last executing test programs: 4.126156196s ago: executing program 3 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELRULE={0xa0, 0x8, 0xa, 0x5, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}]}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x890}, 0x0) 4.046907421s ago: executing program 3 (id=815): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x200008c4}, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 2.075486629s ago: executing program 0 (id=836): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x80) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x80) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x5a9, 0x20000084, 0x8, 0x578, 0xa, 0x40, 0x0, 0x0, 0xc2a5649583d610c9, 0xffffeb6e}}, 0x50) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 1.823943706s ago: executing program 2 (id=844): r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) r1 = dup2(r0, r0) faccessat2(r1, &(0x7f0000000880)='\x00', 0x1, 0x1100) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x17, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) 1.823657658s ago: executing program 2 (id=846): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) 1.814893879s ago: executing program 2 (id=847): syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xdb', 0x0) close(0x3) 1.737309881s ago: executing program 2 (id=850): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2b, 0xff, @remote, @local, {[], {{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x412}}}}}}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.666216549s ago: executing program 2 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x1b, 0x5, 0x378, 0x1f8, 0x150, 0xffffffff, 0x1f8, 0xa8, 0x2e0, 0x2e0, 0xffffffff, 0x2e0, 0x2e0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @multicast1, @multicast2, @port=0x4e24, @icmp_id=0x65}}}}, {{@ip={@broadcast, @broadcast, 0xff, 0xff, 'macsec0\x00', 'ipvlan1\x00', {0xff}, {}, 0x67, 0x1, 0x22}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @icmp_id=0x68, @gre_key=0x9}}}}, {{@ip={@empty, @multicast1, 0xffffffff, 0x0, 'veth0_macvtap\x00', 'lo\x00', {0xff}, {0xff}, 0xc, 0x2, 0x2e}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @broadcast, @empty, @gre_key=0x1, @icmp_id=0x68}}}}, {{@ip={@local, @private=0xa010100, 0xffffffff, 0xff000000, 'erspan0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x3, 0x3, 0x2, 0x6, 0x1, 0x5], 0x1, 0x2}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @icmp_id=0x68, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x6001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x800) 1.656491732s ago: executing program 2 (id=854): mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x22}], 0x1, 0x9) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = socket(0x27, 0xa, 0xfffffffe) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0xfffffffffffffd2d}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x10003, 0x5, 0xdddd0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rt_sigaction(0x19, &(0x7f00000000c0)={&(0x7f0000000080)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="753bf017764c015e963a0dcd99efafc29dbb6eab045e3d1a121fe3089484145fa11905b4e8095e70347e1fba46fd35787d17b4eef796337a8d6c0d50aa780cc85e7756f055962fff220e379e1ddc89ba96abef3005bf6f5bc48f7601149a992a6305dcd44b97b24a80b8245438d53ea24b348f17a5e92a27441708340c4ad4e86018b3cdb863fb989639c30b277d0dc4dcc781984e99df029cef4069039ad5bd2579a239f3c058e757fdf5679fae7f258e25b0f12dc3a7c12672a0d8f8eadd"], 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r11, 0x400c330d, &(0x7f0000000040)={0x8, 0xd5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="660f0966baf80cb8a22e7b88ef66bafc0cecf30fc7b50000c0fe2e0f01c50fc75f00c4c1b973f8030f01d9b805000000b9000000800f01c166baf80cb8002ede8fef66bafc0ced64670f1c0b", 0x4c}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x2, 0x2, 0xdddd0000, 0x1000, &(0x7f0000093000/0x1000)=nil}) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000080)=0xf3e, 0x4) 1.586987962s ago: executing program 0 (id=856): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r4, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) (async) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0), &(0x7f0000000300)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r4, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) io_uring_enter(r5, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 1.476100193s ago: executing program 0 (id=857): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x1208}, 0x1, 0x0, 0x0, 0x40000a0}, 0x40040c0) close_range(r0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) 1.417392317s ago: executing program 1 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000ec0400010006000000050005000000000005000400000000000c00078008001140000000000d00030068feffffffffffffff000000"], 0x54}}, 0x4000000) 1.41706003s ago: executing program 1 (id=861): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {0x0, 0xb1}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x60}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.357366765s ago: executing program 1 (id=862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x4, 0x0, 0x2) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r4, 0xfffffffffffffffe, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r0, &(0x7f0000000280)="3d5027afb9c3b796d0b8704a3a0a7de89bc9015edf462e276a7d01e4c309f7b02185ece22a81966b59d0416dbf611f9bdc4e3353889e9999674eb8d8ad77aecbd1655c62381aedf761e42eb7a2acef6ec2829ae75cd8e404ff6c0872ad59acd6e642adb9825e8c1a1dd865679acbaaa3537c7f9fbf8476c2d3a55e4feb523a4c48c836eae42738acaca1", 0x8a) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) write$binfmt_script(r10, &(0x7f0000000200), 0xfffffd9d) getsockopt$inet_tcp_int(r9, 0x6, 0x1e, 0x0, &(0x7f0000000500)) sendto$inet(r9, &(0x7f0000000000)="8c6c1c0d4274660bf573b41dc09d84732022cc16e79eb52e9a9bdf81b84da9c826dd52f1eeaeab65a1776e3321918eff0129f1ac5a3b67c5c84ff7bc56fdc3e286c99b9afdaa7fdade3de5b30616f9fcce76bdb6918f84bcd65855d39a71a5b1a0cdedce7311cd5d7a1d041b4580a8a7b15d884daa8f1995d0f3f85d444fcac6edc79309303d43c1e5d765ca8cb8b329d1b886b15e594e9a20802122b81f44298d5bd75e9bfecb16111b99578b1b3d9bb989aa483c7079d4614f04571d7b4635cc2f416dad370e1b3bc2", 0xca, 0x890, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) 1.246990042s ago: executing program 1 (id=863): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000340)=[{0x2b, 0x0, [0x5, 0x6, 0x6, 0x6, 0xffffffff, 0xfff, 0x5, 0xfffffffb, 0x7ff, 0x80000000, 0xa64, 0x8, 0x800, 0x60bedfa7, 0x3, 0x3f]}], r2, 0x1, 0x1, 0x48}}, 0x20) read(r0, &(0x7f0000000080)=""/116, 0xfffffeb2) read(r0, &(0x7f0000000280)=""/96, 0x60) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x2, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000340)=[{0x2b, 0x0, [0x5, 0x6, 0x6, 0x6, 0xffffffff, 0xfff, 0x5, 0xfffffffb, 0x7ff, 0x80000000, 0xa64, 0x8, 0x800, 0x60bedfa7, 0x3, 0x3f]}], r2, 0x1, 0x1, 0x48}}, 0x20) (async) read(r0, &(0x7f0000000080)=""/116, 0xfffffeb2) (async) read(r0, &(0x7f0000000280)=""/96, 0x60) (async) 1.176610147s ago: executing program 1 (id=864): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480340001800c0001007061796c6f61640024000280080003400000000208000240000000020800014000000010080004400000000224000180090001006d6574610000000014000280080002400000000208000240000000080900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42, 0x5c}) setresuid(0x0, 0xee00, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) mmap(&(0x7f000064f000/0x1000)=nil, 0x1000, 0x1000009, 0x8010, r3, 0xe2d07000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.077373674s ago: executing program 1 (id=865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="c4e1fd2f0fb9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x70a32f65f0aa08d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 907.130922ms ago: executing program 3 (id=866): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000000), 0x0, 0x0, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x500, 0x1}, 0x18, 0x3) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) sendmsg$unix(r5, &(0x7f0000000840)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xa, 0x4000815}, 0x90) syz_open_dev$midi(&(0x7f0000000000), 0x3684b1b5, 0x125040) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x1}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x484080, 0x0) close(r0) 905.421059ms ago: executing program 3 (id=867): creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/timer_list\x00', 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6f73322e2f70727f632f74696d65725f6c69737400"], &(0x7f0000000100)=')\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f, 0x2000, 0x4}, 0x20) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20040, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0x0) 616.831628ms ago: executing program 0 (id=868): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x7b, 0x0, 0x0, 0x0, 0xb, 0x0, 0x4004, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@add_del={0x2, &(0x7f00000000c0)='veth1_vlan\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x1c, 0x103, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc800) 2.037755ms ago: executing program 3 (id=869): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="38000300010003", 0x7) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x4, 0x8, 0x9}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r4, 0x14000000}, &(0x7f0000000200)=0x8) 1.331312ms ago: executing program 0 (id=870): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4ea1, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0xfffffffffffffef7) listen(r3, 0x5) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r6, &(0x7f0000000700)={0x2020}, 0x2020) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0xffff, 0xfff1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0x8}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}]}}]}, 0x54}}, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r10, 0x2282, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@loopback, @broadcast, 0xc, 0x16}}) 958.152µs ago: executing program 3 (id=871): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040), 0x8) (async) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x41, 0x7d, 0x1, {0x0, 0x3a, 0x5, 0x1ff, {0x1, 0x4, 0x7}, 0x0, 0x1ff, 0x5, 0x4b2c, 0x4, '\xa7}-@', 0x1, '\x00', 0x1, '\x00', 0x1, '('}}, 0x41) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2, 0x6}, &(0x7f00000001c0)=0x8) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x8af}}, './file0\x00'}) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x8000000000000000) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'gre0\x00', r4, 0x7800, 0x700, 0x10000, 0x1, {{0x16, 0x4, 0x3, 0x20, 0x58, 0x68, 0x0, 0x7, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0xac, 0x3, 0x5, [{@broadcast, 0xff}, {@multicast2, 0x100}, {@multicast2, 0x75d3}, {@rand_addr=0x64010100, 0x4}, {@empty, 0x2c4}, {@empty}]}, @rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x4, 0x4, 0x1, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)="f00c7913402d3ddb809719354530df2e90c6ebd8d054c4598e1f828019034ba09858a8f807a341543b67db79218dcaee0a22ff7486dc26f5decc9c1c53068125f5", 0x41}, {&(0x7f0000000480)="8a71ce0a930bb3268e93aabf50da", 0xe}], 0x2, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x698}}], 0x30}, 0x20000800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x6, 0x6, 0x0, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x2040001}, 0x4048890) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000680)=""/166, 0x22000, 0x1000, 0x6c, 0x3}, 0x20) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r1) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x178, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "1576662b2843fd34158f3d6ec0fd42e79cde9e1e3cbbea97c8d8cdcc5225deeb6d678b"}}, @TIPC_NLA_NODE_ID={0xf1, 0x3, "846de71c676378c2ebf3b691b065512d62d80b01189d79a976f3c1aefbfab5e3019508dbc443429319057d2eb3632edbd24f4a7defc2f86874305bfad0f1e991e4dbcf02246893c554f28e46785dbb946402871cf1346d0640c9a4240ff1fe2a22514e366d15824f596006e6d9c6ba0878db88c17e28d15fbea97e31330a2f154ae117715d18358ab675eba4879282f5372b9305534e7b09eb7c66dcc0af393ca876b718b5bbf1822b338c335a1ea1f2573020fe32fa38e4f84bb97ec525af6454dee56472284a0fd27ca38555e19b42f05c969e1427899b17ec284032776b8bb0a1c585d0e921419b538c2106"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000a00)={0x1, 0x0, 0xec2e}) (async) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000a40)) quotactl_fd$Q_GETNEXTQUOTA(r7, 0x0, 0x0, &(0x7f0000000a80)) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000b00)={r2, 0x4, 0x8, 0x3}, &(0x7f0000000b40)=0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000e00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1c4, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "a4b1a26808478337c8277f121389da3fb5f413fd6d6a5cf2"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb3, 0x3, "5df6bea378d09524420fcbfda4a5c188cbad678d13e0b7d373ff742f58c0742e2676a57ecb7d9b60ff26c572bdcc8af7f126d7ad52866e8571ca94fabffed54cc28d4dd9ebda023a540d7057d85cf823d3d4a6e8985fbe3b5e96b59c150b068801e0ebef8ff146498bd0c19aed1ca083a838d835d3f9a5d25164d6f5dc84fdd36074a147151d39e8d3eb6e0a2372f08671a65b0ebd970294c385494384b095f1c06d931db7401b8e832ce8aca06ae2"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5df85eb1}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d08}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x80}, 0x4008020) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r3) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r8, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) write$P9_RFLUSH(r3, &(0x7f0000000f80)={0x7, 0x6d, 0x2}, 0x7) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000fc0)={0x0, 0x1, {0x2, 0x0, 0x1000, 0x1}, 0x7}) 0s ago: executing program 0 (id=872): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x800, 0x8}}, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[]) 0s ago: executing program 0 (id=874): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000008d80)={0x2020}, 0x2020) (async) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000080)) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffbd) kernel console output (not intermixed with test programs): 64][ T6047] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 48.975818][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.978546][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.989984][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.992845][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.997378][ T6049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 49.000357][ T6049] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 49.013554][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.017854][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.023006][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.027060][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.083171][ T6059] bond1: entered promiscuous mode [ 49.083287][ T6057] binder: 6056:6057 ioctl 4068aea3 200000000380 returned -22 [ 49.087889][ T6059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.092923][ T6062] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 49.094566][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.100074][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.105111][ T6021] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.107132][ T6057] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.109692][ T5970] Bluetooth: hci2: connection err: -111 [ 49.110574][ T6057] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.115742][ T6057] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.118630][ T6057] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.123302][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.126091][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.258566][ T6021] usb 7-1: Using ep0 maxpacket: 8 [ 49.266734][ T6021] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 49.269528][ T6021] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 49.273688][ T6021] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 49.277689][ T6021] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 49.282275][ T6021] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 49.286355][ T6021] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 49.291486][ T6021] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 49.295551][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.421261][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 49.425005][ T6076] ksmbd: Daemon and kernel module version mismatch. ksmbd: 12, kernel module: 1. User-space ksmbd should terminate. [ 49.509379][ T6021] usb 7-1: GET_CAPABILITIES returned 0 [ 49.511851][ T6021] usbtmc 7-1:16.0: can't read capabilities [ 49.716876][ C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 49.720924][ T6045] usbtmc 7-1:16.0: Unable to send data, error -71 [ 49.731014][ T6021] usb 7-1: USB disconnect, device number 2 [ 49.875060][ T5970] Bluetooth: hci1: command tx timeout [ 49.955348][ T5970] Bluetooth: hci2: command tx timeout [ 49.966248][ T5970] Bluetooth: hci3: command tx timeout [ 49.966330][ T5318] Bluetooth: hci0: command tx timeout [ 49.995038][ T6091] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16'. [ 50.113552][ T6095] tipc: Started in network mode [ 50.120273][ T6095] tipc: Node identity 760a74a3ca1a, cluster identity 4711 [ 50.122835][ T6095] tipc: Enabled bearer , priority 0 [ 50.180031][ T6100] tipc: Disabling bearer [ 50.292146][ T6104] autofs: Bad value for 'fd' [ 50.347346][ T6108] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 50.492518][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25'. [ 50.529439][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25'. [ 50.558549][ T6116] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET) [ 50.561330][ T40] kauditd_printk_skb: 84 callbacks suppressed [ 50.561344][ T40] audit: type=1400 audit(1753548709.452:174): avc: denied { create } for pid=6115 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.584385][ T40] audit: type=1400 audit(1753548709.452:175): avc: denied { ioctl } for pid=6115 comm="syz.2.25" path="socket:[7995]" dev="sockfs" ino=7995 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.599478][ T6121] netlink: 'syz.3.26': attribute type 1 has an invalid length. [ 50.646055][ T6116] Can't find ip_set type [ 50.698879][ T40] audit: type=1400 audit(1753548709.592:176): avc: denied { getopt } for pid=6124 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.754684][ T40] audit: type=1400 audit(1753548709.642:177): avc: denied { add_name } for pid=6132 comm="syz.0.28" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.774066][ T6125] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 50.777962][ T40] audit: type=1400 audit(1753548709.642:178): avc: denied { create } for pid=6132 comm="syz.0.28" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.802220][ T40] audit: type=1400 audit(1753548709.642:179): avc: denied { associate } for pid=6132 comm="syz.0.28" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.819435][ T40] audit: type=1400 audit(1753548709.642:180): avc: denied { write open } for pid=6132 comm="syz.0.28" path="/4/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=37486761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.834032][ T40] audit: type=1400 audit(1753548709.672:181): avc: denied { unmount } for pid=5966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.860653][ T40] audit: type=1400 audit(1753548709.752:182): avc: denied { create } for pid=6136 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.868128][ T40] audit: type=1400 audit(1753548709.752:183): avc: denied { create } for pid=6136 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 51.034813][ T6146] cgroup: Unknown subsys name 'cpuset' [ 51.227243][ T6160] bridge: RTM_NEWNEIGH with invalid ether address [ 51.241789][ T6162] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 51.257534][ T6162] vlan2: entered allmulticast mode [ 51.259296][ T6162] veth1: entered allmulticast mode [ 51.263548][ T6164] capability: warning: `syz.3.40' uses 32-bit capabilities (legacy support in use) [ 51.301535][ T6166] Zero length message leads to an empty skb [ 51.362523][ T6172] netlink: zone id is out of range [ 51.366603][ T6172] netlink: zone id is out of range [ 51.375983][ T6172] netlink: zone id is out of range [ 51.377654][ T6172] netlink: get zone limit has 8 unknown bytes [ 51.464026][ T6182] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 51.614580][ T6193] bond0: entered promiscuous mode [ 51.617407][ T6193] bond_slave_0: entered promiscuous mode [ 51.619317][ T6193] bond_slave_1: entered promiscuous mode [ 51.623883][ T6193] batadv0: entered promiscuous mode [ 51.628424][ T6193] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 51.632232][ T6193] bond0: left promiscuous mode [ 51.633720][ T6193] bond_slave_0: left promiscuous mode [ 51.645014][ T6193] bond_slave_1: left promiscuous mode [ 51.651562][ T6193] batadv0: left promiscuous mode [ 51.806494][ T6209] input: syz1 as /devices/virtual/input/input5 [ 51.894897][ T59] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 51.955353][ T5318] Bluetooth: hci1: command tx timeout [ 52.034894][ T5318] Bluetooth: hci2: command tx timeout [ 52.045331][ T5318] Bluetooth: hci3: command tx timeout [ 52.045347][ T5970] Bluetooth: hci0: command tx timeout [ 52.053561][ T6237] netlink: 'syz.0.55': attribute type 11 has an invalid length. [ 52.056598][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 52.063681][ T59] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 52.066336][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 52.069938][ T59] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.074563][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.082512][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 52.087364][ T59] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 52.089777][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 52.093417][ T59] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.103756][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.107520][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 52.112730][ T59] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 52.115410][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 52.129109][ T59] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.133525][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.140495][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 52.148586][ T59] usb 7-1: string descriptor 0 read error: -22 [ 52.151072][ T59] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 52.153788][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.170019][ T59] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 52.527862][ T835] usb 7-1: USB disconnect, device number 3 [ 52.602290][ T6264] xt_ecn: cannot match TCP bits for non-tcp packets [ 52.621171][ T6264] syzkaller1: entered promiscuous mode [ 52.622974][ T6264] syzkaller1: entered allmulticast mode [ 53.358371][ T6281] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 53.406346][ T6286] program syz.0.66 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.409401][ T6287] fuse: Bad value for 'user_id' [ 53.410997][ T6287] fuse: Bad value for 'user_id' [ 53.482353][ T6296] ======================================================= [ 53.482353][ T6296] WARNING: The mand mount option has been deprecated and [ 53.482353][ T6296] and is ignored by this kernel. Remove the mand [ 53.482353][ T6296] option from the mount to silence this warning. [ 53.482353][ T6296] ======================================================= [ 53.495523][ T6296] new mount options do not match the existing superblock, will be ignored [ 53.551580][ T6300] Unsupported ieee802154 address type: 0 [ 53.692047][ T6314] syzkaller0: entered promiscuous mode [ 53.694177][ T6314] syzkaller0: entered allmulticast mode [ 53.719246][ T6314] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 53.860738][ T6326] capability: warning: `syz.2.76' uses deprecated v2 capabilities in a way that may be insecure [ 54.003811][ T6334] overlay: Unknown parameter 'appraise' [ 54.035058][ T5970] Bluetooth: hci1: command tx timeout [ 54.052922][ T6336] process 'syz.1.82' launched '/dev/fd/3' with NULL argv: empty string added [ 54.090617][ T6338] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 54.094178][ T6338] qnx6: wrong signature (magic) in superblock #1. [ 54.097281][ T6338] qnx6: unable to read the first superblock [ 54.115028][ T5970] Bluetooth: hci0: command tx timeout [ 54.115973][ T5318] Bluetooth: hci3: command tx timeout [ 54.116728][ T5970] Bluetooth: hci2: command tx timeout [ 54.750787][ T6346] netlink: 'syz.2.86': attribute type 38 has an invalid length. [ 54.981701][ T6355] __nla_validate_parse: 7 callbacks suppressed [ 54.981711][ T6355] netlink: 164 bytes leftover after parsing attributes in process `syz.0.88'. [ 54.988416][ T5970] Bluetooth: hci3: ACL packet for unknown connection handle 2842 [ 55.005880][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 55.011541][ T6361] program syz.1.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.035643][ T6355] getblk(): invalid block size 0 requested [ 55.037619][ T6355] logical block size: 512 [ 55.038991][ T6355] CPU: 2 UID: 0 PID: 6355 Comm: syz.0.88 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 55.039004][ T6355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.039009][ T6355] Call Trace: [ 55.039014][ T6355] [ 55.039018][ T6355] dump_stack_lvl+0x16c/0x1f0 [ 55.039059][ T6355] __getblk_slow+0x54b/0x5f0 [ 55.039076][ T6355] ? find_held_lock+0x2b/0x80 [ 55.039089][ T6355] ? __pfx___might_resched+0x10/0x10 [ 55.039107][ T6355] bdev_getblk+0xd4/0xe0 [ 55.039120][ T6355] __bread_gfp+0x86/0x3c0 [ 55.039132][ T6355] ntfs_bread+0xd9/0x210 [ 55.039143][ T6355] ntfs_fill_super+0x676/0x4260 [ 55.039165][ T6355] ? snprintf+0xc7/0x100 [ 55.039180][ T6355] ? __pfx_snprintf+0x10/0x10 [ 55.039195][ T6355] ? __pfx_ntfs_fill_super+0x10/0x10 [ 55.039209][ T6355] ? do_raw_spin_lock+0x12c/0x2b0 [ 55.039220][ T6355] ? find_held_lock+0x2b/0x80 [ 55.039234][ T6355] ? sb_set_blocksize+0x188/0x1d0 [ 55.039248][ T6355] ? setup_bdev_super+0x369/0x730 [ 55.039263][ T6355] get_tree_bdev_flags+0x389/0x620 [ 55.039277][ T6355] ? __pfx_ntfs_fill_super+0x10/0x10 [ 55.039292][ T6355] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 55.039309][ T6355] ? bpf_lsm_capable+0x9/0x10 [ 55.039322][ T6355] ? security_capable+0x7e/0x260 [ 55.039336][ T6355] vfs_get_tree+0x8b/0x340 [ 55.039349][ T6355] path_mount+0x1414/0x2020 [ 55.039360][ T6355] ? kmem_cache_free+0x2d1/0x4d0 [ 55.039375][ T6355] ? __pfx_path_mount+0x10/0x10 [ 55.039387][ T6355] ? putname+0x154/0x1a0 [ 55.039400][ T6355] __x64_sys_mount+0x28d/0x310 [ 55.039410][ T6355] ? __pfx___x64_sys_mount+0x10/0x10 [ 55.039425][ T6355] do_syscall_64+0xcd/0x4c0 [ 55.039435][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.039445][ T6355] RIP: 0033:0x7faefab8e9a9 [ 55.039454][ T6355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.039463][ T6355] RSP: 002b:00007faefb978038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.039472][ T6355] RAX: ffffffffffffffda RBX: 00007faefadb5fa0 RCX: 00007faefab8e9a9 [ 55.039478][ T6355] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000200000000040 [ 55.039484][ T6355] RBP: 00007faefac10d69 R08: 0000000000000000 R09: 0000000000000000 [ 55.039490][ T6355] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 55.039495][ T6355] R13: 0000000000000000 R14: 00007faefadb5fa0 R15: 00007fff433c6568 [ 55.039507][ T6355] [ 55.039787][ T6355] ntfs3(nullb0): failed to read volume at offset 0x0 [ 55.087600][ T6372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=6372 comm=syz.0.88 [ 55.183969][ T6378] SELinux: ebitmap: truncated map [ 55.189424][ T6378] SELinux: failed to load policy [ 55.190677][ T6380] can0: slcan on ptm0. [ 55.266296][ T6389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'. [ 55.296672][ T6384] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.299496][ T6384] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.302327][ T6384] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.305805][ T6384] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.306667][ T6379] can0 (unregistered): slcan off ptm0. [ 55.372836][ T6399] netlink: 'syz.2.103': attribute type 25 has an invalid length. [ 55.375969][ T6399] netlink: 'syz.2.103': attribute type 7 has an invalid length. [ 55.376080][ T6407] xt_hashlimit: size too large, truncated to 1048576 [ 55.436026][ T6416] usb usb9: usbfs: process 6416 (syz.0.108) did not claim interface 0 before use [ 55.489621][ T6413] fuse: Bad value for 'group_id' [ 55.491749][ T6413] fuse: Bad value for 'group_id' [ 55.493694][ T6413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=6413 comm=syz.2.106 [ 55.498903][ T6407] bond1: entered allmulticast mode [ 55.501639][ T6407] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.521933][ T6413] overlayfs: failed to resolve './file2': -2 [ 55.582456][ T40] kauditd_printk_skb: 128 callbacks suppressed [ 55.582472][ T40] audit: type=1400 audit(1753548714.472:312): avc: denied { ioctl } for pid=6439 comm="syz.2.115" path="socket:[12533]" dev="sockfs" ino=12533 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.592827][ T40] audit: type=1400 audit(1753548714.482:313): avc: denied { bind } for pid=6439 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.599914][ T40] audit: type=1400 audit(1753548714.482:314): avc: denied { name_bind } for pid=6439 comm="syz.2.115" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 55.606740][ T40] audit: type=1400 audit(1753548714.482:315): avc: denied { node_bind } for pid=6439 comm="syz.2.115" saddr=172.20.20.26 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 55.683628][ T40] audit: type=1400 audit(1753548714.572:316): avc: denied { map } for pid=6451 comm="syz.1.118" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.692553][ T40] audit: type=1400 audit(1753548714.572:317): avc: denied { execute } for pid=6451 comm="syz.1.118" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.731364][ T40] audit: type=1400 audit(1753548714.622:318): avc: denied { append } for pid=6453 comm="syz.3.119" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.766047][ T6454] loop4: detected capacity change from 0 to 2560 [ 55.771973][ T6320] Buffer I/O error on dev loop4, logical block 0, async page read [ 55.779445][ T6454] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 55.782885][ T6454] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 55.786051][ T6454] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 55.788912][ T6454] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 55.791744][ T6454] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 55.794920][ T6454] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 55.798172][ T6454] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 55.800912][ T6454] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 55.803814][ T6454] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 55.856137][ T6457] loop2: detected capacity change from 0 to 7 [ 55.858300][ T40] audit: type=1400 audit(1753548714.752:319): avc: denied { write } for pid=6456 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.861167][ T6457] loop2: p1 [ 55.864567][ T40] audit: type=1400 audit(1753548714.752:320): avc: denied { nlmsg_write } for pid=6456 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.868128][ T6457] loop2: partition table partially beyond EOD, truncated [ 55.877349][ T6457] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 55.918477][ T6320] udevd[6320]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.920439][ T6468] loop4: detected capacity change from 0 to 2560 [ 55.982308][ T40] audit: type=1400 audit(1753548714.872:321): avc: denied { read write } for pid=6469 comm="syz.3.124" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.246966][ T6021] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.264360][ T5970] Bluetooth: hci3: ACL packet for unknown connection handle 7 [ 56.405567][ T6021] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 56.410514][ T6021] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.414159][ T6021] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.418907][ T6021] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.422790][ T6021] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.426726][ T6021] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.430571][ T6021] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.434192][ T6021] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.437949][ T6021] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.441656][ T6021] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.447274][ T6021] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.450985][ T6021] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.458136][ T6021] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.461838][ T6021] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.465600][ T6021] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.470043][ T6021] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.474067][ T6021] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.478013][ T6021] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.482413][ T6021] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.486248][ T6021] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.488957][ T6021] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.492369][ T6021] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.495453][ T6021] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.498481][ T6021] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 56.501953][ T6021] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.505716][ T6021] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 56.508740][ T6021] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 56.511427][ T6021] usb 8-1: Product: syz [ 56.512825][ T6021] usb 8-1: Manufacturer: syz [ 56.514364][ T6021] usb 8-1: SerialNumber: syz [ 56.519075][ T6021] usb 8-1: config 0 descriptor?? [ 56.524982][ T6021] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 56.550019][ T6486] netlink: 'syz.2.130': attribute type 10 has an invalid length. [ 56.557736][ T6486] team0: Device ipvlan1 failed to register rx_handler [ 56.605697][ T6486] kvm: MWAIT instruction emulated as NOP! [ 56.775681][ C2] usb 8-1: yurex_control_callback - control failed: -71 [ 56.779236][ T6021] usb 8-1: USB disconnect, device number 2 [ 56.782419][ T6021] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 56.908341][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 56.911197][ T6505] netlink: 'syz.1.135': attribute type 20 has an invalid length. [ 56.917418][ T6505] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.920226][ T6505] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.922979][ T6505] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.926257][ T6505] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.930019][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 56.932816][ T6505] netlink: 'syz.1.135': attribute type 20 has an invalid length. [ 57.041142][ T6507] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 57.249599][ T6517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6517 comm=syz.2.140 [ 57.597992][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 57.710522][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 57.713364][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 57.720048][ T6556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.153'. [ 57.751806][ T6559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 57.806142][ T837] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.849746][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 57.904871][ T59] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.969288][ T837] usb 7-1: Using ep0 maxpacket: 8 [ 57.973861][ T837] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.976791][ T837] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 57.980535][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.994837][ T837] usb 7-1: config 0 descriptor?? [ 58.076766][ T59] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 58.080311][ T59] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 58.084374][ T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 58.088534][ T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 58.093015][ T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 58.099223][ T59] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 58.102852][ T59] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 58.106888][ T59] usb 5-1: Product: syz [ 58.108834][ T59] usb 5-1: Manufacturer: syz [ 58.118268][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 58.120552][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 58.125563][ T59] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 58.128114][ T59] cdc_wdm 5-1:1.0: Unknown control protocol [ 58.133598][ T6590] tipc: Cannot configure node identity twice [ 58.165722][ T6594] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 58.318678][ T59] usb 5-1: USB disconnect, device number 2 [ 58.319147][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 58.323423][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 58.325434][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 58.410313][ T837] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 58.413266][ T837] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 58.416800][ T837] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 58.419614][ T837] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 58.422427][ T837] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 58.426520][ T837] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 58.461014][ T6621] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 58.631724][ T1340] usb 7-1: USB disconnect, device number 4 [ 58.923431][ T6649] syzkaller1: entered promiscuous mode [ 58.925377][ T6649] syzkaller1: entered allmulticast mode [ 59.172601][ T59] IPVS: starting estimator thread 0... [ 59.199214][ T6667] could not open pipe file descriptor [ 59.201327][ T6667] could not open pipe file descriptor [ 59.203379][ T6667] could not open pipe file descriptor [ 59.206030][ T6667] could not open pipe file descriptor [ 59.207856][ T6667] could not open pipe file descriptor [ 59.209644][ T6667] could not open pipe file descriptor [ 59.211483][ T6667] could not open pipe file descriptor [ 59.213288][ T6667] could not open pipe file descriptor [ 59.216159][ T6667] could not open pipe file descriptor [ 59.217986][ T6667] could not open pipe file descriptor [ 59.220042][ T6667] could not open pipe file descriptor [ 59.222436][ T6667] could not open pipe file descriptor [ 59.224715][ T6667] could not open pipe file descriptor [ 59.230876][ T6667] could not open pipe file descriptor [ 59.233256][ T6667] could not open pipe file descriptor [ 59.236311][ T6667] could not open pipe file descriptor [ 59.238135][ T6667] could not open pipe file descriptor [ 59.240129][ T6667] could not open pipe file descriptor [ 59.242127][ T6667] could not open pipe file descriptor [ 59.243861][ T6667] could not open pipe file descriptor [ 59.245734][ T6667] could not open pipe file descriptor [ 59.247553][ T6667] could not open pipe file descriptor [ 59.249751][ T6667] could not open pipe file descriptor [ 59.252505][ T6667] could not open pipe file descriptor [ 59.256133][ T6667] could not open pipe file descriptor [ 59.257188][ T6666] overlayfs: failed to resolve './file1': -2 [ 59.264881][ T6664] IPVS: using max 45 ests per chain, 108000 per kthread [ 59.283674][ T6676] overlayfs: failed to resolve './file1': -2 [ 59.487505][ T6688] openvswitch: netlink: Key type 5908 is out of range max 32 [ 59.516213][ T6683] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.518637][ T6683] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.526272][ T6683] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.529565][ T6683] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.531600][ T6683] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.535017][ T6683] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.538393][ T6683] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.540350][ T6683] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.543253][ T6683] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.548115][ T6683] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.550037][ T6683] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.555601][ T6683] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.133727][ C2] vcan0: j1939_tp_rxtimer: 0xffff888047ef5400: rx timeout, send abort [ 60.510901][ T6708] __nla_validate_parse: 8 callbacks suppressed [ 60.510912][ T6708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.197'. [ 60.515977][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'. [ 60.518766][ T6708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.197'. [ 60.521538][ T6708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.197'. [ 60.634505][ C2] vcan0: j1939_tp_rxtimer: 0xffff888047ef4c00: rx timeout, send abort [ 60.637362][ C2] vcan0: j1939_tp_rxtimer: 0xffff888047ef5400: abort rx timeout. Force session deactivation [ 60.669897][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 60.669911][ T40] audit: type=1400 audit(1753548719.562:376): avc: denied { mount } for pid=6709 comm="syz.3.198" name="/" dev="autofs" ino=14366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 60.675395][ T6712] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 60.679694][ T40] audit: type=1400 audit(1753548719.562:377): avc: denied { mounton } for pid=6709 comm="syz.3.198" path="/51/file1/bus" dev="autofs" ino=12073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 60.699108][ T40] audit: type=1400 audit(1753548719.592:378): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 60.721206][ T40] audit: type=1400 audit(1753548719.612:379): avc: denied { read } for pid=6713 comm="syz.3.199" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.729164][ T40] audit: type=1400 audit(1753548719.612:380): avc: denied { open } for pid=6713 comm="syz.3.199" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.865305][ T40] audit: type=1400 audit(1753548719.762:381): avc: denied { write } for pid=6715 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.087608][ T40] audit: type=1400 audit(1753548719.982:382): avc: denied { name_connect } for pid=6720 comm="syz.0.202" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 61.137136][ C2] vcan0: j1939_tp_rxtimer: 0xffff888047ef4c00: abort rx timeout. Force session deactivation [ 61.172597][ T40] audit: type=1400 audit(1753548720.062:383): avc: denied { block_suspend } for pid=6718 comm="syz.1.201" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.189203][ T6729] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 61.287235][ T40] audit: type=1400 audit(1753548720.182:384): avc: denied { write } for pid=6741 comm="syz.0.206" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.378959][ T6746] netlink: 'syz.1.207': attribute type 3 has an invalid length. [ 61.381349][ T6746] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 61.383810][ T6746] netlink: 220 bytes leftover after parsing attributes in process `syz.1.207'. [ 61.386875][ T6747] netlink: 'syz.1.207': attribute type 3 has an invalid length. [ 61.389849][ T6747] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 61.392825][ T6747] netlink: 220 bytes leftover after parsing attributes in process `syz.1.207'. [ 61.396770][ T40] audit: type=1400 audit(1753548720.292:385): avc: denied { listen } for pid=6745 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 61.486349][ T5967] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.554961][ T5967] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.555089][ T5318] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.555110][ T5958] Bluetooth: hci3: command 0x0405 tx timeout [ 61.832372][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 62.282771][ T6809] tipc: Started in network mode [ 62.284399][ T6809] tipc: Node identity 56217208870d, cluster identity 4711 [ 62.289661][ T6809] tipc: Enabled bearer , priority 0 [ 62.293147][ T6809] syzkaller0: entered promiscuous mode [ 62.297833][ T6809] syzkaller0: entered allmulticast mode [ 62.315939][ T6809] tipc: Resetting bearer [ 62.320951][ T6808] tipc: Resetting bearer [ 62.333019][ T6808] tipc: Disabling bearer [ 62.475319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.510934][ T6820] autofs: Unknown parameter 'G' [ 62.529058][ T6820] fuse: Unknown parameter '­u$ǽ' [ 62.531365][ T6822] netlink: 48 bytes leftover after parsing attributes in process `syz.1.228'. [ 62.816128][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 62.836344][ T6834] batadv0: entered promiscuous mode [ 62.838675][ T6834] macvtap1: entered allmulticast mode [ 62.844815][ T6834] batadv0: entered allmulticast mode [ 62.850365][ T6834] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 62.892536][ T6841] tmpfs: Unknown parameter '«ij?ÝÏJd*Úf¤PXD̶_Æâ";aZÔãÀ~³µ³RçFØïWý¹@"W™' [ 63.127873][ T6851] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 63.136114][ T6851] CIFS mount error: No usable UNC path provided in device string! [ 63.136114][ T6851] [ 63.139330][ T6851] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 63.226482][ T6854] program syz.0.238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.373125][ T6800] Set syz1 is full, maxelem 65536 reached [ 63.555509][ T5970] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.634926][ T5970] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.634985][ T5318] Bluetooth: hci3: command 0x0405 tx timeout [ 63.644869][ T5318] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.710621][ T6883] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 63.866398][ T6896] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 63.962506][ T6903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 64.125678][ T835] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.265262][ T835] usb 5-1: device descriptor read/64, error -71 [ 64.321504][ T6920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.324540][ T6921] sctp: [Deprecated]: syz.3.259 (pid 6921) Use of int in maxseg socket option. [ 64.324540][ T6921] Use struct sctp_assoc_value instead [ 64.429036][ T6927] fuse: Bad value for 'fd' [ 64.515333][ T835] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.644924][ T835] usb 5-1: device descriptor read/64, error -71 [ 64.760355][ T835] usb usb5-port1: attempt power cycle [ 64.835235][ T5318] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 64.840602][ T6933] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 65.104889][ T835] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 65.126483][ T835] usb 5-1: device descriptor read/8, error -71 [ 65.374932][ T835] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 65.383829][ T6940] nft_compat: unsupported protocol 0 [ 65.397028][ T835] usb 5-1: device descriptor read/8, error -71 [ 65.480749][ T6949] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 65.515370][ T835] usb usb5-port1: unable to enumerate USB device [ 65.575127][ T6958] netlink: 'syz.3.270': attribute type 10 has an invalid length. [ 65.585891][ T6958] batman_adv: batadv0: Adding interface: team0 [ 65.588477][ T6958] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.589651][ T6960] set match dimension is over the limit! [ 65.599025][ T6958] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 65.641100][ T6960] __nla_validate_parse: 5 callbacks suppressed [ 65.641113][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 65.644362][ T6965] overlay: Unknown parameter 'smackfsdef' [ 65.644888][ T5318] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.652500][ T6965] netlink: 168 bytes leftover after parsing attributes in process `syz.3.272'. [ 65.682628][ T6967] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 65.714918][ T5970] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.716744][ T5318] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.717419][ T5970] Bluetooth: hci3: command 0x0405 tx timeout [ 65.773463][ T6969] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 65.780578][ T24] hid (null): unknown global tag 0xc [ 65.789584][ T24] hid-generic 0004:009B:0007.0003: reserved main item tag 0xd [ 65.792855][ T24] hid-generic 0004:009B:0007.0003: unknown global tag 0xc [ 65.799712][ T24] hid-generic 0004:009B:0007.0003: item 0 1 1 12 parsing failed [ 65.803375][ T24] hid-generic 0004:009B:0007.0003: probe with driver hid-generic failed with error -22 [ 66.463050][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 66.463065][ T40] audit: type=1400 audit(1753548725.352:406): avc: denied { mounton } for pid=6971 comm="syz.1.275" path="/92/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 66.493560][ T40] audit: type=1400 audit(1753548725.382:407): avc: denied { unmount } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 66.944180][ C2] ata1: illegal qc_active transition (00000000->00040000) [ 66.949375][ T40] audit: type=1400 audit(1753548725.842:408): avc: denied { append } for pid=6988 comm="syz.1.279" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.950288][ T6989] comedi comedi3: comedi_config --init_data is deprecated [ 66.963665][ T6992] comedi comedi3: comedi_config --init_data is deprecated [ 66.994830][ T40] audit: type=1400 audit(1753548725.882:409): avc: denied { mount } for pid=6995 comm="syz.0.280" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 67.001664][ T40] audit: type=1400 audit(1753548725.882:410): avc: denied { search } for pid=6995 comm="syz.0.280" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 67.009561][ T40] audit: type=1400 audit(1753548725.882:411): avc: denied { unmount } for pid=6995 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 67.020153][ T40] audit: type=1400 audit(1753548725.882:412): avc: denied { search } for pid=6995 comm="syz.0.280" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 67.027906][ T40] audit: type=1400 audit(1753548725.882:413): avc: denied { search } for pid=6995 comm="syz.0.280" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 67.034549][ T40] audit: type=1400 audit(1753548725.912:414): avc: denied { mount } for pid=7001 comm="syz.0.282" name="/" dev="hugetlbfs" ino=14140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 67.059122][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 67.063070][ T7005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.283'. [ 67.092448][ T40] audit: type=1400 audit(1753548725.982:415): avc: denied { setopt } for pid=7006 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.116293][ T7009] overlayfs: conflicting options: nfs_export=on,index=off [ 67.177196][ T7011] Driver unsupported XDP return value 0 on prog (id 88) dev N/A, expect packet loss! [ 67.189506][ T7013] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.268121][ T1112] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 67.271091][ T1112] ata1.00: configured for UDMA/100 [ 67.455059][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 67.461496][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.464515][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.527955][ T7035] overlayfs: failed to resolve './file0': -2 [ 67.622409][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.292'. [ 67.794847][ T5970] Bluetooth: hci3: command 0x0405 tx timeout [ 67.904335][ T7042] warning: `syz.2.293' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.060658][ T79] nci: nci_ntf_packet: unknown ntf opcode 0x504 [ 69.194891][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 69.285143][ T7094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.308'. [ 69.334936][ T9] usb 7-1: device descriptor read/64, error -71 [ 69.370914][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 69.459391][ T7117] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 69.496666][ T7122] 8021q: VLANs not supported on sit0 [ 69.537609][ T7124] usb usb8: usbfs: process 7124 (syz.3.316) did not claim interface 0 before use [ 69.568823][ T7129] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 69.584936][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 69.596754][ T7133] loop6: detected capacity change from 0 to 524287999 [ 69.725019][ T9] usb 7-1: device descriptor read/64, error -71 [ 69.845952][ T9] usb usb7-port1: attempt power cycle [ 69.989359][ T7139] autofs: Unknown parameter '' [ 70.108924][ T7146] misc userio: No port type given on /dev/userio [ 70.204884][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 70.213287][ T7159] netlink: 32 bytes leftover after parsing attributes in process `syz.3.325'. [ 70.216475][ T7159] gretap0: entered promiscuous mode [ 70.227137][ T9] usb 7-1: device descriptor read/8, error -71 [ 70.230936][ T7162] netlink: 32 bytes leftover after parsing attributes in process `syz.3.325'. [ 70.378811][ T7170] netlink: 'syz.3.328': attribute type 21 has an invalid length. [ 70.381629][ T7170] netlink: 'syz.3.328': attribute type 6 has an invalid length. [ 70.464838][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 70.485225][ T9] usb 7-1: device descriptor read/8, error -71 [ 70.595056][ T9] usb usb7-port1: unable to enumerate USB device [ 70.734832][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.894818][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 70.899215][ T29] usb 6-1: config index 0 descriptor too short (expected 50356, got 796) [ 70.902074][ T29] usb 6-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 70.904839][ T29] usb 6-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 70.907935][ T29] usb 6-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 70.912975][ T29] usb 6-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 70.916894][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.919390][ T29] usb 6-1: Product: syz [ 70.920717][ T29] usb 6-1: Manufacturer: syz [ 70.922199][ T29] usb 6-1: SerialNumber: syz [ 71.078112][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.081021][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.195462][ T29] usb 6-1: USB disconnect, device number 2 [ 71.574852][ T837] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 71.720465][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 71.720475][ T40] audit: type=1400 audit(1753548730.612:428): avc: denied { read } for pid=7213 comm="syz.1.340" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.724807][ T837] usb 8-1: Invalid ep0 maxpacket: 32 [ 71.731302][ T40] audit: type=1400 audit(1753548730.612:429): avc: denied { open } for pid=7213 comm="syz.1.340" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.740023][ T40] audit: type=1400 audit(1753548730.612:430): avc: denied { ioctl } for pid=7213 comm="syz.1.340" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.854843][ T837] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 71.902431][ T7223] xt_hashlimit: overflow, rate too high: 0 [ 72.026205][ T837] usb 8-1: Invalid ep0 maxpacket: 32 [ 72.028199][ T837] usb usb8-port1: attempt power cycle [ 72.111161][ T7231] autofs: Unknown parameter './file1' [ 72.189718][ T7237] @: renamed from vlan0 (while UP) [ 72.194541][ T40] audit: type=1400 audit(1753548731.082:431): avc: denied { map } for pid=7236 comm="syz.2.346" path="/proc/144/net/vlan/vlan0" dev="proc" ino=4026533629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 72.364897][ T837] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 72.395372][ T837] usb 8-1: Invalid ep0 maxpacket: 32 [ 72.428843][ T40] audit: type=1400 audit(1753548731.322:432): avc: denied { setopt } for pid=7252 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.449195][ T7253] __nla_validate_parse: 3 callbacks suppressed [ 72.449205][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 72.491841][ T7255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2066 sclass=netlink_route_socket pid=7255 comm=syz.2.353 [ 72.546049][ T837] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 72.566319][ T837] usb 8-1: Invalid ep0 maxpacket: 32 [ 72.569135][ T837] usb usb8-port1: unable to enumerate USB device [ 72.729768][ T7259] xt_limit: Overflow, try lower: 1207959552/384 [ 72.776585][ T7261] bridge_slave_0: left allmulticast mode [ 72.778441][ T7261] bridge_slave_0: left promiscuous mode [ 72.780983][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.785132][ T7261] bridge_slave_1: left allmulticast mode [ 72.786999][ T7261] bridge_slave_1: left promiscuous mode [ 72.788824][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.793781][ T7261] bond0: (slave bond_slave_0): Releasing backup interface [ 72.798904][ T7261] bond0: (slave bond_slave_1): Releasing backup interface [ 72.809397][ T7261] team0: Port device team_slave_0 removed [ 72.814164][ T7261] team0: Port device team_slave_1 removed [ 72.816921][ T7261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.819315][ T7261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.822522][ T7261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.825186][ T7261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.845716][ T7262] team0: Mode changed to "loadbalance" [ 72.854179][ T7261] netlink: 'syz.1.356': attribute type 10 has an invalid length. [ 72.860018][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.862849][ T7261] team0: Port device bond0 added [ 72.866049][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 72.926396][ T7261] team0 (unregistering): Port device bond0 removed [ 73.074558][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 73.100668][ T7268] nvme_fabrics: missing parameter 'transport=%s' [ 73.103042][ T7268] nvme_fabrics: missing parameter 'nqn=%s' [ 73.125580][ T7270] nvme_fabrics: missing parameter 'transport=%s' [ 73.127661][ T7270] nvme_fabrics: missing parameter 'nqn=%s' [ 73.250601][ T7286] fuse: Bad value for 'fd' [ 73.254348][ T7287] fuse: Unknown parameter '' [ 73.282082][ T7290] binder: 7289:7290 ioctl 4004556e e returned -22 [ 73.438666][ T40] audit: type=1400 audit(1753548732.332:433): avc: denied { name_bind } for pid=7293 comm="syz.1.365" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 73.439342][ T7294] netlink: 80 bytes leftover after parsing attributes in process `syz.1.365'. [ 74.468880][ T40] audit: type=1400 audit(1753548733.362:434): avc: denied { map } for pid=7303 comm="syz.3.368" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.477816][ T40] audit: type=1400 audit(1753548733.362:435): avc: denied { call } for pid=7303 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 74.594940][ T5318] Bluetooth: hci4: command 0x1003 tx timeout [ 74.596694][ T5970] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 74.624694][ T40] audit: type=1400 audit(1753548733.512:436): avc: denied { create } for pid=7305 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.632728][ T40] audit: type=1400 audit(1753548733.522:437): avc: denied { bind } for pid=7305 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.788373][ T7318] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 75.518201][ T7356] block nbd2: shutting down sockets [ 76.245863][ T7378] sg_write: data in/out 46809710/114 bytes for SCSI command 0xe4-- guessing data in; [ 76.245863][ T7378] program syz.1.389 not setting count and/or reply_len properly [ 76.300630][ T7385] pim6reg1: entered promiscuous mode [ 76.302373][ T7385] pim6reg1: entered allmulticast mode [ 76.376410][ T5970] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 77.081341][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 77.081351][ T40] audit: type=1400 audit(1753548735.972:444): avc: denied { read } for pid=5352 comm="acpid" name="event9" dev="devtmpfs" ino=2891 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 77.090747][ T40] audit: type=1400 audit(1753548735.972:445): avc: denied { open } for pid=5352 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=2891 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 77.098562][ T40] audit: type=1400 audit(1753548735.972:446): avc: denied { ioctl } for pid=5352 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=2891 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 77.170739][ T40] audit: type=1400 audit(1753548736.062:447): avc: denied { setopt } for pid=7406 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.267051][ T7416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.403'. [ 77.294198][ T40] audit: type=1400 audit(1753548736.182:448): avc: denied { create } for pid=7417 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 77.300196][ T40] audit: type=1400 audit(1753548736.182:449): avc: denied { module_request } for pid=7419 comm="syz.1.405" kmod="crypto-lrw(ecb-aes-aesni)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.338661][ T40] audit: type=1400 audit(1753548736.232:450): avc: denied { getopt } for pid=7429 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.451946][ T40] audit: type=1400 audit(1753548736.342:451): avc: denied { accept } for pid=7443 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 77.460538][ T40] audit: type=1400 audit(1753548736.352:452): avc: denied { accept } for pid=7443 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.554423][ T7458] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 77.560660][ T40] audit: type=1400 audit(1753548736.452:453): avc: denied { relabelto } for pid=7456 comm="syz.1.412" name="file0" dev="tmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_lock_t:s0" [ 77.651150][ T7472] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 77.660056][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 77.661038][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 77.663899][ C2] vcan0: j1939_session_tx_dat: 0xffff88802c2d1c00: queue data error: -100 [ 77.669509][ C2] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 77.672056][ C2] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 77.674974][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.677618][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.680077][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.682501][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.684963][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.687390][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.689829][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.692294][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.695173][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.697641][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.700087][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.702817][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.706177][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.709304][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.712607][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.716025][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.719407][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.722097][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.725056][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.727709][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.730169][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.732665][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.735434][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.737961][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.741083][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.744330][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.747722][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.750995][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.754297][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.757617][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.760852][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.763713][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.766286][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.768762][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.771269][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.773910][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.776629][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.779070][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.781521][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.783985][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.786443][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.788846][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.791264][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.793910][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.796866][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.799511][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.802350][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.804864][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.807520][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.810013][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.812609][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.815470][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.817939][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.820352][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.822777][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.825718][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.828334][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.830918][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.833497][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.836354][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.839138][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.841763][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.844815][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.847317][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.849869][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.852477][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.855148][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.857859][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.860365][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.862876][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.865563][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.868021][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.870638][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.873142][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.876013][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.878520][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.881092][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.883663][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.886407][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.888888][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.891443][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.894097][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.896729][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.899235][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.901773][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.904472][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.907111][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.909586][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.912217][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.914788][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.917307][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.919776][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.922299][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.924862][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.927450][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.929946][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.932520][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.935418][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.937963][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.940514][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.943096][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.945851][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.948357][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.950890][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.953834][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.956534][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.958987][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.961437][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.964577][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.967902][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.971191][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.974408][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.977343][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.980331][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.983168][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.985644][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.988075][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.990488][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.992983][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 77.995449][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 77.997898][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.000295][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.002729][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.005172][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.007592][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 78.009993][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 78.072437][ T7478] Bluetooth: MGMT ver 1.23 [ 78.108407][ T7482] loop4: detected capacity change from 0 to 7 [ 78.112087][ T7482] Dev loop4: unable to read RDB block 7 [ 78.113867][ T7482] loop4: AHDI p1 p2 [ 78.116600][ T7482] loop4: partition table partially beyond EOD, truncated [ 78.119306][ T7482] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 78.140408][ T6320] udevd[6320]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 78.241049][ T7488] 9pnet_virtio: no channels available for device syz [ 78.272587][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 78.427176][ T7506] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 78.430554][ T7506] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 78.463609][ T7521] overlayfs: overlapping lowerdir path [ 78.552171][ T7527] vivid-003: disconnect [ 78.554062][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.434'. [ 78.638649][ T7529] vivid-003: reconnect [ 78.750863][ T7533] tmpfs: Unknown parameter '00000000000000000000004' [ 78.977415][ T7539] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 78.980928][ T7539] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 79.002944][ T7539] xt_CT: No such helper "pptp" [ 79.408431][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.447'. [ 79.470234][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.447'. [ 79.508474][ T7571] syz.2.448: attempt to access beyond end of device [ 79.508474][ T7571] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 79.513046][ T7571] syz.2.448: attempt to access beyond end of device [ 79.513046][ T7571] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 79.583401][ T7576] netlink: 'syz.1.450': attribute type 11 has an invalid length. [ 79.586942][ T7575] netlink: 'syz.1.450': attribute type 11 has an invalid length. [ 79.814448][ T7591] Unknown options in mask 5 [ 79.825115][ T7600] ubi31: attaching mtd0 [ 79.828234][ T7600] ubi31: scanning is finished [ 79.829676][ T7600] ubi31: empty MTD device detected [ 79.878836][ T7603] overlayfs: unescaped trailing colons in lowerdir mount option. [ 79.942102][ T7600] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 79.944517][ T7600] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 79.954803][ T7600] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 79.957084][ T7600] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 79.959406][ T7600] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 79.961603][ T7600] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 79.964371][ T7600] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3079278841 [ 79.968351][ T7600] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 79.973875][ T7613] ubi31: background thread "ubi_bgt31d" started, PID 7613 [ 80.003575][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 80.016584][ T7615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.458'. [ 80.077171][ T7626] can0: slcan on ptm0. [ 80.114961][ T7624] can0 (unregistered): slcan off ptm0. [ 80.183918][ T7633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.466'. [ 80.360306][ T7655] netlink: 612 bytes leftover after parsing attributes in process `syz.1.473'. [ 80.469352][ T7664] overlay: ./file1 is not a directory [ 80.654827][ T59] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 80.779011][ T7682] fuse: Bad value for 'user_id' [ 80.780661][ T7682] fuse: Bad value for 'user_id' [ 80.805407][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 80.809014][ T59] usb 6-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 80.812610][ T59] usb 6-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 80.817035][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.819136][ T59] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 80.821941][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.826013][ T59] usb 6-1: config 0 descriptor?? [ 80.936328][ T7685] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 81.257509][ T7663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7663 comm=syz.1.477 [ 81.267817][ T59] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0 [ 81.270502][ T59] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0 [ 81.273452][ T59] mcp2200 0003:04D8:00DF.0004: unknown main item tag 0x0 [ 81.279292][ T59] mcp2200 0003:04D8:00DF.0004: USB HID vff.ff Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 81.318080][ T61] cfg80211: failed to load regulatory.db [ 81.432873][ T7712] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 81.479272][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.493097][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.505400][ T835] usb 6-1: USB disconnect, device number 3 [ 81.597908][ T7740] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 81.603585][ T7740] UDF-fs: Scanning with blocksize 2048 failed [ 81.610111][ T7740] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 81.613014][ T7740] UDF-fs: Scanning with blocksize 4096 failed [ 81.632728][ T7745] binder: 7744:7745 ioctl c0306201 200000000240 returned -11 [ 81.855835][ T5970] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 82.233202][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 82.233216][ T40] audit: type=1400 audit(1753548741.122:510): avc: denied { connect } for pid=7824 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.318604][ T40] audit: type=1400 audit(1753548741.212:511): avc: denied { listen } for pid=7838 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 82.325106][ T40] audit: type=1400 audit(1753548741.222:512): avc: denied { accept } for pid=7838 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 82.349806][ T7837] kvm: kvm [7836]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 82.353042][ T7837] kvm: kvm [7836]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 82.398637][ T40] audit: type=1326 audit(1753548741.292:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.0.514" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faefab8e9a9 code=0x0 [ 82.425352][ T40] audit: type=1400 audit(1753548741.322:514): avc: denied { ioctl } for pid=7847 comm="syz.2.516" path="socket:[21515]" dev="sockfs" ino=21515 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.454649][ T7837] Failed to get privilege flags for destination (handle=0x2:0x2) [ 82.529302][ T7855] program syz.2.517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.737562][ T40] audit: type=1400 audit(1753548741.632:515): avc: denied { read } for pid=7861 comm="syz.2.519" lport=58491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.196584][ T7866] syzkaller0: entered promiscuous mode [ 83.198371][ T7866] syzkaller0: entered allmulticast mode [ 83.199717][ T40] audit: type=1400 audit(1753548742.092:516): avc: denied { read write } for pid=7867 comm="syz.0.521" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.207805][ T7868] loop6: detected capacity change from 0 to 2560 [ 83.208703][ T7868] buffer_io_error: 631 callbacks suppressed [ 83.208716][ T7868] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.212166][ T40] audit: type=1400 audit(1753548742.092:517): avc: denied { open } for pid=7867 comm="syz.0.521" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.213989][ T7868] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.228653][ T7868] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.231144][ T7868] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.233767][ T7868] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.236856][ T7868] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.239446][ T7868] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.242338][ T7868] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.244913][ T7868] ldm_validate_partition_table(): Disk read failed. [ 83.247085][ T7868] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.249678][ T7868] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.252210][ T7868] Dev loop6: unable to read RDB block 0 [ 83.254286][ T7868] loop6: unable to read partition table [ 83.256273][ T7868] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 83.320278][ T7877] __nla_validate_parse: 73 callbacks suppressed [ 83.320288][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 83.328839][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 83.380095][ T7882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7882 comm=syz.1.526 [ 83.473100][ T40] audit: type=1400 audit(1753548742.362:518): avc: denied { read } for pid=7893 comm="syz.1.529" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 83.483789][ T40] audit: type=1400 audit(1753548742.362:519): avc: denied { open } for pid=7893 comm="syz.1.529" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 83.837618][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 83.837711][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 83.890267][ T7937] netlink: 'syz.3.543': attribute type 13 has an invalid length. [ 83.991996][ T7947] xt_policy: too many policy elements [ 83.995847][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 83.998650][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.547'. [ 84.043337][ T7950] xt_CT: No such helper "pptp" [ 84.045679][ T7953] netlink: 'syz.3.548': attribute type 39 has an invalid length. [ 84.051240][ T7950] netlink: zone id is out of range [ 84.053363][ T7950] netlink: zone id is out of range [ 84.055525][ T7950] netlink: zone id is out of range [ 84.057224][ T7950] netlink: zone id is out of range [ 84.058867][ T7950] netlink: zone id is out of range [ 84.062536][ T7950] netlink: zone id is out of range [ 84.064352][ T7950] netlink: zone id is out of range [ 84.067726][ T7950] netlink: zone id is out of range [ 84.069795][ T7950] netlink: zone id is out of range [ 84.071547][ T7950] netlink: zone id is out of range [ 84.114602][ T7958] random: crng reseeded on system resumption [ 84.139602][ T7963] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 84.139752][ T7961] netlink: 'syz.1.551': attribute type 29 has an invalid length. [ 84.216589][ T7970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7970 comm=syz.2.552 [ 84.938164][ T8013] ./cgroup: Can't lookup blockdev [ 84.964018][ T8016] tmpfs: Bad value for 'mpol' [ 84.964237][ T8018] tmpfs: Bad value for 'mpol' [ 85.012055][ T8025] usb usb8: usbfs: process 8025 (syz.0.569) did not claim interface 0 before use [ 85.258756][ T8060] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8060 comm=syz.0.577 [ 85.262633][ T8060] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8060 comm=syz.0.577 [ 85.278166][ T8063] netlink: 'syz.2.575': attribute type 10 has an invalid length. [ 85.283040][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.287012][ T8063] bridge_slave_1: left allmulticast mode [ 85.289229][ T8063] bridge_slave_1: left promiscuous mode [ 85.291721][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.298109][ T8063] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 85.306139][ T8063] vxcan1: entered promiscuous mode [ 85.342781][ T8073] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 85.351127][ T8073] netlink: 'syz.2.580': attribute type 10 has an invalid length. [ 85.360772][ T8073] team0: Cannot enslave team device to itself [ 85.423969][ T8072] delete_channel: no stack [ 85.461941][ T8092] netlink: 'syz.3.585': attribute type 27 has an invalid length. [ 85.468674][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.470917][ T8093] batman_adv: batadv0: Interface activated: team0 [ 85.507922][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.510522][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.521498][ T8092] batman_adv: batadv0: Interface deactivated: team0 [ 85.576590][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.584958][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.629079][ T8092] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.631939][ T8092] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.635146][ T8092] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.638068][ T8092] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.669111][ T8092] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.672042][ T8092] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.675033][ T8092] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.677784][ T8092] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.681583][ T8092] bond1: left allmulticast mode [ 85.898124][ T5318] Bluetooth: hci4: sending frame failed (-49) [ 85.900614][ T5970] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 86.080338][ T8122] syz.3.592: attempt to access beyond end of device [ 86.080338][ T8122] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 86.085241][ T8122] MINIX-fs: unable to read superblock [ 86.111324][ T8124] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 86.128124][ T8124] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.131231][ T8124] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.134082][ T8124] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.138819][ T8124] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.142742][ T8124] bond1: (slave geneve2): making interface the new active one [ 86.145885][ T8124] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 86.149983][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'. [ 86.155025][ T8124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.159671][ T8129] Cannot find set identified by id 3 to match [ 86.187496][ T8131] netlink: 'syz.2.596': attribute type 4 has an invalid length. [ 86.195044][ T5970] Bluetooth: hci3: command 0x0405 tx timeout [ 86.424933][ T29] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 86.526626][ T8143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.601'. [ 86.596247][ T29] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 86.598960][ T29] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 86.601425][ T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 86.604141][ T29] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 86.607623][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 73, setting to 8 [ 86.610836][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 86.618009][ T29] usb 7-1: string descriptor 0 read error: -22 [ 86.619988][ T29] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 86.623015][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.626987][ T29] usb 7-1: config 0 descriptor?? [ 86.630367][ T29] hub 7-1:0.0: bad descriptor, ignoring hub [ 86.632254][ T29] hub 7-1:0.0: probe with driver hub failed with error -5 [ 86.680110][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 86.683080][ T8153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.604'. [ 86.815172][ T8157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.817177][ T8157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.819166][ T8157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.886551][ T8158] geneve3: entered promiscuous mode [ 86.887570][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.889480][ T8158] geneve3: entered allmulticast mode [ 86.891466][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.033838][ T8161] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.267926][ T8167] netlink: 'syz.3.609': attribute type 21 has an invalid length. [ 87.271222][ T8167] netlink: 'syz.3.609': attribute type 4 has an invalid length. [ 87.332366][ T40] kauditd_printk_skb: 5699 callbacks suppressed [ 87.332377][ T40] audit: type=1400 audit(1753548746.222:6219): avc: granted { setsecparam } for pid=8172 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 87.343975][ T40] audit: type=1400 audit(1753548746.242:6220): avc: granted { setsecparam } for pid=8172 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 87.407772][ T8180] 9pnet_virtio: no channels available for device syz [ 87.410027][ T8180] 9pnet_virtio: no channels available for device syz [ 87.412341][ T8180] 9pnet_virtio: no channels available for device syz [ 87.414630][ T8180] 9pnet_virtio: no channels available for device syz [ 87.417822][ T8180] 9pnet_virtio: no channels available for device syz [ 87.420323][ T8180] 9pnet_virtio: no channels available for device syz [ 87.423370][ T8180] 9pnet_virtio: no channels available for device syz [ 87.425856][ T8180] 9pnet_virtio: no channels available for device syz [ 87.428110][ T8180] 9pnet_virtio: no channels available for device syz [ 87.430333][ T8180] 9pnet_virtio: no channels available for device syz [ 87.432578][ T8180] 9pnet_virtio: no channels available for device syz [ 87.435164][ T8180] 9pnet_virtio: no channels available for device syz [ 87.437313][ T8180] 9pnet_virtio: no channels available for device syz [ 87.439742][ T8180] 9pnet_virtio: no channels available for device syz [ 87.442087][ T8180] 9pnet_virtio: no channels available for device syz [ 87.444370][ T8180] 9pnet_virtio: no channels available for device syz [ 87.446814][ T8180] 9pnet_virtio: no channels available for device syz [ 87.449571][ T8180] 9pnet_virtio: no channels available for device syz [ 87.451890][ T8180] 9pnet_virtio: no channels available for device syz [ 87.454175][ T8180] 9pnet_virtio: no channels available for device syz [ 87.456914][ T8180] 9pnet_virtio: no channels available for device syz [ 87.459257][ T8180] 9pnet_virtio: no channels available for device syz [ 87.461460][ T8180] 9pnet_virtio: no channels available for device syz [ 87.463710][ T8180] 9pnet_virtio: no channels available for device syz [ 87.466005][ T8180] 9pnet_virtio: no channels available for device syz [ 87.468172][ T8180] 9pnet_virtio: no channels available for device syz [ 87.470311][ T8180] 9pnet_virtio: no channels available for device syz [ 87.472522][ T8180] 9pnet_virtio: no channels available for device syz [ 87.475392][ T8180] 9pnet_virtio: no channels available for device syz [ 87.477692][ T8180] 9pnet_virtio: no channels available for device syz [ 87.479772][ T8180] 9pnet_virtio: no channels available for device syz [ 87.482050][ T8180] 9pnet_virtio: no channels available for device syz [ 87.484270][ T8180] 9pnet_virtio: no channels available for device syz [ 87.487125][ T8180] 9pnet_virtio: no channels available for device syz [ 87.489885][ T8180] 9pnet_virtio: no channels available for device syz [ 87.492252][ T8180] 9pnet_virtio: no channels available for device syz [ 87.494697][ T8180] 9pnet_virtio: no channels available for device syz [ 87.496976][ T8180] 9pnet_virtio: no channels available for device syz [ 87.499239][ T8180] 9pnet_virtio: no channels available for device syz [ 87.501433][ T8180] 9pnet_virtio: no channels available for device syz [ 87.503665][ T8180] 9pnet_virtio: no channels available for device syz [ 87.505953][ T8180] 9pnet_virtio: no channels available for device syz [ 87.508244][ T8180] 9pnet_virtio: no channels available for device syz [ 87.510451][ T8180] 9pnet_virtio: no channels available for device syz [ 87.512721][ T8180] 9pnet_virtio: no channels available for device syz [ 87.515510][ T8180] 9pnet_virtio: no channels available for device syz [ 87.517869][ T8180] 9pnet_virtio: no channels available for device syz [ 87.520059][ T8180] 9pnet_virtio: no channels available for device syz [ 87.522318][ T8180] 9pnet_virtio: no channels available for device syz [ 87.524509][ T8180] 9pnet_virtio: no channels available for device syz [ 87.526787][ T8180] 9pnet_virtio: no channels available for device syz [ 87.529059][ T8180] 9pnet_virtio: no channels available for device syz [ 87.531283][ T8180] 9pnet_virtio: no channels available for device syz [ 87.533553][ T8180] 9pnet_virtio: no channels available for device syz [ 87.535895][ T8180] 9pnet_virtio: no channels available for device syz [ 87.538188][ T8180] 9pnet_virtio: no channels available for device syz [ 87.540419][ T8180] 9pnet_virtio: no channels available for device syz [ 87.540499][ T8193] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 87.543062][ T8180] 9pnet_virtio: no channels available for device syz [ 87.545264][ T8193] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 87.548818][ T8193] vhci_hcd vhci_hcd.0: Device attached [ 87.549879][ T8180] 9pnet_virtio: no channels available for device syz [ 87.554092][ T8180] 9pnet_virtio: no channels available for device syz [ 87.556350][ T8180] 9pnet_virtio: no channels available for device syz [ 87.558571][ T8180] 9pnet_virtio: no channels available for device syz [ 87.560809][ T8180] 9pnet_virtio: no channels available for device syz [ 87.563057][ T8180] 9pnet_virtio: no channels available for device syz [ 87.571032][ T8194] vhci_hcd: connection closed [ 87.572870][ T12] vhci_hcd: stop threads [ 87.577583][ T12] vhci_hcd: release socket [ 87.580826][ T12] vhci_hcd: disconnect device [ 87.714689][ T40] audit: type=1400 audit(1753548746.602:6221): avc: denied { unmount } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 87.747543][ T8204] trusted_key: encrypted_key: insufficient parameters specified [ 87.887877][ T40] audit: type=1400 audit(1753548746.782:6222): avc: denied { connect } for pid=8212 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.907941][ T40] audit: type=1400 audit(1753548746.802:6223): avc: denied { shutdown } for pid=8210 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.070357][ T8226] lo: Master is either lo or non-ether device [ 88.162029][ T40] audit: type=1400 audit(1753548747.052:6224): avc: denied { ioctl } for pid=8228 comm="syz.3.626" path="socket:[20333]" dev="sockfs" ino=20333 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.186701][ T8234] overlayfs: failed to resolve './file1': -2 [ 88.221051][ T8236] mkiss: ax0: crc mode is auto. [ 88.333843][ T8243] __nla_validate_parse: 9 callbacks suppressed [ 88.333855][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.631'. [ 88.338864][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.631'. [ 88.368611][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 88.371602][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 88.374474][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 88.378600][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 88.381521][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 88.384478][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 88.387874][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 88.390792][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 88.487736][ T8254] misc userio: The device must be registered before sending interrupts [ 88.492148][ T8254] NCSI netlink: No device for ifindex 0 [ 88.516981][ T40] audit: type=1400 audit(1753548747.412:6225): avc: denied { setopt } for pid=8255 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.518922][ T8256] input: syz1 as /devices/virtual/input/input9 [ 88.656797][ T5956] cgroup: fork rejected by pids controller in /syz1 [ 88.739409][ T8265] pim6reg1: entered allmulticast mode [ 88.835040][ T5970] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.835154][ T5967] Bluetooth: hci3: command 0x0405 tx timeout [ 88.978115][ T40] audit: type=1400 audit(1753548747.872:6226): avc: denied { execute } for pid=8270 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 88.985803][ T40] audit: type=1400 audit(1753548747.872:6227): avc: denied { execute_no_trans } for pid=8270 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 88.993964][ T40] audit: type=1400 audit(1753548747.882:6228): avc: denied { ioctl } for pid=8271 comm="syz.3.644" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.049797][ T8282] trusted_key: encrypted_key: master key parameter '' is invalid [ 89.081636][ T8284] lo: entered allmulticast mode [ 89.095868][ T8283] lo: left allmulticast mode [ 89.147765][ T5970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.151286][ T5970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.154455][ T5970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.165315][ T5970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.171488][ T5970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.234460][ T8293] bond0: entered promiscuous mode [ 89.236955][ T8293] bond_slave_0: entered promiscuous mode [ 89.239617][ T8293] bond_slave_1: entered promiscuous mode [ 89.242194][ T8293] bond0: entered allmulticast mode [ 89.244282][ T8293] bond_slave_0: entered allmulticast mode [ 89.248184][ T8293] bond_slave_1: entered allmulticast mode [ 89.284637][ T8296] validate_nla: 2 callbacks suppressed [ 89.284648][ T8296] netlink: 'syz.2.649': attribute type 7 has an invalid length. [ 89.315983][ T835] usb 7-1: USB disconnect, device number 9 [ 89.389370][ T8289] chnl_net:caif_netlink_parms(): no params data found [ 89.396899][ T8314] netlink: 'syz.0.654': attribute type 10 has an invalid length. [ 89.419082][ T8314] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.422021][ T8314] team0: entered promiscuous mode [ 89.423999][ T8314] team_slave_0: entered promiscuous mode [ 89.427492][ T8314] team_slave_1: entered promiscuous mode [ 89.430003][ T8314] team0: entered allmulticast mode [ 89.431992][ T8314] team_slave_0: entered allmulticast mode [ 89.434219][ T8314] team_slave_1: entered allmulticast mode [ 89.436603][ T8314] bond0: (slave team0): Enslaving as an active interface with an up link [ 89.445506][ T8315] ip6tnl2: entered promiscuous mode [ 89.447199][ T8315] ip6tnl2: entered allmulticast mode [ 89.485964][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.488307][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.490578][ T8289] bridge_slave_0: entered allmulticast mode [ 89.493279][ T8289] bridge_slave_0: entered promiscuous mode [ 89.496411][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.498736][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.501077][ T8289] bridge_slave_1: entered allmulticast mode [ 89.505358][ T8289] bridge_slave_1: entered promiscuous mode [ 89.539175][ T8289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.543485][ T8289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.577922][ T8289] team0: Port device team_slave_0 added [ 89.581641][ T8289] team0: Port device team_slave_1 added [ 89.618918][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.621321][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.631043][ T8289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.635403][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.637600][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.646208][ T8289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.689913][ T8289] hsr_slave_0: entered promiscuous mode [ 89.693508][ T8289] hsr_slave_1: entered promiscuous mode [ 89.695710][ T8289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.698224][ T8289] Cannot create hsr debugfs directory [ 89.802567][ T8289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.806639][ T8289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.878865][ T8289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.882219][ T8289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.960128][ T8289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.963405][ T8289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.029149][ T8289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.033253][ T8289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.136106][ T8289] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.140057][ T8289] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.144000][ T8289] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.152897][ T8289] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.203675][ T8289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.219746][ T8289] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.226108][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.228385][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.236174][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.238481][ T6671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.256222][ T8347] gfs2: Unknown parameter 'barrier%½p' [ 90.375821][ T8289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.397470][ T8289] veth0_vlan: entered promiscuous mode [ 90.402949][ T8289] veth1_vlan: entered promiscuous mode [ 90.417893][ T8289] veth0_macvtap: entered promiscuous mode [ 90.424550][ T8289] veth1_macvtap: entered promiscuous mode [ 90.434819][ T8363] net_ratelimit: 7 callbacks suppressed [ 90.434828][ T8363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.434917][ T8362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.438283][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.451720][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.456226][ T8289] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.458948][ T8289] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.459845][ T8333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.461672][ T8289] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.468568][ T8289] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.503814][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.509070][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.526835][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.529289][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.536226][ T8377] random: crng reseeded on system resumption [ 90.573131][ T8377] netlink: 'syz.2.668': attribute type 10 has an invalid length. [ 90.595857][ T8377] team0: Port device geneve0 added [ 90.920892][ T8399] Cannot find set identified by id 0 to match [ 91.018608][ T8413] netlink: 'syz.2.678': attribute type 10 has an invalid length. [ 91.038526][ T8413] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 91.080266][ T8416] openvswitch: netlink: Key type 16144 is out of range max 32 [ 91.129829][ T8421] bridge_slave_0: left allmulticast mode [ 91.132159][ T8421] bridge_slave_0: left promiscuous mode [ 91.134682][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.144696][ T8421] bond0: (slave bridge_slave_1): Releasing backup interface [ 91.173806][ T8421] bond0: (slave bond_slave_0): Releasing backup interface [ 91.183185][ T8425] syz.2.681: attempt to access beyond end of device [ 91.183185][ T8425] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 91.194637][ T8425] syz.2.681: attempt to access beyond end of device [ 91.194637][ T8425] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 91.199514][ T8411] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.204032][ T8425] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 91.204176][ T8411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.210391][ T8421] bond0: (slave bond_slave_1): Releasing backup interface [ 91.211905][ T8411] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.215634][ T8425] syz.2.681: attempt to access beyond end of device [ 91.215634][ T8425] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 91.221495][ T8425] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 91.226306][ T8411] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.226508][ T8425] syz.2.681: attempt to access beyond end of device [ 91.226508][ T8425] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 91.234040][ T8425] syz.2.681: attempt to access beyond end of device [ 91.234040][ T8425] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 91.240303][ T8425] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 91.242359][ T8427] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 91.246904][ T8425] syz.2.681: attempt to access beyond end of device [ 91.246904][ T8425] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 91.251023][ T8425] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 91.254282][ T8425] syz.2.681: attempt to access beyond end of device [ 91.254282][ T8425] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 91.259156][ T8425] syz.2.681: attempt to access beyond end of device [ 91.259156][ T8425] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 91.260896][ T8421] team0: Port device team_slave_0 removed [ 91.263309][ T8425] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 91.269243][ T8425] syz.2.681: attempt to access beyond end of device [ 91.269243][ T8425] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 91.273305][ T8411] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.273350][ T8425] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 91.278900][ T8425] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 91.294145][ T8421] team0: Port device team_slave_1 removed [ 91.298289][ T8421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.300735][ T8421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.305424][ T8421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.307854][ T8421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.320230][ T8421] team0: Port device geneve0 removed [ 91.323950][ T8421] bond0: (slave wlan1): Releasing backup interface [ 91.357265][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.360058][ T8427] team0: Port device bond0 added [ 91.507885][ T8443] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 91.555873][ T1143] nci: nci_rsp_packet: unknown rsp opcode 0xe39 [ 92.375578][ T8463] binder: 8462:8463 unknown command 0 [ 92.377431][ T8463] binder: 8462:8463 ioctl c0306201 2000000003c0 returned -22 [ 92.420079][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 92.420094][ T40] audit: type=1400 audit(1753548751.312:6237): avc: denied { getopt } for pid=8464 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.440193][ T8468] ucma_write: process 666 (syz.3.694) changed security contexts after opening file descriptor, this is not allowed. [ 92.471140][ T40] audit: type=1401 audit(1753548751.362:6238): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 92.518486][ T40] audit: type=1400 audit(1753548751.412:6239): avc: denied { read } for pid=8460 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.810293][ T8493] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 92.812309][ T8493] PKCS7: Only support pkcs7_signedData type [ 92.907834][ T40] audit: type=1400 audit(1753548751.802:6240): avc: denied { accept } for pid=8502 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.234883][ T5970] Bluetooth: hci2: command 0x041b tx timeout [ 93.234891][ T5967] Bluetooth: hci3: command 0x0405 tx timeout [ 93.245048][ T5970] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.397367][ T8543] overlayfs: failed to resolve './file0': -2 [ 93.575519][ T40] audit: type=1400 audit(1753548752.462:6241): avc: denied { execute } for pid=8555 comm="syz.2.719" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 93.726895][ T8559] __nla_validate_parse: 71 callbacks suppressed [ 93.726913][ T8559] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.720'. [ 93.859672][ T8573] comedi comedi3: board detection failed [ 93.944821][ T8581] program syz.3.725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.971314][ T8583] fuse: Bad value for 'rootmode' [ 94.071465][ T8590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.074653][ T40] audit: type=1400 audit(1753548752.962:6242): avc: denied { read } for pid=8591 comm="syz.2.729" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 94.084237][ T8598] block device autoloading is deprecated and will be removed. [ 94.087735][ T40] audit: type=1400 audit(1753548752.962:6243): avc: denied { open } for pid=8591 comm="syz.2.729" path="/135/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 94.101169][ T40] audit: type=1400 audit(1753548752.992:6244): avc: denied { ioctl } for pid=8591 comm="syz.2.729" path="/135/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 94.113422][ T40] audit: type=1400 audit(1753548753.002:6245): avc: denied { name_bind } for pid=8595 comm="syz.0.731" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 94.151073][ T8592] md2: using deprecated bitmap file support [ 94.158962][ T8598] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 94.163437][ T8592] md2: error: failed to get bitmap file [ 94.187305][ T40] audit: type=1400 audit(1753548753.082:6246): avc: denied { bind } for pid=8601 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.224487][ T8607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8607 comm=syz.0.734 [ 94.259357][ T8611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.735'. [ 94.263139][ T8611] usb 2-1: USB disconnect, device number 2 [ 94.438489][ T8630] netlink: 164 bytes leftover after parsing attributes in process `syz.2.741'. [ 94.443400][ T8630] netlink: 164 bytes leftover after parsing attributes in process `syz.2.741'. [ 94.448557][ T8630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.741'. [ 94.609267][ T8609] kvm: kvm [8608]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 94.622295][ T8609] kvm: kvm [8608]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1 [ 94.641078][ T8609] kvm: kvm [8608]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1 [ 94.951994][ T8651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8651 comm=syz.2.748 [ 94.958757][ T8651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8651 comm=syz.2.748 [ 95.257524][ T8674] Bluetooth: MGMT ver 1.23 [ 95.259303][ T8674] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 95.261747][ T8675] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 95.316248][ T5970] Bluetooth: hci2: command 0x041b tx timeout [ 95.649806][ T8698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.753668][ T8714] block device autoloading is deprecated and will be removed. [ 96.163706][ T8739] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 96.340507][ T8751] program syz.3.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.397555][ T8758] fuse: Bad value for 'fd' [ 96.420553][ T8759] PKCS8: Unsupported PKCS#8 version [ 96.591028][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 96.705762][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.786'. [ 96.975298][ T835] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 97.137043][ T835] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.140109][ T835] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.144269][ T835] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.147508][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.375410][ T835] usb 6-1: usb_control_msg returned -32 [ 97.377861][ T835] usbtmc 6-1:16.0: can't read capabilities [ 97.404900][ T5967] Bluetooth: hci2: command 0x041b tx timeout [ 97.729467][ T8789] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 97.732496][ T5970] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 99.485469][ T5970] Bluetooth: hci2: command 0x041b tx timeout [ 99.641868][ T837] usb 6-1: USB disconnect, device number 4 [ 99.737807][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 99.737818][ T40] audit: type=1400 audit(1753548758.693:6251): avc: denied { link } for pid=8805 comm="syz.2.791" name="#d" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.739609][ T8806] evm: overlay not supported [ 99.739785][ T40] audit: type=1400 audit(1753548758.693:6252): avc: denied { rename } for pid=8805 comm="syz.2.791" name="#e" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.849850][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 99.852330][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.792'. [ 99.857197][ T8816] pipefs: Unknown parameter 'nresK¡¯covery' [ 99.860522][ T8816] overlay: ./file0 is not a directory [ 99.883139][ T8818] can0: slcan on ptm0. [ 99.938272][ T40] audit: type=1400 audit(1753548758.893:6253): avc: granted { setsecparam } for pid=8817 comm="syz.0.793" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 99.938538][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 99.996268][ T8817] can0 (unregistered): slcan off ptm0. [ 100.041054][ T8823] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.044002][ T8708] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.047997][ T8823] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.050582][ T8824] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.065383][ T8828] nftables ruleset with unbound chain [ 100.105405][ T40] audit: type=1400 audit(1753548759.063:6254): avc: denied { mounton } for pid=8825 comm="syz.2.796" path="/156/bus" dev="tmpfs" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 100.120892][ T8836] XFS (nullb0): Invalid superblock magic number [ 100.168416][ T8843] ipvlan2: entered promiscuous mode [ 100.181595][ T8844] ipvlan3: entered promiscuous mode [ 100.434944][ T837] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 100.584868][ T837] usb 7-1: Using ep0 maxpacket: 32 [ 100.588645][ T837] usb 7-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 32 [ 100.591678][ T837] usb 7-1: config 1 interface 0 has no altsetting 0 [ 100.596250][ T837] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.598973][ T837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.601414][ T837] usb 7-1: Product: syz [ 100.602789][ T837] usb 7-1: Manufacturer: ဌ [ 100.604333][ T837] usb 7-1: SerialNumber: syz [ 100.607680][ T8846] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.816891][ T837] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 9 proto 2 vid 0x0525 pid 0xA4A8 [ 100.822025][ T837] usb 7-1: USB disconnect, device number 10 [ 100.827258][ T837] usblp0: removed [ 100.924414][ T40] audit: type=1400 audit(1753548759.873:6255): avc: denied { mounton } for pid=8857 comm="syz.3.805" path="/256/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 100.934085][ T40] audit: type=1400 audit(1753548759.883:6256): avc: denied { mount } for pid=8857 comm="syz.3.805" name="/" dev="9p" ino=37486619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 101.020087][ T40] audit: type=1400 audit(1753548759.973:6257): avc: denied { create } for pid=8845 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.027607][ T40] audit: type=1400 audit(1753548759.973:6258): avc: denied { connect } for pid=8845 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.035288][ T40] audit: type=1400 audit(1753548759.973:6259): avc: denied { name_connect } for pid=8845 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 101.042999][ T40] audit: type=1400 audit(1753548759.973:6260): avc: denied { listen } for pid=8845 comm="syz.2.800" lport=38663 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.070749][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.806'. [ 101.564940][ T5967] Bluetooth: hci2: command 0x041b tx timeout [ 101.748624][ T8900] overlayfs: failed to resolve './file1': -2 [ 101.762084][ T8900] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 101.764480][ T8900] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 101.767588][ T8900] vhci_hcd vhci_hcd.0: Device attached [ 101.770241][ T8901] vhci_hcd: connection closed [ 101.772146][ T8706] vhci_hcd: stop threads [ 101.775079][ T8706] vhci_hcd: release socket [ 101.776488][ T8706] vhci_hcd: disconnect device [ 102.114976][ T5967] Bluetooth: hci4: command 0x1003 tx timeout [ 102.115223][ T5970] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.157387][ T8904] overlayfs: failed to resolve './file0': -2 [ 102.313238][ T8909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.347777][ T8909] IPVS: Scheduler module ip_vs_sip not found [ 103.131956][ T8915] netlink: 56 bytes leftover after parsing attributes in process `syz.1.823'. [ 103.274183][ T8924] netlink: 'syz.2.827': attribute type 12 has an invalid length. [ 103.275227][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.826'. [ 103.278471][ T8925] netlink: 'syz.2.827': attribute type 12 has an invalid length. [ 103.320430][ T8930] macsec0: entered promiscuous mode [ 103.322227][ T8930] macsec0: entered allmulticast mode [ 103.323889][ T8930] veth1_macvtap: entered allmulticast mode [ 103.368301][ T8931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.829'. [ 103.422526][ T8938] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 103.430795][ T8942] netlink: 'syz.1.834': attribute type 4 has an invalid length. [ 103.450349][ T8942] netlink: 'syz.1.834': attribute type 4 has an invalid length. [ 103.454141][ T8939] delete_channel: no stack [ 103.501743][ T8948] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29716 sclass=netlink_xfrm_socket pid=8948 comm=syz.2.837 [ 103.503057][ T8950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 103.634834][ T5970] Bluetooth: hci2: command 0x041b tx timeout [ 103.662432][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.842'. [ 103.919215][ T8996] binder: 8995:8996 ioctl 4018620d 0 returned -22 [ 103.937945][ T8996] netlink: 64 bytes leftover after parsing attributes in process `syz.2.854'. [ 103.960081][ T8996] random: crng reseeded on system resumption [ 103.986429][ T9005] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 103.999252][ T9005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.999858][ T9007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.855'. [ 104.105728][ T9019] netlink: 'syz.1.860': attribute type 1 has an invalid length. [ 104.132174][ T9021] xt_bpf: check failed: parse error [ 104.206844][ T61] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 104.334898][ T61] usb 7-1: device descriptor read/64, error -71 [ 104.479590][ T9034] syzkaller0: entered promiscuous mode [ 104.481368][ T9034] syzkaller0: entered allmulticast mode [ 104.484026][ T1142] syzkaller0: tun_net_xmit 48 [ 104.486245][ T9034] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 104.488107][ T9034] syzkaller0: Linktype set failed because interface is up [ 104.523328][ T9034] kvm: kvm [9033]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xe0000011 [ 104.526594][ T9034] kvm: kvm [9033]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xe0000011 [ 104.542282][ T9034] kvm: kvm [9033]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xe0000011 [ 104.560073][ T9034] kvm: kvm [9033]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xe0000011 [ 104.563121][ T9034] kvm: kvm [9033]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xe0000011 [ 104.575231][ T61] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 104.580806][ T9034] kvm_intel: kvm [9033]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0xe0000011 [ 104.705623][ T61] usb 7-1: device descriptor read/64, error -71 [ 104.819340][ T61] usb usb7-port1: attempt power cycle [ 105.154863][ T61] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 105.175581][ T61] usb 7-1: device descriptor read/8, error -71 [ 105.416905][ T61] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 105.435248][ T61] usb 7-1: device descriptor read/8, error -71 [ 105.514265][ T40] kauditd_printk_skb: 151 callbacks suppressed [ 105.514275][ T40] audit: type=1400 audit(1753548764.463:6412): avc: denied { create } for pid=9046 comm="syz.3.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.522557][ T40] audit: type=1400 audit(1753548764.473:6413): avc: denied { bind } for pid=9046 comm="syz.3.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.528756][ T40] audit: type=1400 audit(1753548764.473:6414): avc: denied { write } for pid=9046 comm="syz.3.869" path="socket:[25506]" dev="sockfs" ino=25506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.537395][ T40] audit: type=1400 audit(1753548764.473:6415): avc: denied { getopt } for pid=9046 comm="syz.3.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.543317][ T40] audit: type=1400 audit(1753548764.473:6416): avc: denied { name_connect } for pid=9046 comm="syz.3.869" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 105.550960][ T61] usb usb7-port1: unable to enumerate USB device [ 105.554117][ T40] audit: type=1400 audit(1753548764.473:6417): avc: denied { name_bind } for pid=9048 comm="syz.0.870" src=20129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 105.561298][ T40] audit: type=1400 audit(1753548764.473:6418): avc: denied { getopt } for pid=9046 comm="syz.3.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.567701][ T40] audit: type=1400 audit(1753548764.483:6419): avc: denied { read } for pid=9048 comm="syz.0.870" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.577009][ T40] audit: type=1400 audit(1753548764.483:6420): avc: denied { open } for pid=9048 comm="syz.0.870" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.584257][ T40] audit: type=1400 audit(1753548764.483:6421): avc: denied { ioctl } for pid=9048 comm="syz.0.870" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.603372][ T9061] ------------[ cut here ]------------ [ 105.605203][ T9061] WARNING: CPU: 3 PID: 9061 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.608439][ T9061] Modules linked in: [ 105.609974][ T9061] CPU: 3 UID: 0 PID: 9061 Comm: syz.0.874 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 105.616363][ T9061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.619937][ T9061] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.622050][ T9061] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 105.628832][ T9061] RSP: 0018:ffffc900043474f8 EFLAGS: 00010246 [ 105.630759][ T9061] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 105.633371][ T9061] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 105.636283][ T9061] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 105.638793][ T9061] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 105.641294][ T9061] R13: 1ffff92000868eb4 R14: 0000000400000000 R15: 0000000000000016 [ 105.643797][ T9061] FS: 00007faefb9576c0(0000) GS:ffff8880d6a20000(0000) knlGS:0000000000000000 [ 105.646862][ T9061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.648963][ T9061] CR2: 000020000000f000 CR3: 000000005f2ea000 CR4: 0000000000352ef0 [ 105.651667][ T9061] Call Trace: [ 105.652756][ T9061] [ 105.653741][ T9061] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 105.656002][ T9061] ? rcu_is_watching+0x12/0xc0 [ 105.657558][ T9061] ? trace_kmem_cache_alloc+0x28/0xc0 [ 105.659409][ T9061] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 105.661202][ T9061] ? hashtab_init+0x1b1/0x290 [ 105.662753][ T9061] __alloc_pages_noprof+0xb/0x1b0 [ 105.664367][ T9061] ___kmalloc_large_node+0x84/0x1e0 [ 105.666146][ T9061] ? hashtab_init+0x1b1/0x290 [ 105.667691][ T9061] __kmalloc_large_node_noprof+0x1c/0x70 [ 105.669485][ T9061] ? __pfx_ebitmap_read+0x10/0x10 [ 105.671093][ T9061] __kmalloc_noprof.cold+0xc/0x61 [ 105.672714][ T9061] hashtab_init+0x1b1/0x290 [ 105.674189][ T9061] ? __asan_memcpy+0x3c/0x60 [ 105.675746][ T9061] policydb_read+0x7b4/0x3220 [ 105.677262][ T9061] ? __pfx_policydb_read+0x10/0x10 [ 105.678923][ T9061] security_load_policy+0x15c/0x12c0 [ 105.680610][ T9061] ? irqentry_exit+0x3b/0x90 [ 105.682158][ T9061] ? __pfx_security_load_policy+0x10/0x10 [ 105.684287][ T9061] ? _copy_from_user+0x93/0xd0 [ 105.686101][ T9061] sel_write_load+0x332/0x1bd0 [ 105.687783][ T9061] ? __lock_acquire+0xb8a/0x1c90 [ 105.689544][ T9061] ? __pfx_sel_write_load+0x10/0x10 [ 105.691361][ T9061] ? __pfx_sel_write_load+0x10/0x10 [ 105.693442][ T9061] vfs_write+0x2a0/0x1150 [ 105.695223][ T9061] ? __pfx___mutex_lock+0x10/0x10 [ 105.696956][ T9061] ? __pfx_vfs_write+0x10/0x10 [ 105.698561][ T9061] ? __fget_files+0x20e/0x3c0 [ 105.700100][ T9061] ksys_write+0x12a/0x250 [ 105.701499][ T9061] ? __pfx_ksys_write+0x10/0x10 [ 105.703046][ T9061] do_syscall_64+0xcd/0x4c0 [ 105.704501][ T9061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.706446][ T9061] RIP: 0033:0x7faefab8e9a9 [ 105.707859][ T9061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.713844][ T9061] RSP: 002b:00007faefb957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.716521][ T9061] RAX: ffffffffffffffda RBX: 00007faefadb6080 RCX: 00007faefab8e9a9 [ 105.719015][ T9061] RDX: 000000000000ffbd RSI: 0000200000000000 RDI: 0000000000000003 [ 105.721519][ T9061] RBP: 00007faefac10d69 R08: 0000000000000000 R09: 0000000000000000 [ 105.723989][ T9061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.726891][ T9061] R13: 0000000000000000 R14: 00007faefadb6080 R15: 00007fff433c6568 [ 105.730010][ T9061] [ 105.731252][ T9061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.734137][ T9061] CPU: 3 UID: 0 PID: 9061 Comm: syz.0.874 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 105.738753][ T9061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.742963][ T9061] Call Trace: [ 105.744296][ T9061] [ 105.745485][ T9061] dump_stack_lvl+0x3d/0x1f0 [ 105.747332][ T9061] panic+0x71c/0x800 [ 105.748897][ T9061] ? __pfx_panic+0x10/0x10 [ 105.750680][ T9061] ? show_trace_log_lvl+0x29b/0x3e0 [ 105.752759][ T9061] ? check_panic_on_warn+0x1f/0xb0 [ 105.754823][ T9061] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.757231][ T9061] check_panic_on_warn+0xab/0xb0 [ 105.759218][ T9061] __warn+0xf6/0x3c0 [ 105.760773][ T9061] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.763196][ T9061] report_bug+0x3c3/0x580 [ 105.764923][ T9061] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.767344][ T9061] handle_bug+0x184/0x210 [ 105.769065][ T9061] exc_invalid_op+0x17/0x50 [ 105.770876][ T9061] asm_exc_invalid_op+0x1a/0x20 [ 105.772825][ T9061] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 105.775056][ T9061] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 105.781040][ T9061] RSP: 0018:ffffc900043474f8 EFLAGS: 00010246 [ 105.782966][ T9061] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 105.785447][ T9061] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 105.787928][ T9061] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 105.790421][ T9061] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 105.792901][ T9061] R13: 1ffff92000868eb4 R14: 0000000400000000 R15: 0000000000000016 [ 105.795442][ T9061] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 105.797455][ T9061] ? rcu_is_watching+0x12/0xc0 [ 105.798977][ T9061] ? trace_kmem_cache_alloc+0x28/0xc0 [ 105.800671][ T9061] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 105.802468][ T9061] ? hashtab_init+0x1b1/0x290 [ 105.803974][ T9061] __alloc_pages_noprof+0xb/0x1b0 [ 105.805596][ T9061] ___kmalloc_large_node+0x84/0x1e0 [ 105.807239][ T9061] ? hashtab_init+0x1b1/0x290 [ 105.808734][ T9061] __kmalloc_large_node_noprof+0x1c/0x70 [ 105.810523][ T9061] ? __pfx_ebitmap_read+0x10/0x10 [ 105.812122][ T9061] __kmalloc_noprof.cold+0xc/0x61 [ 105.813751][ T9061] hashtab_init+0x1b1/0x290 [ 105.815225][ T9061] ? __asan_memcpy+0x3c/0x60 [ 105.816697][ T9061] policydb_read+0x7b4/0x3220 [ 105.818211][ T9061] ? __pfx_policydb_read+0x10/0x10 [ 105.819850][ T9061] security_load_policy+0x15c/0x12c0 [ 105.821558][ T9061] ? irqentry_exit+0x3b/0x90 [ 105.823040][ T9061] ? __pfx_security_load_policy+0x10/0x10 [ 105.824841][ T9061] ? _copy_from_user+0x93/0xd0 [ 105.826382][ T9061] sel_write_load+0x332/0x1bd0 [ 105.827907][ T9061] ? __lock_acquire+0xb8a/0x1c90 [ 105.829492][ T9061] ? __pfx_sel_write_load+0x10/0x10 [ 105.831155][ T9061] ? __pfx_sel_write_load+0x10/0x10 [ 105.832814][ T9061] vfs_write+0x2a0/0x1150 [ 105.834210][ T9061] ? __pfx___mutex_lock+0x10/0x10 [ 105.835813][ T9061] ? __pfx_vfs_write+0x10/0x10 [ 105.837349][ T9061] ? __fget_files+0x20e/0x3c0 [ 105.838905][ T9061] ksys_write+0x12a/0x250 [ 105.840279][ T9061] ? __pfx_ksys_write+0x10/0x10 [ 105.841865][ T9061] do_syscall_64+0xcd/0x4c0 [ 105.843307][ T9061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.845163][ T9061] RIP: 0033:0x7faefab8e9a9 [ 105.846588][ T9061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.852642][ T9061] RSP: 002b:00007faefb957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.855290][ T9061] RAX: ffffffffffffffda RBX: 00007faefadb6080 RCX: 00007faefab8e9a9 [ 105.857786][ T9061] RDX: 000000000000ffbd RSI: 0000200000000000 RDI: 0000000000000003 [ 105.860261][ T9061] RBP: 00007faefac10d69 R08: 0000000000000000 R09: 0000000000000000 [ 105.862773][ T9061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.865238][ T9061] R13: 0000000000000000 R14: 00007faefadb6080 R15: 00007fff433c6568 [ 105.867728][ T9061] [ 105.869397][ T9061] Kernel Offset: disabled [ 105.870773][ T9061] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:52:44 Registers: info registers vcpu 0 CPU#0 RAX=000000000012533b RBX=0000000000000000 RCX=ffffffff8b869c99 RDX=0000000000000000 RSI=ffffffff8de3046a RDI=ffffffff8c1574e0 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a94250 R15=0000000000000000 RIP=ffffffff8b8687ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000008000 CR3=0000000027f78000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558162f498 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555581640c5b 00005555816408d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558162f4a0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558164172b 0000555581640fa0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae0010000fffffff ffffff0426100006 0101fa07b8800800 000800040169ea34 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d7a34084caeb2cb 1ed811850ae1be27 cc29cefafc44e90b 404b22bc72ffc656 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8179c652d228c97f 2d1e7a1fb383e360 74690122cb873d31 d0bb3853a7172522 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b798d9255fec6d8 231e2281556b4d1f e6e5e38e5862ec4f 5b4a0c5281c77bc0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6a2af59be785be3d 4a703752d2d8d9e5 b173f1e58f02634b 533e8ea9a060c4bb ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030680040ba003 0008000b98030180 80c208000b900300 10000b8003000108 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 89d540116c8f71b5 711d88828008a630 7410ebbd3f757f11 8ac6783803e40806 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0ca3c6391c5eb1 0f74b8e654dbc87f fb0b1d1516e550b6 034d3d7b54b8bff3 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101800400080002 1000021000080171 f400100002100005 8004060143cc0030 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff888037f457c0 RCX=000000000000daab RDX=0000000000000007 RSI=1ffffffff364ce40 RDI=ffffffff9b267200 RBP=000000000202000a RSP=ffffc900006a05e8 R8 =000000000f02000a R9 =0000000000000016 R10=0000000000000000 R11=0000000000000001 R12=ffff88805ff7bae2 R13=0000000000000000 R14=ffffffff9b266b80 R15=ffff888037f45854 RIP=ffffffff89fb945a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556a0f6500 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5115ee56c0 CR3=0000000012956000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558162f498 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555581640c5b 00005555816408d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558162f4a0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558164172b 0000555581640fa0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae0010000fffffff ffffff0426100006 0101fa07b8800800 000800040169ea34 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d7a34084caeb2cb 1ed811850ae1be27 cc29cefafc44e90b 404b22bc72ffc656 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8179c652d228c97f 2d1e7a1fb383e360 74690122cb873d31 d0bb3853a7172522 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b798d9255fec6d8 231e2281556b4d1f e6e5e38e5862ec4f 5b4a0c5281c77bc0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6a2af59be785be3d 4a703752d2d8d9e5 b173f1e58f02634b 533e8ea9a060c4bb ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030680040ba003 0008000b98030180 80c208000b900300 10000b8003000108 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 89d540116c8f71b5 711d88828008a630 7410ebbd3f757f11 8ac6783803e40806 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0ca3c6391c5eb1 0f74b8e654dbc87f fb0b1d1516e550b6 034d3d7b54b8bff3 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101800400080002 1000021000080171 f400100002100005 8004060143cc0030 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90003477790 RCX=ffffffff8b7c1d80 RDX=ffff888021f24880 RSI=ffffffff8b7c1dd0 RDI=0000000000000005 RBP=ffff8881058ce8c0 RSP=ffffc90003477700 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000001 R12=ffff888100fa3cc0 R13=ffffc90003477798 R14=0000000000000000 R15=ffff888100ede948 RIP=ffffffff81bbe8d1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007faefb9786c0 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000140 CR3=000000005f2ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefad86488 00007faefad86480 00007faefad86478 00007faefad86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefb8ed100 00007faefad86440 00007faefad86458 00007faefad864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefad86498 00007faefad86490 00007faefad86488 00007faefad86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a57c5 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc90004346e60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b0b9e20 R15=ffffffff855a5760 RIP=ffffffff855a57ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007faefb9576c0 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000f000 CR3=000000005f2ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefac11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefad86488 00007faefad86480 00007faefad86478 00007faefad86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefb8ed100 00007faefad86440 00007faefad86458 00007faefad864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefad86498 00007faefad86490 00007faefad86488 00007faefad86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000