ 52.072998][ T6132] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 52.078685][ T6132] (syz.1.31,6132,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 52.081701][ T6132] (syz.1.31,6132,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 52.086483][ T6132] (syz.1.31,6132,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 52.090449][ T6132] (syz.1.31,6132,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 52.178264][ T6140] capability: warning: `syz.1.34' uses deprecated v2 capabilities in a way that may be insecure [ 52.437034][ T6164] tmpfs: Cannot change global quota limit on remount [ 52.442046][ T5987] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.488745][ T6164] program syz.0.41 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.592071][ T5987] usb 6-1: Using ep0 maxpacket: 16 [ 52.603510][ T6177] pim6reg9: entered allmulticast mode [ 52.603663][ T5987] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 52.608855][ T5987] usb 6-1: config 0 has no interface number 0 [ 52.611392][ T5987] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.618197][ T5987] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 52.640510][ T5987] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 52.644401][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 52.647497][ T5987] usb 6-1: Product: syz [ 52.649161][ T5987] usb 6-1: SerialNumber: syz [ 52.655373][ T5987] usb 6-1: config 0 descriptor?? [ 52.663707][ T5987] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 52.667863][ T5987] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input5 [ 52.854495][ T6191] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 52.867946][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 52.872640][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 52.875829][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 52.878798][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 52.879094][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 52.885085][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 52.888247][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 52.890880][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 52.894475][ T5987] usb 6-1: USB disconnect, device number 2 [ 52.901760][ T5987] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 52.908038][ T6193] dccp_invalid_packet: P.Data Offset(4) too small [ 52.916027][ T6193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=6193 comm=syz.3.53 [ 52.921289][ T6193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6193 comm=syz.3.53 [ 52.931580][ T6193] dccp_invalid_packet: P.Data Offset(4) too small [ 52.981488][ T6204] fuse: Bad value for 'fd' [ 52.985295][ T6204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6204 comm=syz.3.55 [ 52.989736][ T6204] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 53.044341][ T6206] syzkaller0: entered promiscuous mode [ 53.046322][ T6206] syzkaller0: entered allmulticast mode [ 53.049071][ T6206] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 53.350971][ T6222] random: crng reseeded on system resumption [ 53.420428][ T6235] __nla_validate_parse: 5 callbacks suppressed [ 53.420441][ T6235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.65'. [ 53.470667][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 53.484700][ T6242] gretap0: entered promiscuous mode [ 53.488369][ T6242] macvtap1: entered promiscuous mode [ 53.490328][ T6242] macvtap1: entered allmulticast mode [ 53.493376][ T6242] gretap0: entered allmulticast mode [ 53.504554][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 53.562317][ T6251] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 53.562342][ T6251] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 53.614642][ T6253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40444 sclass=netlink_route_socket pid=6253 comm=syz.0.68 [ 53.619761][ T6253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=6253 comm=syz.0.68 [ 53.623903][ T6253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6253 comm=syz.0.68 [ 53.642100][ T6254] ======================================================= [ 53.642100][ T6254] WARNING: The mand mount option has been deprecated and [ 53.642100][ T6254] and is ignored by this kernel. Remove the mand [ 53.642100][ T6254] option from the mount to silence this warning. [ 53.642100][ T6254] ======================================================= [ 53.679405][ T6249] warning: `syz.1.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.752099][ T5952] Bluetooth: hci1: command tx timeout [ 53.752149][ T5294] Bluetooth: hci0: command tx timeout [ 53.767699][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 53.783786][ T6267] xt_ipcomp: unknown flags 12 [ 53.816732][ T6269] netlink: 72 bytes leftover after parsing attributes in process `syz.1.76'. [ 53.833577][ T5294] Bluetooth: hci3: command tx timeout [ 53.833772][ T5952] Bluetooth: hci2: command tx timeout [ 53.889902][ T6279] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.946878][ T6287] netlink: 'syz.1.81': attribute type 10 has an invalid length. [ 53.951143][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.954655][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.963748][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.966548][ T6287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.970054][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.972355][ T6287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.978241][ T6287] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 54.028642][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.82'. [ 54.541505][ T6310] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 54.542366][ T6309] 9pnet_virtio: no channels available for device syz [ 54.791908][ T65] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 54.962023][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 54.965158][ T65] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 54.968100][ T65] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 54.971418][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 54.974950][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.978385][ T65] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.983528][ T65] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 54.986723][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.091464][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.92'. [ 55.194015][ T65] usb 6-1: usb_control_msg returned -32 [ 55.195850][ T65] usbtmc 6-1:16.0: can't read capabilities [ 55.217879][ T6318] could not allocate digest TFM handle blake2s-160-arm [ 55.338909][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 55.344176][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 55.347615][ T6329] netlink: 'syz.2.96': attribute type 15 has an invalid length. [ 55.551191][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.555810][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.565803][ T6350] could not open pipe file descriptor [ 56.003150][ T6366] overlay: Bad value for 'workdir' [ 56.322117][ T65] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.412530][ T39] kauditd_printk_skb: 104 callbacks suppressed [ 56.412540][ T39] audit: type=1400 audit(1738894673.649:306): avc: denied { bind } for pid=6378 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.420508][ T6379] Bluetooth: MGMT ver 1.23 [ 56.420673][ T39] audit: type=1400 audit(1738894673.649:307): avc: denied { write } for pid=6378 comm="syz.3.109" path="socket:[10811]" dev="sockfs" ino=10811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.429995][ T6379] openvswitch: netlink: Missing key (keys=40, expected=100) [ 56.491978][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 56.496938][ T39] audit: type=1400 audit(1738894673.729:308): avc: denied { name_bind } for pid=6380 comm="syz.2.110" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.503628][ T65] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 56.506830][ T65] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 56.509793][ T65] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 56.513616][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.516908][ T65] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 56.520054][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 56.524599][ T65] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 56.527446][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.533763][ T65] usb 5-1: config 0 descriptor?? [ 56.539189][ T39] audit: type=1400 audit(1738894673.769:309): avc: denied { mount } for pid=6380 comm="syz.2.110" name="/" dev="ramfs" ino=13517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.541238][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 56.564815][ T39] audit: type=1400 audit(1738894673.799:310): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.592178][ T6393] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 56.592508][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.593019][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.595577][ T6393] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.602371][ T6393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.605062][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.607580][ T6393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.612059][ T6393] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 56.669076][ T39] audit: type=1400 audit(1738894673.899:311): avc: denied { create } for pid=6394 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.717897][ T39] audit: type=1400 audit(1738894673.949:312): avc: denied { sqpoll } for pid=6390 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.740449][ T65] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 56.745788][ T65] usb 5-1: USB disconnect, device number 2 [ 56.750553][ T65] usblp1: removed [ 56.765880][ T39] audit: type=1400 audit(1738894673.999:313): avc: denied { setopt } for pid=6390 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.774736][ T39] audit: type=1400 audit(1738894673.999:314): avc: denied { read } for pid=6390 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.794972][ T39] audit: type=1400 audit(1738894674.029:315): avc: denied { nlmsg_read } for pid=6403 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.839811][ T6406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.844030][ T6406] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 56.879302][ T6406] netfs: Couldn't get user pages (rc=-14) [ 56.881338][ T6406] netfs: Zero-sized read [R=1] [ 57.192062][ T5951] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.352511][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 57.355737][ T5951] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.358641][ T5951] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.361525][ T5951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.364781][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.368135][ T5951] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.371397][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.377639][ T5951] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.380789][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.384691][ T5951] usb 5-1: config 0 descriptor?? [ 57.553839][ T835] usb 6-1: USB disconnect, device number 3 [ 57.582284][ T6408] capability: warning: `syz.1.119' uses 32-bit capabilities (legacy support in use) [ 57.587840][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.591226][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.617361][ T5951] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.958846][ T6426] syz.1.125 uses obsolete (PF_INET,SOCK_PACKET) [ 58.078311][ T6428] input: syz0 as /devices/virtual/input/input6 [ 58.146967][ T6430] [U] [ 58.147981][ T6430] [U] [ 58.148809][ T6430] [U] [ 58.149892][ T6430] [U] [ 58.152811][ T6430] [U] [ 58.153670][ T6430] [U] [ 58.154485][ T6430] [U] [ 58.155457][ T6430] [U] tui9eKqc;8qt [ 58.157124][ T6430] [U] t͉i;OC-v5"z$aCCzl4 DoXXgŁbͤ;J#)r'%7ŗB~W*qhk.JaM{g{:$126M 6Edb [ 58.163972][ T6430] [U] CT֠hRl~ܵ8\B [ 58.166676][ T6430] [U] 4Q%j7x2)0voNPb(@f [ 58.168680][ T6430] [U] ʳ@rKw&cî̢>^~ [ 58.170406][ T6430] [U] ]MK [ 58.171453][ T6430] [U] D8aICf VT%I˰EOw6;SˢmYq:^EP [@);k-q"D 9<%Q?s$g#/v8}$m^?\ԈblVod0EZ#Ww%16wT5 ͮ0 ^LZCx׽ntY73quS.~ZT [ 58.182147][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.183762][ T6430] [U] B(0+#8.kGROrjyաw%W6|&1X,uV)إ2 9Dui [ 58.188979][ T6430] [U] r3wJ<(ml*܋:7LiSDL#" [ 58.191712][ T6430] [U] (UjmLܖ8'o1G9 J*+ [ 58.193868][ T6430] [U] S [ 58.196393][ T6430] [U] [ 58.197399][ T6430] [U] H@>:&8D^fMlA##@7^d@?AD\`͵.-S"g+wOV_dŧy}}PcH5O V [ 58.202367][ T6430] [U] 7 ^yX;Ezo[e ?!p6m [ 58.202581][ T834] usb 5-1: USB disconnect, device number 3 [ 58.204968][ T6430] [U] Dm` %񷭖a"C9Ov*e[j+BIC;ٲ ˁ2u,܋GS .C1kۇTc= [ 58.208406][ T834] usblp0: removed [ 58.210950][ T6430] [U] [ 58.222168][ T6430] [U] QUaT [ 58.223418][ T6430] [U] VG!-p^.&Aei [ 58.224729][ T6430] [U] M2[$0u4k)ߍ~4\7+8y@ [ 58.226792][ T6430] [U] ]iK [ 58.227981][ T6430] [U] Kd61&jK&F>MJ3.3/M [ 58.232968][ T6430] [U] k=M#unՇ' [ 58.235068][ T6430] [U] @vVGMܿ'4P8}PDj f=n]̜ p>yX:- /B>澲7*ι4hq DgO [ 58.239852][ T6430] [U] n\ls} [ 58.241055][ T6430] [U] gM6(Xnȃ&hmhǯN'' i$!/?aZ¿Ob [ 58.244161][ T6430] [U] &`Щ$H%nf+cX+; l2Flf':-JEbKNNB 1.k6 q͝*3 YM"!,kxZU1 [ 58.248387][ T6430] [U] jv+v'q}uU* [ 58.249818][ T6430] [U] 'rd.dy+F'I:Ҧ}I0j8=4 ) [ 58.252810][ T6430] [U] [ 58.254106][ T6430] [U] [ 58.259055][ T6429] [U] [ 58.317117][ T6449] overlayfs: missing 'lowerdir' [ 58.327938][ T6449] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 3952. macoff=96 [ 58.366444][ T6451] 9pnet_virtio: no channels available for device syz [ 58.374085][ T6451] netlink: 'syz.1.133': attribute type 4 has an invalid length. [ 58.418809][ T6457] xt_hashlimit: size too large, truncated to 1048576 [ 58.435860][ T6459] process 'syz.1.137' launched './file2' with NULL argv: empty string added [ 58.467828][ T6461] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 58.526011][ T6469] can0: slcan on ttyS3. [ 58.592960][ T6469] can0 (unregistered): slcan off ttyS3. [ 58.598868][ T6469] sp0: Synchronizing with TNC [ 58.713668][ T6479] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 58.864460][ T6486] netlink: 'syz.1.146': attribute type 21 has an invalid length. [ 58.867578][ T6486] __nla_validate_parse: 6 callbacks suppressed [ 58.867589][ T6486] netlink: 128 bytes leftover after parsing attributes in process `syz.1.146'. [ 58.875051][ T6486] netlink: 'syz.1.146': attribute type 4 has an invalid length. [ 58.878117][ T6486] netlink: 'syz.1.146': attribute type 5 has an invalid length. [ 58.881159][ T6486] netlink: 3 bytes leftover after parsing attributes in process `syz.1.146'. [ 58.960325][ T6494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.038902][ T6497] tmpfs: Bad value for 'mpol' [ 59.286294][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 59.359992][ T6513] IPVS: Error connecting to the multicast addr [ 59.382456][ T1941] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 59.425850][ T6518] veth0_vlan: invalid flags given to default FDB implementation [ 59.428529][ T6518] block nbd1: NBD_DISCONNECT [ 60.410748][ T6548] 9pnet_virtio: no channels available for device syz [ 60.417449][ T6550] 9pnet_virtio: no channels available for device [ 60.453671][ T6553] can0: slcan on ttyS3. [ 60.467701][ T6557] 9pnet_virtio: no channels available for device syz [ 60.518501][ T6568] overlayfs: missing 'workdir' [ 60.520860][ T6553] can0 (unregistered): slcan off ttyS3. [ 60.854987][ T6593] [U] : [ 60.856215][ T6593] [U] [ 60.857118][ T6593] [U] [ 60.857983][ T6593] [U] [ 60.858886][ T6593] [U] [ 60.859719][ T6593] [U] [ 60.860550][ T6593] [U] [ 60.861385][ T6593] [U] [ 60.862357][ T6593] [U] [ 60.863195][ T6593] [U] [ 60.864023][ T6593] [U] [ 60.864852][ T6593] [U] [ 60.865725][ T6593] [U] [ 60.866566][ T6593] [U] [ 60.867391][ T6593] [U] [ 60.868207][ T6593] [U] [ 60.869047][ T6593] [U] [ 60.869885][ T6593] [U] [ 60.870747][ T6593] [U] [ 60.871573][ T6593] [U] [ 60.872438][ T6593] [U] [ 60.873259][ T6593] [U] [ 60.874103][ T6593] [U] [ 60.874940][ T6593] [U] [ 60.876380][ T6593] [U] [ 60.877332][ T6593] [U] [ 60.878214][ T6593] [U] [ 60.879035][ T6593] [U] [ 60.879859][ T6593] [U] [ 60.880685][ T6593] [U] [ 60.881503][ T6593] [U] [ 60.882366][ T6593] [U] [ 60.883331][ T6593] [U] [ 60.884178][ T6593] [U] [ 60.885084][ T6593] [U] [ 60.885948][ T6593] [U] [ 60.886800][ T6593] [U] [ 60.887620][ T6593] [U] [ 60.888452][ T6593] [U] [ 60.889272][ T6593] [U] [ 60.890233][ T6593] [U] [ 60.891074][ T6593] [U] [ 60.891918][ T6593] [U] [ 60.892766][ T6593] [U] [ 60.893591][ T6593] [U] [ 60.894434][ T6593] [U] [ 60.895305][ T6593] [U] [ 60.896194][ T6593] [U] [ 60.897258][ T6593] [U] [ 60.898107][ T6593] [U] [ 60.898927][ T6593] [U] [ 60.899756][ T6593] [U] [ 60.900548][ T6593] [U] [ 60.901364][ T6593] [U] [ 60.902193][ T6593] [U] [ 60.903010][ T6593] [U] [ 60.904076][ T6593] [U] [ 60.905221][ T6593] [U] [ 60.906092][ T6593] [U] [ 60.906912][ T6593] [U] [ 60.907733][ T6593] [U] [ 60.908541][ T6593] [U] [ 60.909469][ T6593] [U] [ 60.910352][ T6593] [U] [ 60.911199][ T6593] [U] [ 60.912051][ T6593] [U] [ 60.912873][ T6593] [U] [ 60.913891][ T6593] [U] [ 60.914718][ T6593] [U] [ 60.915693][ T6593] [U] [ 60.916522][ T6593] [U] [ 60.917418][ T6593] [U] [ 60.921074][ T6593] [U] [ 60.921950][ T6593] [U] [ 60.922773][ T6593] [U] [ 60.923756][ T6593] [U] [ 60.924880][ T6593] [U] [ 60.926076][ T6593] [U] [ 60.926935][ T6593] [U] [ 60.927763][ T6593] [U] [ 60.928822][ T6593] [U] [ 60.929918][ T6593] [U] [ 60.930799][ T6593] [U] [ 60.931716][ T6593] [U] [ 60.932682][ T6593] [U] [ 60.933759][ T6593] [U] [ 60.934706][ T6593] [U] [ 60.935573][ T6593] [U] [ 60.936697][ T6593] [U] [ 60.937704][ T6593] [U] [ 60.938549][ T6593] [U] [ 60.939374][ T6593] [U] [ 60.940204][ T6593] [U] [ 60.941048][ T6593] [U] [ 60.941913][ T6593] [U] [ 60.942905][ T6593] [U] [ 60.944163][ T6593] [U] [ 60.945347][ T6593] [U] [ 60.946401][ T6593] [U] [ 60.947217][ T6593] [U] [ 60.948218][ T6593] [U] [ 60.949303][ T6593] [U] [ 60.950422][ T6593] [U] [ 60.951569][ T6593] [U] [ 60.952995][ T6593] [U] [ 60.954111][ T6593] [U] [ 60.954925][ T6593] [U] [ 60.955780][ T6593] [U] [ 60.956590][ T6593] [U] [ 60.957396][ T6593] [U] [ 60.958312][ T6593] [U] [ 60.959232][ T6593] [U] [ 60.960065][ T6593] [U] [ 60.960927][ T6593] [U] [ 60.961746][ T6593] [U] [ 60.962596][ T6593] [U] [ 60.963539][ T6593] [U] [ 60.964713][ T6593] [U] [ 60.965918][ T6593] [U] [ 60.966974][ T6593] [U] [ 60.968692][ T6593] [U] [ 60.969541][ T6593] [U] [ 60.970416][ T6593] [U] [ 60.971237][ T6593] [U] [ 60.972174][ T6593] [U] [ 60.973000][ T6593] [U] [ 60.974204][ T6593] [U] [ 60.982136][ T6599] [U] [ 61.063348][ T6608] io-wq is not configured for unbound workers [ 61.276083][ T6617] Cannot find add_set index 1 as target [ 61.337557][ T6620] netlink: 48 bytes leftover after parsing attributes in process `syz.3.184'. [ 61.377210][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.185'. [ 61.381447][ T6624] netlink: 'syz.3.185': attribute type 1 has an invalid length. [ 61.390219][ T6624] bond1 (unregistering): Released all slaves [ 61.597301][ T39] kauditd_printk_skb: 74 callbacks suppressed [ 61.597311][ T39] audit: type=1400 audit(1738894678.829:390): avc: denied { create } for pid=6628 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.605011][ T39] audit: type=1400 audit(1738894678.829:391): avc: denied { ioctl } for pid=6628 comm="syz.3.187" path="socket:[19885]" dev="sockfs" ino=19885 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.612760][ T39] audit: type=1400 audit(1738894678.829:392): avc: denied { write } for pid=6628 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.752956][ T39] audit: type=1400 audit(1738894678.979:393): avc: denied { map } for pid=6634 comm="syz.3.189" path="time:[4026531834]" dev="nsfs" ino=4026531834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.786210][ T39] audit: type=1400 audit(1738894679.019:394): avc: denied { read } for pid=6638 comm="syz.3.190" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 61.796509][ T39] audit: type=1400 audit(1738894679.019:395): avc: denied { open } for pid=6638 comm="syz.3.190" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 61.806137][ T39] audit: type=1400 audit(1738894679.019:396): avc: denied { ioctl } for pid=6638 comm="syz.3.190" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 61.856867][ T39] audit: type=1400 audit(1738894679.089:397): avc: denied { write } for pid=6643 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 62.000385][ T6651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=6651 comm=syz.3.193 [ 62.058969][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 62.061682][ T6655] netlink: 31 bytes leftover after parsing attributes in process `syz.1.194'. [ 62.065860][ T6655] netlink: 'syz.1.194': attribute type 3 has an invalid length. [ 62.068223][ T6655] netlink: 'syz.1.194': attribute type 2 has an invalid length. [ 62.070645][ T6655] netlink: 31 bytes leftover after parsing attributes in process `syz.1.194'. [ 62.073662][ T6657] 9pnet_fd: p9_fd_create_tcp (6657): problem connecting socket to 127.0.0.1 [ 62.183346][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.194'. [ 62.186835][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.194'. [ 62.192263][ T39] audit: type=1400 audit(1738894679.419:398): avc: denied { execute } for pid=6654 comm="syz.1.194" path="/dev/dsp" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 62.224833][ T39] audit: type=1400 audit(1738894679.459:399): avc: denied { map } for pid=6661 comm="syz.3.196" path="socket:[20894]" dev="sockfs" ino=20894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 62.782450][ T6672] openvswitch: netlink: Key type 5892 is out of range max 32 [ 62.791172][ T6672] IPv6: addrconf: prefix option has invalid lifetime [ 62.943414][ T6678] netlink: 'syz.1.203': attribute type 10 has an invalid length. [ 62.946774][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.950024][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.044847][ T6688] syz_tun: entered allmulticast mode [ 63.065688][ T6691] syz_tun: left allmulticast mode [ 63.194090][ T6701] bridge_slave_0: default FDB implementation only supports local addresses [ 63.242777][ T6703] block device autoloading is deprecated and will be removed. [ 63.285734][ T6705] xt_hashlimit: invalid rate [ 63.900476][ T6743] __nla_validate_parse: 2 callbacks suppressed [ 63.900487][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 64.020932][ T6753] overlayfs: failed to resolve './file1': -2 [ 64.066151][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 64.070248][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 64.074398][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 64.485622][ T6760] program syz.1.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.556651][ T6762] nbd: must specify an index to disconnect [ 64.754856][ T6771] dccp_invalid_packet: P.Data Offset(4) too small [ 65.379476][ T6807] netlink: 'syz.1.239': attribute type 2 has an invalid length. [ 65.381750][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 65.384943][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 65.387557][ T6808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.239'. [ 65.392436][ T6808] geneve2: entered promiscuous mode [ 65.394021][ T6808] geneve2: entered allmulticast mode [ 65.464052][ T6811] overlayfs: statfs failed on './file0' [ 65.724454][ T6826] netlink: 36 bytes leftover after parsing attributes in process `syz.1.243'. [ 65.727690][ T6826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.243'. [ 65.730937][ T6826] netlink: 36 bytes leftover after parsing attributes in process `syz.1.243'. [ 65.745920][ T6826] SELinux: policydb magic number 0x694c208c does not match expected magic number 0xf97cff8c [ 65.749632][ T6826] SELinux: failed to load policy [ 65.752904][ T6826] SELinux: policydb version 599412186 does not match my version range 15-34 [ 65.756159][ T6826] SELinux: failed to load policy [ 65.870959][ T6836] netlink: 'syz.1.247': attribute type 10 has an invalid length. [ 66.037274][ T6857] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 66.123903][ T6865] erspan0: entered promiscuous mode [ 66.126081][ T6865] macvtap1: entered promiscuous mode [ 66.128340][ T6865] macvtap1: entered allmulticast mode [ 66.130557][ T6865] erspan0: entered allmulticast mode [ 66.131623][ T6866] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 66.898671][ T6861] overlayfs: statfs failed on './file0' [ 66.950177][ T39] kauditd_printk_skb: 43 callbacks suppressed [ 66.950188][ T39] audit: type=1400 audit(1738894684.179:443): avc: denied { mount } for pid=6870 comm="syz.1.257" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 66.982553][ T39] audit: type=1400 audit(1738894684.219:444): avc: denied { write } for pid=6872 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.043819][ T6884] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 67.164229][ T39] audit: type=1400 audit(1738894684.399:445): avc: denied { accept } for pid=6893 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 67.173055][ T6894] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 67.208834][ T39] audit: type=1400 audit(1738894684.439:446): avc: denied { bind } for pid=6899 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.217744][ T39] audit: type=1400 audit(1738894684.439:447): avc: denied { name_bind } for pid=6899 comm="syz.1.265" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 67.226191][ T39] audit: type=1400 audit(1738894684.439:448): avc: denied { node_bind } for pid=6899 comm="syz.1.265" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 67.232536][ T39] audit: type=1400 audit(1738894684.449:449): avc: denied { getopt } for pid=6902 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.323088][ T6912] xt_hashlimit: overflow, try lower: 0/0 [ 67.380664][ T6916] netlink: 'syz.1.269': attribute type 1 has an invalid length. [ 67.510857][ T6927] 9pnet_virtio: no channels available for device syz [ 67.529928][ T39] audit: type=1400 audit(1738894684.759:450): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 67.590581][ T39] audit: type=1400 audit(1738894684.819:451): avc: denied { create } for pid=6931 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.599227][ T39] audit: type=1400 audit(1738894684.819:452): avc: denied { bind } for pid=6931 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.687670][ T6942] bridge1: entered allmulticast mode [ 67.798546][ T6946] dvmrp1: entered allmulticast mode [ 67.985429][ T6954] kvm: emulating exchange as write [ 68.186475][ T6967] block device autoloading is deprecated and will be removed. [ 68.284490][ T6971] sp0: Synchronizing with TNC [ 68.308836][ T6974] netlink: 'syz.1.287': attribute type 32 has an invalid length. [ 68.312774][ T6974] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 68.317594][ T6974] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 68.321941][ T6974] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 68.595208][ T6986] futex_wake_op: syz.1.293 tries to shift op by 32; fix this program [ 68.733455][ T6996] IPVS: set_ctl: invalid protocol: 194 255.255.255.255:20002 [ 69.107270][ T6970] [U] [ 69.259207][ T7031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.264221][ T7030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.384447][ T7044] netlink: 'syz.1.308': attribute type 2 has an invalid length. [ 69.392083][ T7044] __nla_validate_parse: 13 callbacks suppressed [ 69.392102][ T7044] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.308'. [ 69.442331][ T5294] Bluetooth: hci3: command tx timeout [ 69.558698][ T7063] 9pnet_fd: Insufficient options for proto=fd [ 69.731062][ T7071] CUSE: zero length info key specified [ 69.737787][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 69.741295][ T7071] netlink: 17 bytes leftover after parsing attributes in process `syz.3.316'. [ 69.791403][ T7081] netlink: 'syz.3.318': attribute type 10 has an invalid length. [ 69.794489][ T7081] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 69.799197][ T7081] team0: Port device netdevsim0 added [ 69.801118][ T7081] netlink: 'syz.3.318': attribute type 10 has an invalid length. [ 69.813217][ T7081] team0: Port device netdevsim0 removed [ 69.816240][ T7081] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 69.831641][ T7083] netlink: 'syz.3.318': attribute type 10 has an invalid length. [ 69.832031][ T7084] netlink: 'syz.3.318': attribute type 10 has an invalid length. [ 69.928447][ T7098] netlink: 172 bytes leftover after parsing attributes in process `syz.3.320'. [ 70.166865][ T7107] batadv_slave_1: entered promiscuous mode [ 70.174251][ T7107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.323'. [ 70.178112][ T7107] netlink: 92 bytes leftover after parsing attributes in process `syz.3.323'. [ 70.441917][ T6013] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 70.594159][ T6013] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.596927][ T6013] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 70.599931][ T6013] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.605907][ T6013] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 70.610734][ T6013] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 70.617584][ T6013] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.621240][ T6013] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.627349][ T6013] usb 8-1: Product: syz [ 70.629107][ T6013] usb 8-1: Manufacturer: syz [ 70.634782][ T6013] cdc_wdm 8-1:1.0: skipping garbage [ 70.636942][ T6013] cdc_wdm 8-1:1.0: skipping garbage [ 70.640383][ T6013] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 70.644590][ T6013] cdc_wdm 8-1:1.0: Unknown control protocol [ 70.837240][ T5987] usb 8-1: USB disconnect, device number 2 [ 71.180756][ T7117] program syz.1.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.272000][ T5987] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.277107][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.279923][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.444487][ T5987] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.447860][ T5987] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 71.452126][ T5987] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.456166][ T5987] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 71.460453][ T5987] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 71.466329][ T5987] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.470007][ T5987] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.473521][ T5987] usb 8-1: Product: syz [ 71.475377][ T5987] usb 8-1: Manufacturer: syz [ 71.482824][ T5987] cdc_wdm 8-1:1.0: skipping garbage [ 71.484989][ T5987] cdc_wdm 8-1:1.0: skipping garbage [ 71.489029][ T5987] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 71.491359][ T5987] cdc_wdm 8-1:1.0: Unknown control protocol [ 71.512106][ T5294] Bluetooth: hci3: command 0x0405 tx timeout [ 72.034980][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 72.034991][ T39] audit: type=1400 audit(1738894689.269:478): avc: denied { execute } for pid=7119 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 72.045178][ T39] audit: type=1400 audit(1738894689.269:479): avc: denied { execute_no_trans } for pid=7119 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 72.160936][ T5294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.166156][ T5294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.169965][ T5294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.174556][ T5294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.178191][ T5294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.180665][ T5294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.191337][ T39] audit: type=1400 audit(1738894689.419:480): avc: denied { mounton } for pid=7123 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.291593][ T7123] chnl_net:caif_netlink_parms(): no params data found [ 72.293870][ T5987] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 72.338149][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.340857][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.343512][ T7123] bridge_slave_0: entered allmulticast mode [ 72.345734][ T7123] bridge_slave_0: entered promiscuous mode [ 72.348357][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.350447][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.352734][ T7123] bridge_slave_1: entered allmulticast mode [ 72.355111][ T7123] bridge_slave_1: entered promiscuous mode [ 72.376825][ T7123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.380923][ T7123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.406658][ T7123] team0: Port device team_slave_0 added [ 72.409643][ T7123] team0: Port device team_slave_1 added [ 72.429092][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.431279][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.438915][ T7123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.452253][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.454411][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.462243][ T7123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.463491][ T5987] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 72.471971][ T5987] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 72.480349][ T5987] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.486065][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.501324][ T1231] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.522154][ T7123] hsr_slave_0: entered promiscuous mode [ 72.524637][ T7123] hsr_slave_1: entered promiscuous mode [ 72.526738][ T7123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.530004][ T7123] Cannot create hsr debugfs directory [ 72.573383][ T1231] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.659376][ T1231] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.671187][ T7123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.676914][ T7123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.682755][ T7123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.688349][ T7123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.692811][ T7132] : renamed from bridge_slave_1 (while UP) [ 72.694845][ T39] audit: type=1400 audit(1738894689.929:481): avc: denied { ioctl } for pid=7131 comm="syz.0.329" path="socket:[34708]" dev="sockfs" ino=34708 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.715431][ T1231] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.729125][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.731784][ T7123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.734012][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.736154][ T7123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.767328][ T7123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.780411][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.784617][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.801929][ T7123] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.824662][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.827061][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.829731][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.832413][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.842007][ T7134] block nbd1: Device being setup by another task [ 72.844420][ T7140] block nbd1: NBD_DISCONNECT [ 72.846727][ T7140] block nbd1: Disconnected due to user request. [ 72.849368][ T7140] block nbd1: shutting down sockets [ 72.864239][ T7123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.867574][ T7123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.875129][ T39] audit: type=1400 audit(1738894690.109:482): avc: denied { listen } for pid=7142 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.880834][ T39] audit: type=1400 audit(1738894690.109:483): avc: denied { map } for pid=7142 comm="syz.0.332" path="/proc/178/net/pfkey" dev="proc" ino=4026533131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 72.894641][ T1231] bridge_slave_1: left allmulticast mode [ 72.897404][ T1231] bridge_slave_1: left promiscuous mode [ 72.900518][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.905917][ T1231] bridge_slave_0: left allmulticast mode [ 72.908253][ T1231] bridge_slave_0: left promiscuous mode [ 72.910768][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.916689][ T6202] usb 6-1: USB disconnect, device number 4 [ 72.937000][ T7149] netlink: 'syz.0.335': attribute type 32 has an invalid length. [ 72.947129][ T39] audit: type=1400 audit(1738894690.179:484): avc: denied { setopt } for pid=7151 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.027933][ T7162] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 73.033479][ T7162] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 73.045835][ T7162] vhci_hcd vhci_hcd.0: Device attached [ 73.115310][ T1231] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 73.211947][ T835] vhci_hcd: vhci_device speed not set [ 73.271944][ T835] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 73.284884][ T7173] netlink: 2 bytes leftover after parsing attributes in process `syz.1.337'. [ 73.289555][ T1231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.294337][ T1231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.298280][ T1231] bond0 (unregistering): Released all slaves [ 73.303337][ T1231] bond1 (unregistering): Released all slaves [ 73.329967][ T7149] veth3: entered promiscuous mode [ 73.347281][ T7150] veth5: entered promiscuous mode [ 73.388369][ T7123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.444549][ T6013] usb 8-1: USB disconnect, device number 3 [ 73.484542][ T7193] Option ''MO' to dns_resolver key: bad/missing value [ 73.491307][ T39] audit: type=1400 audit(1738894690.719:485): avc: denied { write } for pid=7181 comm="syz.0.339" name="vlan0" dev="proc" ino=4026533702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.522804][ T7168] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 73.546146][ T39] audit: type=1400 audit(1738894690.779:486): avc: denied { checkpoint_restore } for pid=7181 comm="syz.0.339" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.556726][ T7106] batadv_slave_1: left promiscuous mode [ 73.569250][ T7123] veth0_vlan: entered promiscuous mode [ 73.574520][ T7123] veth1_vlan: entered promiscuous mode [ 73.587142][ T7123] veth0_macvtap: entered promiscuous mode [ 73.587652][ T39] audit: type=1400 audit(1738894690.819:487): avc: denied { mount } for pid=7196 comm="syz.3.340" name="/" dev="configfs" ino=2259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.591304][ T7123] veth1_macvtap: entered promiscuous mode [ 73.605368][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.608443][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.611467][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.615508][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.618593][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.621623][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.624461][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.627456][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.631088][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.635099][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.638888][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.641665][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.645938][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.649312][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.652719][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.655578][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.658613][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.662216][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.667349][ T7123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.669907][ T7123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.672662][ T7123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.673744][ T7168] usb 6-1: config 0 has no interfaces? [ 73.675401][ T7123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.677867][ T7168] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 73.691975][ T7168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.708596][ T7168] usb 6-1: config 0 descriptor?? [ 73.718050][ T1231] hsr_slave_0: left promiscuous mode [ 73.731947][ T1231] hsr_slave_1: left promiscuous mode [ 73.735994][ T1231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.738954][ T1231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.747087][ T1231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.749246][ T1231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.778142][ T1231] veth1_macvtap: left promiscuous mode [ 73.780108][ T1231] veth0_macvtap: left promiscuous mode [ 73.782210][ T1231] veth1_vlan: left promiscuous mode [ 73.783896][ T1231] veth0_vlan: left promiscuous mode [ 73.922110][ T7163] usb 39-1: recv xbuf, 0 [ 73.922914][ T6202] usb 6-1: USB disconnect, device number 5 [ 73.926998][ T12] vhci_hcd: stop threads [ 73.934113][ T12] vhci_hcd: release socket [ 73.936512][ T12] vhci_hcd: disconnect device [ 73.992215][ T835] vhci_hcd: vhci_device speed not set [ 74.232307][ T5294] Bluetooth: hci4: command tx timeout [ 74.435725][ T1231] team0 (unregistering): Port device team_slave_1 removed [ 74.531422][ T1231] team0 (unregistering): Port device team_slave_0 removed [ 75.163646][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.166737][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.175764][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.178479][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.192354][ T7213] netlink: 44 bytes leftover after parsing attributes in process `syz.3.343'. [ 75.372433][ T7243] netlink: 'syz.4.347': attribute type 9 has an invalid length. [ 75.375299][ T7243] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.347'. [ 75.439190][ T7247] syz.0.349: attempt to access beyond end of device [ 75.439190][ T7247] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 75.446152][ T7247] qnx6: unable to read the first superblock [ 75.448648][ T7247] syz.0.349: attempt to access beyond end of device [ 75.448648][ T7247] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 75.453613][ T7247] qnx6: unable to read the first superblock [ 75.455609][ T7247] qnx6: unable to read the first superblock [ 76.132074][ T5951] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.290274][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.358'. [ 76.302564][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 76.310117][ T5951] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.311997][ T5294] Bluetooth: hci4: command tx timeout [ 76.314478][ T5951] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 76.320205][ T5951] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 76.331901][ T5951] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 76.336998][ T5951] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 76.341140][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.348194][ T5951] hub 5-1:1.0: bad descriptor, ignoring hub [ 76.351220][ T5951] hub 5-1:1.0: probe with driver hub failed with error -5 [ 76.356190][ T5951] cdc_wdm 5-1:1.0: skipping garbage [ 76.358603][ T5951] cdc_wdm 5-1:1.0: skipping garbage [ 76.364775][ T5951] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 76.367449][ T5951] cdc_wdm 5-1:1.0: Unknown control protocol [ 76.503753][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.508469][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.564558][ T7328] xt_cgroup: invalid path, errno=-2 [ 76.569088][ T7328] tipc: Started in network mode [ 76.571073][ T7328] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 76.576280][ T7328] tipc: Enabled bearer , priority 10 [ 76.626377][ T7337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.365'. [ 76.634443][ T7168] usb 5-1: USB disconnect, device number 4 [ 76.638755][ T7294] cdc_wdm 5-1:1.0: Error autopm - -16 [ 76.902015][ T7359] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 77.076138][ T7376] program syz.1.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.131335][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 77.131346][ T39] audit: type=1400 audit(1738894694.359:501): avc: denied { create } for pid=7380 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.136038][ T7382] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 77.138764][ T39] audit: type=1400 audit(1738894694.369:502): avc: denied { setopt } for pid=7380 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.141480][ T7382] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 77.149876][ T7382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 77.153774][ T7168] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.154193][ T39] audit: type=1400 audit(1738894694.369:503): avc: denied { bind } for pid=7380 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.166088][ T39] audit: type=1400 audit(1738894694.369:504): avc: denied { write } for pid=7380 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.205271][ T7389] netlink: 172 bytes leftover after parsing attributes in process `syz.1.381'. [ 77.254016][ T7392] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 77.256699][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 77.312483][ T7168] usb 5-1: device descriptor read/64, error -71 [ 77.573372][ T58] tipc: Node number set to 4269801488 [ 77.573773][ T7168] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.711907][ T7168] usb 5-1: device descriptor read/64, error -71 [ 77.727159][ T7417] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.730392][ T7417] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 77.822206][ T7168] usb usb5-port1: attempt power cycle [ 77.921007][ T7427] netlink: 'syz.1.391': attribute type 8 has an invalid length. [ 77.957174][ T7431] mkiss: ax0: crc mode is auto. [ 78.080592][ T39] audit: type=1400 audit(1738894695.309:505): avc: denied { read } for pid=7444 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.174124][ T7168] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 78.202811][ T7168] usb 5-1: device descriptor read/8, error -71 [ 78.378621][ T7472] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 78.392099][ T5294] Bluetooth: hci4: command tx timeout [ 78.452253][ T7168] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 78.472674][ T7168] usb 5-1: device descriptor read/8, error -71 [ 78.582183][ T7168] usb usb5-port1: unable to enumerate USB device [ 78.651975][ T6013] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 78.781969][ T6013] usb 9-1: device descriptor read/64, error -71 [ 78.951237][ T7482] netlink: 'syz.0.406': attribute type 21 has an invalid length. [ 78.956393][ T7482] netlink: 128 bytes leftover after parsing attributes in process `syz.0.406'. [ 78.960417][ T7482] netlink: 'syz.0.406': attribute type 4 has an invalid length. [ 78.964570][ T7482] netlink: 'syz.0.406': attribute type 5 has an invalid length. [ 78.967825][ T7482] netlink: 3 bytes leftover after parsing attributes in process `syz.0.406'. [ 79.022007][ T6013] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 79.072411][ T39] audit: type=1400 audit(1738894696.309:506): avc: denied { read } for pid=7483 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.153900][ T6013] usb 9-1: device descriptor read/64, error -71 [ 79.222677][ T39] audit: type=1400 audit(1738894696.459:507): avc: denied { map } for pid=7488 comm="syz.0.408" path="socket:[38382]" dev="sockfs" ino=38382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.262087][ T6013] usb usb9-port1: attempt power cycle [ 79.290579][ T39] audit: type=1400 audit(1738894696.519:508): avc: denied { listen } for pid=7494 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.298009][ T39] audit: type=1400 audit(1738894696.519:509): avc: denied { accept } for pid=7494 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.523311][ T7501] trusted_key: syz.1.412 sent an empty control message without MSG_MORE. [ 79.611989][ T6013] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 79.622177][ T1941] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 79.632445][ T6013] usb 9-1: device descriptor read/8, error -71 [ 79.783184][ T1941] usb 5-1: config 0 has no interfaces? [ 79.785103][ T1941] usb 5-1: New USB device found, idVendor=10ca, idProduct=0000, bcdDevice= 0.00 [ 79.788358][ T1941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.794440][ T1941] usb 5-1: config 0 descriptor?? [ 79.891971][ T6013] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 79.913903][ T6013] usb 9-1: device descriptor read/8, error -71 [ 80.002631][ T39] audit: type=1400 audit(1738894697.239:510): avc: denied { mount } for pid=7492 comm="syz.0.410" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.016327][ T7168] usb 5-1: USB disconnect, device number 9 [ 80.022466][ T6013] usb usb9-port1: unable to enumerate USB device [ 80.440720][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 80.447552][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 80.472070][ T5294] Bluetooth: hci4: command tx timeout [ 80.568919][ T7520] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.603611][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 80.739319][ T7530] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 80.754329][ T7530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.420'. [ 81.566570][ T833] cfg80211: failed to load regulatory.db [ 81.762283][ T7526] O3c: renamed from bridge_slave_0 (while UP) [ 81.829679][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 81.850250][ T7543] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 81.853319][ T104] Bluetooth: Error in BCSP hdr checksum [ 81.856376][ T7543] netlink: 'syz.3.423': attribute type 2 has an invalid length. [ 81.894775][ T7549] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.897665][ T7549] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.919389][ T7553] xt_hashlimit: overflow, try lower: 0/0 [ 82.039932][ T7566] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 82.175588][ T7576] netlink: 696 bytes leftover after parsing attributes in process `syz.0.435'. [ 82.209829][ T7580] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 82.213961][ T7581] netlink: 512 bytes leftover after parsing attributes in process `syz.4.436'. [ 82.215254][ T7580] netlink: 'syz.0.437': attribute type 10 has an invalid length. [ 82.219805][ T7580] bridge0: port 2() entered disabled state [ 82.221962][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.227881][ T7580] bridge0: port 2() entered blocking state [ 82.230369][ T7580] bridge0: port 2() entered forwarding state [ 82.233325][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.235790][ T7580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.237612][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 82.237626][ T39] audit: type=1400 audit(1738894699.459:521): avc: denied { lock } for pid=7578 comm="syz.4.436" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.241646][ T7580] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 82.314445][ T1139] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 82.357840][ T7591] fuse: Bad value for 'group_id' [ 82.359368][ T7591] fuse: Bad value for 'group_id' [ 82.359559][ T39] audit: type=1400 audit(1738894699.589:522): avc: denied { read write } for pid=7592 comm="syz.0.441" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.371998][ T39] audit: type=1400 audit(1738894699.589:523): avc: denied { open } for pid=7592 comm="syz.0.441" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.446001][ T39] audit: type=1400 audit(1738894699.679:524): avc: denied { execute } for pid=7602 comm="syz.4.445" path="/selinux/checkreqprot" dev="selinuxfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 82.471654][ T7609] sg_write: data in/out 524252/14 bytes for SCSI command 0x8-- guessing data in; [ 82.471654][ T7609] program syz.0.446 not setting count and/or reply_len properly [ 82.511613][ T39] audit: type=1400 audit(1738894699.739:525): avc: denied { module_request } for pid=7610 comm="syz.4.447" kmod="net-sch-atm" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 82.539863][ T39] audit: type=1400 audit(1738894699.769:526): avc: denied { read } for pid=7610 comm="syz.4.447" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.716608][ T7620] fuse: Unknown parameter 'ff' [ 83.220168][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 83.251169][ T7625] erspan0: default FDB implementation only supports local addresses [ 83.332773][ T7611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.334247][ T7611] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.345528][ T7611] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.350275][ T7611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.350304][ T7611] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.352766][ T7611] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.361303][ T7611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.361327][ T7611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.365113][ T7611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.366786][ T7611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.378538][ T7611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 83.378571][ T7611] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.384786][ T7611] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.512989][ T39] audit: type=1326 audit(1738894700.749:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7635 comm="syz.4.455" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f247318cde9 code=0x0 [ 83.552351][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.459'. [ 83.592122][ T39] audit: type=1400 audit(1738894700.829:528): avc: denied { listen } for pid=7650 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.603031][ T39] audit: type=1400 audit(1738894700.839:529): avc: denied { accept } for pid=7650 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.619414][ T39] audit: type=1400 audit(1738894700.849:530): avc: denied { create } for pid=7659 comm="syz.0.461" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.675107][ T5961] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 83.738476][ T7668] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.464'. [ 83.743756][ T7668] syz_tun: entered allmulticast mode [ 83.912020][ T5961] Bluetooth: hci2: command 0x1003 tx timeout [ 83.912323][ T5294] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 84.037628][ T7695] binfmt_misc: register: failed to install interpreter file ./file0 [ 84.040128][ T7695] binfmt_misc: register: failed to install interpreter file ./file0 [ 84.043809][ T7695] binfmt_misc: register: failed to install interpreter file ./file0 [ 84.046401][ T7695] binfmt_misc: register: failed to install interpreter file ./file0 [ 84.049352][ T7695] binfmt_misc: register: failed to install interpreter file ./file0 [ 84.052472][ T7695] binfmt_misc: register: failed to install interpreter file ./file0 [ 84.055522][ T7695] binfmt_misc: register: failed to install interpreter file ./file0 [ 84.199139][ T7705] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.286420][ T7705] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.385784][ T7705] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.471573][ T5294] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 84.472420][ T7713] 9pnet_fd: Insufficient options for proto=fd [ 84.505585][ T7705] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.588503][ T7705] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.595908][ T7705] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.601159][ T7705] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.607459][ T7705] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.632083][ T5294] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.734841][ T7730] mkiss: ax0: crc mode is auto. [ 84.782669][ T7732] tipc: Started in network mode [ 84.784910][ T7732] tipc: Node identity ac1414aa, cluster identity 4711 [ 84.788038][ T7732] tipc: New replicast peer: 100.1.1.1 [ 84.792986][ T7732] tipc: Enabled bearer , priority 10 [ 84.818414][ T7734] syz.1.482: attempt to access beyond end of device [ 84.818414][ T7734] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 84.825462][ T7734] befs: (nbd1): unable to read superblock [ 84.857203][ T7739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.991159][ T7746] random: crng reseeded on system resumption [ 84.996067][ T7749] netlink: 'syz.1.489': attribute type 21 has an invalid length. [ 84.998535][ T7749] netlink: 'syz.1.489': attribute type 5 has an invalid length. [ 85.012003][ T6202] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 85.158083][ T7746] netlink: 'syz.4.488': attribute type 11 has an invalid length. [ 85.162907][ T7752] nbd1: detected capacity change from 0 to 67108884 [ 85.167823][ T5946] block nbd1: Send control failed (result -89) [ 85.170204][ T6202] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.173526][ T5946] block nbd1: Request send failed, requeueing [ 85.175584][ T5294] block nbd1: Receive control failed (result -32) [ 85.176400][ T6202] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.176427][ T6202] usb 8-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 85.187202][ T1202] block nbd1: Dead connection, failed to find a fallback [ 85.190422][ T1202] block nbd1: shutting down sockets [ 85.190450][ T1202] blk_print_req_error: 130 callbacks suppressed [ 85.190459][ T1202] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.190590][ T1202] buffer_io_error: 90 callbacks suppressed [ 85.190599][ T1202] Buffer I/O error on dev nbd1, logical block 0, async page read [ 85.190764][ T6202] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.190799][ T5946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.191093][ T5946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 85.191152][ T5946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.191164][ T5946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 85.191204][ T5946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.191216][ T5946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 85.191254][ T5946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.191266][ T5946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 85.191310][ T5946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.191321][ T5946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 85.191365][ T5946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.191377][ T5946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 85.191416][ T5946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.191427][ T5946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 85.191448][ T5946] ldm_validate_partition_table(): Disk read failed. [ 85.191473][ T5946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.191483][ T5946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 85.193569][ T5946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.193587][ T5946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 85.193770][ T5946] Dev nbd1: unable to read RDB block 0 [ 85.194121][ T5946] nbd1: unable to read partition table [ 85.197341][ T6202] usb 8-1: config 0 descriptor?? [ 85.202764][ T7754] SELinux: truncated policydb string identifier [ 85.208138][ T7752] ldm_validate_partition_table(): Disk read failed. [ 85.208671][ T7754] SELinux: failed to load policy [ 85.215175][ T7752] Dev nbd1: unable to read RDB block 0 [ 85.220685][ T7754] SELinux: failed to load policy [ 85.222579][ T7752] nbd1: unable to read partition table [ 85.282921][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 85.286018][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554441, location=33554441 [ 85.289752][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554185, location=33554185 [ 85.294851][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554440, location=33554440 [ 85.298309][ T5946] ldm_validate_partition_table(): Disk read failed. [ 85.298366][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554184, location=33554184 [ 85.304786][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554439, location=33554439 [ 85.308329][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554183, location=33554183 [ 85.312100][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554291, location=33554291 [ 85.312280][ T5946] Dev nbd1: unable to read RDB block 0 [ 85.315662][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554035, location=33554035 [ 85.320379][ T5946] nbd1: unable to read partition table [ 85.321090][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554289, location=33554289 [ 85.326787][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554033, location=33554033 [ 85.330033][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 85.334037][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 85.337401][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220 [ 85.340615][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964 [ 85.344201][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219 [ 85.347414][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963 [ 85.350738][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218 [ 85.355705][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962 [ 85.360654][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070 [ 85.364172][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814 [ 85.367323][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068 [ 85.370592][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812 [ 85.374175][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 85.377669][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 85.380776][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609 [ 85.384288][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353 [ 85.388383][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608 [ 85.393295][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352 [ 85.397937][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607 [ 85.401265][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351 [ 85.404453][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459 [ 85.408160][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203 [ 85.412018][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457 [ 85.415506][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201 [ 85.418875][ T7752] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 85.421627][ T7752] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 85.431960][ T5294] Bluetooth: hci4: command 0x0c1a tx timeout [ 85.436356][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.439812][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.506282][ T7764] __nla_validate_parse: 8 callbacks suppressed [ 85.506300][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 85.514606][ T7764] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.559010][ T7765] cgroup: Need name or subsystem set [ 85.577105][ T7764] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.636430][ T7764] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.645421][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.648180][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.724416][ T7764] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.824677][ T6202] usbhid 8-1:0.0: can't add hid device: -71 [ 85.826665][ T6202] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 85.830152][ T6202] usb 8-1: USB disconnect, device number 4 [ 85.912992][ T5951] tipc: Node number set to 2886997162 [ 86.201428][ T5294] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 86.240795][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 86.245342][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 86.265973][ T7774] ceph: No mds server is up or the cluster is laggy [ 86.295996][ T5294] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 86.358034][ T5294] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 86.612002][ T5988] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 86.643797][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 86.643884][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 86.646509][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.509'. [ 86.663580][ T7822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.509'. [ 86.722715][ T5294] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.781023][ T7864] netlink: 'syz.4.512': attribute type 6 has an invalid length. [ 86.792165][ T5988] usb 8-1: Invalid ep0 maxpacket: 16 [ 86.819627][ T7869] netlink: 'syz.4.513': attribute type 8 has an invalid length. [ 86.822110][ T7869] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.513'. [ 86.942060][ T5988] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 87.102792][ T5988] usb 8-1: Invalid ep0 maxpacket: 16 [ 87.104813][ T5988] usb usb8-port1: attempt power cycle [ 87.461977][ T5988] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 87.492549][ T5988] usb 8-1: Invalid ep0 maxpacket: 16 [ 87.523563][ T5294] Bluetooth: hci4: command 0x0c1a tx timeout [ 87.631956][ T5988] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 87.653144][ T5988] usb 8-1: Invalid ep0 maxpacket: 16 [ 87.655149][ T5988] usb usb8-port1: unable to enumerate USB device [ 87.898965][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 87.898980][ T39] audit: type=1400 audit(1738894706.128:550): avc: denied { ioctl } for pid=7903 comm="syz.1.517" path="socket:[41647]" dev="sockfs" ino=41647 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.227516][ T39] audit: type=1400 audit(1738894706.458:551): avc: denied { nlmsg_write } for pid=7917 comm="syz.4.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 88.408212][ T7764] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.417786][ T7764] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.426816][ T7764] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.438286][ T7764] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.792025][ T5961] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.823715][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.525'. [ 88.826492][ T7942] netem: invalid attributes len -9 [ 88.828003][ T7942] netem: change failed [ 88.894002][ T39] audit: type=1400 audit(1738894707.128:552): avc: denied { setopt } for pid=7954 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.904205][ T39] audit: type=1400 audit(1738894707.138:553): avc: denied { getopt } for pid=7954 comm="syz.0.529" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.941875][ T39] audit: type=1400 audit(1738894707.168:554): avc: denied { ioctl } for pid=7956 comm="syz.1.530" path="socket:[41693]" dev="sockfs" ino=41693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.095815][ T39] audit: type=1400 audit(1738894707.328:555): avc: denied { map } for pid=7966 comm="syz.0.533" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.154988][ T39] audit: type=1400 audit(1738894707.388:556): avc: denied { write } for pid=7971 comm="syz.1.535" name="net" dev="proc" ino=40892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 89.164600][ T39] audit: type=1400 audit(1738894707.388:557): avc: denied { add_name } for pid=7971 comm="syz.1.535" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 89.171568][ T39] audit: type=1400 audit(1738894707.388:558): avc: denied { create } for pid=7971 comm="syz.1.535" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 89.178601][ T39] audit: type=1400 audit(1738894707.388:559): avc: denied { associate } for pid=7971 comm="syz.1.535" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 89.312618][ T7990] netlink: 52 bytes leftover after parsing attributes in process `syz.0.541'. [ 89.318225][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 89.357448][ T7990] netlink: 108 bytes leftover after parsing attributes in process `syz.0.541'. [ 89.424090][ T8003] can0: slcan on ttyS3. [ 89.494111][ T8003] can0 (unregistered): slcan off ttyS3. [ 89.499201][ T8018] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 89.501190][ T8018] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.506171][ T8018] vhci_hcd vhci_hcd.0: Device attached [ 89.510358][ T8020] vhci_hcd: unknown pdu 1 [ 89.518348][ T59] vhci_hcd: stop threads [ 89.519643][ T59] vhci_hcd: release socket [ 89.520972][ T59] vhci_hcd: disconnect device [ 89.545063][ T5961] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 89.591983][ T5961] Bluetooth: hci4: command 0x0c1a tx timeout [ 89.681657][ T8037] trusted_key: encrypted_key: insufficient parameters specified [ 89.696655][ T8038] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 89.699829][ T8038] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 89.702370][ T8038] vhci_hcd vhci_hcd.0: Device attached [ 89.705098][ T8032] vhci_hcd vhci_hcd.0: port 0 already used [ 89.708330][ T8039] vhci_hcd: connection closed [ 89.711483][ T59] vhci_hcd: stop threads [ 89.715856][ T59] vhci_hcd: release socket [ 89.717816][ T59] vhci_hcd: disconnect device [ 89.839247][ T8050] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 89.839247][ T8050] program syz.1.558 not setting count and/or reply_len properly [ 89.926766][ T8060] ERROR: device name not specified. [ 90.044961][ T8066] tipc: Enabling of bearer rejected, failed to enable media [ 90.066792][ T8068] o2cb: This node has not been configured. [ 90.069011][ T8068] o2cb: Cluster check failed. Fix errors before retrying. [ 90.071177][ T8068] (syz.4.563,8068,1):user_dlm_register:674 ERROR: status = -22 [ 90.074070][ T8068] (syz.4.563,8068,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 90.090328][ T8070] netlink: 'syz.1.565': attribute type 11 has an invalid length. [ 90.274849][ T8082] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.340106][ T5294] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 90.359163][ T8097] pim6reg1: entered promiscuous mode [ 90.361499][ T8097] pim6reg1: entered allmulticast mode [ 90.625954][ T8124] tmpfs: Unknown parameter 'mp' [ 90.625954][ T8125] tmpfs: Unknown parameter 'mp' [ 90.627897][ T8126] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 90.632327][ T8117] Cannot find del_set index 128 as target [ 90.676100][ T8129] __nla_validate_parse: 3 callbacks suppressed [ 90.676111][ T8129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.582'. [ 90.710539][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 90.717120][ T1231] bond0: (slave bond_slave_0): interface is now down [ 90.719366][ T1231] bond0: (slave bond_slave_1): interface is now down [ 90.721359][ T1231] bond0: (slave netdevsim0): interface is now down [ 90.726690][ T1231] bond0: now running without any active interface! [ 90.906182][ T8156] IPv6: sit1: Disabled Multicast RS [ 90.916709][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 90.964514][ T8158] mmap: syz.0.592 (8158) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.019879][ T8156] hsr_slave_1 (unregistering): left promiscuous mode [ 91.055209][ T8163] netlink: 47 bytes leftover after parsing attributes in process `syz.0.594'. [ 91.062174][ T8163] overlayfs: conflicting options: userxattr,metacopy=on [ 91.062193][ T8164] overlayfs: conflicting options: userxattr,metacopy=on [ 91.137411][ T8172] hpfs: Bad magic ... probably not HPFS [ 91.199674][ T8175] netlink: 'syz.3.598': attribute type 10 has an invalid length. [ 91.203257][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.205804][ T8175] bridge_slave_1: left allmulticast mode [ 91.207561][ T8175] bridge_slave_1: left promiscuous mode [ 91.209536][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.215524][ T8175] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 91.232946][ T12] bond0: (slave bridge_slave_1): interface is now down [ 91.235945][ T12] bond0: now running without any active interface! [ 91.256093][ T8177] netlink: 76 bytes leftover after parsing attributes in process `syz.3.599'. [ 91.258852][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 91.261430][ T8177] netlink: 40 bytes leftover after parsing attributes in process `syz.3.599'. [ 91.325327][ T8182] autofs4:pid:8182:validate_dev_ioctl: path string terminator missing for cmd(0xc018937d) [ 91.329980][ T8182] xt_hashlimit: size too large, truncated to 1048576 [ 91.384903][ T8185] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 91.406527][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'. [ 91.411719][ T8182] bond2: entered promiscuous mode [ 91.414833][ T8182] bond2: entered allmulticast mode [ 91.416667][ T8182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.423987][ T8182] ip6gretap1: entered promiscuous mode [ 91.425741][ T8182] ip6gretap1: entered allmulticast mode [ 91.427600][ T8182] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 91.513316][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 91.578369][ T8199] netlink: 48 bytes leftover after parsing attributes in process `syz.4.604'. [ 91.622707][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 91.658393][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.664444][ T8203] bond0: (slave rose0): Enslaving as an active interface with an up link [ 91.671263][ T8203] Bluetooth: MGMT ver 1.23 [ 91.681948][ T5294] Bluetooth: hci4: command 0x0c1a tx timeout [ 91.694332][ T8206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8206 comm=syz.3.607 [ 91.812487][ T5294] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 91.814430][ T8221] loop6: detected capacity change from 0 to 524287999 [ 91.823219][ C1] blk_print_req_error: 130 callbacks suppressed [ 91.823236][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.828340][ C1] buffer_io_error: 90 callbacks suppressed [ 91.828353][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.833155][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.836002][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.839488][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.842974][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.847089][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.851284][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.855113][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.858866][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.864495][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.867322][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.870218][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.873156][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.914869][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.918676][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.921805][ T8221] ldm_validate_partition_table(): Disk read failed. [ 91.924529][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.927999][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.931585][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.935268][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.938120][ T8221] Dev loop6: unable to read RDB block 0 [ 91.940468][ T8221] loop6: unable to read partition table [ 91.942593][ T8221] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 91.947413][ T8225] ldm_validate_partition_table(): Disk read failed. [ 91.950675][ T8225] Dev loop6: unable to read RDB block 0 [ 91.954985][ T8225] loop6: unable to read partition table [ 91.957357][ T8225] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 91.964981][ T5355] ldm_validate_partition_table(): Disk read failed. [ 91.967878][ T5355] Dev loop6: unable to read RDB block 0 [ 91.971350][ T5355] loop6: unable to read partition table [ 91.981955][ T5988] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 92.008713][ T8235] dlm: no locking on control device [ 92.101176][ T8249] netlink: 'syz.4.615': attribute type 1 has an invalid length. [ 92.118807][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 92.126555][ T8249] bond1: entered promiscuous mode [ 92.128541][ T8249] bond1: entered allmulticast mode [ 92.131052][ T8249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.138636][ T5988] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 92.140591][ T8249] ip6gretap1: entered promiscuous mode [ 92.141391][ T5988] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.144452][ T8249] ip6gretap1: entered allmulticast mode [ 92.147649][ T8249] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 92.151935][ T5988] usb 8-1: Product: syz [ 92.153684][ T5988] usb 8-1: Manufacturer: syz [ 92.155645][ T5988] usb 8-1: SerialNumber: syz [ 92.161362][ T5988] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 92.196268][ T8259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8259 comm=syz.0.617 [ 92.200359][ T8259] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 92.206014][ T58] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 92.220893][ T8259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.232145][ T1140] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 92.235205][ T8259] bond1: (slave ip6gretap1): making interface the new active one [ 92.239449][ T8259] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 92.283656][ T8264] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 92.342777][ T1139] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 92.609061][ T6013] usb 8-1: USB disconnect, device number 9 [ 92.739432][ T8298] cgroup: Unknown subsys name 'cpuset' [ 92.845117][ T8305] QAT: failed to copy from user. [ 92.931170][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 92.931181][ T39] audit: type=1400 audit(1738894711.158:582): avc: denied { create } for pid=8311 comm="syz.4.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 93.182792][ T835] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 93.272268][ T58] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 93.276112][ T58] ath9k_htc: Failed to initialize the device [ 93.279288][ T6013] usb 8-1: ath9k_htc: USB layer deinitialized [ 93.332368][ T835] usb 9-1: Using ep0 maxpacket: 8 [ 93.335122][ T835] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.338279][ T835] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.341095][ T835] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.344106][ T835] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.347873][ T835] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.351066][ T835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.482421][ T8291] 9pnet_fd: p9_fd_create_tcp (8291): problem connecting socket to 127.0.0.1 [ 93.532914][ T39] audit: type=1400 audit(1738894711.768:583): avc: denied { ioctl } for pid=8328 comm="syz.1.642" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.558888][ T835] usb 9-1: usb_control_msg returned -32 [ 93.560781][ T835] usbtmc 9-1:16.0: can't read capabilities [ 93.721112][ T8340] syz.1.645: attempt to access beyond end of device [ 93.721112][ T8340] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 93.727936][ T8340] XFS (nbd1): SB validate failed with error -5. [ 93.916567][ T8359] usbtmc 9-1:16.0: usbtmc_ioctl_request failed -32 [ 93.920985][ T39] audit: type=1400 audit(1738894712.148:584): avc: denied { setopt } for pid=8311 comm="syz.4.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 93.927149][ T8312] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8312 comm=syz.4.637 [ 93.930954][ T39] audit: type=1400 audit(1738894712.158:585): avc: denied { write } for pid=8311 comm="syz.4.637" path="socket:[45438]" dev="sockfs" ino=45438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 93.931561][ T835] usb 9-1: USB disconnect, device number 7 [ 93.938589][ T39] audit: type=1400 audit(1738894712.158:586): avc: denied { read } for pid=8311 comm="syz.4.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 94.079466][ T8365] __vm_enough_memory: pid: 8365, comm: syz.0.651, bytes: 21199644663808 not enough memory for the allocation [ 94.092301][ T5951] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 94.263965][ T5951] usb 6-1: unable to get BOS descriptor or descriptor too short [ 94.272063][ T5951] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 94.275303][ T5951] usb 6-1: can't read configurations, error -71 [ 94.507794][ T39] audit: type=1400 audit(1738894712.738:587): avc: denied { watch } for pid=8370 comm="syz.4.653" path="pipe:[42926]" dev="pipefs" ino=42926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 94.512956][ T8371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.517677][ T39] audit: type=1400 audit(1738894712.738:588): avc: denied { relabelfrom } for pid=8370 comm="syz.4.653" name="" dev="pipefs" ino=45481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 94.646502][ T8371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.802057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.870718][ T8377] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.872304][ T39] audit: type=1400 audit(1738894713.098:589): avc: denied { nlmsg_read } for pid=8376 comm="syz.4.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 94.882138][ T8377] trusted_key: encrypted_key: insufficient parameters specified [ 94.934744][ T8380] Cannot find add_set index 0 as target [ 94.977314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.977756][ T39] audit: type=1326 audit(1738894713.208:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.4.659" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f247318cde9 code=0x0 [ 94.992284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.027167][ T8388] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 95.030507][ T39] audit: type=1400 audit(1738894713.258:591): avc: denied { create } for pid=8387 comm="syz.0.660" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 95.033603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.045668][ T8388] netlink: 'syz.0.660': attribute type 13 has an invalid length. [ 95.048885][ T8388] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 95.096458][ T8388] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 95.103520][ T8388] gretap1: entered promiscuous mode [ 95.105685][ T8388] gretap1: entered allmulticast mode [ 95.301993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.360616][ T5294] Bluetooth: hci3: unexpected event for opcode 0x202a [ 95.372835][ T8409] netlink: 'syz.0.666': attribute type 7 has an invalid length. [ 95.382136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.390033][ T8410] IPVS: length: 4096 != 24 [ 95.393600][ T8412] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 95.401971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.416300][ T8412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.442508][ T8417] : entered promiscuous mode [ 95.519809][ T8420] bond2: (slave gretap1): making interface the new active one [ 95.525502][ T8420] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 95.742060][ T35] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 95.892024][ T35] usb 5-1: device descriptor read/64, error -71 [ 95.995482][ T8435] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 95.998154][ T8435] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 96.000630][ T8435] vhci_hcd vhci_hcd.0: Device attached [ 96.006781][ T8435] vhci_hcd vhci_hcd.0: port 0 already used [ 96.009893][ T8437] vhci_hcd: connection closed [ 96.011746][ T1231] vhci_hcd: stop threads [ 96.016087][ T1231] vhci_hcd: release socket [ 96.017993][ T1231] vhci_hcd: disconnect device [ 96.142002][ T35] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 96.282383][ T35] usb 5-1: device descriptor read/64, error -71 [ 96.402342][ T35] usb usb5-port1: attempt power cycle [ 96.554542][ T8452] __nla_validate_parse: 3 callbacks suppressed [ 96.554561][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 96.663311][ T8457] xt_hashlimit: max too large, truncated to 1048576 [ 96.750055][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.751981][ T35] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 96.777459][ T35] usb 5-1: device descriptor read/8, error -71 [ 96.819318][ T7168] IPVS: starting estimator thread 0... [ 96.830909][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.834321][ T6013] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 96.912611][ T8462] IPVS: using max 38 ests per chain, 91200 per kthread [ 96.917631][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.918269][ T8466] Mount JFS Failure: -22 [ 96.922423][ T8466] jfs_mount failed w/return code = -22 [ 96.932198][ T5961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.937000][ T5961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.941076][ T5961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.945702][ T5961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.950396][ T5961] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.954279][ T5961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.985104][ T8471] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.999589][ T6013] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.004308][ T6013] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 97.009240][ T6013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 97.013817][ T6013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 97.018168][ T6013] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.020273][ T35] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 97.030111][ T6013] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 97.038823][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.042397][ T6013] usb 6-1: Product: syz [ 97.042431][ T35] usb 5-1: device descriptor read/8, error -71 [ 97.044158][ T6013] usb 6-1: Manufacturer: syz [ 97.048682][ T6013] usb 6-1: SerialNumber: syz [ 97.056364][ T6013] usb 6-1: config 0 descriptor?? [ 97.059492][ T8455] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 97.059910][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 97.066476][ T6013] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input11 [ 97.066623][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.121523][ T8471] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.153449][ T8468] chnl_net:caif_netlink_parms(): no params data found [ 97.164747][ T35] usb usb5-port1: unable to enumerate USB device [ 97.213966][ T8471] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.263558][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.266490][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.269466][ T8468] bridge_slave_0: entered allmulticast mode [ 97.272947][ T8468] bridge_slave_0: entered promiscuous mode [ 97.275863][ T12] bridge_slave_0: left allmulticast mode [ 97.277567][ T12] bridge_slave_0: left promiscuous mode [ 97.280241][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.357646][ T12] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 97.362064][ T12] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 97.365802][ T12] ip6gretap1 (unregistering): left promiscuous mode [ 97.368636][ T12] ip6gretap1 (unregistering): left allmulticast mode [ 97.422410][ T12] erspan0 (unregistering): left allmulticast mode [ 97.467755][ T12] dvmrp1 (unregistering): left allmulticast mode [ 97.680399][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.685885][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.691202][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 97.697120][ T12] bond0 (unregistering): Released all slaves [ 97.705912][ T12] bond1 (unregistering): Released all slaves [ 97.796253][ T12] bond2 (unregistering): Released all slaves [ 97.814326][ T8471] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.819107][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.821220][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.823672][ T8468] bridge_slave_1: entered allmulticast mode [ 97.826095][ T8468] bridge_slave_1: entered promiscuous mode [ 97.852143][ T8468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.860356][ T5987] usb 6-1: USB disconnect, device number 8 [ 97.883102][ T8468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.890302][ T12] tipc: Disabling bearer [ 97.910124][ T12] tipc: Left network mode [ 97.939787][ T8468] team0: Port device team_slave_0 added [ 97.946761][ T8468] team0: Port device team_slave_1 added [ 97.990228][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.994086][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.005169][ T8468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.016085][ T8471] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.019526][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.022935][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.031066][ T8468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.053377][ T8471] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.092309][ T8471] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.099535][ T8468] hsr_slave_0: entered promiscuous mode [ 98.102212][ T8468] hsr_slave_1: entered promiscuous mode [ 98.104195][ T8468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.106912][ T8468] Cannot create hsr debugfs directory [ 98.111023][ T8471] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.178150][ T12] hsr_slave_0: left promiscuous mode [ 98.180409][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.183915][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.186870][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.189111][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.206800][ T12] veth1_macvtap: left promiscuous mode [ 98.208486][ T12] veth0_macvtap: left promiscuous mode [ 98.210149][ T12] veth1_vlan: left promiscuous mode [ 98.211707][ T12] veth0_vlan: left promiscuous mode [ 98.229528][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.688'. [ 98.255502][ T12] pim6reg9 (unregistering): left allmulticast mode [ 98.523240][ T8500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.689'. [ 98.878176][ T12] team0 (unregistering): Port device team_slave_1 removed [ 98.968703][ T12] team0 (unregistering): Port device team_slave_0 removed [ 99.042978][ T5294] Bluetooth: hci0: command tx timeout [ 99.632629][ T8510] netlink: 'syz.4.691': attribute type 1 has an invalid length. [ 99.635183][ T8510] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.691'. [ 99.678263][ T8468] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.684406][ T8468] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.690337][ T8518] netem: incorrect gi model size [ 99.692939][ T8518] netem: change failed [ 99.695308][ T8468] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.700416][ T8468] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.777062][ T8468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.784838][ T8468] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.794903][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.797230][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.800420][ T8531] lo: entered promiscuous mode [ 99.806524][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.808790][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.857321][ T8468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.861273][ T8468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.926212][ T8531] lo: left promiscuous mode [ 99.960646][ T8468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.962128][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 99.962138][ T39] audit: type=1400 audit(1738894718.188:603): avc: denied { connect } for pid=8556 comm="syz.1.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.052096][ T835] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 100.087204][ T8468] veth0_vlan: entered promiscuous mode [ 100.105205][ T8468] veth1_vlan: entered promiscuous mode [ 100.119349][ T8468] veth0_macvtap: entered promiscuous mode [ 100.123493][ T8468] veth1_macvtap: entered promiscuous mode [ 100.137095][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.141448][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.145694][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.149915][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.155230][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.159684][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.164929][ T8468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.170786][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.175224][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.179105][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.184398][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.189150][ T8468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.197658][ T8468] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.201271][ T8468] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.205011][ T835] usb 9-1: Using ep0 maxpacket: 32 [ 100.206688][ T8468] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.208664][ T835] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 100.209787][ T8468] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.215782][ T835] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 100.220447][ T835] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 100.224124][ T835] usb 9-1: Product: syz [ 100.225986][ T835] usb 9-1: Manufacturer: syz [ 100.227905][ T835] usb 9-1: SerialNumber: syz [ 100.237062][ T835] usb 9-1: config 0 descriptor?? [ 100.245052][ T8535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.259689][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.267488][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.283995][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.286566][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.322654][ T39] audit: type=1400 audit(1738894718.548:604): avc: denied { mounton } for pid=8468 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 100.363570][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 100.366760][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 100.455454][ T5988] usb 9-1: USB disconnect, device number 8 [ 100.490100][ T39] audit: type=1400 audit(1738894718.718:605): avc: denied { remount } for pid=8532 comm="syz.4.698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 100.647141][ T8614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.649630][ T8614] IPv6: NLM_F_CREATE should be set when creating new route [ 100.651796][ T8614] IPv6: NLM_F_CREATE should be set when creating new route [ 101.047764][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 101.079930][ T8636] netlink: 'syz.4.711': attribute type 30 has an invalid length. [ 101.082698][ T8636] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 101.085324][ T8636] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 101.112423][ T5294] Bluetooth: hci0: command tx timeout [ 101.138970][ T39] audit: type=1400 audit(1738894719.368:606): avc: denied { setopt } for pid=8638 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 101.236825][ T8643] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 101.238827][ T8643] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 101.241221][ T8643] vhci_hcd vhci_hcd.0: Device attached [ 101.244596][ T8647] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 0 [ 101.247508][ T1139] vhci_hcd: stop threads [ 101.248955][ T1139] vhci_hcd: release socket [ 101.250342][ T1139] vhci_hcd: disconnect device [ 101.488078][ T8660] netlink: 'syz.5.717': attribute type 2 has an invalid length. [ 101.531961][ T835] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 101.692097][ T835] usb 6-1: Using ep0 maxpacket: 32 [ 101.696990][ T835] usb 6-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.703590][ T835] usb 6-1: config 1 interface 0 has no altsetting 0 [ 101.708883][ T835] usb 6-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.40 [ 101.712979][ T835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.716129][ T835] usb 6-1: Product: 잉槵్㔙士݅㤟 [ 101.718436][ T835] usb 6-1: Manufacturer: 㰁 [ 101.720275][ T835] usb 6-1: SerialNumber:   [ 101.777172][ T8670] overlayfs: missing 'lowerdir' [ 101.857129][ T8677] overlayfs: failed to clone upperpath [ 101.861670][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 101.868817][ T8677] overlayfs: failed to resolve './file2': -2 [ 101.948086][ T835] usbhid 6-1:1.0: can't add hid device: -71 [ 101.950710][ T835] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 101.957240][ T835] usb 6-1: USB disconnect, device number 9 [ 102.071286][ T8701] x_tables: duplicate underflow at hook 1 [ 102.134689][ T39] audit: type=1400 audit(1738894720.368:607): avc: denied { write } for pid=8706 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.192041][ T35] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 102.374190][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.378769][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.383667][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.388645][ T35] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.393003][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.398270][ T35] usb 9-1: config 0 descriptor?? [ 102.475084][ T8716] /dev/sg0: Can't lookup blockdev [ 102.806988][ T39] audit: type=1400 audit(1738894721.038:608): avc: denied { listen } for pid=8689 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.808585][ T8690] overlayfs: failed to resolve './file1': -2 [ 102.881635][ T35] usbhid 9-1:0.0: can't add hid device: -71 [ 102.885761][ T35] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 102.894788][ T35] usb 9-1: USB disconnect, device number 9 [ 103.191965][ T5294] Bluetooth: hci0: command tx timeout [ 103.338239][ T39] audit: type=1400 audit(1738894721.568:609): avc: denied { create } for pid=8729 comm="syz.0.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 103.346271][ T39] audit: type=1400 audit(1738894721.568:610): avc: denied { read } for pid=8729 comm="syz.0.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 103.378402][ T8717] syz.1.736 (8717): drop_caches: 2 [ 103.390706][ T39] audit: type=1400 audit(1738894721.618:611): avc: denied { write } for pid=8729 comm="syz.0.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 103.425075][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 103.527280][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.750'. [ 103.534639][ T8757] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 103.538899][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.750'. [ 103.659461][ T39] audit: type=1400 audit(1738894721.888:612): avc: denied { mount } for pid=8775 comm="syz.4.755" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 103.867669][ T8780] No control pipe specified [ 104.266758][ T8800] lo: entered promiscuous mode [ 104.269415][ T8800] tunl0: entered promiscuous mode [ 104.273226][ T8800] gre0: entered promiscuous mode [ 104.276373][ T8800] erspan0: entered promiscuous mode [ 104.278573][ T8800] ip_vti0: entered promiscuous mode [ 104.280562][ T8800] ip6_vti0: entered promiscuous mode [ 104.283131][ T8800] sit0: entered promiscuous mode [ 104.285359][ T8800] ip6tnl0: entered promiscuous mode [ 104.288273][ T8800] ip6gre0: entered promiscuous mode [ 104.291742][ T8800] syz_tun: entered promiscuous mode [ 104.295070][ T8800] ip6gretap0: entered promiscuous mode [ 104.297955][ T8800] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.300627][ T8800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.303963][ T8800] bridge0: port 1(O3c) entered blocking state [ 104.306684][ T8800] bridge0: port 1(O3c) entered forwarding state [ 104.313521][ T8800] bridge0: entered promiscuous mode [ 104.316493][ T8800] vcan0: entered promiscuous mode [ 104.318308][ T8800] bond0: entered promiscuous mode [ 104.318401][ T59] [ 104.320148][ T8800] bond_slave_0: entered promiscuous mode [ 104.321364][ T59] ============================= [ 104.323880][ T8800] bond_slave_1: entered promiscuous mode [ 104.325207][ T59] WARNING: suspicious RCU usage [ 104.327760][ T8800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.328826][ T59] 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 Not tainted [ 104.328838][ T59] ----------------------------- [ 104.337295][ T8800] team0: entered promiscuous mode [ 104.337997][ T59] net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 104.339529][ T8800] team_slave_0: entered promiscuous mode [ 104.343024][ T59] [ 104.343024][ T59] other info that might help us debug this: [ 104.343024][ T59] [ 104.345808][ T8800] team_slave_1: entered promiscuous mode [ 104.349659][ T59] [ 104.349659][ T59] rcu_scheduler_active = 2, debug_locks = 1 [ 104.349673][ T59] 3 locks held by kworker/u32:3/59: [ 104.349685][ T59] #0: ffff88804eab9148 ((wq_completion)bond0 [ 104.352274][ T8800] dummy0: entered promiscuous mode [ 104.354718][ T59] #2 [ 104.357309][ T8800] nlmon0: entered promiscuous mode [ 104.358767][ T59] ){+.+.}-{0:0} [ 104.361399][ T59] , at: process_one_work+0x1293/0x1ba0 [ 104.364534][ T59] #1: ffffc90000abfd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 104.371743][ T59] #2: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 104.374658][ T59] [ 104.374658][ T59] stack backtrace: [ 104.376409][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u32:3 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 104.376420][ T59] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.376427][ T59] Workqueue: bond0 bond_mii_monitor [ 104.376440][ T59] Call Trace: [ 104.376443][ T59] [ 104.376447][ T59] dump_stack_lvl+0x16c/0x1f0 [ 104.376465][ T59] lockdep_rcu_suspicious+0x210/0x3c0 [ 104.376480][ T59] dev_activate+0x457/0x12b0 [ 104.376490][ T59] ? linkwatch_sync_dev+0x179/0x210 [ 104.376503][ T59] ? __pfx_lock_release+0x10/0x10 [ 104.376514][ T59] ? __pfx_dev_activate+0x10/0x10 [ 104.376523][ T59] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.376539][ T59] linkwatch_do_dev+0x13d/0x160 [ 104.376551][ T59] linkwatch_sync_dev+0x181/0x210 [ 104.376563][ T59] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 104.376573][ T59] ethtool_op_get_link+0x1d/0x70 [ 104.376583][ T59] bond_check_dev_link+0x197/0x490 [ 104.376593][ T59] ? __pfx_bond_check_dev_link+0x10/0x10 [ 104.376609][ T59] bond_mii_monitor+0x3c1/0x2d90 [ 104.376623][ T59] ? __pfx_bond_mii_monitor+0x10/0x10 [ 104.376634][ T59] ? rcu_is_watching+0x12/0xc0 [ 104.376646][ T59] ? lock_acquire+0x2f/0xb0 [ 104.376656][ T59] ? process_one_work+0x921/0x1ba0 [ 104.376669][ T59] process_one_work+0x9c5/0x1ba0 [ 104.376684][ T59] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 104.376699][ T59] ? __pfx_process_one_work+0x10/0x10 [ 104.376714][ T59] ? assign_work+0x1a0/0x250 [ 104.376725][ T59] worker_thread+0x6c8/0xf00 [ 104.376741][ T59] ? __pfx_worker_thread+0x10/0x10 [ 104.376753][ T59] kthread+0x3af/0x750 [ 104.376764][ T59] ? __pfx_kthread+0x10/0x10 [ 104.376773][ T59] ? lock_acquire+0x2f/0xb0 [ 104.376786][ T59] ? __pfx_kthread+0x10/0x10 [ 104.376796][ T59] ret_from_fork+0x45/0x80 [ 104.376807][ T59] ? __pfx_kthread+0x10/0x10 [ 104.376817][ T59] ret_from_fork_asm+0x1a/0x30 [ 104.376833][ T59] [ 104.442078][ T59] [ 104.444538][ T59] ============================= [ 104.446628][ T59] WARNING: suspicious RCU usage [ 104.448682][ T59] 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 Not tainted [ 104.451129][ T59] ----------------------------- [ 104.452978][ T59] net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage! [ 104.455668][ T59] [ 104.455668][ T59] other info that might help us debug this: [ 104.455668][ T59] [ 104.458799][ T59] [ 104.458799][ T59] rcu_scheduler_active = 2, debug_locks = 1 [ 104.461204][ T59] 3 locks held by kworker/u32:3/59: [ 104.463084][ T59] #0: ffff88804eab9148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 104.466278][ T59] #1: ffffc90000abfd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 104.469960][ T59] #2: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 104.473137][ T59] [ 104.473137][ T59] stack backtrace: [ 104.474960][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u32:3 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 104.474971][ T59] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.474978][ T59] Workqueue: bond0 bond_mii_monitor [ 104.474993][ T59] Call Trace: [ 104.474997][ T59] [ 104.475001][ T59] dump_stack_lvl+0x16c/0x1f0 [ 104.475014][ T59] lockdep_rcu_suspicious+0x210/0x3c0 [ 104.475027][ T59] transition_one_qdisc+0x1d4/0x210 [ 104.475041][ T59] dev_activate+0x211/0x12b0 [ 104.475052][ T59] ? __pfx_lock_release+0x10/0x10 [ 104.475063][ T59] ? __pfx_dev_activate+0x10/0x10 [ 104.475072][ T59] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.475088][ T59] linkwatch_do_dev+0x13d/0x160 [ 104.475101][ T59] linkwatch_sync_dev+0x181/0x210 [ 104.475113][ T59] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 104.475124][ T59] ethtool_op_get_link+0x1d/0x70 [ 104.475134][ T59] bond_check_dev_link+0x197/0x490 [ 104.475144][ T59] ? __pfx_bond_check_dev_link+0x10/0x10 [ 104.475159][ T59] bond_mii_monitor+0x3c1/0x2d90 [ 104.475174][ T59] ? __pfx_bond_mii_monitor+0x10/0x10 [ 104.475185][ T59] ? rcu_is_watching+0x12/0xc0 [ 104.475197][ T59] ? lock_acquire+0x2f/0xb0 [ 104.475207][ T59] ? process_one_work+0x921/0x1ba0 [ 104.475220][ T59] process_one_work+0x9c5/0x1ba0 [ 104.475235][ T59] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 104.475246][ T59] ? __pfx_process_one_work+0x10/0x10 [ 104.475261][ T59] ? assign_work+0x1a0/0x250 [ 104.475273][ T59] worker_thread+0x6c8/0xf00 [ 104.475288][ T59] ? __pfx_worker_thread+0x10/0x10 [ 104.475300][ T59] kthread+0x3af/0x750 [ 104.475310][ T59] ? __pfx_kthread+0x10/0x10 [ 104.475320][ T59] ? lock_acquire+0x2f/0xb0 [ 104.475333][ T59] ? __pfx_kthread+0x10/0x10 [ 104.475343][ T59] ret_from_fork+0x45/0x80 [ 104.475354][ T59] ? __pfx_kthread+0x10/0x10 [ 104.475364][ T59] ret_from_fork_asm+0x1a/0x30 [ 104.475380][ T59] [ 104.475389][ T59] [ 104.546179][ T59] ============================= [ 104.548136][ T59] WARNING: suspicious RCU usage [ 104.550065][ T59] 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 Not tainted [ 104.553075][ T59] ----------------------------- [ 104.554796][ T59] ./include/linux/rtnetlink.h:162 suspicious rcu_dereference_protected() usage! [ 104.557745][ T59] [ 104.557745][ T59] other info that might help us debug this: [ 104.557745][ T59] [ 104.560712][ T59] [ 104.560712][ T59] rcu_scheduler_active = 2, debug_locks = 1 [ 104.563307][ T59] 3 locks held by kworker/u32:3/59: [ 104.564870][ T59] #0: ffff88804eab9148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 104.568006][ T59] #1: ffffc90000abfd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 104.572182][ T59] #2: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 104.576195][ T59] [ 104.576195][ T59] stack backtrace: [ 104.578637][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u32:3 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 104.578657][ T59] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.578673][ T59] Workqueue: bond0 bond_mii_monitor [ 104.578698][ T59] Call Trace: [ 104.578705][ T59] [ 104.578713][ T59] dump_stack_lvl+0x16c/0x1f0 [ 104.578733][ T59] lockdep_rcu_suspicious+0x210/0x3c0 [ 104.578759][ T59] dev_activate+0x7eb/0x12b0 [ 104.578778][ T59] ? __pfx_lock_release+0x10/0x10 [ 104.578801][ T59] ? __pfx_dev_activate+0x10/0x10 [ 104.578818][ T59] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.578849][ T59] linkwatch_do_dev+0x13d/0x160 [ 104.578872][ T59] linkwatch_sync_dev+0x181/0x210 [ 104.578897][ T59] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 104.578914][ T59] ethtool_op_get_link+0x1d/0x70 [ 104.578934][ T59] bond_check_dev_link+0x197/0x490 [ 104.578952][ T59] ? __pfx_bond_check_dev_link+0x10/0x10 [ 104.578984][ T59] bond_mii_monitor+0x3c1/0x2d90 [ 104.579013][ T59] ? __pfx_bond_mii_monitor+0x10/0x10 [ 104.579034][ T59] ? rcu_is_watching+0x12/0xc0 [ 104.579055][ T59] ? lock_acquire+0x2f/0xb0 [ 104.579075][ T59] ? process_one_work+0x921/0x1ba0 [ 104.579101][ T59] process_one_work+0x9c5/0x1ba0 [ 104.579130][ T59] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 104.579153][ T59] ? __pfx_process_one_work+0x10/0x10 [ 104.579182][ T59] ? assign_work+0x1a0/0x250 [ 104.579205][ T59] worker_thread+0x6c8/0xf00 [ 104.579236][ T59] ? __pfx_worker_thread+0x10/0x10 [ 104.579259][ T59] kthread+0x3af/0x750 [ 104.579279][ T59] ? __pfx_kthread+0x10/0x10 [ 104.579297][ T59] ? lock_acquire+0x2f/0xb0 [ 104.579322][ T59] ? __pfx_kthread+0x10/0x10 [ 104.579342][ T59] ret_from_fork+0x45/0x80 [ 104.579364][ T59] ? __pfx_kthread+0x10/0x10 [ 104.579383][ T59] ret_from_fork_asm+0x1a/0x30 [ 104.579413][ T59] [ 104.579435][ T59] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 104.643209][ T59] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 59, name: kworker/u32:3 [ 104.647003][ T59] preempt_count: 0, expected: 0 [ 104.649028][ T59] RCU nest depth: 1, expected: 0 [ 104.650589][ T59] 3 locks held by kworker/u32:3/59: [ 104.652429][ T59] #0: ffff88804eab9148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 104.655514][ T59] #1: ffffc90000abfd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 104.659092][ T59] #2: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 104.662184][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u32:3 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 104.662205][ T59] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.662216][ T59] Workqueue: bond0 bond_mii_monitor [ 104.662239][ T59] Call Trace: [ 104.662244][ T59] [ 104.662251][ T59] dump_stack_lvl+0x16c/0x1f0 [ 104.662271][ T59] __might_resched+0x3c0/0x5e0 [ 104.662298][ T59] ? __pfx___might_resched+0x10/0x10 [ 104.662329][ T59] down_read+0x73/0x330 [ 104.662348][ T59] ? __pfx_down_read+0x10/0x10 [ 104.662368][ T59] ? dev_map_notification+0x6a/0xaf0 [ 104.662385][ T59] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.662416][ T59] wireless_nlevent_flush+0x1b/0x100 [ 104.662444][ T59] wext_netdev_notifier_call+0xe/0x20 [ 104.662468][ T59] notifier_call_chain+0xb7/0x410 [ 104.662487][ T59] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 104.662517][ T59] call_netdevice_notifiers_info+0xbe/0x140 [ 104.662542][ T59] netdev_state_change+0x115/0x150 [ 104.662566][ T59] ? __pfx_netdev_state_change+0x10/0x10 [ 104.662592][ T59] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.662622][ T59] linkwatch_do_dev+0x12b/0x160 [ 104.662645][ T59] linkwatch_sync_dev+0x181/0x210 [ 104.662671][ T59] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 104.662690][ T59] ethtool_op_get_link+0x1d/0x70 [ 104.662708][ T59] bond_check_dev_link+0x197/0x490 [ 104.662727][ T59] ? __pfx_bond_check_dev_link+0x10/0x10 [ 104.662759][ T59] bond_mii_monitor+0x3c1/0x2d90 [ 104.662789][ T59] ? __pfx_bond_mii_monitor+0x10/0x10 [ 104.662810][ T59] ? rcu_is_watching+0x12/0xc0 [ 104.662833][ T59] ? lock_acquire+0x2f/0xb0 [ 104.662853][ T59] ? process_one_work+0x921/0x1ba0 [ 104.662878][ T59] process_one_work+0x9c5/0x1ba0 [ 104.662908][ T59] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 104.662932][ T59] ? __pfx_process_one_work+0x10/0x10 [ 104.662965][ T59] ? assign_work+0x1a0/0x250 [ 104.662989][ T59] worker_thread+0x6c8/0xf00 [ 104.663021][ T59] ? __pfx_worker_thread+0x10/0x10 [ 104.663043][ T59] kthread+0x3af/0x750 [ 104.663064][ T59] ? __pfx_kthread+0x10/0x10 [ 104.663082][ T59] ? lock_acquire+0x2f/0xb0 [ 104.663107][ T59] ? __pfx_kthread+0x10/0x10 [ 104.663128][ T59] ret_from_fork+0x45/0x80 [ 104.663148][ T59] ? __pfx_kthread+0x10/0x10 [ 104.663168][ T59] ret_from_fork_asm+0x1a/0x30 [ 104.663199][ T59] [ 104.663205][ T59] [ 104.743294][ T59] ============================= [ 104.744743][ T59] [ BUG: Invalid wait context ] [ 104.746206][ T59] 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 Tainted: G W [ 104.748770][ T59] ----------------------------- [ 104.750337][ T59] kworker/u32:3/59 is trying to lock: [ 104.752015][ T59] ffffffff8fedeed0 (net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush+0x1b/0x100 [ 104.755164][ T59] other info that might help us debug this: [ 104.757089][ T59] context-{5:5} [ 104.758357][ T59] 3 locks held by kworker/u32:3/59: [ 104.759925][ T59] #0: ffff88804eab9148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 104.763211][ T59] #1: ffffc90000abfd18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 104.766828][ T59] #2: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 [ 104.769726][ T59] stack backtrace: [ 104.770929][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u32:3 Tainted: G W 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 104.770942][ T59] Tainted: [W]=WARN [ 104.770945][ T59] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.770956][ T59] Workqueue: bond0 bond_mii_monitor [ 104.770971][ T59] Call Trace: [ 104.770975][ T59] [ 104.770980][ T59] dump_stack_lvl+0x116/0x1f0 [ 104.770991][ T59] __lock_acquire+0x878/0x3c40 [ 104.771005][ T59] ? __pfx___lock_acquire+0x10/0x10 [ 104.771017][ T59] lock_acquire.part.0+0x11b/0x380 [ 104.771029][ T59] ? wireless_nlevent_flush+0x1b/0x100 [ 104.771043][ T59] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 104.771055][ T59] ? rcu_is_watching+0x12/0xc0 [ 104.771064][ T59] ? trace_lock_acquire+0x14e/0x1f0 [ 104.771074][ T59] ? __might_resched+0x3cc/0x5e0 [ 104.771086][ T59] ? wireless_nlevent_flush+0x1b/0x100 [ 104.771099][ T59] ? lock_acquire+0x2f/0xb0 [ 104.771109][ T59] ? wireless_nlevent_flush+0x1b/0x100 [ 104.771122][ T59] down_read+0x9a/0x330 [ 104.771132][ T59] ? wireless_nlevent_flush+0x1b/0x100 [ 104.771144][ T59] ? __pfx_down_read+0x10/0x10 [ 104.771153][ T59] ? dev_map_notification+0x6a/0xaf0 [ 104.771163][ T59] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.771178][ T59] wireless_nlevent_flush+0x1b/0x100 [ 104.771191][ T59] wext_netdev_notifier_call+0xe/0x20 [ 104.771203][ T59] notifier_call_chain+0xb7/0x410 [ 104.771213][ T59] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 104.771227][ T59] call_netdevice_notifiers_info+0xbe/0x140 [ 104.771240][ T59] netdev_state_change+0x115/0x150 [ 104.771252][ T59] ? __pfx_netdev_state_change+0x10/0x10 [ 104.771264][ T59] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.771277][ T59] linkwatch_do_dev+0x12b/0x160 [ 104.771290][ T59] linkwatch_sync_dev+0x181/0x210 [ 104.771302][ T59] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 104.771312][ T59] ethtool_op_get_link+0x1d/0x70 [ 104.771322][ T59] bond_check_dev_link+0x197/0x490 [ 104.771332][ T59] ? __pfx_bond_check_dev_link+0x10/0x10 [ 104.771352][ T59] bond_mii_monitor+0x3c1/0x2d90 [ 104.771372][ T59] ? __pfx_bond_mii_monitor+0x10/0x10 [ 104.771391][ T59] ? rcu_is_watching+0x12/0xc0 [ 104.771406][ T59] ? lock_acquire+0x2f/0xb0 [ 104.771423][ T59] ? process_one_work+0x921/0x1ba0 [ 104.771442][ T59] process_one_work+0x9c5/0x1ba0 [ 104.771463][ T59] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 104.771484][ T59] ? __pfx_process_one_work+0x10/0x10 [ 104.771505][ T59] ? assign_work+0x1a0/0x250 [ 104.771522][ T59] worker_thread+0x6c8/0xf00 [ 104.771543][ T59] ? __pfx_worker_thread+0x10/0x10 [ 104.771561][ T59] kthread+0x3af/0x750 [ 104.771578][ T59] ? __pfx_kthread+0x10/0x10 [ 104.771596][ T59] ? lock_acquire+0x2f/0xb0 [ 104.771616][ T59] ? __pfx_kthread+0x10/0x10 [ 104.771632][ T59] ret_from_fork+0x45/0x80 [ 104.771646][ T59] ? __pfx_kthread+0x10/0x10 [ 104.771655][ T59] ret_from_fork_asm+0x1a/0x30 [ 104.771667][ T59] [ 104.868461][ T8800] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 104.871057][ T8800] chnl_net:chnl_net_open(): state disconnected [ 104.873719][ T8800] caif0: entered promiscuous mode [ 104.875819][ T8800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.366025][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.415266][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.484852][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.534861][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.592897][ T12] bridge_slave_1: left allmulticast mode [ 105.594710][ T12] bridge_slave_1: left promiscuous mode [ 105.596446][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.599331][ T12] bridge_slave_0: left allmulticast mode [ 105.601067][ T12] bridge_slave_0: left promiscuous mode [ 105.603126][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.706129][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.709521][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.712787][ T12] bond0 (unregistering): Released all slaves [ 105.962360][ T12] hsr_slave_0: left promiscuous mode [ 105.964340][ T12] hsr_slave_1: left promiscuous mode [ 105.966148][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.968282][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.970914][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.974335][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.979338][ T12] veth1_macvtap: left promiscuous mode [ 105.980996][ T12] veth0_macvtap: left promiscuous mode [ 105.982948][ T12] veth1_vlan: left promiscuous mode [ 105.984604][ T12] veth0_vlan: left promiscuous mode [ 106.157489][ T12] team0 (unregistering): Port device team_slave_1 removed [ 106.198949][ T12] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 02:18:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=000000000000001d RCX=ffffffff8199a6ea RDX=ffff8880208f2440 RSI=0000000000000000 RDI=0000000000000001 RBP=1ffff92000157ee8 RSP=ffffc90000abf728 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=0000000000000001 R13=0000000000000200 R14=ffff888040d2a440 R15=ffffc90000abf7f8 RIP=ffffffff81b9cb61 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1d6770e8e5 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000045544156 4952505f4342494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007000700020007 0007000700000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006580000 RBX=0000000000000000 RCX=ffff888027b49070 RDX=000000000000009d RSI=ffffffff8686ef46 RDI=ffff888027b49268 RBP=0000000000000001 RSP=ffffc900006b0b70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000002 R12=0000000000000001 R13=0000000000004e20 R14=ffff888027b49070 R15=0000000000000001 RIP=ffffffff8686ef83 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbf449e76c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558f82b0e300 CR3=0000000040f5e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 13978246be4143a9 89f50955cd96e315 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa05060f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa05060f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa05060f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa05060f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa05060f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa05060f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0512dd100 00007fa05077c440 00007fa050770004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa05077c498 00007fa05077c490 00007fa05077c488 00007fa05077c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b05f1a612940369 5aa03aee822d631e 1cf1c7f4b55f5cc5 ed21799716f2b888 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dde32b14d8bf729a 6800cd57d514c70a a75fe8eca078fc15 0a2b4c7b5361a9e9 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2bd1b55f0db0558e 290f0b5fdc2e6eb8 6b926dab14a0f267 ff665e26315501e6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9bb97b8ef35c2d39 3a7e82c4a1662933 9d14181112a5a5e6 2895000a8abf3deb ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85402985 RDI=ffffffff9ab78740 RBP=ffffffff9ab78700 RSP=ffffc9000360e9f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=000000000000000d R14=ffffffff9ab78700 R15=0000000000000000 RIP=ffffffff854029af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f31eae9a6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558f82b0e300 CR3=0000000028312000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfeb3d9e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf43c0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf43c0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf43c0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf43c0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf43c0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf43c0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=1ffff92000743e4c RCX=ffffc90003a1f2a0 RDX=1ffff110053df15c RSI=ffffffff8e1bcc80 RDI=ffff888029ef8ae0 RBP=a398a2defe4d6fe6 RSP=ffffc90003a1f250 R8 =0000000000000000 R9 =fffffbfff20c4522 R10=ffffffff90622917 R11=0000000000002bb7 R12=0000000000000001 R13=0000000000000002 R14=ffff888029ef8ae8 R15=ffff888029ef8000 RIP=ffffffff81969fca RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7d1d4d7d60 CR3=00000000214ac000 CR4=00352ef0 DR0=0000000000000005 DR1=00000000000000ff DR2=ffffffffffffdffb DR3=3e00000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7d1c97c6a3 00007f7d1c97c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe03579b10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555690c40dc 00005555690c3fc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556912ad95 000055556912a8a0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000da4030002 000da2030002000d a0030008000d9803 0008000d90030204 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000a800401 0000040806060164 ee0008000ae00300 10000ad003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ac0030210000ab0 0350100010030008 000dc8033604000d c4031004000dc003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000db8032482 08000db003000800 0da8030004000da4 030002000da20300 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02000da003000800 0d98030008000d90 030204000d8c0320 04000d8803500800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000