last executing test programs: 2m17.669853821s ago: executing program 0 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') 2m17.648445751s ago: executing program 0 (id=346): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x4, 0x2bf7e9, 0x194d27}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000002440)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x5, 0x6601e, 0x1041b2}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x6, r3, 0x0, 0x1, 0x0, 0xffbfffff, 0x0, 0x3, 0xffffffffffffff7b}) 2m17.572867178s ago: executing program 0 (id=349): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 2m17.420300647s ago: executing program 0 (id=353): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0xc0844123, &(0x7f0000000180)=0x4) close_range(r1, 0xffffffffffffffff, 0x0) 2m17.355722286s ago: executing program 0 (id=356): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x73dc}}, './file1\x00'}) 2m17.301056142s ago: executing program 0 (id=358): mkdir(&(0x7f0000001c00)='./file0\x00', 0x20) r0 = open(&(0x7f0000000300)='.\x00', 0xa000, 0x124) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x145) r2 = fanotify_init(0xf00, 0x0) r3 = open$dir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x90000, 0x101) fanotify_mark(r2, 0x1, 0x5000003a, r3, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) 2m16.034139696s ago: executing program 3 (id=395): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="70fa", 0x2}], 0x1}}], 0x1, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 2m15.962251951s ago: executing program 3 (id=396): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xd8fa35cb99073b91, 0x2f, 0x1, 0x4, 0xc, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101000, 0x1e8) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x90, 0xffffffffffffffda, 0x1, {0x3, 0x1, 0x0, 0x7, 0x3, 0x1, {0x3, 0xdcf0, 0x4, 0xae3, 0x3, 0x4, 0x44, 0x4, 0x5, 0x4000, 0xdc, r3, 0x0, 0x5, 0x3889}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m15.810988783s ago: executing program 3 (id=399): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7}, 0x68) 2m15.810278102s ago: executing program 3 (id=401): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) 2m15.774753785s ago: executing program 3 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0xc, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a74568c953abcd4eb30e04d528539f3c0289737f0374c72a964a02447fd29f35239d200", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m2.2825402s ago: executing program 32 (id=358): mkdir(&(0x7f0000001c00)='./file0\x00', 0x20) r0 = open(&(0x7f0000000300)='.\x00', 0xa000, 0x124) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x145) r2 = fanotify_init(0xf00, 0x0) r3 = open$dir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x90000, 0x101) fanotify_mark(r2, 0x1, 0x5000003a, r3, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) 2m0.7103734s ago: executing program 33 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0xc, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a74568c953abcd4eb30e04d528539f3c0289737f0374c72a964a02447fd29f35239d200", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m33.891606533s ago: executing program 2 (id=1008): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xa858901, @remote, 0x7}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x6, @loopback, 0x4}}]}, 0xa0}}, 0x0) 1m33.841435364s ago: executing program 2 (id=1010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x3, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 1m33.782142521s ago: executing program 2 (id=1011): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 1m33.781369973s ago: executing program 2 (id=1013): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) unshare(0x22020600) setns(r2, 0x24020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m33.182280517s ago: executing program 2 (id=1030): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0xc, {0x2, 0x4e22, @empty}, 'lo\x00'}) 1m32.94233737s ago: executing program 2 (id=1035): socket$kcm(0x10, 0x2, 0x4) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0xa, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1d\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) 1m32.899540716s ago: executing program 34 (id=1035): socket$kcm(0x10, 0x2, 0x4) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0xa, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1d\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) 1m30.632250097s ago: executing program 5 (id=1082): unshare(0x62040200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1m30.567597551s ago: executing program 5 (id=1088): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) 1m30.495443574s ago: executing program 5 (id=1092): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m30.442155737s ago: executing program 5 (id=1093): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) unshare(0x22020600) setns(r2, 0x24020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m29.906500722s ago: executing program 6 (id=1107): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000009000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000040008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m29.906179349s ago: executing program 5 (id=1108): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef", 0x11) 1m29.905718839s ago: executing program 6 (id=1109): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008031, 0xffffffffffffffff, 0x2b559000) getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 1m29.670426589s ago: executing program 6 (id=1114): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x1080000001}}}, 0x90) 1m29.602349604s ago: executing program 6 (id=1117): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) unshare(0x22020600) setns(r2, 0x24020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m29.39198772s ago: executing program 5 (id=1127): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004880}, 0x48810) 1m29.309609552s ago: executing program 35 (id=1127): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004880}, 0x48810) 1m29.002276002s ago: executing program 6 (id=1133): pipe2(&(0x7f0000000200), 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 1m27.505270738s ago: executing program 6 (id=1157): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x109000, 0x120) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000bc0)={r0, r1, 0x9, 0x5, &(0x7f0000000ac0)="a7122bdff8", 0xff, 0x1, 0x800, 0x7, 0xd, 0x1, 0x3c5c, 'syz0\x00'}) r2 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001fc0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001f40)=""/33, 0x21, 0x1, &(0x7f0000001f80)=""/63, 0x3f}, &(0x7f0000002000)=0x40) getsockname$inet6(r2, &(0x7f0000002040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000002080)=0x1c) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000021c0)={@none, 0x10001}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000002540)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x18}}}}, [@NL80211_ATTR_FRAME_MATCH={0x25, 0x5b, "abc81bf6cd661fd69d4280e3cca1835dcf4db3a5b04b10288b852b24f102ad8566"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004000) syz_emit_vhci(&(0x7f0000002640)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x9}}}, 0x4) 1m27.398303651s ago: executing program 36 (id=1157): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x109000, 0x120) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000bc0)={r0, r1, 0x9, 0x5, &(0x7f0000000ac0)="a7122bdff8", 0xff, 0x1, 0x800, 0x7, 0xd, 0x1, 0x3c5c, 'syz0\x00'}) r2 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001fc0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001f40)=""/33, 0x21, 0x1, &(0x7f0000001f80)=""/63, 0x3f}, &(0x7f0000002000)=0x40) getsockname$inet6(r2, &(0x7f0000002040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000002080)=0x1c) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000021c0)={@none, 0x10001}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000002540)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x18}}}}, [@NL80211_ATTR_FRAME_MATCH={0x25, 0x5b, "abc81bf6cd661fd69d4280e3cca1835dcf4db3a5b04b10288b852b24f102ad8566"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004000) syz_emit_vhci(&(0x7f0000002640)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x9}}}, 0x4) 469.550199ms ago: executing program 4 (id=4041): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) (async) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) 409.263934ms ago: executing program 7 (id=4046): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000100)={0x28, 0x0, r1, 0x34, &(0x7f00000000c0)=""/52}) 346.132282ms ago: executing program 7 (id=4048): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="188500000000000000000000000000007b0110000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 324.876404ms ago: executing program 7 (id=4051): syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000050000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 271.243138ms ago: executing program 7 (id=4054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x2000000, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1002, 0x8243}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 270.655513ms ago: executing program 7 (id=4057): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000400), 0xc, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x4}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000640)=""/264, 0x108, 0x0, 0x1, 0x2}}, 0x48) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x4120c0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, r0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x65) write$qrtrtun(r4, &(0x7f0000001880)="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", 0x45b) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000d96000/0x3000)=nil, 0x3000}, 0x5}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="030008000100000000001400000045000014000000000190780a010100ac1414aa0400907800000000452900000000000000115478f259950e0000ac1414027f00000100009f048000350000"], 0x46) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0xfffffffc}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x1, 0xd, 0x4, 0xff, &(0x7f0000000780)="404cb25c896aec15bae0e06c9272b66992af39181aa168228cd946c71552e2523b476720c2613b97b0a9ef7b12e57f80fa0f9e4c4dde9f7fa82c1cad610dae6ab7462f118b719a525fae57c8db9c82fa0e903540da81e2665866e217ba8f7bf4aa24f355ddf5380343ff1aa77d5f451bada4b86e92e2d4a436bcbd43047ebae4ac31405151e1dba7b15a596125fe5586fcd086cfc23bad2bf56ead309354824adc6e288710a8a3678492265fee118d17867ce21b379b71013021cc1d77da036d0f9a97414f8aa5513f2c7ba254c74cddb7f3a85b27ebd3263fae21b9b0cfb58d5e4b494ddb1895b8f2f01a07c67c692ddf7cc187f44729f9492676ef1e7b61fe3754568dd56292d68aa7716cae097b1485f23cca4b05db51483c387ee4f2947bf585d91714d5c944f82fff496a1b188e27ca570b4ff7e88b516bac5c00cbb716b019973abfd500f34539bd2d57cda75eea365a9047ffc195146541c717049c67b257c67d4b0f648f43e0409f92e2f7cc586d251652edf4a46a255158f6abfaed784d6549997914c430c619761e49b4c204024ab9742a514478612ddc43596560aa66c4c4068fd27dbfcdb6a31e45403bc12eba3b5527f0d7026bb5972c36856449fbcfbd27ac6c327ba6929ca720ded0a2708190c552cf3eb9420ca58e148c50bf91cf70a95fb526c8a0fce9cea50c9f814b9cfbf2b3b40744f1665005aac6b1bc2acaf205b1838ee6702aacfabaab75859cb1f51a738fdefe1781410e7dbdb6486200a89744c9b23138bdfda3ad89f8ce53826a9a45d086f43027b6aae5ea1cd639dfdaf474bea135ab35066aeb6c25be5a2d52ce9694175cbca9277750d3e7aa9d93e4fb34157b76f5d1d33ace6e2e17ec6fe01eb332f06889a756f174353214bf8ee8788d85a44d59a0633e762cf5fc1699b22838f9bcf04c737a84cdb46c083413d62b0e7db0f2d0290978c55374f0e0a69f46e8f62be3a2e570329a3aeb5fb48498318e2b33d61d1232f672513309016962a0fc51a3ee38ea971b62048a02e2c1d371a1fa819812a331a3e39b8820466191ac578bab9475d08f3e51efe80da9d2ada4951b399a6b51556193c24c2e9f46028d76b3b4b0b28da287fd28bb101cdd0080c0c4cf0a79bad6085b5b74aaf0be28946b6b096052f26dcc593be84417a05d8230fec2760f38ee321413c99998c1d3211e6e08c7ac9b5481cce9a37a15e703b4616d1ebecd295830f36459dae667deead7855db7ae74b6c6cf4964b4f00383b5e8f72a2068d2117109035dfc6ccadee06019d610fab5a12ff68ddc0f94515987292b3ff6ad7aca482c2b9fa363c55ad6eca392153398410e142d06ccb75df1aeaa77390b234177532967935985cbd78525329559287609ddf15fca806e4b03dbb4c0816907af09e1d024088c4c9c35fec2e572e2c6efe78b094445"}) ioctl$VIDIOC_TRY_DECODER_CMD(r8, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, @stop_pts=0x6}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000100)=[r7], 0x0, 0x1, 0x1}) r9 = syz_open_dev$sg(&(0x7f0000000280), 0x8000, 0x0) ioctl$SG_GET_NUM_WAITING(r9, 0x227d, &(0x7f0000000440)) 235.866121ms ago: executing program 4 (id=4058): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000230c1100"}) 178.751554ms ago: executing program 4 (id=4061): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000015c0)=[@in={0x2, 0x4e23, @private=0xa010101}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000015c0)=[@in={0x2, 0x4e23, @private=0xa010101}], 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}, {@nfs_export_on}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xd}}, './file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xd}}, './file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x304) 178.592459ms ago: executing program 1 (id=4062): syslog(0x4, &(0x7f0000000d40)=""/26, 0x1a) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) 178.4598ms ago: executing program 8 (id=4063): socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0001000000000000"], 0x0) 178.296076ms ago: executing program 8 (id=4064): syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000060000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 178.158758ms ago: executing program 7 (id=4065): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/170, 0x14000, 0x800, 0x720}, 0x20) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 131.36128ms ago: executing program 1 (id=4066): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x3000000, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1002, 0x8243}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 131.059269ms ago: executing program 8 (id=4067): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000080000010073797a30001000000900020073797a3200000000040000001100010000000000000000000000000a"], 0x54}}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000980)=[{&(0x7f00000003c0)="d5ef", 0x2}, {&(0x7f0000000400)="63765235add7fa4b47fca0a6cb81e971917f693b44a93b842558e6c26349fd817110b466c35f5fa9b2019c008084f438c7d31501d2ff3667cec76289438b7f00", 0x40}, {&(0x7f0000000580)="f5b08aa7b54657fc163f637c2fb3640b6b7e42715185f05f2c61d247b9fe71c6879bc6d4425d02506053dd126e346a44c3125de322bc2f30ce74973b40e23ac32e54a1abedb60d3ee660bcfcc2f17be1902260ef68b477e6a30f6401ce91e745431d04ae2f27375d46560eca9a8a90f3159daaf05ae08d3c151dfd99e37acd2db8bc11fc6ab34e0366bd380463f0f1090b61eeeb54b6c0437954282f3943a6", 0x9f}, {&(0x7f0000000640)="c8f0de3985fc143ae0480825b6112c95d2e31337bb26c59eabc136d0ae7590ac464b5ab279fb3e3c43a1a209736f25399023d10f0e31a52bce060f8397e2181d7ea5", 0x42}, {&(0x7f0000000440)="462df1772239f8a1f07c0ee906419a039337c3146a6b21f69075327bae354f683af15196bf33a0e64983cad7b5", 0x2d}, {&(0x7f00000006c0)="a397d3957798178607f0b3f9033a1ae79ee7e424bbd64e6090877db8aaf67fd914da9f6198a6e3dbe357d455979609b5bb1421cb5776503921a8ba34349193dad28e7ee099c9d2f0cccfcbf34557af531b8e3e2b2983427d03d97bb0d84c493a6c97619ec771e2578011b1f1fdfcd4ce841bc41260034e743cc319b1a983ce0159d8a1bd4505f8247ecc4ccc24fb52b0970e3647889b11c79ce1862d3e6280fa40a4eedb989b57d454cc194ef58e2feb0141dd476e31dae94c0ccd635880", 0xbe}, {&(0x7f0000000900)="0cfbdb271a936f9414ba2c049df8b2ff52433d11a39165c59f60900de8b9949d7f3781d9b4a02d3c35d8723854a77238151a82570bbae6345c669add4197b2b876232c4aeaf2760aa8d51b6b001f3f762be9fe07a1081ec9cd0bced5e185e8371e234e37ee9352562fdf1ff3a7e853c1f3801c", 0x73}], 0x7}, 0x48014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000200000000000020900020073797a32000000000900010073797a30"], 0x38}}, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x109080) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000002c0)={0xf000000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x980901, 0xa, '\x00', @p_u16=0x0}}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0xea) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x58, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x7e}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x4001}]}}}]}, 0x58}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r11}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r11, &(0x7f0000000880)}, 0x20) ioctl$SNDRV_PCM_IOCTL_FORWARD(r10, 0x40084149, &(0x7f0000000000)=0xd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x10000000}, 0x0) 130.848944ms ago: executing program 1 (id=4068): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "000000000000000000000000000000001f00"/100}}}}}}, 0x0) 61.454347ms ago: executing program 1 (id=4069): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, 0x0) 61.287065ms ago: executing program 4 (id=4070): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x8000000, 0x0, {{}, {@val={0x7}, @void}}}, 0x1c}}, 0x0) (async) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="8c78"], 0x2000) 61.191055ms ago: executing program 8 (id=4071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) socket$inet6(0xa, 0xa, 0xc13) 1.160226ms ago: executing program 4 (id=4072): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x3810002, &(0x7f00000000c0)=':\x00') 1.029418ms ago: executing program 8 (id=4073): socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0001000000000000"], 0x0) 842.529µs ago: executing program 1 (id=4074): semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000002c0)=""/123) r0 = semget$private(0x0, 0x2, 0x8) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000000)=""/83) 350.104µs ago: executing program 4 (id=4075): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c050}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="04080400000000001800128008000100677470000c00028008000200", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 281.874µs ago: executing program 1 (id=4076): syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x88fb, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x30, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) 0s ago: executing program 8 (id=4077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x50) r1 = socket$netlink(0x10, 0x3, 0xb) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f00000002c0)=[{r0, 0xa001}, {r2}, {r0, 0x410}, {r2, 0x200}, {r0, 0xa012}, {r2, 0xe1c9}, {r2, 0x480}, {r2, 0x200}], 0x8, 0x32d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x7}]}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x30, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x44000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Started in network mode [ 102.449257][ T7908] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 102.451716][ T7908] tipc: Enabled bearer , priority 0 [ 102.495909][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 102.495923][ T40] audit: type=1400 audit(1747954329.581:385): avc: denied { lock } for pid=7913 comm="syz.5.682" path="socket:[19750]" dev="sockfs" ino=19750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 102.863755][ T40] audit: type=1400 audit(1747954329.951:386): avc: denied { create } for pid=7925 comm="syz.2.686" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 102.871908][ T40] audit: type=1400 audit(1747954329.951:387): avc: denied { associate } for pid=7925 comm="syz.2.686" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 102.978088][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.688'. [ 103.395156][ T7944] binder_alloc: 7943: binder_alloc_buf, no vma [ 103.450821][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.5.694'. [ 103.453416][ T34] tipc: Node number set to 11578026 [ 103.455830][ T7949] netlink: 'syz.5.694': attribute type 7 has an invalid length. [ 103.460165][ T7949] netlink: 'syz.5.694': attribute type 8 has an invalid length. [ 103.463513][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.694'. [ 103.474420][ T7949] bridge0: entered promiscuous mode [ 103.479652][ T7949] syz_tun: entered promiscuous mode [ 103.483546][ T7949] gretap0: entered promiscuous mode [ 103.487478][ T7949] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 103.544402][ T7955] netlink: 'syz.1.696': attribute type 4 has an invalid length. [ 103.547054][ T7955] netlink: 17 bytes leftover after parsing attributes in process `syz.1.696'. [ 103.917142][ T5995] kernel read not supported for file bpf-map (pid: 5995 comm: kworker/2:3) [ 104.059529][ T7996] binder: 7995:7996 ioctl c0306201 0 returned -14 [ 104.130020][ T40] audit: type=1400 audit(1747954331.211:388): avc: denied { create } for pid=7999 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.136865][ T40] audit: type=1400 audit(1747954331.221:389): avc: denied { create } for pid=7999 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.143281][ T40] audit: type=1400 audit(1747954331.221:390): avc: denied { setopt } for pid=7999 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.152054][ T40] audit: type=1400 audit(1747954331.221:391): avc: denied { ioctl } for pid=7999 comm="syz.4.712" path="socket:[20798]" dev="sockfs" ino=20798 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.173004][ T8004] netlink: 'syz.4.714': attribute type 1 has an invalid length. [ 104.210782][ T8004] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.214490][ T8004] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.217524][ T8004] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.220484][ T8004] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.225291][ T8004] bond1: (slave geneve2): making interface the new active one [ 104.228903][ T8004] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 104.240642][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.714'. [ 104.244592][ T8004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.294189][ T8007] netlink: 'syz.2.715': attribute type 4 has an invalid length. [ 104.648452][ T8029] vlan3: entered promiscuous mode [ 104.650286][ T8029] vlan3: entered allmulticast mode [ 104.652195][ T8029] hsr_slave_1: entered allmulticast mode [ 105.254603][ T40] audit: type=1400 audit(1747954332.341:392): avc: denied { write } for pid=8046 comm="syz.1.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.311268][ T40] audit: type=1800 audit(1747954332.391:393): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.734" name="/" dev="9p" ino=2 res=0 errno=0 [ 105.319682][ T8049] netfs: Couldn't get user pages (rc=-14) [ 105.322194][ T40] audit: type=1400 audit(1747954332.391:394): avc: denied { map } for pid=8048 comm="syz.4.734" path="/45/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.326706][ T8077] md2: using deprecated bitmap file support [ 106.328620][ T8077] md2: error: bitmap file must open for write [ 106.419445][ T8086] bridge0: entered allmulticast mode [ 106.450102][ T8086] bridge0 (unregistering): left promiscuous mode [ 106.572301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.596588][ T8100] __nla_validate_parse: 1 callbacks suppressed [ 106.596606][ T8100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.751'. [ 106.670899][ T8100] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8100 comm=syz.1.751 [ 106.735610][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 106.738783][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'. [ 106.781664][ T8108] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 106.792761][ T8108] overlayfs: failed to set xattr on upper [ 106.794709][ T8108] overlayfs: ...falling back to redirect_dir=nofollow. [ 106.797339][ T8108] overlayfs: ...falling back to index=off. [ 106.799383][ T8108] overlayfs: ...falling back to uuid=null. [ 107.051050][ T8125] netlink: 'syz.1.761': attribute type 1 has an invalid length. [ 107.072069][ T8125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.100578][ T8125] veth11: entered promiscuous mode [ 107.104716][ T8125] bond2: (slave veth11): Enslaving as an active interface with a down link [ 107.128216][ T8125] vlan3: entered allmulticast mode [ 107.130252][ T8125] bond2: entered allmulticast mode [ 107.133148][ T8125] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 107.564101][ T8150] netlink: 'syz.1.771': attribute type 1 has an invalid length. [ 107.596666][ T8150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.599642][ T8150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.602899][ T8150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.605749][ T8150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.609673][ T8150] bond3: (slave geneve2): making interface the new active one [ 107.613210][ T8150] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 107.622417][ T8150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.771'. [ 107.625256][ T8150] bond3: entered promiscuous mode [ 107.626863][ T8150] geneve2: entered promiscuous mode [ 107.820732][ T8158] mmap: syz.1.773 (8158) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.529187][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 108.529198][ T40] audit: type=1400 audit(1747954335.611:405): avc: denied { ioctl } for pid=8179 comm="syz.4.781" path="/dev/vbi6" dev="devtmpfs" ino=1016 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 108.541153][ T40] audit: type=1400 audit(1747954335.621:406): avc: denied { module_request } for pid=8179 comm="syz.4.781" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 108.711850][ T40] audit: type=1400 audit(1747954335.791:407): avc: denied { wake_alarm } for pid=8190 comm="syz.5.785" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.763329][ T8193] bridge1: entered allmulticast mode [ 108.764766][ T8194] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 108.764766][ T8194] The task syz.5.785 (8194) triggered the difference, watch for misbehavior. [ 108.823145][ T40] audit: type=1400 audit(1747954335.911:408): avc: denied { read write } for pid=8195 comm="syz.4.787" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 108.831549][ T40] audit: type=1400 audit(1747954335.911:409): avc: denied { open } for pid=8195 comm="syz.4.787" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 108.970484][ T8204] ªªªªªª2g,¾{À: renamed from lo [ 109.038799][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 109.046738][ T8198] macsec0: entered promiscuous mode [ 109.120903][ T40] audit: type=1800 audit(1747954336.201:410): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.795" name="bus" dev="tmpfs" ino=1604 res=0 errno=0 [ 109.142065][ T58] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 109.317941][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.321494][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.324790][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.329060][ T58] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.333487][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.337871][ T58] usb 7-1: config 0 descriptor?? [ 109.754396][ T58] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 109.764685][ T58] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 110.066341][ T34] usb 7-1: USB disconnect, device number 2 [ 110.116773][ T8237] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 110.129867][ T8237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.150524][ T8237] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.158486][ T8237] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.162185][ T8237] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.165670][ T8237] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.169844][ T8237] bond4: (slave geneve3): making interface the new active one [ 110.173020][ T8237] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 110.194945][ T8237] veth13: entered promiscuous mode [ 110.199525][ T8237] bond4: (slave veth13): Enslaving as an active interface with a down link [ 110.209215][ T8237] vlan3: entered allmulticast mode [ 110.210916][ T8237] bond4: entered allmulticast mode [ 110.213695][ T8237] geneve3: entered allmulticast mode [ 110.216750][ T8237] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 110.256984][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.804'. [ 110.277338][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.804'. [ 110.327217][ T40] audit: type=1800 audit(1747954337.411:411): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.805" name="file1" dev="tmpfs" ino=1650 res=0 errno=0 [ 110.575336][ T8250] block device autoloading is deprecated and will be removed. [ 110.642352][ T8247] md2: using deprecated bitmap file support [ 110.677652][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 110.681002][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 111.152071][ T5944] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 111.152104][ T5938] Bluetooth: hci1: command 0x1003 tx timeout [ 111.206364][ T8266] team0: Port device vlan0 removed [ 111.210935][ T64] tipc: Resetting bearer [ 111.257541][ T8266] bridge0: port 1(vlan2) entered blocking state [ 111.257994][ T8268] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 111.260249][ T8266] bridge0: port 1(vlan2) entered disabled state [ 111.265877][ T8266] vlan2: entered allmulticast mode [ 111.267971][ T8266] bond0: entered allmulticast mode [ 111.293444][ T8268] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 111.331411][ T8268] veth3: entered promiscuous mode [ 111.336019][ T8268] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 111.362762][ T8273] ip6erspan0: entered allmulticast mode [ 111.411220][ T8275] batman_adv: batadv0: Adding interface: dummy0 [ 111.414160][ T8275] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.424555][ T8275] batman_adv: batadv0: Interface activated: dummy0 [ 111.433643][ T8275] net_ratelimit: 10 callbacks suppressed [ 111.433654][ T8275] batadv0: mtu less than device minimum [ 111.438756][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.443436][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.449111][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.453823][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.458776][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.463481][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.468894][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.474093][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.478729][ T8275] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.501406][ T8279] netlink: 'syz.1.820': attribute type 39 has an invalid length. [ 111.570379][ T40] audit: type=1400 audit(1747954338.651:412): avc: denied { create } for pid=8287 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 111.609822][ T40] audit: type=1400 audit(1747954338.691:413): avc: denied { execmem } for pid=8291 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 111.919108][ T8311] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 111.927354][ T8311] kvm: pic: non byte read [ 111.929886][ T8311] kvm: pic: level sensitive irq not supported [ 111.930166][ T8311] kvm: pic: non byte read [ 111.935569][ T8311] kvm: pic: level sensitive irq not supported [ 111.936155][ T8311] kvm: pic: non byte read [ 112.346443][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 112.366063][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 112.675180][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 112.767141][ T8350] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 112.776352][ T8350] kvm: pic: level sensitive irq not supported [ 112.776625][ T8350] kvm: pic: non byte read [ 112.782167][ T8350] kvm: pic: level sensitive irq not supported [ 112.782455][ T8350] kvm: pic: non byte read [ 112.788012][ T8350] kvm: pic: level sensitive irq not supported [ 112.788336][ T8350] kvm: pic: non byte read [ 112.816485][ T40] audit: type=1400 audit(1747954339.901:414): avc: denied { firmware_load } for pid=8353 comm="syz.1.848" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 113.336168][ T8354] syz.1.848 (8354) used greatest stack depth: 19736 bytes left [ 114.050989][ T8412] batman_adv: batadv0: Interface deactivated: dummy0 [ 114.053520][ T8412] batman_adv: batadv0: Removing interface: dummy0 [ 114.058977][ T8412] bridge_slave_0: left allmulticast mode [ 114.060799][ T8412] bridge_slave_0: left promiscuous mode [ 114.062906][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.069502][ T8412] bridge_slave_1: left allmulticast mode [ 114.071355][ T8412] bridge_slave_1: left promiscuous mode [ 114.074661][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.080302][ T8412] bond0: (slave bond_slave_0): Releasing backup interface [ 114.087031][ T8412] bond0: (slave bond_slave_1): Releasing backup interface [ 114.103111][ T8412] team0: Port device team_slave_0 removed [ 114.108989][ T8412] team0: Port device team_slave_1 removed [ 114.111457][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.114731][ T8412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.126878][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.129482][ T8412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.143600][ T8412] bond0: (slave macvlan2): Releasing backup interface [ 114.148700][ T8412] batadv0: left promiscuous mode [ 114.163559][ T8412] bond1: (slave geneve2): Releasing active interface [ 114.174983][ T8412] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.179205][ T8412] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.182368][ T8412] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.185572][ T8412] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.200169][ T8412] bond2: (slave ip6gretap1): Releasing backup interface [ 114.202992][ T8412] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 56:d7:7d:70:4b:16 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 114.215673][ T8412] bond2: (slave veth3): Releasing backup interface [ 114.239750][ T8424] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.247436][ T8420] bridge0: port 1(vlan2) entered blocking state [ 114.249794][ T8420] bridge0: port 1(vlan2) entered disabled state [ 114.255842][ T8420] vlan2: entered allmulticast mode [ 114.257622][ T8420] bond0: entered allmulticast mode [ 114.338325][ T8432] overlayfs: failed to clone upperpath [ 114.370469][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 114.370480][ T40] audit: type=1400 audit(1747954341.451:416): avc: denied { name_bind } for pid=8434 comm="syz.4.877" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 114.444263][ T40] audit: type=1400 audit(1747954341.531:417): avc: denied { create } for pid=8445 comm="syz.1.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 114.601625][ T8455] netlink: 88 bytes leftover after parsing attributes in process `syz.1.886'. [ 114.711759][ T8464] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.723218][ T40] audit: type=1400 audit(1747954341.811:418): avc: denied { create } for pid=8469 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 114.729804][ T40] audit: type=1400 audit(1747954341.811:419): avc: denied { sys_admin } for pid=8469 comm="syz.1.891" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 114.771783][ T40] audit: type=1400 audit(1747954341.851:420): avc: denied { associate } for pid=8476 comm="syz.1.891" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 114.866637][ T8484] overlayfs: failed to clone upperpath [ 115.228768][ T8501] ip6tnl1: entered promiscuous mode [ 115.331674][ T40] audit: type=1400 audit(1747954342.411:421): avc: denied { mounton } for pid=8502 comm="syz.5.905" path="/syzcgroup/unified/syz5/bus" dev="cgroup2" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 115.335107][ T8508] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 115.446466][ T40] audit: type=1400 audit(1747954342.531:422): avc: denied { create } for pid=8516 comm="syz.2.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 115.487296][ T40] audit: type=1400 audit(1747954342.571:423): avc: denied { connect } for pid=8518 comm="syz.1.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.812454][ T8524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.913'. [ 115.815224][ T8524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'. [ 115.817979][ T8524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.913'. [ 115.820737][ T8524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.913'. [ 115.891362][ T8530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.915'. [ 115.936116][ T40] audit: type=1400 audit(1747954343.021:424): avc: denied { getopt } for pid=8531 comm="syz.1.916" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.993734][ T40] audit: type=1400 audit(1747954343.081:425): avc: denied { connect } for pid=8534 comm="syz.4.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.215448][ T8549] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 116.230085][ T8549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8549 comm=syz.5.922 [ 116.474506][ T8546] could not allocate digest TFM handle cryptd(blake2b-160) [ 116.656219][ T5938] Bluetooth: hci4: hardware error 0x09 [ 116.702077][ T5975] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 116.795771][ T8575] netlink: 'syz.4.931': attribute type 25 has an invalid length. [ 116.854626][ T5975] usb 7-1: too many configurations: 29, using maximum allowed: 8 [ 116.857823][ T5975] usb 7-1: config index 0 descriptor too short (expected 65412, got 72) [ 116.861186][ T5975] usb 7-1: config index 1 descriptor too short (expected 65412, got 72) [ 116.865362][ T5975] usb 7-1: config index 2 descriptor too short (expected 65412, got 72) [ 116.872423][ T5975] usb 7-1: config index 3 descriptor too short (expected 65412, got 72) [ 116.875791][ T5975] usb 7-1: config index 4 descriptor too short (expected 65412, got 72) [ 116.879075][ T5975] usb 7-1: config index 5 descriptor too short (expected 65412, got 72) [ 116.883036][ T5975] usb 7-1: config index 6 descriptor too short (expected 65412, got 72) [ 116.886373][ T5975] usb 7-1: config index 7 descriptor too short (expected 65412, got 72) [ 116.890467][ T5975] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.893354][ T5975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.895786][ T5975] usb 7-1: Product: syz [ 116.897091][ T5975] usb 7-1: Manufacturer: syz [ 116.898536][ T5975] usb 7-1: SerialNumber: syz [ 116.912302][ T5975] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.934646][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.988607][ T8583] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 116.991143][ T8583] netlink: 'syz.4.935': attribute type 2 has an invalid length. [ 117.405121][ T8621] No such timeout policy "syz0" [ 117.409577][ T8621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=8621 comm=syz.1.951 [ 117.952174][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 117.954728][ T9] ath9k_htc: Failed to initialize the device [ 117.977043][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 118.256765][ T5944] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 118.302037][ T58] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 118.455604][ T58] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.458992][ T58] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 118.463977][ T58] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.466937][ T58] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.471585][ T58] usb 10-1: config 0 descriptor?? [ 118.752077][ T5938] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 119.389919][ T5995] usb 7-1: USB disconnect, device number 3 [ 119.611123][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 119.611139][ T40] audit: type=1400 audit(1747954346.691:437): avc: denied { write } for pid=8706 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.621842][ T40] audit: type=1400 audit(1747954346.691:438): avc: denied { nlmsg_write } for pid=8706 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.946681][ T40] audit: type=1400 audit(1747954347.031:439): avc: denied { write } for pid=8743 comm="syz.2.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.980933][ T40] audit: type=1400 audit(1747954347.061:440): avc: denied { write } for pid=8745 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.131198][ T8653] net_ratelimit: 10 callbacks suppressed [ 120.131210][ T8653] Set syz1 is full, maxelem 65536 reached [ 120.166433][ T58] usb 10-1: string descriptor 0 read error: -71 [ 120.172601][ T58] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 120.176634][ T58] usb 10-1: USB disconnect, device number 2 [ 120.691684][ T8797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 120.695877][ T8797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 120.707599][ T8799] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 120.796527][ T8797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 120.800523][ T8797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 120.935690][ T8797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 120.939292][ T8797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 121.039644][ T8807] netlink: del zone limit has 4 unknown bytes [ 121.053934][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.057958][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.062595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.062985][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.070179][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.078035][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.090665][ T8797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 121.094431][ T8797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 121.212586][ T40] audit: type=1400 audit(1747954348.301:441): avc: denied { read write } for pid=8820 comm="syz.5.1042" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.224341][ T40] audit: type=1400 audit(1747954348.311:442): avc: denied { open } for pid=8820 comm="syz.5.1042" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.231361][ T40] audit: type=1400 audit(1747954348.311:443): avc: denied { map } for pid=8820 comm="syz.5.1042" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.247404][ T40] audit: type=1400 audit(1747954348.311:444): avc: denied { execute } for pid=8820 comm="syz.5.1042" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.253094][ T8797] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.257045][ T8797] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.278217][ T8797] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.280956][ T8797] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.290383][ T8797] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.293541][ T8797] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.305694][ T8797] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.308431][ T8797] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.319435][ T8808] chnl_net:caif_netlink_parms(): no params data found [ 121.479142][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.481495][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.483960][ T8808] bridge_slave_0: entered allmulticast mode [ 121.486670][ T8808] bridge_slave_0: entered promiscuous mode [ 121.489993][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.496250][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.498672][ T8808] bridge_slave_1: entered allmulticast mode [ 121.501641][ T8808] bridge_slave_1: entered promiscuous mode [ 121.565048][ T8808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.569970][ T8808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.629040][ T8808] team0: Port device team_slave_0 added [ 121.632779][ T8808] team0: Port device team_slave_1 added [ 121.689441][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.691687][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.708173][ T8808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.714188][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.716430][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.727659][ T8808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.844260][ T8808] hsr_slave_0: entered promiscuous mode [ 121.846847][ T8808] hsr_slave_1: entered promiscuous mode [ 121.873870][ T8864] netlink: 'syz.4.1058': attribute type 10 has an invalid length. [ 121.915571][ T8864] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 121.919170][ T8864] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.923618][ T8863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.069044][ T8808] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 122.083099][ T8808] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 122.088249][ T8808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 122.093600][ T8808] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 122.130822][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.142609][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.147703][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.150121][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.157574][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.159980][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.275812][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.419932][ T8808] veth0_vlan: entered promiscuous mode [ 122.427933][ T8808] veth1_vlan: entered promiscuous mode [ 122.448723][ T8808] veth0_macvtap: entered promiscuous mode [ 122.455314][ T8808] veth1_macvtap: entered promiscuous mode [ 122.468016][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.481411][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.494549][ T8808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.498741][ T8808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.501451][ T8808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.504531][ T8808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.558959][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.563595][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.580980][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.584505][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.597318][ T40] audit: type=1400 audit(1747954349.681:445): avc: denied { mounton } for pid=8808 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 122.838999][ T5944] Bluetooth: hci1: ISO packet too small [ 122.930082][ T8917] Bluetooth: MGMT ver 1.23 [ 123.035341][ T40] audit: type=1400 audit(1747954350.121:446): avc: denied { write } for pid=8924 comm="syz.6.1079" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 123.039768][ T8925] usb usb8: usbfs: process 8925 (syz.6.1079) did not claim interface 0 before use [ 123.152449][ T5944] Bluetooth: hci1: command tx timeout [ 123.186286][ T5938] Bluetooth: hci1: hardware error 0x09 [ 123.475511][ T8971] Bluetooth: MGMT ver 1.23 [ 123.601432][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.693314][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1100'. [ 123.696204][ T8982] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 123.736233][ T8984] netlink: 'syz.6.1101': attribute type 10 has an invalid length. [ 123.741811][ T8984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.747597][ T8984] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 123.776274][ T5944] Bluetooth: hci1: unexpected event 0x14 length: 4 < 6 [ 123.863643][ T8990] 9pnet_fd: p9_fd_create_tcp (8990): problem connecting socket to 127.0.0.1 [ 124.117398][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1113'. [ 124.218251][ T7963] syz_tun (unregistering): left promiscuous mode [ 124.687584][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.691428][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.694439][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.698517][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.701131][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.836594][ T79] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.903115][ T9053] chnl_net:caif_netlink_parms(): no params data found [ 124.921108][ T79] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.002899][ T79] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.026510][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.028745][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.031012][ T9053] bridge_slave_0: entered allmulticast mode [ 125.034491][ T9053] bridge_slave_0: entered promiscuous mode [ 125.037593][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.040330][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.043182][ T9053] bridge_slave_1: entered allmulticast mode [ 125.046212][ T9053] bridge_slave_1: entered promiscuous mode [ 125.086452][ T9053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.098197][ T79] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.107931][ T9053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.159184][ T9053] team0: Port device team_slave_0 added [ 125.163648][ T9053] team0: Port device team_slave_1 added [ 125.216195][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.219288][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.229998][ T9053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.236014][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.238308][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.242206][ T5938] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 125.253453][ T9053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.383275][ T9053] hsr_slave_0: entered promiscuous mode [ 125.386727][ T9053] hsr_slave_1: entered promiscuous mode [ 125.389727][ T9053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.393529][ T9053] Cannot create hsr debugfs directory [ 125.507320][ T79] vlan2: left allmulticast mode [ 125.509008][ T79] bond0: left allmulticast mode [ 125.510891][ T79] bridge0: port 1(vlan2) entered disabled state [ 125.628145][ T79] gretap0 (unregistering): left promiscuous mode [ 125.814525][ T79] bond0 (unregistering): Released all slaves [ 125.909291][ T79] tipc: Disabling bearer [ 125.917903][ T79] tipc: Left network mode [ 125.970335][ T9053] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 125.983108][ T9053] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 126.004843][ T9053] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 126.009166][ T9053] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 126.064361][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.082824][ T9053] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.090381][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.093289][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.102139][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.104414][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.246194][ T79] hsr_slave_0: left promiscuous mode [ 126.249163][ T79] hsr_slave_1: left promiscuous mode [ 126.286960][ T79] veth1_macvtap: left promiscuous mode [ 126.290639][ T79] veth0_macvtap: left promiscuous mode [ 126.292790][ T79] veth1_vlan: left promiscuous mode [ 126.309703][ T9118] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 126.640453][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.664120][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.668779][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.673652][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.680689][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.756920][ T5938] Bluetooth: hci2: command tx timeout [ 127.654270][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.690164][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 127.690180][ T40] audit: type=1400 audit(1747954354.771:452): avc: denied { read } for pid=9149 comm="syz.4.1167" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.741376][ T9137] chnl_net:caif_netlink_parms(): no params data found [ 127.843777][ T9137] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.846075][ T9137] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.848473][ T9137] bridge_slave_0: entered allmulticast mode [ 127.851124][ T9137] bridge_slave_0: entered promiscuous mode [ 127.855818][ T9137] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.858334][ T9137] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.860651][ T9137] bridge_slave_1: entered allmulticast mode [ 127.864103][ T9137] bridge_slave_1: entered promiscuous mode [ 127.866877][ T9175] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1175'. [ 127.896992][ T40] audit: type=1400 audit(1747954354.981:453): avc: denied { name_connect } for pid=9178 comm="syz.4.1177" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 127.920654][ T9137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.929024][ T9137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.979520][ T9137] team0: Port device team_slave_0 added [ 127.983839][ T9137] team0: Port device team_slave_1 added [ 128.031536][ T9187] xt_hashlimit: size too large, truncated to 1048576 [ 128.045350][ T9053] veth0_vlan: entered promiscuous mode [ 128.051282][ T9053] veth1_vlan: entered promiscuous mode [ 128.055591][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.057996][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.067675][ T9137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.074503][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.077445][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.086717][ T9137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.150020][ T9137] hsr_slave_0: entered promiscuous mode [ 128.154570][ T9137] hsr_slave_1: entered promiscuous mode [ 128.157194][ T9137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.159923][ T9137] Cannot create hsr debugfs directory [ 128.267182][ T9053] veth0_macvtap: entered promiscuous mode [ 128.283171][ T9053] veth1_macvtap: entered promiscuous mode [ 128.301101][ T79] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.326202][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.334505][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.344638][ T9053] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.347779][ T9053] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.351246][ T9053] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.355293][ T9053] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.379464][ T79] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.394694][ T9137] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 128.401712][ T9137] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 128.409614][ T9137] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 128.415709][ T9137] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 128.458198][ T79] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.477957][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.480599][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.503172][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.505720][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.525820][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.542671][ T79] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.556551][ T9137] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.565407][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.567948][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.575484][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.577879][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.639270][ T40] audit: type=1400 audit(1747954355.721:454): avc: denied { getopt } for pid=9197 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.703945][ T79] bridge_slave_1: left allmulticast mode [ 128.705778][ T79] bridge_slave_1: left promiscuous mode [ 128.707614][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.711913][ T79] bridge_slave_0: left allmulticast mode [ 128.715216][ T79] bridge_slave_0: left promiscuous mode [ 128.717814][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.728726][ T9195] kvm: kvm [9194]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x85a [ 128.762124][ T5938] Bluetooth: hci1: command tx timeout [ 128.832109][ T5938] Bluetooth: hci2: command tx timeout [ 128.911543][ T9209] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 128.921527][ T9209] kvm: pic: level sensitive irq not supported [ 128.921819][ T9209] kvm: pic: non byte read [ 129.076253][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.084348][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.089910][ T79] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 129.096831][ T79] bond0 (unregistering): Released all slaves [ 129.175742][ T9137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.199933][ T9229] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.204679][ T9229] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 129.208318][ T9229] bridge_slave_0: default FDB implementation only supports local addresses [ 129.331771][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.339072][ T9245] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 129.343357][ T9245] macvlan3: entered allmulticast mode [ 129.345130][ T9245] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 129.356739][ T9245] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 129.361192][ T9245] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 129.487913][ T9137] veth0_vlan: entered promiscuous mode [ 129.500337][ T9137] veth1_vlan: entered promiscuous mode [ 129.512219][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1207'. [ 129.537346][ T79] hsr_slave_0: left promiscuous mode [ 129.543332][ T79] hsr_slave_1: left promiscuous mode [ 129.545714][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.548415][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.553607][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.556352][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.580957][ T79] veth1_macvtap: left promiscuous mode [ 129.583764][ T79] veth0_macvtap: left promiscuous mode [ 129.585580][ T79] veth1_vlan: left promiscuous mode [ 129.587388][ T79] veth0_vlan: left promiscuous mode [ 130.235240][ T79] team0 (unregistering): Port device team_slave_1 removed [ 130.309128][ T79] team0 (unregistering): Port device team_slave_0 removed [ 130.842112][ T5938] Bluetooth: hci1: command tx timeout [ 130.860519][ T9137] veth0_macvtap: entered promiscuous mode [ 130.866708][ T9137] veth1_macvtap: entered promiscuous mode [ 130.897439][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.906271][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.912617][ T5938] Bluetooth: hci2: command tx timeout [ 130.916783][ T9137] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.919670][ T9137] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.923088][ T9137] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.925856][ T9137] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.011721][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.019458][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.053055][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.056086][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.329010][ T65] IPVS: starting estimator thread 0... [ 131.382353][ T5993] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 131.432071][ T9330] IPVS: using max 46 ests per chain, 110400 per kthread [ 131.532542][ T5993] usb 12-1: Using ep0 maxpacket: 8 [ 131.535399][ T5993] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 131.539206][ T5993] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.543030][ T5993] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.546150][ T5993] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.549423][ T5993] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.554793][ T5993] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.558381][ T5993] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.785071][ T5993] usb 12-1: GET_CAPABILITIES returned 0 [ 131.786980][ T5993] usbtmc 12-1:16.0: can't read capabilities [ 131.991156][ T1345] usb 12-1: USB disconnect, device number 2 [ 132.134877][ T40] audit: type=1400 audit(1747954359.221:455): avc: denied { connect } for pid=9370 comm="syz.8.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.166285][ T9373] team0: No ports can be present during mode change [ 132.323934][ T9390] Illegal XDP return value 4294967294 on prog (id 156) dev N/A, expect packet loss! [ 132.537852][ T5974] IPVS: starting estimator thread 0... [ 132.604743][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.607108][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.635110][ T9401] IPVS: using max 46 ests per chain, 110400 per kthread [ 132.912685][ T5938] Bluetooth: hci1: command tx timeout [ 133.002318][ T5938] Bluetooth: hci2: command tx timeout [ 133.279583][ T40] audit: type=1400 audit(1747954360.361:456): avc: denied { write } for pid=9435 comm="syz.4.1283" path="socket:[29118]" dev="sockfs" ino=29118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.422820][ T40] audit: type=1400 audit(1747954360.511:457): avc: denied { setopt } for pid=9460 comm="syz.8.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.706336][ T40] audit: type=1400 audit(1747954360.791:458): avc: denied { ioctl } for pid=9496 comm="syz.8.1312" path="socket:[28309]" dev="sockfs" ino=28309 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.017190][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1332'. [ 134.406724][ T9576] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 134.409093][ T9576] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 134.411274][ T9576] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 134.413475][ T9576] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 134.415627][ T9576] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 134.417730][ T9576] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 134.420856][ T9576] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 134.423661][ T9576] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 134.425802][ T9576] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 134.427846][ T9576] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 134.531186][ T40] audit: type=1400 audit(1747954361.611:459): avc: denied { ioctl } for pid=9581 comm="syz.8.1351" path="socket:[28364]" dev="sockfs" ino=28364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.959269][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 135.002042][ T5938] Bluetooth: hci1: command tx timeout [ 135.052246][ T7559] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 135.213218][ T7559] usb 13-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.222450][ T7559] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.225541][ T7559] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 135.228069][ T7559] usb 13-1: SerialNumber: syz [ 135.285309][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'. [ 135.432820][ T9664] overlayfs: failed to clone upperpath [ 135.437575][ T9664] overlayfs: failed to clone lowerpath [ 135.927709][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1401'. [ 136.049825][ T7559] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -71 [ 136.054045][ T7559] usb 13-1: USB disconnect, device number 2 [ 136.688946][ T9738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.691482][ T9738] IPv6: NLM_F_CREATE should be set when creating new route [ 136.693809][ T9738] IPv6: NLM_F_CREATE should be set when creating new route [ 136.696058][ T9738] IPv6: NLM_F_CREATE should be set when creating new route [ 136.701004][ T9738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.788805][ T9749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1423'. [ 136.824457][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1426'. [ 136.824919][ T40] audit: type=1400 audit(1747954363.911:460): avc: denied { ioctl } for pid=9754 comm="syz.1.1426" path="socket:[30657]" dev="sockfs" ino=30657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.099509][ T9779] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1434'. [ 137.173791][ T40] audit: type=1400 audit(1747954364.251:461): avc: denied { write } for pid=9790 comm="syz.1.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 137.227753][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1441'. [ 137.279366][ T9806] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1444'. [ 137.360146][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 137.460102][ T9832] xt_hashlimit: size too large, truncated to 1048576 [ 138.014238][ T9915] team_slave_0: entered allmulticast mode [ 138.821059][ T40] audit: type=1400 audit(1747954365.901:462): avc: denied { name_bind } for pid=9979 comm="syz.8.1520" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 139.175960][T10027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1541'. [ 139.214884][T10033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10033 comm=syz.1.1544 [ 139.274571][T10043] netlink: 'syz.7.1549': attribute type 7 has an invalid length. [ 139.277812][T10043] netlink: 'syz.7.1549': attribute type 8 has an invalid length. [ 139.387970][T10064] netlink: 'syz.7.1557': attribute type 12 has an invalid length. [ 139.860200][ T40] audit: type=1400 audit(1747954366.941:463): avc: denied { read } for pid=10089 comm="syz.8.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.014113][T10098] __nla_validate_parse: 4 callbacks suppressed [ 140.014125][T10098] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1570'. [ 140.334028][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1579'. [ 140.479191][ T40] audit: type=1800 audit(1747954367.561:464): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1585" name="nullb0" dev="tmpfs" ino=1451 res=0 errno=0 [ 140.508639][T10143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1589'. [ 140.565398][T10151] trusted_key: syz.8.1593 sent an empty control message without MSG_MORE. [ 141.189057][ T40] audit: type=1400 audit(1747954368.271:465): avc: denied { bind } for pid=10168 comm="syz.4.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.466746][T10182] fuse: Bad value for 'fd' [ 142.160712][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 142.295113][T10195] netlink: 'syz.4.1611': attribute type 10 has an invalid length. [ 142.303346][T10195] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.306408][T10195] team0: entered allmulticast mode [ 142.308426][T10195] bond0: (slave team0): Enslaving as an active interface with an up link [ 143.349943][ T5938] Bluetooth: to_multiplier 0 < 10 [ 143.389911][T10237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.476196][T10237] bond1 (unregistering): Released all slaves [ 143.491694][ T40] audit: type=1800 audit(1747954370.571:466): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1630" name="nullb0" dev="tmpfs" ino=1451 res=0 errno=0 [ 143.710668][T10254] netlink: 'syz.1.1636': attribute type 4 has an invalid length. [ 143.712204][ T40] audit: type=1400 audit(1747954370.801:467): avc: denied { bind } for pid=10255 comm="syz.7.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.717717][T10254] netlink: 'syz.1.1636': attribute type 4 has an invalid length. [ 143.720150][ T40] audit: type=1400 audit(1747954370.801:468): avc: denied { write } for pid=10255 comm="syz.7.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.718696][T10313] netlink: 'syz.7.1654': attribute type 1 has an invalid length. [ 144.721320][T10313] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.1654'. [ 144.884773][T10324] netlink: 'syz.7.1658': attribute type 4 has an invalid length. [ 144.896852][T10324] netlink: 'syz.7.1658': attribute type 4 has an invalid length. [ 144.931032][ T40] audit: type=1400 audit(1747954372.011:469): avc: denied { bind } for pid=10326 comm="syz.1.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.946022][ T40] audit: type=1400 audit(1747954372.011:470): avc: denied { name_bind } for pid=10326 comm="syz.1.1660" src=28324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 144.956300][ T40] audit: type=1400 audit(1747954372.011:471): avc: denied { node_bind } for pid=10326 comm="syz.1.1660" src=28324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 144.973513][T10332] netlink: 'syz.1.1662': attribute type 10 has an invalid length. [ 144.978373][T10332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1662'. [ 144.990838][T10332] team0: Port device geneve0 added [ 145.092525][T10341] xt_hashlimit: size too large, truncated to 1048576 [ 145.373341][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1678'. [ 145.404351][ T5938] Bluetooth: hci2: command tx timeout [ 145.706166][T10385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1685'. [ 146.014752][ T40] audit: type=1800 audit(1747954373.101:472): pid=10421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1699" name="nullb0" dev="tmpfs" ino=543 res=0 errno=0 [ 147.412694][T10501] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1733'. [ 147.421792][T10504] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1731'. [ 147.426203][ T40] audit: type=1400 audit(1747954374.511:473): avc: denied { connect } for pid=10502 comm="syz.7.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.436193][ T40] audit: type=1400 audit(1747954374.521:474): avc: denied { write } for pid=10502 comm="syz.7.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.531085][ T40] audit: type=1400 audit(1747954374.611:475): avc: denied { read } for pid=10512 comm="syz.1.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.890177][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1766'. [ 149.162865][T10596] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 149.641389][T10645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10645 comm=syz.7.1787 [ 150.197335][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1798'. [ 150.277880][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1800'. [ 150.342384][T10688] netlink: 'syz.1.1803': attribute type 12 has an invalid length. [ 150.345035][T10688] netlink: 'syz.1.1803': attribute type 29 has an invalid length. [ 150.347743][T10688] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1803'. [ 150.348142][T10687] overlayfs: failed to clone lowerpath [ 150.350613][T10688] netlink: 'syz.1.1803': attribute type 2 has an invalid length. [ 150.356909][T10688] netlink: 'syz.1.1803': attribute type 3 has an invalid length. [ 150.357304][T10687] overlayfs: failed to clone lowerpath [ 150.359397][T10688] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1803'. [ 150.473831][T10695] netlink: 'syz.1.1807': attribute type 5 has an invalid length. [ 150.520416][ T40] audit: type=1326 audit(1747954377.601:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.4.1810" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe241b8e969 code=0x0 [ 151.054999][T10722] overlayfs: failed to clone upperpath [ 151.261139][ T40] audit: type=1400 audit(1747954378.341:477): avc: denied { setopt } for pid=10730 comm="syz.8.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.262485][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1821'. [ 151.319682][ T40] audit: type=1400 audit(1747954378.401:478): avc: denied { read } for pid=10730 comm="syz.8.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.457079][ T40] audit: type=1400 audit(1747954378.541:479): avc: denied { execute } for pid=10751 comm="syz.7.1828" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=34261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 151.499453][T10756] tipc: Enabling of bearer rejected, failed to enable media [ 151.522780][T10758] overlayfs: failed to clone upperpath [ 151.740662][T10776] overlayfs: failed to clone upperpath [ 151.933756][T10792] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 151.944584][T10792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.961814][T10792] ip6erspan0: entered promiscuous mode [ 151.986148][T10792] bond3: (slave ip6erspan0): making interface the new active one [ 151.994008][T10792] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 152.057228][T10804] tipc: Enabled bearer , priority 0 [ 152.153679][T10817] netlink: 'syz.8.1856': attribute type 1 has an invalid length. [ 152.156392][T10817] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1856'. [ 152.195043][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1859'. [ 152.200515][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1859'. [ 152.263523][ T40] audit: type=1800 audit(1747954379.351:480): pid=10833 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1862" name="nullb0" dev="tmpfs" ino=543 res=0 errno=0 [ 152.274864][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1863'. [ 153.121338][T10898] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1875'. [ 153.155743][T10913] overlayfs: failed to clone upperpath [ 153.336116][T10929] overlayfs: failed to clone upperpath [ 153.529195][T10958] overlayfs: failed to clone upperpath [ 154.533824][T11054] overlayfs: failed to clone upperpath [ 154.763832][ T40] audit: type=1800 audit(1747954381.851:481): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1938" name="nullb0" dev="tmpfs" ino=543 res=0 errno=0 [ 155.195099][ T40] audit: type=1400 audit(1747954382.281:482): avc: denied { read } for pid=11089 comm="syz.7.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.627667][T11132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1965'. [ 155.630722][T11132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1965'. [ 155.633952][T11132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1965'. [ 155.637842][T11132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1965'. [ 155.719185][T11141] gtp0: entered allmulticast mode [ 155.947702][T11165] overlayfs: failed to clone upperpath [ 156.222293][ T5945] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 156.225449][ T5945] CPU: 3 UID: 0 PID: 5945 Comm: kworker/u33:5 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 156.225466][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.225474][ T5945] Workqueue: hci1 hci_rx_work [ 156.225504][ T5945] Call Trace: [ 156.225508][ T5945] [ 156.225513][ T5945] dump_stack_lvl+0x16c/0x1f0 [ 156.225532][ T5945] sysfs_warn_dup+0x7f/0xa0 [ 156.225545][ T5945] sysfs_create_dir_ns+0x24b/0x2b0 [ 156.225556][ T5945] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 156.225567][ T5945] ? find_held_lock+0x2b/0x80 [ 156.225583][ T5945] ? do_raw_spin_unlock+0x172/0x230 [ 156.225597][ T5945] kobject_add_internal+0x2c4/0x9b0 [ 156.225617][ T5945] kobject_add+0x16e/0x240 [ 156.225627][ T5945] ? __pfx_kobject_add+0x10/0x10 [ 156.225638][ T5945] ? do_raw_spin_unlock+0x172/0x230 [ 156.225650][ T5945] ? kobject_put+0xab/0x5a0 [ 156.225670][ T5945] device_add+0x288/0x1a70 [ 156.225691][ T5945] ? __pfx_dev_set_name+0x10/0x10 [ 156.225707][ T5945] ? __pfx_device_add+0x10/0x10 [ 156.225721][ T5945] ? mgmt_send_event_skb+0x2fb/0x460 [ 156.225752][ T5945] hci_conn_add_sysfs+0x17e/0x230 [ 156.225769][ T5945] le_conn_complete_evt+0x1075/0x1d70 [ 156.225803][ T5945] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 156.225830][ T5945] ? hci_event_packet+0x43c/0x1190 [ 156.225862][ T5945] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 156.225890][ T5945] ? skb_pull_data+0x166/0x210 [ 156.225913][ T5945] hci_le_meta_evt+0x2f3/0x5e0 [ 156.225930][ T5945] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 156.225962][ T5945] hci_event_packet+0x669/0x1190 [ 156.225990][ T5945] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 156.226009][ T5945] ? __pfx_hci_event_packet+0x10/0x10 [ 156.226041][ T5945] ? kcov_remote_start+0x3c9/0x6d0 [ 156.226060][ T5945] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.226092][ T5945] hci_rx_work+0x2c5/0x16b0 [ 156.226111][ T5945] ? rcu_is_watching+0x12/0xc0 [ 156.226136][ T5945] process_one_work+0x9cf/0x1b70 [ 156.226167][ T5945] ? __pfx_process_one_work+0x10/0x10 [ 156.226220][ T5945] ? assign_work+0x1a0/0x250 [ 156.226244][ T5945] worker_thread+0x6c8/0xf10 [ 156.226278][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 156.226301][ T5945] kthread+0x3c2/0x780 [ 156.226320][ T5945] ? __pfx_kthread+0x10/0x10 [ 156.226335][ T5945] ? __pfx_kthread+0x10/0x10 [ 156.226352][ T5945] ? __pfx_kthread+0x10/0x10 [ 156.226368][ T5945] ? __pfx_kthread+0x10/0x10 [ 156.226384][ T5945] ? rcu_is_watching+0x12/0xc0 [ 156.226406][ T5945] ? __pfx_kthread+0x10/0x10 [ 156.226424][ T5945] ret_from_fork+0x45/0x80 [ 156.226449][ T5945] ? __pfx_kthread+0x10/0x10 [ 156.226469][ T5945] ret_from_fork_asm+0x1a/0x30 [ 156.226510][ T5945] [ 156.226535][ T5945] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 156.321833][ T5945] Bluetooth: hci1: failed to register connection device [ 156.352185][ T5945] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 156.355274][ T5945] Bluetooth: hci1: Injecting HCI hardware error event [ 156.359254][ T5945] Bluetooth: hci1: hardware error 0x00 [ 156.372201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 156.424396][T11188] __nla_validate_parse: 2 callbacks suppressed [ 156.424408][T11188] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1986'. [ 156.429159][T11188] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1986'. [ 156.432435][T11188] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1986'. [ 156.435454][T11188] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1986'. [ 156.780768][ T40] audit: type=1800 audit(1747954383.861:483): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2005" name="nullb0" dev="tmpfs" ino=543 res=0 errno=0 [ 156.840749][T11229] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2006'. [ 157.093396][ T5938] Bluetooth: hci1: unexpected event for opcode 0x200b [ 157.433743][T11313] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2047'. [ 157.461668][T11317] xt_hashlimit: max too large, truncated to 1048576 [ 157.478902][T11317] Cannot find set identified by id 0 to match [ 157.712166][ T5938] Bluetooth: hci2: command tx timeout [ 157.970443][T11363] xt_hashlimit: size too large, truncated to 1048576 [ 158.115359][ T5938] Bluetooth: hci2: unexpected event 0x14 length: 4 < 6 [ 158.183780][T11375] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.2072'. [ 158.256264][T11392] xt_hashlimit: size too large, truncated to 1048576 [ 158.432230][ T5945] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 159.394276][T11469] overlayfs: failed to clone upperpath [ 160.185136][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2136'. [ 160.381433][T11548] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.494549][ T40] audit: type=1400 audit(1747954387.571:484): avc: denied { read } for pid=11561 comm="syz.4.2158" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.794127][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2177'. [ 160.945894][T11615] team0: Device gtp1 is of different type [ 161.854116][T11650] overlayfs: failed to clone lowerpath [ 162.530618][T11710] overlayfs: failed to clone upperpath [ 162.600605][ T40] audit: type=1400 audit(1747954389.681:485): avc: denied { ioctl } for pid=11716 comm="syz.4.2231" path="socket:[36118]" dev="sockfs" ino=36118 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.660178][T11727] overlayfs: failed to clone upperpath [ 162.797080][T11732] net_ratelimit: 3319 callbacks suppressed [ 162.797086][T11732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.040016][ T40] audit: type=1400 audit(1747954390.121:486): avc: denied { shutdown } for pid=11757 comm="syz.8.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.449687][ T40] audit: type=1400 audit(1747954390.531:487): avc: denied { bind } for pid=11796 comm="syz.7.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.582493][T11811] overlayfs: failed to clone upperpath [ 164.376553][T11857] overlayfs: failed to clone upperpath [ 164.524542][T11864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2297'. [ 164.600828][T11874] batman_adv: batadv0: Adding interface: ip6gretap1 [ 164.605567][T11874] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.614346][T11874] batman_adv: batadv0: Interface activated: ip6gretap1 [ 164.729245][T11888] overlayfs: failed to clone upperpath [ 165.241756][T11904] overlayfs: failed to clone upperpath [ 165.271632][T11906] netlink: 'syz.4.2318': attribute type 29 has an invalid length. [ 165.778972][T11977] overlayfs: failed to clone upperpath [ 165.790185][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2349'. [ 166.373449][T12002] overlayfs: failed to clone upperpath [ 167.145469][T12042] overlayfs: failed to clone upperpath [ 167.507260][T12084] tipc: Enabling of bearer rejected, failed to enable media [ 168.178114][T12144] overlayfs: failed to clone upperpath [ 168.263819][T12162] overlayfs: failed to clone upperpath [ 168.418053][T12180] overlayfs: failed to clone upperpath [ 168.447239][T12183] overlayfs: failed to clone upperpath [ 168.533548][T12195] overlayfs: failed to clone upperpath [ 168.577161][T12199] overlayfs: failed to clone upperpath [ 168.849352][T12222] overlayfs: failed to clone upperpath [ 169.083413][T12247] overlayfs: failed to clone upperpath [ 169.212795][T12256] overlayfs: failed to resolve './file1': -2 [ 169.593472][T12270] overlayfs: failed to clone upperpath [ 169.623805][ T34] Process accounting resumed [ 169.678261][T12280] netlink: 'syz.1.2477': attribute type 13 has an invalid length. [ 169.683342][T12280] gretap0: refused to change device tx_queue_len [ 169.685499][T12280] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 169.728447][T12284] overlayfs: failed to clone upperpath [ 169.731713][ T40] audit: type=1400 audit(1747954396.811:488): avc: denied { watch watch_reads } for pid=12283 comm="syz.1.2479" path="/805/bus/file1" dev="tmpfs" ino=4312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.101848][T12314] overlayfs: failed to clone upperpath [ 170.704384][ T40] audit: type=1800 audit(1747954397.791:489): pid=12351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2506" name="nullb0" dev="tmpfs" ino=1440 res=0 errno=0 [ 171.633025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 171.672204][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2538'. [ 171.681489][T12418] bridge_slave_1: left allmulticast mode [ 171.683976][T12418] bridge_slave_1: left promiscuous mode [ 171.685746][T12418] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.690884][T12418] bridge_slave_0: left allmulticast mode [ 171.693255][T12418] bridge_slave_0: left promiscuous mode [ 171.695358][T12418] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.854315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 171.857564][ T40] audit: type=1400 audit(1747954398.941:490): avc: denied { remount } for pid=12437 comm="syz.7.2548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.055126][T12472] xt_hashlimit: max too large, truncated to 1048576 [ 172.505103][T12485] syz_tun: entered allmulticast mode [ 172.507375][T12484] syz_tun: left allmulticast mode [ 172.704697][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 172.784960][T12458] 9pnet_fd: p9_fd_create_tcp (12458): problem connecting socket to 127.0.0.1 [ 173.685617][T12581] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 173.786669][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2615'. [ 176.539330][T12694] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2663'. [ 176.542358][T12694] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2663'. [ 176.661565][T12704] overlayfs: failed to clone upperpath [ 177.122094][T12714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.126411][T12714] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.131347][T12714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.144968][ T5945] Bluetooth: Wrong link type (-71) [ 177.327502][T12763] overlayfs: failed to clone upperpath [ 177.449045][T12780] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.452868][T12780] bond0: (slave bond5): Enslaving as an active interface with an up link [ 177.510656][T12794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2709'. [ 177.761600][T12812] batman_adv: batadv0: Adding interface: ip6gretap1 [ 177.763992][T12812] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.773660][T12812] batman_adv: batadv0: Interface activated: ip6gretap1 [ 177.926862][T12824] overlayfs: failed to clone upperpath [ 178.185976][T12847] netlink: 'syz.8.2733': attribute type 1 has an invalid length. [ 178.198840][T12847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.215484][T12847] bond1: (slave ip6gretap2): making interface the new active one [ 178.218385][T12847] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 178.221089][T12847] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 178.223828][T12847] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 178.252223][ T65] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 178.256874][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 178.464920][ T65] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 178.539256][T12874] netlink: 'syz.7.2745': attribute type 29 has an invalid length. [ 178.721687][ T40] audit: type=1400 audit(1747954405.801:491): avc: denied { write } for pid=12888 comm="syz.8.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.162298][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 179.332202][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 179.731445][T12979] overlayfs: failed to clone upperpath [ 179.834330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 180.076477][T13025] overlayfs: failed to clone upperpath [ 180.192757][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 180.196713][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 180.442355][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 180.612568][ T40] audit: type=1326 audit(1747954407.701:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13056 comm="syz.4.2825" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe241b8e969 code=0x0 [ 180.647258][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2826'. [ 180.684793][T13061] overlayfs: failed to clone lowerpath [ 180.688951][T13061] overlayfs: failed to clone upperpath [ 180.928417][T13076] overlayfs: failed to clone upperpath [ 181.044581][T13083] tipc: Started in network mode [ 181.046226][T13083] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 181.048784][T13083] tipc: Enabled bearer , priority 0 [ 181.247589][T13098] overlayfs: failed to clone upperpath [ 181.278900][T13102] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2844'. [ 181.314606][ T40] audit: type=1326 audit(1747954408.401:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13105 comm="syz.1.2846" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17bf58e969 code=0x0 [ 182.102420][T13146] 9pnet_fd: Insufficient options for proto=fd [ 182.167491][ T835] tipc: Node number set to 11578026 [ 182.660492][T13199] netlink: 'syz.8.2880': attribute type 10 has an invalid length. [ 182.666507][T13199] syz_tun: entered promiscuous mode [ 182.672337][T13199] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 182.872113][T13223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.874456][T13223] IPv6: NLM_F_CREATE should be set when creating new route [ 182.902255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 182.904842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 182.905337][T13228] overlayfs: failed to clone upperpath [ 182.907360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 182.912093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 182.968571][T13233] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2896'. [ 182.971442][T13233] tipc: Enabling of bearer rejected, failed to enable media [ 183.067777][T13239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2898'. [ 183.098886][ T40] audit: type=1800 audit(1747954410.181:494): pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2899" name="nullb0" dev="tmpfs" ino=1440 res=0 errno=0 [ 183.143109][T13243] overlayfs: failed to clone upperpath [ 183.812553][ T46] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 183.812586][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 183.952173][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 184.022113][T13265] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2908'. [ 184.025187][T13265] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2908'. [ 184.028079][T13265] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2908'. [ 184.030853][T13265] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2908'. [ 184.932700][ T1258] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 185.029049][ T40] audit: type=1400 audit(1747954412.111:495): avc: denied { read } for pid=13316 comm="syz.1.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.057800][T13321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2933'. [ 185.365147][ T40] audit: type=1400 audit(1747954412.451:496): avc: denied { getopt } for pid=13346 comm="syz.1.2944" lport=39209 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 185.615676][ T40] audit: type=1400 audit(1747954412.701:497): avc: denied { bind } for pid=13361 comm="syz.1.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.072851][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 186.155137][ T40] audit: type=1400 audit(1747954413.241:498): avc: denied { getopt } for pid=13414 comm="syz.7.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.287441][T13431] syz_tun: entered allmulticast mode [ 186.304617][T13430] syz_tun: left allmulticast mode [ 186.308482][T13433] trusted_key: encrypted_key: insufficient parameters specified [ 186.355879][T13437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.411296][T13437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.467660][T13437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.811643][T13462] overlayfs: failed to clone upperpath [ 186.816098][T13462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13462 comm=syz.1.2994 [ 186.856647][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2997'. [ 186.865072][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2997'. [ 186.895053][T13468] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 186.910938][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2997'. [ 186.924367][ T40] audit: type=1400 audit(1747954414.011:499): avc: denied { mount } for pid=13472 comm="syz.8.2999" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 186.959908][T13475] openvswitch: netlink: Key type 12816 is out of range max 32 [ 187.106943][T13496] openvswitch: netlink: Key type 30 is not supported [ 187.114339][T13500] vlan2: entered allmulticast mode [ 187.198839][T13509] overlayfs: failed to clone upperpath [ 187.212450][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 187.232399][T13513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.238728][T13513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.294779][T13513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.781463][T13536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.889611][T13547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.894804][T13547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.913688][T13553] syz_tun: entered allmulticast mode [ 187.916479][T13551] syz_tun: left allmulticast mode [ 187.951055][T13547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.030581][ T40] audit: type=1804 audit(1747954415.111:500): pid=13567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.3041" name="file0" dev="tmpfs" ino=2339 res=1 errno=0 [ 188.031150][T13567] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 188.041118][T13567] ref_ctr increment failed for inode: 0x923 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888038005000 [ 188.048028][T13569] __nla_validate_parse: 2 callbacks suppressed [ 188.048039][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3042'. [ 188.310537][T13577] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3045'. [ 188.352369][ T1145] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 188.580617][T13605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.627157][T13609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.669851][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3055'. [ 188.673083][T13611] bridge_slave_1: left allmulticast mode [ 188.675187][T13611] bridge_slave_1: left promiscuous mode [ 188.677777][T13611] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.682326][T13609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.682684][T13611] bridge_slave_0: left allmulticast mode [ 188.687210][T13611] bridge_slave_0: left promiscuous mode [ 188.689124][T13611] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.736940][T13609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.813530][T13615] fuse: Bad value for 'rootmode' [ 188.909656][T13625] IPVS: Unknown mcast interface: dvmrp0 [ 188.915513][T13625] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 188.918374][T13625] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 189.010579][T13639] bond1: (slave erspan0): Releasing active interface [ 189.017504][T13639] bond0: (slave bond_slave_0): Releasing backup interface [ 189.022838][T13639] bond0: (slave bond_slave_1): Releasing backup interface [ 189.030810][T13639] team0: Port device team_slave_0 removed [ 189.035867][T13639] team0: Port device team_slave_1 removed [ 189.038126][T13639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.040776][T13639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.051802][T13639] team0: Port device geneve0 removed [ 189.054930][T13639] bond2: (slave veth11): Releasing active interface [ 189.060241][T13639] bond3: (slave geneve2): Releasing active interface [ 189.062657][T13639] geneve2: left promiscuous mode [ 189.065278][T13639] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.067906][T13639] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.070586][T13639] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.073729][T13639] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.079255][T13639] bond4: (slave geneve3): Releasing active interface [ 189.081409][T13639] bond4: (slave geneve3): the permanent HWaddr of slave - 86:8a:c9:03:db:e7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 189.087027][T13639] geneve3: left allmulticast mode [ 189.090725][T13639] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.093877][T13639] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.096493][T13639] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.099056][T13639] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.104316][T13639] bond4: (slave veth13): Releasing active interface [ 189.110977][T13639] bond0: (slave bond5): Releasing backup interface [ 189.120252][ T46] tipc: Resetting bearer [ 189.124347][T13642] team0: Mode changed to "broadcast" [ 189.136993][T13639] tipc: Enabling of bearer rejected, already enabled [ 189.492176][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 189.578748][T13675] overlayfs: failed to clone upperpath [ 189.618069][T13682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.663409][T13686] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3089'. [ 189.665684][T13687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13687 comm=syz.7.3086 [ 189.673043][T13682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.677183][T13682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.949721][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3099'. [ 190.029059][T13712] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 190.039234][T13712] CIFS mount error: No usable UNC path provided in device string! [ 190.039234][T13712] [ 190.043288][T13712] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 190.106777][ T40] audit: type=1400 audit(1747954417.191:501): avc: denied { create } for pid=13720 comm="syz.8.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 190.114571][ T40] audit: type=1400 audit(1747954417.191:502): avc: denied { getopt } for pid=13720 comm="syz.8.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 190.133507][T13723] netlink: 'syz.4.3105': attribute type 10 has an invalid length. [ 190.151130][T13723] team0: Device bond0 is already an upper device of the team interface [ 190.331209][T13751] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 190.377099][ T40] audit: type=1800 audit(1747954417.461:503): pid=13750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3115" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 190.417621][T13735] netlink: zone id is out of range [ 190.419894][T13735] netlink: zone id is out of range [ 190.422714][T13735] netlink: del zone limit has 4 unknown bytes [ 190.428695][T13735] netlink: zone id is out of range [ 190.430976][T13735] netlink: zone id is out of range [ 190.472631][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3121'. [ 190.608630][T13775] overlayfs: failed to clone upperpath [ 190.632118][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 190.640660][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3130'. [ 190.675807][T13804] fuse: Bad value for 'fd' [ 190.695821][T13807] netlink: 'syz.7.3136': attribute type 178 has an invalid length. [ 190.699479][T13807] netlink: 'syz.7.3136': attribute type 178 has an invalid length. [ 190.806050][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3142'. [ 190.810317][T13826] veth1_macvtap: left promiscuous mode [ 191.195188][T13846] overlayfs: failed to clone upperpath [ 191.343751][T13864] fuse: Bad value for 'fd' [ 191.595748][T13896] batadv_slave_1: entered promiscuous mode [ 191.707157][T13895] batadv_slave_1: left promiscuous mode [ 191.719923][T13899] tipc: Started in network mode [ 191.721679][T13899] tipc: Node identity ac1414aa, cluster identity 4711 [ 191.724198][T13899] tipc: Enabling of bearer rejected, failed to enable media [ 191.762193][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 191.906291][T13917] netlink: 'syz.7.3184': attribute type 1 has an invalid length. [ 191.998679][T13932] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3191'. [ 192.026856][ T40] audit: type=1400 audit(1747954419.111:504): avc: denied { map } for pid=13938 comm="syz.7.3192" path="socket:[40786]" dev="sockfs" ino=40786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.029334][T13941] syz_tun: entered allmulticast mode [ 192.038597][T13941] syz_tun: left allmulticast mode [ 192.039212][ T40] audit: type=1400 audit(1747954419.121:505): avc: denied { getopt } for pid=13938 comm="syz.7.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.112162][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 192.135142][T13947] netlink: 'syz.8.3196': attribute type 10 has an invalid length. [ 192.151024][T13947] veth0_vlan: left promiscuous mode [ 192.159729][T13947] veth0_vlan: entered promiscuous mode [ 192.165328][T13947] team0: Device veth0_vlan failed to register rx_handler [ 192.189225][T13947] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3196'. [ 192.195081][T13947] gretap0: entered promiscuous mode [ 192.305512][T13962] netlink: 'syz.1.3202': attribute type 1 has an invalid length. [ 192.339793][T13968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.395723][T13968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.452883][T13982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.453670][ T40] audit: type=1400 audit(1747954419.541:506): avc: denied { mount } for pid=13980 comm="syz.7.3211" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 192.474446][ T40] audit: type=1400 audit(1747954419.561:507): avc: denied { getopt } for pid=13984 comm="syz.8.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.477204][T13985] IPVS: Error connecting to the multicast addr [ 192.547677][T13992] nft_compat: unsupported protocol 0 [ 192.668141][T14001] bond0: entered promiscuous mode [ 192.670321][T14001] bond_slave_0: entered promiscuous mode [ 192.675148][T14001] bond_slave_1: entered promiscuous mode [ 192.678766][T14001] batadv0: entered promiscuous mode [ 192.681838][T14001] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 192.687980][T14001] bond0: left promiscuous mode [ 192.689813][T14001] bond_slave_0: left promiscuous mode [ 192.691855][T14001] bond_slave_1: left promiscuous mode [ 192.695881][T14001] batadv0: left promiscuous mode [ 192.872475][ T98] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 192.919592][T14025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.984884][T14038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.022127][T14046] CIFS: Unable to determine destination address [ 193.042133][T14025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.060777][T14051] overlayfs: missing 'lowerdir' [ 193.152534][ T40] audit: type=1326 audit(1747954420.241:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.1.3243" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17bf58e969 code=0x0 [ 193.245927][T14077] __nla_validate_parse: 2 callbacks suppressed [ 193.245938][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'. [ 193.566379][T14115] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 193.665187][ T40] audit: type=1400 audit(1747954420.751:509): avc: denied { nlmsg_read } for pid=14129 comm="syz.7.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.752956][T14141] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 193.755381][T14141] macvlan3: entered allmulticast mode [ 193.757061][T14141] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 193.760795][T14141] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 193.763469][T14141] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 193.802596][ T40] audit: type=1400 audit(1747954420.891:510): avc: denied { ioctl } for pid=14140 comm="syz.4.3273" path="socket:[42804]" dev="sockfs" ino=42804 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 193.953242][T14146] overlayfs: failed to clone upperpath [ 193.958544][ T1329] IPVS: starting estimator thread 0... [ 194.002168][ T1145] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 194.036580][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.038698][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.062682][T14147] IPVS: using max 46 ests per chain, 110400 per kthread [ 194.215392][T14170] syz_tun: entered allmulticast mode [ 194.225952][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3286'. [ 194.228960][T14173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.284476][T14173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.288947][T14173] overlayfs: failed to clone upperpath [ 194.346060][T14191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.534882][T14217] netlink: 'syz.8.3300': attribute type 142 has an invalid length. [ 194.634795][T14227] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 194.826753][T14253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.088504][T14272] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.3329'. [ 195.142410][ T98] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 195.143751][T14276] netlink: 'syz.7.3331': attribute type 29 has an invalid length. [ 195.149260][T14276] netlink: 'syz.7.3331': attribute type 29 has an invalid length. [ 195.158368][T14276] netlink: 500 bytes leftover after parsing attributes in process `syz.7.3331'. [ 195.161705][T14276] unsupported nla_type 58 [ 195.338080][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3338'. [ 195.345064][T14288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.399610][T14288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.458546][T14288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.479113][T14299] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3342'. [ 195.740158][T14314] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3349'. [ 195.757748][T14316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3350'. [ 195.809476][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3353'. [ 195.809897][ T40] audit: type=1400 audit(1747954422.891:511): avc: denied { getopt } for pid=14321 comm="syz.7.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.815110][T14322] IPVS: set_ctl: invalid protocol: 137 172.20.20.31:20004 [ 195.915661][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'. [ 196.027305][T14358] syz_tun: entered allmulticast mode [ 196.166197][ T40] audit: type=1800 audit(1747954423.251:512): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3375" name="nullb0" dev="tmpfs" ino=1903 res=0 errno=0 [ 196.302515][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 196.455342][T14410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.512343][T14410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.568171][T14410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.967539][T14415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14415 comm=syz.7.3391 [ 197.126744][T14435] netlink: 'syz.1.3399': attribute type 1 has an invalid length. [ 197.141141][T14435] 8021q: adding VLAN 0 to HW filter on device bond7 [ 197.168514][T14435] veth15: entered promiscuous mode [ 197.174184][T14435] bond7: (slave veth15): Enslaving as an active interface with a down link [ 197.215949][T14448] netlink: 'syz.8.3403': attribute type 1 has an invalid length. [ 197.227238][T14448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.236912][T14448] erspan0: entered allmulticast mode [ 197.255484][T14448] bond2: (slave erspan0): making interface the new active one [ 197.261259][T14448] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 197.323331][T14463] netlink: 'syz.4.3408': attribute type 10 has an invalid length. [ 197.327912][T14463] hsr_slave_0: left promiscuous mode [ 197.330301][T14463] hsr_slave_1: left promiscuous mode [ 197.347930][T14467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.406578][T14467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.452268][ T98] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 197.463002][T14467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.554364][ T40] audit: type=1400 audit(1747954424.641:513): avc: denied { ioctl } for pid=14484 comm="syz.1.3419" path="socket:[44270]" dev="sockfs" ino=44270 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.668615][ T40] audit: type=1400 audit(1747954424.751:514): avc: denied { watch } for pid=14492 comm="syz.1.3423" path="/1064" dev="tmpfs" ino=5689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 197.676318][T14493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.677496][ T40] audit: type=1400 audit(1747954424.751:515): avc: denied { watch_sb } for pid=14492 comm="syz.1.3423" path="/1064" dev="tmpfs" ino=5689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 197.731157][T14493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.786833][T14494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.793720][T14493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.174834][T14529] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 198.187259][T14524] netlink: 'syz.7.3437': attribute type 7 has an invalid length. [ 198.190133][T14524] netlink: 'syz.7.3437': attribute type 8 has an invalid length. [ 198.196234][T14524] syz_tun: entered promiscuous mode [ 198.203192][T14524] syz_tun: left promiscuous mode [ 198.416229][T14562] __nla_validate_parse: 11 callbacks suppressed [ 198.416242][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3452'. [ 198.422353][T14566] netlink: 'syz.4.3455': attribute type 10 has an invalid length. [ 198.465762][T14575] xt_hashlimit: max too large, truncated to 1048576 [ 198.533460][ T40] audit: type=1400 audit(1747954425.621:516): avc: denied { ioctl } for pid=14585 comm="syz.7.3462" path="socket:[44357]" dev="sockfs" ino=44357 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 198.582408][ T98] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 198.634681][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 198.637711][T14605] netlink: 'syz.1.3470': attribute type 8 has an invalid length. [ 198.640338][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 198.781012][T14623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.836890][T14623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.891552][T14623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.054238][T14643] xt_cgroup: xt_cgroup: no path or classid specified [ 199.056897][ T40] audit: type=1400 audit(1747954426.141:517): avc: denied { map } for pid=14642 comm="syz.7.3485" path="socket:[45423]" dev="sockfs" ino=45423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 199.067943][ T40] audit: type=1400 audit(1747954426.141:518): avc: denied { accept } for pid=14642 comm="syz.7.3485" path="socket:[45423]" dev="sockfs" ino=45423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 199.346901][T14658] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3492'. [ 199.530599][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3502'. [ 199.533662][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3502'. [ 199.557551][T14676] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3501'. [ 199.669537][ C1] hrtimer: interrupt took 60144 ns [ 199.713084][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 199.721878][T14705] overlayfs: failed to clone upperpath [ 199.729179][T14705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3510'. [ 200.208349][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 200.211568][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3523'. [ 200.220085][T14739] ipvlan2: entered allmulticast mode [ 200.223320][T14739] veth0_vlan: entered allmulticast mode [ 200.269595][T14744] ptrace attach of "/syz-executor exec"[9053] was attempted by ""[14744] [ 200.301661][T14748] io-wq is not configured for unbound workers [ 200.797008][T14761] 9pnet_fd: Insufficient options for proto=fd [ 200.813256][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 201.196819][T14808] net_ratelimit: 4 callbacks suppressed [ 201.196831][T14808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.923010][ T1145] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 202.308210][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.364622][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.423934][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.053271][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 203.069478][T14991] tipc: Enabled bearer , priority 10 [ 203.268719][T14997] kAFS: unable to lookup cell '/,c¾ûL' [ 203.310060][T14999] netlink: 'syz.4.3626': attribute type 1 has an invalid length. [ 203.337408][T14999] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.358335][T14999] bond4: (slave geneve3): making interface the new active one [ 203.363386][T14999] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 203.397406][T14999] veth5: entered promiscuous mode [ 203.401059][T14999] bond4: (slave veth5): Enslaving as an active interface with a down link [ 203.420948][T14999] vlan3: entered allmulticast mode [ 203.423322][T14999] bond4: entered allmulticast mode [ 203.426507][T14999] geneve3: entered allmulticast mode [ 203.430292][T14999] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 203.496155][T15010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.846607][ T40] audit: type=1326 audit(1747954430.931:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.4.3638" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe241b8e969 code=0x0 [ 204.016591][T15035] __nla_validate_parse: 11 callbacks suppressed [ 204.016609][T15035] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3640'. [ 204.034520][T15037] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20001 [ 204.073522][ T5974] tipc: Node number set to 2886997162 [ 204.160248][ T40] audit: type=1400 audit(1747954431.241:520): avc: denied { ioctl } for pid=15046 comm="syz.7.3646" path="socket:[44727]" dev="sockfs" ino=44727 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 204.188609][ T1258] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 204.202273][ T40] audit: type=1400 audit(1747954431.291:521): avc: denied { nlmsg_read } for pid=15052 comm="syz.1.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 204.367297][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3654'. [ 204.753155][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3673'. [ 204.795824][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3677'. [ 204.798669][T15124] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3677'. [ 204.889965][T15145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.946340][T15145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.966324][ T40] audit: type=1400 audit(1747954432.051:522): avc: denied { read } for pid=15152 comm="syz.1.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 205.001360][T15161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.126268][T15176] x_tables: duplicate underflow at hook 1 [ 205.312097][ T98] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 205.501772][T15219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.640339][T15251] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3725'. [ 205.649996][T15259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.667239][T15263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.684819][ T40] audit: type=1400 audit(1747954432.771:523): avc: denied { write } for pid=15266 comm="syz.4.3732" path="socket:[44909]" dev="sockfs" ino=44909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 205.707670][T15259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.721460][T15263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.724817][T15275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.762104][T15259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.778085][T15275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.779515][T15263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.835990][T15275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.179459][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3745'. [ 206.325107][T15308] netlink: 'syz.1.3748': attribute type 10 has an invalid length. [ 206.329834][T15308] hsr_slave_0: left promiscuous mode [ 206.332351][T15308] hsr_slave_1: left promiscuous mode [ 206.423212][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 206.475326][T15328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.489437][T15332] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3756'. [ 206.490017][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3758'. [ 206.534974][T15328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.590415][T15328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.630352][T15355] xt_hashlimit: size too large, truncated to 1048576 [ 206.681814][T15364] xt_l2tp: missing protocol rule (udp|l2tpip) [ 206.688555][T15366] netlink: 'syz.7.3765': attribute type 1 has an invalid length. [ 206.706632][T15366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.714450][T15355] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3765'. [ 206.757078][T15381] /dev/nullb0: Can't lookup blockdev [ 206.773521][T15386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.773896][T15385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.781312][T15385] Cannot find del_set index 85 as target [ 206.899288][T15406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.907637][T15407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.918247][T15407] netlink: 'syz.4.3783': attribute type 7 has an invalid length. [ 206.921545][T15406] netlink: 'syz.4.3783': attribute type 7 has an invalid length. [ 206.926919][ T40] audit: type=1326 audit(1747954434.011:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15403 comm="syz.4.3783" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe241b8e969 code=0x0 [ 206.934242][ T40] audit: type=1326 audit(1747954434.011:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15403 comm="syz.4.3783" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe241b8e969 code=0x0 [ 207.216356][T15448] nftables ruleset with unbound chain [ 207.239757][T15450] afs: Unknown parameter 'fsmagic' [ 207.244438][T15450] overlayfs: failed to clone upperpath [ 207.270360][T15446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15446 comm=syz.1.3799 [ 207.275298][ T40] audit: type=1400 audit(1747954434.361:526): avc: denied { setopt } for pid=15445 comm="syz.1.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 207.363307][T15459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.419251][T15459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.472801][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 207.478379][T15459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.487688][T15471] netlink: 'syz.8.3809': attribute type 5 has an invalid length. [ 207.582712][ T1258] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 207.774869][ T40] audit: type=1326 audit(1747954434.861:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15492 comm="syz.4.3819" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe241b8e969 code=0x0 [ 207.864210][ T40] audit: type=1400 audit(1747954434.941:528): avc: denied { write } for pid=15496 comm="syz.4.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 207.987446][T15520] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 207.990037][T15520] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 208.618503][T15589] fuse: Bad value for 'fd' [ 208.712986][ T1145] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 209.634251][T15608] netlink: 'syz.7.3865': attribute type 1 has an invalid length. [ 209.651279][T15608] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.666488][T15608] ip6erspan0: entered promiscuous mode [ 209.672741][T15608] bond2: (slave ip6erspan0): making interface the new active one [ 209.677170][T15608] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 209.794928][T15632] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.842567][ T1145] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 210.006442][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 210.006455][ T40] audit: type=1800 audit(1747954437.091:531): pid=15659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3884" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 210.039697][ T40] audit: type=1326 audit(1747954437.121:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.8.3889" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb53a38e969 code=0x0 [ 210.107543][ T40] audit: type=1400 audit(1747954437.191:533): avc: denied { setopt } for pid=15668 comm="syz.7.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.110754][T15669] __nla_validate_parse: 10 callbacks suppressed [ 210.110770][T15669] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3892'. [ 210.318479][T15690] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 210.482980][T15699] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3906'. [ 210.719546][T15711] geneve3: entered promiscuous mode [ 210.721886][T15711] geneve3: entered allmulticast mode [ 210.942592][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 210.959937][T15746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.017471][T15746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.073020][T15765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.084204][T15766] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 211.222255][T15782] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 211.487788][T15805] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3948'. [ 211.615965][T15815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64029 sclass=netlink_route_socket pid=15815 comm=syz.4.3953 [ 211.715729][T15828] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.3959'. [ 211.786423][T15837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.842699][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.898773][T15837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.057833][T15857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3971'. [ 212.062437][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 212.147808][T15865] tmpfs: Bad value for 'mpol' [ 212.290806][ T40] audit: type=1400 audit(1747954439.371:534): avc: denied { read } for pid=15872 comm="syz.7.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.687927][T15933] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4005'. [ 212.767108][ T40] audit: type=1326 audit(1747954439.841:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.4.4003" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe241b8e969 code=0xffc00000 [ 212.944263][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4015'. [ 213.205989][ T1258] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 213.211025][ T40] audit: type=1400 audit(1747954440.291:536): avc: denied { write } for pid=15977 comm="syz.1.4026" name="/" dev="configfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.219015][ T40] audit: type=1400 audit(1747954440.291:537): avc: denied { add_name } for pid=15977 comm="syz.1.4026" name="memory.numa_stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.226146][ T40] audit: type=1400 audit(1747954440.291:538): avc: denied { create } for pid=15977 comm="syz.1.4026" name="memory.numa_stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 213.308868][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4029'. [ 213.314031][ T1258] bond0: (slave bond_slave_0): interface is now down [ 213.315710][T15984] netlink: 'syz.7.4029': attribute type 10 has an invalid length. [ 213.316323][ T1258] bond0: (slave bond_slave_1): interface is now down [ 213.325511][T15984] syz_tun: entered promiscuous mode [ 213.334666][T15984] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 213.348856][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4038'. [ 213.362162][T16005] 9p: Unknown Cache mode or invalid value fs [ 213.481619][T16024] Cannot find set identified by id 0 to match [ 213.486493][T16024] netlink: 'syz.8.4049': attribute type 11 has an invalid length. [ 213.489078][T16024] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4049'. [ 213.554807][T16039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64768 sclass=netlink_route_socket pid=16039 comm=syz.8.4055 [ 213.649260][T16056] overlayfs: disabling nfs_export due to verity=require [ 213.651593][T16056] overlayfs: failed to clone upperpath [ 213.847342][T16086] bridge0: entered promiscuous mode [ 213.849956][T16086] vlan2: entered promiscuous mode [ 213.852215][T16086] bond0: entered promiscuous mode [ 213.854328][T16086] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 213.858488][T16086] team0: entered promiscuous mode [ 213.860610][T16086] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 213.863805][T16086] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16086, name: syz.4.4075 [ 213.867518][T16086] preempt_count: 201, expected: 0 [ 213.870163][T16086] RCU nest depth: 0, expected: 0 [ 213.871733][T16086] 3 locks held by syz.4.4075/16086: [ 213.873469][T16086] #0: ffffffff8f4c4d60 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 213.876505][T16086] #1: ffffffff901289e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 213.879715][T16086] #2: ffff888044b88368 (&dev_addr_list_lock_key#6/3){+...}-{3:3}, at: dev_uc_add+0x6f/0x110 [ 213.882996][T16086] Preemption disabled at: [ 213.883003][T16086] [] dev_uc_add+0x63/0x110 [ 213.886218][T16086] CPU: 2 UID: 0 PID: 16086 Comm: syz.4.4075 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 213.886235][T16086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.886242][T16086] Call Trace: [ 213.886247][T16086] [ 213.886252][T16086] dump_stack_lvl+0x16c/0x1f0 [ 213.886271][T16086] __might_resched+0x3c0/0x5e0 [ 213.886288][T16086] ? __pfx___might_resched+0x10/0x10 [ 213.886303][T16086] ? __pfx__printk+0x10/0x10 [ 213.886326][T16086] __mutex_lock+0x106/0xb90 [ 213.886343][T16086] ? team_change_rx_flags+0x39/0x220 [ 213.886362][T16086] ? __pfx___mutex_lock+0x10/0x10 [ 213.886381][T16086] ? __pfx_netdev_info+0x10/0x10 [ 213.886394][T16086] ? __queue_work+0x431/0x10f0 [ 213.886410][T16086] ? team_change_rx_flags+0x39/0x220 [ 213.886425][T16086] team_change_rx_flags+0x39/0x220 [ 213.886441][T16086] ? mark_held_locks+0x49/0x80 [ 213.886460][T16086] ? __pfx_team_change_rx_flags+0x10/0x10 [ 213.886478][T16086] __dev_set_promiscuity+0x217/0x590 [ 213.886491][T16086] ? __local_bh_enable_ip+0xa4/0x120 [ 213.886507][T16086] netif_set_promiscuity+0x52/0x150 [ 213.886520][T16086] dev_set_promiscuity+0xb2/0x260 [ 213.886536][T16086] bond_change_rx_flags+0x22b/0x740 [ 213.886549][T16086] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 213.886562][T16086] ? __dev_change_flags+0x55d/0x720 [ 213.886574][T16086] ? rtnl_newlink+0xcd9/0x2000 [ 213.886588][T16086] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 213.886601][T16086] __dev_set_promiscuity+0x217/0x590 [ 213.886615][T16086] netif_set_promiscuity+0x52/0x150 [ 213.886628][T16086] dev_set_promiscuity+0xb2/0x260 [ 213.886644][T16086] vlan_dev_change_rx_flags+0x123/0x150 [ 213.886658][T16086] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 213.886670][T16086] __dev_set_promiscuity+0x217/0x590 [ 213.886684][T16086] netif_set_promiscuity+0x52/0x150 [ 213.886697][T16086] dev_set_promiscuity+0xb2/0x260 [ 213.886712][T16086] br_manage_promisc+0x2ce/0x4f0 [ 213.886734][T16086] br_dev_change_rx_flags+0x3b/0x50 [ 213.886748][T16086] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 213.886761][T16086] __dev_set_promiscuity+0x217/0x590 [ 213.886773][T16086] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 213.886787][T16086] __dev_set_rx_mode+0x205/0x2e0 [ 213.886799][T16086] dev_uc_add+0xee/0x110 [ 213.886816][T16086] macvlan_open+0x62e/0x8f0 [ 213.886828][T16086] ? __pfx_macvlan_open+0x10/0x10 [ 213.886840][T16086] __dev_open+0x2e4/0x7d0 [ 213.886858][T16086] ? __pfx___dev_open+0x10/0x10 [ 213.886872][T16086] ? __local_bh_enable_ip+0xa4/0x120 [ 213.886888][T16086] __dev_change_flags+0x55d/0x720 [ 213.886903][T16086] ? __pfx___dev_change_flags+0x10/0x10 [ 213.886918][T16086] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 213.886932][T16086] rtnl_configure_link+0xfe/0x260 [ 213.886954][T16086] rtnl_newlink+0xcd9/0x2000 [ 213.886973][T16086] ? __pfx_rtnl_newlink+0x10/0x10 [ 213.886986][T16086] ? find_held_lock+0x2b/0x80 [ 213.887000][T16086] ? avc_has_perm_noaudit+0x117/0x3b0 [ 213.887015][T16086] ? avc_has_perm_noaudit+0x149/0x3b0 [ 213.887039][T16086] ? find_held_lock+0x2b/0x80 [ 213.887051][T16086] ? __pfx_rtnl_newlink+0x10/0x10 [ 213.887063][T16086] ? __pfx_rtnl_newlink+0x10/0x10 [ 213.887075][T16086] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 213.887088][T16086] ? __pfx_rtnl_newlink+0x10/0x10 [ 213.887101][T16086] rtnetlink_rcv_msg+0x95b/0xe90 [ 213.887116][T16086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 213.887136][T16086] netlink_rcv_skb+0x16a/0x440 [ 213.887152][T16086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 213.887166][T16086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.887188][T16086] ? netlink_deliver_tap+0x1ae/0xd30 [ 213.887204][T16086] netlink_unicast+0x53d/0x7f0 [ 213.887220][T16086] ? __pfx_netlink_unicast+0x10/0x10 [ 213.887238][T16086] netlink_sendmsg+0x8d1/0xdd0 [ 213.887255][T16086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.887274][T16086] ____sys_sendmsg+0xa98/0xc70 [ 213.887291][T16086] ? copy_msghdr_from_user+0x10a/0x160 [ 213.887303][T16086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.887320][T16086] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 213.887339][T16086] ___sys_sendmsg+0x134/0x1d0 [ 213.887353][T16086] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.887383][T16086] __sys_sendmsg+0x16d/0x220 [ 213.887395][T16086] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.887407][T16086] ? __x64_sys_futex+0x1e0/0x4c0 [ 213.887427][T16086] ? rcu_is_watching+0x12/0xc0 [ 213.887444][T16086] do_syscall_64+0xcd/0x260 [ 213.887464][T16086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.887476][T16086] RIP: 0033:0x7fe241b8e969 [ 213.887485][T16086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.887496][T16086] RSP: 002b:00007fe2429b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.887506][T16086] RAX: ffffffffffffffda RBX: 00007fe241db5fa0 RCX: 00007fe241b8e969 [ 213.887513][T16086] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 213.887520][T16086] RBP: 00007fe241c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 213.887526][T16086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.887532][T16086] R13: 0000000000000000 R14: 00007fe241db5fa0 R15: 00007ffff959c878 [ 213.887547][T16086] [ 213.887553][T16086] [ 214.057845][T16086] ============================= [ 214.059775][T16086] [ BUG: Invalid wait context ] [ 214.061731][T16086] 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 Tainted: G W [ 214.064431][T16086] ----------------------------- [ 214.066051][T16086] syz.4.4075/16086 is trying to lock: [ 214.068042][T16086] ffff888029328e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_change_rx_flags+0x39/0x220 [ 214.071144][T16086] other info that might help us debug this: [ 214.072985][T16086] context-{5:5} [ 214.074106][T16086] 3 locks held by syz.4.4075/16086: [ 214.075745][T16086] #0: ffffffff8f4c4d60 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 214.078908][T16086] #1: ffffffff901289e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 214.081701][T16086] #2: ffff888044b88368 (&dev_addr_list_lock_key#6/3){+...}-{3:3}, at: dev_uc_add+0x6f/0x110 [ 214.084886][T16086] stack backtrace: [ 214.086191][T16086] CPU: 2 UID: 0 PID: 16086 Comm: syz.4.4075 Tainted: G W 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 214.086210][T16086] Tainted: [W]=WARN [ 214.086214][T16086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.086222][T16086] Call Trace: [ 214.086226][T16086] [ 214.086231][T16086] dump_stack_lvl+0x116/0x1f0 [ 214.086249][T16086] __lock_acquire+0x3ff/0x1ba0 [ 214.086269][T16086] ? dev_uc_add+0x63/0x110 [ 214.086285][T16086] ? mark_held_locks+0x49/0x80 [ 214.086302][T16086] lock_acquire+0x179/0x350 [ 214.086318][T16086] ? team_change_rx_flags+0x39/0x220 [ 214.086337][T16086] ? __pfx___might_resched+0x10/0x10 [ 214.086352][T16086] ? __pfx__printk+0x10/0x10 [ 214.086371][T16086] __mutex_lock+0x199/0xb90 [ 214.086387][T16086] ? team_change_rx_flags+0x39/0x220 [ 214.086403][T16086] ? team_change_rx_flags+0x39/0x220 [ 214.086420][T16086] ? __pfx___mutex_lock+0x10/0x10 [ 214.086437][T16086] ? __pfx_netdev_info+0x10/0x10 [ 214.086450][T16086] ? __queue_work+0x431/0x10f0 [ 214.086463][T16086] ? team_change_rx_flags+0x39/0x220 [ 214.086479][T16086] team_change_rx_flags+0x39/0x220 [ 214.086495][T16086] ? mark_held_locks+0x49/0x80 [ 214.086511][T16086] ? __pfx_team_change_rx_flags+0x10/0x10 [ 214.086528][T16086] __dev_set_promiscuity+0x217/0x590 [ 214.086539][T16086] ? __local_bh_enable_ip+0xa4/0x120 [ 214.086555][T16086] netif_set_promiscuity+0x52/0x150 [ 214.086567][T16086] dev_set_promiscuity+0xb2/0x260 [ 214.086582][T16086] bond_change_rx_flags+0x22b/0x740 [ 214.086595][T16086] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 214.086606][T16086] ? __dev_change_flags+0x55d/0x720 [ 214.086617][T16086] ? rtnl_newlink+0xcd9/0x2000 [ 214.086630][T16086] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 214.086643][T16086] __dev_set_promiscuity+0x217/0x590 [ 214.086655][T16086] netif_set_promiscuity+0x52/0x150 [ 214.086667][T16086] dev_set_promiscuity+0xb2/0x260 [ 214.086682][T16086] vlan_dev_change_rx_flags+0x123/0x150 [ 214.086695][T16086] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 214.086708][T16086] __dev_set_promiscuity+0x217/0x590 [ 214.086720][T16086] netif_set_promiscuity+0x52/0x150 [ 214.086732][T16086] dev_set_promiscuity+0xb2/0x260 [ 214.086747][T16086] br_manage_promisc+0x2ce/0x4f0 [ 214.086767][T16086] br_dev_change_rx_flags+0x3b/0x50 [ 214.086781][T16086] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 214.086794][T16086] __dev_set_promiscuity+0x217/0x590 [ 214.086806][T16086] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 214.086819][T16086] __dev_set_rx_mode+0x205/0x2e0 [ 214.086830][T16086] dev_uc_add+0xee/0x110 [ 214.086851][T16086] macvlan_open+0x62e/0x8f0 [ 214.086862][T16086] ? __pfx_macvlan_open+0x10/0x10 [ 214.086874][T16086] __dev_open+0x2e4/0x7d0 [ 214.086884][T16086] ? __pfx___dev_open+0x10/0x10 [ 214.086896][T16086] ? __local_bh_enable_ip+0xa4/0x120 [ 214.086911][T16086] __dev_change_flags+0x55d/0x720 [ 214.086923][T16086] ? __pfx___dev_change_flags+0x10/0x10 [ 214.086936][T16086] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 214.086948][T16086] rtnl_configure_link+0xfe/0x260 [ 214.086966][T16086] rtnl_newlink+0xcd9/0x2000 [ 214.086981][T16086] ? __pfx_rtnl_newlink+0x10/0x10 [ 214.086994][T16086] ? find_held_lock+0x2b/0x80 [ 214.087007][T16086] ? avc_has_perm_noaudit+0x117/0x3b0 [ 214.087020][T16086] ? avc_has_perm_noaudit+0x149/0x3b0 [ 214.087037][T16086] ? find_held_lock+0x2b/0x80 [ 214.087050][T16086] ? __pfx_rtnl_newlink+0x10/0x10 [ 214.087062][T16086] ? __pfx_rtnl_newlink+0x10/0x10 [ 214.087074][T16086] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 214.087087][T16086] ? __pfx_rtnl_newlink+0x10/0x10 [ 214.087100][T16086] rtnetlink_rcv_msg+0x95b/0xe90 [ 214.087114][T16086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.087130][T16086] netlink_rcv_skb+0x16a/0x440 [ 214.087145][T16086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.087159][T16086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.087177][T16086] ? netlink_deliver_tap+0x1ae/0xd30 [ 214.087191][T16086] netlink_unicast+0x53d/0x7f0 [ 214.087206][T16086] ? __pfx_netlink_unicast+0x10/0x10 [ 214.087222][T16086] netlink_sendmsg+0x8d1/0xdd0 [ 214.087237][T16086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.087253][T16086] ____sys_sendmsg+0xa98/0xc70 [ 214.087269][T16086] ? copy_msghdr_from_user+0x10a/0x160 [ 214.087281][T16086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.087298][T16086] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 214.087314][T16086] ___sys_sendmsg+0x134/0x1d0 [ 214.087327][T16086] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.087346][T16086] __sys_sendmsg+0x16d/0x220 [ 214.087358][T16086] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.087370][T16086] ? __x64_sys_futex+0x1e0/0x4c0 [ 214.087388][T16086] ? rcu_is_watching+0x12/0xc0 [ 214.087402][T16086] do_syscall_64+0xcd/0x260 [ 214.087419][T16086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.087431][T16086] RIP: 0033:0x7fe241b8e969 [ 214.087441][T16086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.087452][T16086] RSP: 002b:00007fe2429b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.087462][T16086] RAX: ffffffffffffffda RBX: 00007fe241db5fa0 RCX: 00007fe241b8e969 [ 214.087469][T16086] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 214.087476][T16086] RBP: 00007fe241c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 214.087483][T16086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.087489][T16086] R13: 0000000000000000 R14: 00007fe241db5fa0 R15: 00007ffff959c878 [ 214.087499][T16086] [ 214.270613][T16086] macvlan3: entered promiscuous mode [ 214.712433][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 215.232083][ T46] bond0: (slave bond_slave_0): interface is now down [ 215.234244][ T46] bond0: (slave bond_slave_1): interface is now down [ 215.842259][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 216.952337][ T98] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 217.152179][ T46] bond0: (slave syz_tun): interface is now down [ 217.155032][ T46] bond0: now running without any active interface! [ 218.072157][ T1145] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 219.182247][ T98] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 220.312220][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 221.432289][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 222.572133][ T46] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 223.682176][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! VM DIAGNOSIS: 22:54:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000201883 RBX=0000000000000000 RCX=ffffffff8b6d3419 RDX=0000000000000000 RSI=ffffffff8dbe43c5 RDI=ffffffff8bf4a2a0 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90852d10 R15=0000000000000000 RIP=ffffffff8b6d1caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb53b0e7d60 CR3=000000005dc39000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff230d0320 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdc9411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdc9411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdc9411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdc9411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdc9411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efdc9411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e3bfc00 RCX=00000000ef9d33e4 RDX=0000000000000000 RSI=ffffffff8dbbedb3 RDI=ffffffff8bf4a2a0 RBP=0000000000000002 RSP=ffffc900034a7438 R8 =0ac0d5affe09d4ff R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81982810 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f988c8a4c80 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555562f97808 CR3=0000000028225000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee1b6f19b 00007ffee1b6f19b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee1b6f6a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee1b6f6a0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e696c626173 6964203a73667961 6c7265766f205d36 35303631545b5d30 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 353530342e382e7a 79733d6d6d6f6320 39333036313d6469 702074656b636f73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6574756f725f6b 6e696c74656e3d73 73616c6373203836 3734363d65707974 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f67736d6c6e2030 3d6c6f636f746f72 70203a6567617373 656d206b6e696c74 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e2064657a696e 676f6365726e7520 3a78756e694c4553 205d393330363154 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 22333030342e342e 7a7973223d6d6d6f 632037323935313d 64697020745f6d64 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f9bb5 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc9000619e758 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9adfe560 R15=ffffffff854f9b50 RIP=ffffffff854f9bdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe2429b96c0 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c28e3bf CR3=0000000031456000 CR4=00352ef0 DR0=0000000000000008 DR1=00000000000000ff DR2=fffffffffffffffb DR3=3e00000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030656764697262 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe241c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe241c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe241c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe241c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe241c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe241c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe241d83488 00007fe241d83480 00007fe241d83478 00007fe241d83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2428ed100 00007fe241d83440 00007fe241d80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe241d83498 00007fe241d83490 00007fe241d83488 00007fe241d83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000082b073cc60 RBX=ffff88806a7235c0 RCX=00000000000006e0 RDX=0000000000000082 RSI=ffff88806a7235c0 RDI=00000000000d0084 RBP=00000000000d0084 RSP=ffffc900006f8ec8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88806a727840 RIP=ffffffff81675415 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555c258500 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f17c02e56c0 CR3=000000004b30f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555582ae6730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555582aef093 0000555582aeefc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555582ae64a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555582ae815a 0000555582ae8100 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000080fe00735800 f2378a60dd860d80 781fcd1aaaaaaaaa aaaa740804800302 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000aa000000 0000000000000000 000080febb000000 0000000000070000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 04048004029c1000 060171b001020004 f40300000000aa00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000080febb00 0000000000000007 0000000080fe0073 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000a04061a88 03000006f408081a 80031a80044d8003 4d80044ea0030008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010004e800401 000002080606015b ee0008004ee00300 10004ed003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4ec0030210004eb0 031be810004d9003 010000110208ffff ffffffff00000080 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003306d528081ab8 030100000c08061a b003000300080000 003b004fe1000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000124081a8c 030100000a04061a 8803000006f40808 1a80031a80044d80 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000