last executing test programs: 2.035613576s ago: executing program 2 (id=773): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3088, &(0x7f0000000000)={0x0, 0xa28f, 0x10, 0x3, 0x150, 0x0, r1}, &(0x7f0000000080), &(0x7f00000001c0)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c000180080001407f00011c0c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe2(&(0x7f0000000240), 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x3088, &(0x7f0000000000)={0x0, 0xa28f, 0x10, 0x3, 0x150, 0x0, r1}, &(0x7f0000000080), &(0x7f00000001c0)) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c000180080001407f00011c0c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1.942014661s ago: executing program 2 (id=774): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x32, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x79}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @generic={0x3, 0x8, 0xe, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ldst={0x1, 0x1, 0x4, 0x6, 0x3, 0x40, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) 1.941397948s ago: executing program 2 (id=775): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0x4b67, &(0x7f00000001c0)={0x0, 0x49ff, 0x80, 0x0, 0x1c2}) r2 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x369c, 0x4, 0x102000, 0x2ed, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$video4linux(&(0x7f0000000380), 0x28, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f00000003c0)={0x40f0f000, 0x8, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0xfffffffffffffffa, 0x4, 0x1, 0x20000}) io_uring_enter(r2, 0x4913, 0x770e, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}}, 0x14}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000000000000037c000018003755e908fa9d6195ed283414d6bba919736d3429b4b570ccfb149c2d5bcbbaabea0000"], 0x2c}}, 0x0) 1.881630091s ago: executing program 2 (id=777): r0 = msgget(0x3, 0x780) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@empty, @in=@local}}, {{@in=@loopback}}}, &(0x7f0000000240)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000240)=0xe8) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) r4 = getpid() r5 = syz_clone3(&(0x7f0000000540)={0x100200000, &(0x7f00000002c0)=0xffffffffffffffff, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, {0x27}, &(0x7f0000000380)=""/211, 0xd3, &(0x7f0000000480)=""/90, &(0x7f0000000500)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) msgctl$IPC_SET(r0, 0x1, &(0x7f00000005c0)={{0x1, r1, 0x0, r2, r3, 0x1, 0x2}, 0x0, 0x0, 0xc, 0xc, 0xc9e7, 0xdc, 0x10001, 0xce, 0xa, 0x4, r4, r5}) r9 = syz_open_procfs$namespace(r8, &(0x7f0000000640)='ns/pid_for_children\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x90081, 0x0) (async) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x90081, 0x0) kcmp(r7, r8, 0x6, r10, r9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r11, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008019}, 0xd4) ioctl$VIDIOC_ENUMOUTPUT(r6, 0xc0485630, &(0x7f0000000800)={0x2, "963736a0bfa68db0350e5f9ad1e13bf23e2802e631f0d99d35f2d4297ca36726", 0x3, 0xf5d, 0x7e3d, 0x300a000, 0x8}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000880)={'veth1_macvtap\x00', {0x2, 0x0, @loopback}}) (async) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000880)={'veth1_macvtap\x00', {0x2, 0x0, @loopback}}) r12 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r12, 0x80044942, &(0x7f00000008c0)) r13 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940)=0x10, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r13, 0xc038943b, &(0x7f00000009c0)={0x2, 0x38, '\x00', 0x1, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/power/image_size', 0x18200, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r14) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r14) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f0000000a80)=0x2) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f0000000a80)=0x2) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) r15 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r15, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000bc0)={&(0x7f0000000b00)="13dd4d8aea347238e93ab09bf67031dfadc1d2bc9950a44b4ae81813d8b440e4ef00b395c19b54921de6e7ca504aa06569f6b3b29da599f2a3e103b920be850f4705073c56cafecfdb6f50b2f524775db99eadef23faeb25a8b715fac9085f4978ffd48836fb224db0730ae8d64e9cf0546632db0ba6b7d53a045ab4befbdeaddbfdf9af2c3924", 0x87}, 0x1, 0x0, 0x0, 0x40080}, 0x8010) (async) sendmsg$802154_raw(r15, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000bc0)={&(0x7f0000000b00)="13dd4d8aea347238e93ab09bf67031dfadc1d2bc9950a44b4ae81813d8b440e4ef00b395c19b54921de6e7ca504aa06569f6b3b29da599f2a3e103b920be850f4705073c56cafecfdb6f50b2f524775db99eadef23faeb25a8b715fac9085f4978ffd48836fb224db0730ae8d64e9cf0546632db0ba6b7d53a045ab4befbdeaddbfdf9af2c3924", 0x87}, 0x1, 0x0, 0x0, 0x40080}, 0x8010) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x89e2, &(0x7f0000000c40)={r14}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000c80)={0x0, 0x6}, 0x4) ioctl$VIDIOC_ENCODER_CMD(r14, 0xc028564d, &(0x7f0000000cc0)={0x3, 0x0, [0xa, 0x400, 0x8, 0x3, 0xa965, 0x7, 0xb, 0x6]}) (async) ioctl$VIDIOC_ENCODER_CMD(r14, 0xc028564d, &(0x7f0000000cc0)={0x3, 0x0, [0xa, 0x400, 0x8, 0x3, 0xa965, 0x7, 0xb, 0x6]}) setgid(r3) (async) setgid(r3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r14, 0x18, &(0x7f0000000d00)={0xffffffffffff5c07, r6, 0x8, {0x4, 0x81}, 0x7}, 0x1) fsetxattr$trusted_overlay_upper(r16, &(0x7f0000000d40), &(0x7f0000000d80)={0x0, 0xfb, 0xf0, 0x3, 0xc8, "2d4283b6a42dcf867932ec8455b6c8c9", "fe165d0bd9d2356797d46d827745fc0c1941e6952c0da16e43cb11d4e68a3792c04665911c5b65647d9f40e4d1379b06c8510ff063ef0f4dcdff758d1bf84eb6081b7cba6a42e6733ab820c11ca8f32dd289bbbcbf0edebc77fbc0754207011429cc4b024d0b3a11156b5e78173eac0d55adaf98ceedc73400853222001ece70ef448654d72449871222fb38c62170513097a31c934a70b020007d70f656926b0f4af41806a55b4b3188a76dc16787bffb9e3a2491baddb15806b2a1086c5eb92b63a0a270fdf55899ecac66f78256986e9c9f63c1113316fb8261"}, 0xf0, 0x2) 1.880203694s ago: executing program 2 (id=779): add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000080)="ee", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r0, r1}, &(0x7f0000000240)=""/121, 0x79, &(0x7f0000000200)={&(0x7f0000000140)={'sha256-avx\x00'}}) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') keyctl$search(0xa, r1, &(0x7f00000003c0)='.request_key_auth\x00', &(0x7f0000000400)={'syz', 0x2}, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0900000000000000000002000000091a0200737984310000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}}, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc) ioctl$sock_netdev_private(r3, 0x89f6, &(0x7f0000000040)="70a1ecd50ca863da403206e9c13bf0f3db9f90afbc5c68a8f2d2b94c4ddcb01de26c52af0c88eedf3b673de3c5265ae65e6c561ae3b3063ad6ba3acc2d3480234e63e80ef40ebf1899b942728092614a5fff502fc98ba9d12bbe48c27a574597c324eee48dff3cfddb4cfabbfed4bf5c49d46b066df4eb0349de8ccb") sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000150a01021000000000000000000000020800034000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 856.543077ms ago: executing program 3 (id=798): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) io_setup(0x6, &(0x7f00000000c0)=0x0) (async, rerun: 32) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x82081, 0x9d2c0e56b076498f) (rerun: 32) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x2000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000080)='9', 0x1}]) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2990070900be008300"], 0x0}, 0x0) (async, rerun: 64) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000080)=[0x2ea4, 0x6]) (async) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r6 = dup2(r0, r0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x22, '\x00', 0x0, @fallback=0x17, r7, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$vim2m(&(0x7f0000000340), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000240)=0x1) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000100)={0x2, 0x1, 0x2, "3b9ff15183ec79ac3234ffb108ea1b6d40b737ca9bc66e4b922b07872c7b1092", 0x47314356}) (async) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r1, r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) read$FUSE(r10, &(0x7f00000027c0)={0x2020}, 0x2020) (async) syz_io_uring_setup(0x24b9, &(0x7f0000000040)={0x0, 0x92cc, 0x2000, 0x1, 0x36f}, &(0x7f00000000c0), 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r10) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x11, r1, 0x4000) (async) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) 856.163452ms ago: executing program 1 (id=799): socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@empty, @loopback, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x1ffe1}, {0x2, 0xb}, {0xf, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004c10}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x8001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={r5, 0x40, 0x30}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18b128f0e41e27a5ac0000000000000085000000870000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e220000000000000a008080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x40810) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0) 801.894164ms ago: executing program 0 (id=801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000bfff00000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004fce00000000000000000000000000000000000400000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x525f, 0x81, {{0x8, 0x4, 0x2, 0x30, 0x20, 0x66, 0x0, 0x8, 0x2f, 0x0, @loopback, @broadcast, {[@rr={0x7, 0xb, 0x4a, [@dev={0xac, 0x14, 0x14, 0xf}, @local]}, @end]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x22, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000f00000000000000630e000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000001000000186a00000300000000000000050000008520000002000000b7080000000000007b8af8ff00000000b7080000100000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000076ffff00000000bf91000000f0ffffb6020000010000008500000085000000b7000000000000009500210000000800"], &(0x7f0000000000)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x8, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000400)=[{0x1, 0x2, 0x8, 0x6}, {0x2, 0x5, 0x2, 0x4}, {0x4, 0x5, 0x1, 0xb}, {0x1, 0xeb81, 0xf, 0x8}, {0x3, 0x4, 0x8, 0xc}, {0x2, 0x1, 0xe, 0x8}, {0x0, 0x4, 0x10, 0x2}, {0x5, 0x1, 0x10}], 0x10, 0xde, @void, @value}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r6 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000740)={0x1f, 0x1f}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x25, 0x1, 0x0, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x32314752}) r7 = syz_open_dev$video(&(0x7f0000000100), 0x7, 0x0) ioctl$VIDIOC_G_FBUF(r7, 0x8030560a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f00000005c0)={0x401, r3, 0x2, {0xb, 0x20000000}, 0xe1}, 0x1) 731.973376ms ago: executing program 1 (id=802): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) syz_usbip_server_init(0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x768a, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 730.705149ms ago: executing program 3 (id=803): r0 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./control\x00', 0x40000000) rmdir(&(0x7f0000000280)='./control\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0x10) sendmsg$kcm(r0, &(0x7f0000000940), 0x0) 730.507136ms ago: executing program 0 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x4000400, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20480}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'vlan0\x00', {'ip6_vti0\x00'}}) 672.202639ms ago: executing program 3 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_eeprom={0xb, 0x7, 0x8000}}) (async) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) (async, rerun: 32) r2 = socket$phonet(0x23, 0x2, 0x1) (async, rerun: 32) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x1d, &(0x7f00000008c0)=0x1, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) sendfile(r5, r4, 0x0, 0x558410e9) 671.914682ms ago: executing program 0 (id=806): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x2, 0x311}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000780), 0x40200, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$video(&(0x7f00000008c0), 0x101, 0x80081) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000cc0)={0x9, {0x0, 0x8000, 0x1000}}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r5, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0xf5) 669.209193ms ago: executing program 0 (id=807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d12, &(0x7f0000000240)) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) (async) keyctl$clear(0x7, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000600)={0x50, 0x0, r8, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x4, 0x8, 0x0, 0x0, 0xa0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x8ab9, 0x8000000004, 0x1004, 0x804, 0x4, 0xe, 0x1, 0xff, 0x4d9c, 0x3, 0xffff, 0x221, 0x0, 0x105, 0x400000000000006, 0x9], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000100)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 590.903192ms ago: executing program 3 (id=808): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1401, 0x402, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x40080) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bridge_slave_0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x0, 0x6, 0x1, 0x9, 0xfffffff7, 0x98, 0x1e4, 0x80000000, 0x60, 0x1, 0xffffff7e, 0x5, 0x5, 0x0, 0x5, 0x61, 0x61, 0x5, 0x6, 0x9, 0x787fe636, 0x1}}) (async) write$snapshot(0xffffffffffffffff, &(0x7f0000000200)="0875d169ee7a9edb09c3e6614bf040fbb65b7ea15e439707408d6dba5f885a83ba80e4d016d7fa1eb539091e218ff3061d142ab9d8c10e33018259f8de345b63b2e97ae890902917befe3702d1b551fded1030e3c062bb4683d4457a2fa45ee916b52bbc5d37bc873965edfc1c6be738e3b7348d1e784eb5422d919af99d315198f5282fc9a05e2b34787e4c81e7ace752742b7cf5a77f2918904c3be58ba94ec1f7a4d87816bdab0e1e3655abcad3d4a6452efec4dbab85aa2d706ba4a7944da09c270b773ab421be70bbf22663ad1bb8760a66318ea4bebf6913befb1bf8cb5326a840", 0xe4) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, 0x453, 0x1, 0x70bd28, 0x25dfdbfc, "5f9c28137984ff240e1e5c84610894c069a2de57c3b6ce07a8cab46492d539e078689757eeb84e930729dac1d7664b5fb8dc739262fb7a1a00d88d46012571fe6c0672655b1665a00b8c5ce8b9405c739fe91a7007a2709a2c9d9612b424fe8e28a06db0fc7551b8d14f8bae8124d2f2d46ca39e3141bd56a5c0adf6df3ff7c4ad8f302f513bcc7e0c6092ea3e21c0431d", [""]}, 0xa4}, 0x1, 0x0, 0x0, 0x40041}, 0x6000084) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "d6828531872a5cae060c1b0cf2f1a092"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "5da0"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "de744e9c0ada9bc017a2f847f7"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "0512417a1ea56d658ab5eeb6f8f4f022"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) (async) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000006c0)={0x3, 0x0, [{}, {}, {}]}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x1e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x48004) (async) socket$unix(0x1, 0x1, 0x0) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000800)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000840)='io.pressure\x00', 0x2, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x80, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x87b}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3a1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffd00}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004040}, 0x20040000) (async) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000009c0), 0xa4200, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000a00)=0x20000) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000b40)={&(0x7f0000000a40)=""/225, 0x200000, 0x800, 0x9, 0x3}, 0x20) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) (async) sendto$ax25(r6, &(0x7f0000000c00)="65afb7272433c432d6d8011a16f47cf39d02115d9c98ee0c931188735ed756fa45d58c7426672869b7b624b2e2099accc76ebf2c623ead90237fdca040ce0ec2cae2a57860538838831a945ae20694006605f3b78dbedd9786af117aac3d06c2ae94dfab6c2d0a4ad98a1c842e27c524869bf4bcaf58", 0x76, 0x0, &(0x7f0000000c80)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xa4, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x401}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xac9}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffc}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24048810}, 0x0) (async) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000e80)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x101, 0x6, 0x3, 0xfffffffffffff4e6, 0x4000000]}, &(0x7f0000000f00)=0x78) r8 = openat(r6, &(0x7f0000000f40)='./file0\x00', 0x400, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, r2, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x66}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x40000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r5) openat$vmci(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x6c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xcb}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x2d, 0x0, 0x7, 0x9f, 0x1]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000040) 589.836799ms ago: executing program 3 (id=809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0xc840) 588.862432ms ago: executing program 3 (id=810): r0 = socket$kcm(0x2d, 0x2, 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x140) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000007000046009d40ed", @ANYRES64], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB='?p@Ono=', @ANYRESHEX=r2, @ANYBLOB=',k']) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_usb_connect(0x1, 0x90f, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x5f, 0x21, 0x43, 0x40, 0xe41, 0x414d, 0x6097, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8fd, 0x2, 0x7, 0xff, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0xb, 0x3b, 0x81, 0x9e, 0xff, [@hid_hid={0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x2d3}}, @hid_hid={0x9, 0x21, 0x6, 0xe, 0x1, {0x22, 0xe9a}}], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x8, 0x4, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x9, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xcd80}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xf, 0x45c3}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0xfb, 0x0, 0xc, [@generic={0x96, 0x24, "9161a2291f96c9336ed8eb1186cf38d9fcbe4f4ae05c91b4d92ff6411c6edd67c644dd23fc31b19973a2f368efc9222aef9dc6e9651f0f2c11f5aa5ba70591b29d03a2836eae42fe96a1a0f0140a077cb8ae281cc2688cbbcea2d204c9aae5018d80e978595270693b7e6e229ddf94ac32343453078618061fd5f67d5bc9a8f927146293c65b2d44b7e3e0ecb46f458665261030"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x8, 0x5, 0xe, [@generic={0xd3, 0x31, "a41825b054f14be7a8b47ceebf784b6eba16e21f6f6733e39edd44b157c192ad6d6f5c8c4cd50c166fddc0947aed738b2dfb4d54f4b881a8ca1ff966364626b4988b0cfcf3155d79dbc91adc543ea12ae667b1ea9534d357d980fd43a0c74eab4973eeecc00b27c697840f11c9269fae5001b4a51cd9823e9da030e6b08dd23254ee84fb956b7bd7ddb12571d40bd7bd686653bc2537a0df47134923c0c000020be121fa932e4110488e1ff1416db04c9bff3f4e01ad7125b2444ea9e583dd705424384bd6e01b663aaea374a984bd5828"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xdc, 0x10, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x4, 0x3, 0xa5, [@generic={0xc9, 0x23, "79382e276cbf07235b5885dd753176eead1486d7a333f427f9cd143bcc870c4899e36cad3a6dd9faefbc16d5a1fb9071e97781e933cdda3a5933f8ea1e884db7fbd8f6e80d0afa7f06e9602ebf549a93268060a0baf790848ce13a24f6ca5e9fe8b01fe2cab20e1220ec8a4e088652f2f76f9c35dae9503f4c6585f291f29ea512bf616c09649de0e90465493e8b98a15b41742d2871a9b67342568a3471e4cd328063661a0c07dd69d19dfe6425caf6806a6f8bd9ebf62171a6163576e3f618a03a9f034655d8"}, @generic={0xca, 0x22, "01f46c207f470c94457e53452614fb7fe93f3633ec82a267150799cc57a982949405732cba352d1a2af9f85094510b1c4365bd1f605f212caa08d260421f947c38bbd402d72194d36ab721b3b3222d1456db6184cb5d085904585b0dae2c96af24635f0a25e4994f7f20afdd87cdd47c2b8affcf5e160b44e35305c5428e36adfd0bec24dd90c187e93f7f34cee8d636ba028db4443e973c41db4e74e8916526eaecbebc3651a773a28c0e60157b04d3a7e6aff04400f9e2b776938b398b1dff9b99281cdb48d37e"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x70, 0x4, 0x4, 0x7, [@generic={0x56, 0x30, "ddd1ff78488a6568f2ad0cb676e1f87b494998b286fc50bcd9272c0d00c75b55b7063f534831f61c7a7c6d77433510c25856744918f2a8c1e296b2e5516d7a7bc40f7dd5c1e87644671945d9859b0ec4a1538c8f"}, @generic={0xd3, 0x8, "7168c58fb8009a3718916a7c367ec0676e8549f331692249c1a1ee975aa73894aabf2419ee7c4496ac25a2169c6b56b3bd578cc00ebc7e1e39e9d17426363a14909c98e5e241c55caaff5ec5e3ce8864577732bf350fef8a40709eaec0ce586cf6a32ba1635ea2e401110c75bc1e67992412da333cea6e7daac1d8d4fb748f112ae643528563955666e3ca3963039731d0c4982cfbcd915f87cd31464880ae2072dc0cb13d0632df79d2a158d1e0ae8fc79779b9684256f10a3b290a7bb20f79bfdb7ed9654eaee1f01294f2181b9b5a35"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x2, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x80, 0xe8, 0x5, [@generic={0xe8, 0x11, "cad8da4e13e6cdd8e7b842e57c598bb713de8336c9e11cc13dce66092ffb3812352570029c04f5787ed714b5a0455254c260d13717911c9eb7d61fc3111fd87d508ff3aac1123b2ab1d68e38ffbcedc6b03056bd8741afb10ce16fd6dfe7986ca1eb6d2c920497643f3c1a843bf1b7db706700d90849417af1edf31c33073ce4711a50af3d4c66475a7da6493e81d0f390c17a302ffbce907d273bc5a3a3cfeac1925af70e8df53d10964f1729a9316861dee05c68038a5f9d2f19e6528da309d2316d5696bc9a40c215182db19c3bb4673958416dece36e3cb20cd23bf058302a1857bdcce9"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x0, 0x8, [@generic={0x1c, 0x6, "4fb3256044549e5e90bc8ec15efda9ffc132105221a224895570"}]}}, {{0x9, 0x5, 0x5, 0x14, 0x40, 0x8, 0x1, 0x9}}]}}, {{0x9, 0x4, 0xa0, 0x0, 0xe, 0x5e, 0x41, 0xbe, 0xed, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9d02fe"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0x2, 0xa6}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x7, 0xf, 0x1, 0x2, 0x7}, @mdlm_detail={0x91, 0x24, 0x13, 0x1, "0bdb2afa63122cce76626700ad16e6dfe2aa5cc89b1413646de90d5f2c024ce0f3c184c4deeda966bd87844a69170ba8f1bc0c7acb1eb6b1bdf77d3ba9f0e6611e9cae6e17e74709068086b1fe754520e8006eaae3c38c283a4866208d7262c5df410884420933a0ece14cb90a52ecc6a4f4a0a776eaf7b42d1e56d10317277705c33449f887231b3d10b7e60f"}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x5, 0x80, 0x5, 0x619, 0x81}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'F'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x78e4, 0x5, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x2, 0x16, 0x80}]}], [{{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x81, 0x9}}, {{0x9, 0x5, 0xc, 0x4, 0x0, 0x80, 0x7f, 0xf9, [@generic={0x2d, 0x11, "c210f692b9adac6ade52bcc4c61123bc52545c14e52b602b53352baa669f004a01b8dbb505c8e7a1aea30a"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x0, 0x4, 0x9}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xb, 0xba, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfa, 0xfff9}, @generic={0x26, 0x9, "b0b5224c86829fef9e3c392bb63f60a42bc5fc0fb66bf452b3a8455ff8eea62c03a240a4"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x2, 0x0, 0x1}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x7, 0x7, 0x7}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x4, 0x51, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x80}]}}, {{0x9, 0x5, 0x0, 0xd6bd89a0cd70d0b0, 0x8, 0x0, 0x2, 0xff, [@generic={0xa0, 0xe, "f5dd5bff90eca8ed014473ce930816022d554397d986287b1ff4d0d52dbf380f211379a878cba3a4b047a371f563e86cc662a2f1bea68f90b540db8088f336082b26491f66a386a162a87fd1ff166210151e32c7d6899c1795f4067f7b6c12873bb69012f4512b71064d5ad1ccfc3306a35dfd2927636102d4ed709596715613882b7acf07394bf66dec4b37eb7d214b4a22ce24e2039e2350e7143c7d5a"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x5, 0xfe, 0x10}}, {{0x9, 0x5, 0xc, 0x0, 0x714318363961ed90, 0xca, 0x8, 0xff}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x8, 0x8, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x57, 0xc, 0x0, [@generic={0xb6, 0x24, "84a3060d5a6f41ac21d2f413ca371255dc9380e428e3577a09b6d48af96582b74a7c559d8f569738dd188169f020aa980f4cf5b203522cdd6b726faabbfd35ee195738be4c3e115d5634104949d86a6187e1ea9a14b916480518e3c0b1d2d57549da2fdc9d2cc660d1c953132076ade601f17329aac14db0b6b7b3f176dfbea43f4920959096e36bc8774dc40ec9717677ecbfac9b406ec2d836123d4344cfa67ab40fedf6402fe084db074773ec2219663f9665"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x14, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x7, 0x7e, 0x6, [@generic={0x4, 0x30, ';^'}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x1, 0x0, 0x1, 0x40, 0x7}, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="bc308776090eb296db1bc2c17be96ddda04f2a1b203911a9b9924baa3415cc28df7ed3b3c8f7d53888ccdc74e31d1a6f397f6aafd992931de71e9265903029ab0a6b0ff8db8345f96a8765b4d29100b65cba8541defa5a5a702dc6a4affda67a72b471537c0d848dcd8b47d03e2b31bacb66eeb45a2963857d9c9215bc9d1b94753d9a649b5d40b769b51b7002ccae5dea15b85e31e861a5b6cddbea63ba71a06d89f66d82304a987e75ae21b478786c1bc8bfac595991e4562ef7e49f3eab9978bd65219ad72bd72d12a49f8283b1bfde5f3e3cb1885770"], 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xbf, &(0x7f0000000b00)=@string={0xbf, 0x3, "bfc7d4f2256a19928b397d767a26917ea1d201143326336c44d2c6053d9c41cdf4b19df755dcdd01d2571a655f06e7c8f294a7f9f381e6aa149b9865890c6bf23e270853f5fe8ec62532946f40adc70fe1b9f2733683e2d9316ed64e24ee53af2bfcb017dff175d4dc7c2c04c51ae86b0fab96029e7cff970db5047491730426cdcc254767e34b7f738c569c448bbe753197dbabab6e949bc673c1b5832b15a9ac103905d00eab4658da0c952ad173fcead5aca10acaf4f7feca65afc9"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x4ff}}, {0x3, &(0x7f0000000c40)=@string={0x3, 0x3, 'l'}}, {0xa, &(0x7f0000000c80)=@string={0xa, 0x3, "7808f2f7e786f499"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x421}}, {0x88, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"]}]}) (async) pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x80000000000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@typed={0x8, 0x119, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='hfs\x00', 0x2000493, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a03000000000000000000070000000900010073797a30000000000c0010400000000000000001"], 0xb0}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x80000, 0x8) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) (async) getsockopt$packet_int(r9, 0x107, 0x15, 0x0, &(0x7f0000000200)) read$char_usb(r8, &(0x7f0000000040)=""/169, 0xa9) (async) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000000)=0x2, 0x4) 482.236401ms ago: executing program 0 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='cifs\x00', 0x11000e0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 481.398645ms ago: executing program 0 (id=812): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010004000000000000000700000a20000000000a03090000000000000000070000000904010073797a30000000001c000000090a010400000000000000000a0000000800034000000010140000001000010000000000000000000a84000a"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, 0x0, 0x778, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x0, 0x100000001}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write(r3, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 382.066028ms ago: executing program 2 (id=813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x4, 0xc63, 0x2, 0x8, 0x1, 0x4, 0xf, 0xc, 0x9, 0x2, 0x0, 0x4, 0xb}, {0x3, 0x8, 0x0, 0x1, 0x7f, 0xc2, 0x1, 0x8, 0x9, 0x4, 0x6, 0xf7, 0x2}, {0xff, 0x7, 0x2, 0x3, 0xe, 0x27, 0x5, 0x0, 0x1, 0x8e, 0x6, 0x9}], 0xfffffffa}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2204cd, 0xf68b, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], 0x0, 0x202}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xcb0a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 201.799347ms ago: executing program 1 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)={r2, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac000000000101040000000000000000020000072400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1414aa08000200ac1414bb08000740000000000c000d8008000240000000003c0018"], 0xac}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="871718c2", @ANYRES16=r5, @ANYBLOB="040027bd7000fcdbdf250600000008000b00090000000500300001000000050037000100000005002a0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008084}, 0x44044) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x21, 0x6, 0x2, 0x24, @mcast1, @mcast2, 0x8000, 0x8000, 0x5, 0x5e2a}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0xe4, 0xc, 0x0, 0x8, @mcast1, @private1, 0x700, 0x700, 0xd8, 0x81}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="44002d9a1042f3252e2e557c078772def1000010010304000000000b000079548842a6d839ca6832bb82c318cd3efb4900", @ANYRES32=0x0, @ANYBLOB="15020000000000001c0012800b0001006970766c616e00000c000280060002000200000008000500", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0xba01}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'veth0_to_team\x00'}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x59) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_LINK={0x8, 0x1, r13}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048800}, 0xc850) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x118, 0x0, 0x100, 0x70bd27, 0x25dfdbfb}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x24008084) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 51.586265ms ago: executing program 1 (id=815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x80000000, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}, {&(0x7f00000004c0)="075fbd299c094b9a7a2c3d16fa708606c098b76ef520393841528b412ae5e64f39b8ba90617ad7c393d1ee4d229830dec722d0d06a9dfff689b3be9ce724771aa77c7963a9b03822cb9e94e7d20dea1632f1f7f5ede938e4c1f191a6c0c778f8ae5a6a448ae9b12b90af2a19a5a56cc139ba03b5428ecde40b56cec8fe2a680bfef05519d8184aaccb2799290516ee168377d15485a224690839f6da02e792b5d5f0966ef1f5fc96a0fab7f951f5d1572cb98c13241432ac3a6ffa637680aba3433a860d61c35e2f17c5ff5bf493", 0xce}, {&(0x7f00000005c0)="77c5054c65b3c94f656100c3c70661d3620316377e87402fb17a8a6e148d753e745b07b51a2ffb45d165585cdbdb364f6628a5c6e6a78240e6389266be1809ee273397dc441faac7fed7e83d707de7fd0e510c97f9b1eacb74c346ce5bcf47ba5dc8a239983805880b0dfa7ddb2fa0c2d9c5d839f82c9b", 0x77}], 0x3) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x100010, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x50, 0xffffffffffffffff, 0x10000000) r7 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x78, 0x1c, r7, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@alg, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000240)=""/111, 0x6f}], 0x2, &(0x7f0000000300)=""/174, 0xae}, 0x0, 0x2, 0x0, {0x2}}) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0xe8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf454, 0x800000, 0x8, 0x8001, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, ')$)+\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) 1.9121ms ago: executing program 1 (id=816): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x88) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0x0, &(0x7f0000000000)={0x9, 0x2, 0x0, 0x4}) ioctl$TCSBRKP(r1, 0x5425, 0x7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000580)={0x5, 0x4, 0x9}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000005c0)={0x5, {0x0, 0x6, 0xa87, 0x80, 0xc5, 0x9}}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x81, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0x1, 0xe, 0x5, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x10006, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0x800000b, 0x14, 0x9, 0x6, 0x1, 0x6, 0x908, 0x5, 0x4d, 0x5, 0x65a, 0x0, 0x1, 0x1002, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x101, 0x8, 0x5, 0x0, 0x0, 0x34f1, 0x1ff, 0x7, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x0, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0x10001, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x7, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0xfffffffe, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x7, 0x40, 0x3, 0x2, 0x8, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x1, 0x60a, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x8, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x3, 0x8, 0x7, 0x8, 0x4, 0x6, 0xeff]}, 0x45c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 0s ago: executing program 1 (id=817): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(&(0x7f0000000100)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='minix\x00', 0x80081f, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000100001cea7ffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r7, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x880) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050005000a00000005000100070000000900020073797a300000000005000400000000001400078008001340001f0000080006400000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, &(0x7f0000000300)="b8e8008ed82667a70f01778fb8e6000f00d80f01dbbaf80c66b834ab7a8966efbafc0c66b86d71000066efd2a30000f30f2aa7b100d86c0d0fd7f7", 0x3b}], 0x1, 0xa, 0x0, 0x0) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) (async) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000380)=[@increfs], 0x0, 0x0, 0x0}) (async) r13 = dup3(r12, r11, 0x0) (async) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x40004, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=00000000000000000002,stats=global,max=00000000000000000001,max=00000000000000000003,stats=global,smackfsd\x00\x00\x00\x00\x00\x00\x00\x00nullb0\x00,permit_directio,smackfsdef=-@,\x00']) kernel console output (not intermixed with test programs): [ 38.186367][ T40] audit: type=1400 audit(1747991375.955:65): avc: denied { siginh } for pid=5839 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:20615' (ED25519) to the list of known hosts. [ 40.260025][ T40] audit: type=1400 audit(1747991378.055:66): avc: denied { name_bind } for pid=5852 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.277750][ T40] audit: type=1400 audit(1747991378.075:67): avc: denied { write } for pid=5853 comm="sh" path="pipe:[6312]" dev="pipefs" ino=6312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 40.293527][ T40] audit: type=1400 audit(1747991378.095:68): avc: denied { execute } for pid=5853 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.300232][ T40] audit: type=1400 audit(1747991378.095:69): avc: denied { execute_no_trans } for pid=5853 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.338076][ T40] audit: type=1400 audit(1747991380.135:70): avc: denied { mounton } for pid=5853 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.341025][ T5853] cgroup: Unknown subsys name 'net' [ 42.514548][ T5853] cgroup: Unknown subsys name 'cpuset' [ 42.518870][ T5853] cgroup: Unknown subsys name 'rlimit' [ 42.751441][ T5918] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.431651][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.284214][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 46.284224][ T40] audit: type=1400 audit(1747991384.085:84): avc: denied { execmem } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.481960][ T40] audit: type=1400 audit(1747991384.275:85): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.489891][ T40] audit: type=1400 audit(1747991384.275:86): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.505082][ T40] audit: type=1400 audit(1747991384.275:87): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.517885][ T40] audit: type=1400 audit(1747991384.285:88): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[5652]" dev="sockfs" ino=5652 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.532758][ T5286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.546857][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.549546][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.553562][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.558195][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.560843][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.564007][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.566343][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.569648][ T5937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.569691][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.572977][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.575674][ T5286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.577322][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.580896][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.583006][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.583183][ T40] audit: type=1400 audit(1747991384.375:89): avc: denied { read } for pid=5938 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.585577][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.592248][ T40] audit: type=1400 audit(1747991384.375:90): avc: denied { open } for pid=5938 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.593202][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.603918][ T40] audit: type=1400 audit(1747991384.375:91): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.604481][ T5937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.610560][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.614238][ T5937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.769275][ T40] audit: type=1400 audit(1747991384.565:92): avc: denied { module_request } for pid=5938 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.827680][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 46.886120][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 46.970453][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 47.047162][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.050359][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.053736][ T5938] bridge_slave_0: entered allmulticast mode [ 47.056898][ T5938] bridge_slave_0: entered promiscuous mode [ 47.064996][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.067274][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.069535][ T5938] bridge_slave_1: entered allmulticast mode [ 47.072310][ T5938] bridge_slave_1: entered promiscuous mode [ 47.089976][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.092396][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.094649][ T5935] bridge_slave_0: entered allmulticast mode [ 47.097459][ T5935] bridge_slave_0: entered promiscuous mode [ 47.100512][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 47.164520][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.167627][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.170733][ T5935] bridge_slave_1: entered allmulticast mode [ 47.175101][ T5935] bridge_slave_1: entered promiscuous mode [ 47.210270][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.261800][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.265946][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.288811][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.291138][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.294527][ T5931] bridge_slave_0: entered allmulticast mode [ 47.297154][ T5931] bridge_slave_0: entered promiscuous mode [ 47.318007][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.326398][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.329110][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.331477][ T5931] bridge_slave_1: entered allmulticast mode [ 47.334167][ T5931] bridge_slave_1: entered promiscuous mode [ 47.417418][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.423837][ T5938] team0: Port device team_slave_0 added [ 47.428962][ T5938] team0: Port device team_slave_1 added [ 47.446205][ T5935] team0: Port device team_slave_0 added [ 47.479755][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.523731][ T5935] team0: Port device team_slave_1 added [ 47.525813][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.528070][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.530354][ T5943] bridge_slave_0: entered allmulticast mode [ 47.533315][ T5943] bridge_slave_0: entered promiscuous mode [ 47.552476][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.555442][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.567692][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.573674][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.575900][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.584204][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.617513][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.620665][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.623990][ T5943] bridge_slave_1: entered allmulticast mode [ 47.627917][ T5943] bridge_slave_1: entered promiscuous mode [ 47.632611][ T5931] team0: Port device team_slave_0 added [ 47.639061][ T5931] team0: Port device team_slave_1 added [ 47.641315][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.644376][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.652808][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.686866][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.724707][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.727003][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.735035][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.740704][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.744920][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.747163][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.755219][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.806060][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.808426][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.816919][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.841835][ T5943] team0: Port device team_slave_0 added [ 47.847360][ T5943] team0: Port device team_slave_1 added [ 47.894576][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.897195][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.906822][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.915781][ T5938] hsr_slave_0: entered promiscuous mode [ 47.919117][ T5938] hsr_slave_1: entered promiscuous mode [ 47.963910][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.966416][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.975385][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.051419][ T5931] hsr_slave_0: entered promiscuous mode [ 48.053728][ T5931] hsr_slave_1: entered promiscuous mode [ 48.055799][ T5931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.058313][ T5931] Cannot create hsr debugfs directory [ 48.065534][ T5935] hsr_slave_0: entered promiscuous mode [ 48.067981][ T5935] hsr_slave_1: entered promiscuous mode [ 48.070045][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.072565][ T5935] Cannot create hsr debugfs directory [ 48.142382][ T5943] hsr_slave_0: entered promiscuous mode [ 48.144642][ T5943] hsr_slave_1: entered promiscuous mode [ 48.146718][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.149111][ T5943] Cannot create hsr debugfs directory [ 48.475462][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.481394][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.486009][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.490523][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.523766][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.530901][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.536976][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.548832][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.583463][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.588851][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.603188][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.608376][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.632722][ T5934] Bluetooth: hci3: command tx timeout [ 48.633050][ T67] Bluetooth: hci1: command tx timeout [ 48.634037][ T5937] Bluetooth: hci2: command tx timeout [ 48.634181][ T5937] Bluetooth: hci0: command tx timeout [ 48.667983][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.674838][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.679148][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.683091][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.694364][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.707835][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.716675][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.735226][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.737590][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.741328][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.743674][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.763997][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.772922][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.775278][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.793365][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.796402][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.806323][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.831107][ T5931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.848970][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.858878][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.861130][ T1255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.871692][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.874906][ T40] audit: type=1400 audit(1747991386.675:93): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.897631][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.900609][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.905991][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.919872][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.922220][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.930310][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.932638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.974198][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.007762][ T5931] veth0_vlan: entered promiscuous mode [ 49.015678][ T5931] veth1_vlan: entered promiscuous mode [ 49.038176][ T5931] veth0_macvtap: entered promiscuous mode [ 49.045463][ T5931] veth1_macvtap: entered promiscuous mode [ 49.050039][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.063680][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.069157][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.077385][ T5931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.080512][ T5931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.083772][ T5931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.086484][ T5931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.106623][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.122551][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.137702][ T5943] veth0_vlan: entered promiscuous mode [ 49.158225][ T5943] veth1_vlan: entered promiscuous mode [ 49.178297][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.180836][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.184983][ T5935] veth0_vlan: entered promiscuous mode [ 49.210150][ T5935] veth1_vlan: entered promiscuous mode [ 49.217196][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.218899][ T5943] veth0_macvtap: entered promiscuous mode [ 49.220403][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.232993][ T5943] veth1_macvtap: entered promiscuous mode [ 49.246601][ T5938] veth0_vlan: entered promiscuous mode [ 49.256925][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.257605][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.260436][ T5938] veth1_vlan: entered promiscuous mode [ 49.276383][ T5935] veth0_macvtap: entered promiscuous mode [ 49.280764][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.289332][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.292483][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.295278][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.297944][ T5943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.305332][ T5935] veth1_macvtap: entered promiscuous mode [ 49.329281][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.334432][ T5997] process 'syz.0.5' launched '/dev/fd/6' with NULL argv: empty string added [ 49.342325][ T5938] veth0_macvtap: entered promiscuous mode [ 49.346532][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.355975][ T5938] veth1_macvtap: entered promiscuous mode [ 49.362703][ T5935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.365391][ T5935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.367961][ T5935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.370702][ T5935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.380116][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.386166][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.390902][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.414452][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.416997][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.425627][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.435594][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.448003][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.450816][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.454531][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.457255][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.462949][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.465360][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.475188][ T6003] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3'. [ 49.496083][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.498557][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.530772][ T1255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.534687][ T1255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.567066][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.569795][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.571315][ T6009] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 49.593170][ T6011] warning: `syz.2.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.643199][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 49.647606][ T6011] fuse: Unknown parameter 'LroupiYËÊéd' [ 49.653129][ T6011] Bluetooth: MGMT ver 1.23 [ 49.756230][ T6029] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10'. [ 49.760098][ T6029] gretap0: entered promiscuous mode [ 50.020772][ T6056] ipvlan2: entered allmulticast mode [ 50.023312][ T6056] macvlan0: entered allmulticast mode [ 50.025069][ T6056] veth1_vlan: entered allmulticast mode [ 50.033380][ T6057] mkiss: ax0: crc mode is auto. [ 50.142212][ T6061] ip6tnl1: entered promiscuous mode [ 50.143918][ T6061] ip6tnl1: entered allmulticast mode [ 50.152015][ T6062] ERROR: device name not specified. [ 50.274268][ T6072] capability: warning: `syz.2.26' uses deprecated v2 capabilities in a way that may be insecure [ 50.319732][ T6077] netlink: 165 bytes leftover after parsing attributes in process `syz.0.27'. [ 50.426726][ T6087] tun0: tun_chr_ioctl cmd 1074025675 [ 50.428881][ T6087] tun0: persist enabled [ 50.435351][ T6087] tun0: tun_chr_ioctl cmd 1074025675 [ 50.437407][ T6087] tun0: persist disabled [ 50.701624][ T6065] syz.3.24 (6065): drop_caches: 2 [ 50.712212][ T67] Bluetooth: hci0: command tx timeout [ 50.712333][ T5934] Bluetooth: hci3: command tx timeout [ 50.714014][ T67] Bluetooth: hci2: command tx timeout [ 50.725503][ T67] Bluetooth: hci1: command tx timeout [ 50.788946][ T6109] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 50.796040][ T6117] ufs: You didn't specify the type of your ufs filesystem [ 50.796040][ T6117] [ 50.796040][ T6117] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 50.796040][ T6117] [ 50.796040][ T6117] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 50.809843][ T6117] ufs: ufstype=old is supported read-only [ 50.812698][ T6117] syz.3.34: attempt to access beyond end of device [ 50.812698][ T6117] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 51.093245][ T6151] block device autoloading is deprecated and will be removed. [ 51.189009][ T6162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=6162 comm=syz.1.43 [ 51.366702][ T6180] Zero length message leads to an empty skb [ 51.388119][ T40] kauditd_printk_skb: 133 callbacks suppressed [ 51.388130][ T40] audit: type=1400 audit(1747991389.185:227): avc: denied { create } for pid=6181 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.398949][ T40] audit: type=1400 audit(1747991389.195:228): avc: denied { bind } for pid=6181 comm="syz.1.47" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.406585][ T40] audit: type=1400 audit(1747991389.195:229): avc: denied { node_bind } for pid=6181 comm="syz.1.47" saddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 51.414766][ T40] audit: type=1400 audit(1747991389.195:230): avc: denied { connect } for pid=6181 comm="syz.1.47" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.568449][ T40] audit: type=1400 audit(1747991389.365:231): avc: denied { mount } for pid=6193 comm="syz.3.51" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.575440][ T40] audit: type=1400 audit(1747991389.365:232): avc: denied { remount } for pid=6193 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.581534][ T40] audit: type=1400 audit(1747991389.375:233): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.597202][ T40] audit: type=1400 audit(1747991389.395:234): avc: denied { create } for pid=6195 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.659210][ T40] audit: type=1400 audit(1747991389.455:235): avc: denied { read write } for pid=6197 comm="syz.3.53" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.666747][ T40] audit: type=1400 audit(1747991389.455:236): avc: denied { open } for pid=6197 comm="syz.3.53" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.701840][ T5976] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.807748][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 51.865033][ T5976] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 51.868082][ T5976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.871356][ T5976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 51.874154][ T5976] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.879106][ T5976] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 51.882185][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 51.884708][ T5976] usb 5-1: Product: syz [ 51.886099][ T5976] usb 5-1: Manufacturer: syz [ 51.895384][ T5976] cdc_wdm 5-1:1.0: skipping garbage [ 51.897273][ T5976] cdc_wdm 5-1:1.0: skipping garbage [ 51.903263][ T5976] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 51.905374][ T5976] cdc_wdm 5-1:1.0: Unknown control protocol [ 51.913274][ T6211] overlay: ./file0 is not a directory [ 51.915473][ T6214] syzkaller1: entered promiscuous mode [ 51.917269][ T6214] syzkaller1: entered allmulticast mode [ 51.983943][ T6219] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.989879][ T6219] xt_connbytes: Forcing CT accounting to be enabled [ 51.992227][ T6219] Cannot find add_set index 0 as target [ 52.104515][ T6222] netlink: 'syz.2.60': attribute type 10 has an invalid length. [ 52.107258][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.109946][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.120054][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.123068][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.126197][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.128550][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.133625][ T6222] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 52.141122][ T6190] overlayfs: disabling nfs_export due to verity=require [ 52.170263][ T6229] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 52.207964][ T5976] usb 5-1: USB disconnect, device number 2 [ 52.245456][ T6233] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 52.343212][ T6246] syz.1.66 uses obsolete (PF_INET,SOCK_PACKET) [ 52.348470][ T6246] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 52.350241][ T6246] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 52.425973][ T6245] [U]  [ 52.792473][ T67] Bluetooth: hci3: command tx timeout [ 52.792905][ T5942] Bluetooth: hci1: command tx timeout [ 52.793639][ T5934] Bluetooth: hci2: command tx timeout [ 53.085067][ T6266] loop5: detected capacity change from 0 to 63 [ 53.205464][ T6276] netlink: 'syz.3.73': attribute type 3 has an invalid length. [ 53.207988][ T6276] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.73'. [ 53.432080][ T5942] Bluetooth: hci0: command tx timeout [ 53.877714][ T6295] futex_wake_op: syz.0.78 tries to shift op by -1; fix this program [ 54.264639][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 54.343657][ T6310] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.436992][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 54.443724][ T6320] ipip0: entered promiscuous mode [ 54.448697][ T6320] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.85'. [ 54.841283][ T6333] netlink: 48 bytes leftover after parsing attributes in process `syz.0.90'. [ 54.846253][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 54.872888][ T5942] Bluetooth: hci2: command tx timeout [ 54.872908][ T67] Bluetooth: hci1: command tx timeout [ 54.872936][ T5934] Bluetooth: hci3: command tx timeout [ 55.014081][ T6340] syz.0.92: attempt to access beyond end of device [ 55.014081][ T6340] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 55.018094][ T6340] vxfs: unable to read disk superblock at 1 [ 55.020183][ T6340] syz.0.92: attempt to access beyond end of device [ 55.020183][ T6340] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 55.024679][ T6340] vxfs: unable to read disk superblock at 8 [ 55.026637][ T6340] vxfs: can't find superblock. [ 55.071642][ T6343] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 55.080082][ T6343] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 55.190432][ T3231] IPVS: starting estimator thread 0... [ 55.281885][ T6354] IPVS: using max 47 ests per chain, 112800 per kthread [ 55.347909][ T6371] affs: No valid root block on device nullb0 [ 55.362608][ T6371] use of bytesused == 0 is deprecated and will be removed in the future, [ 55.365784][ T6371] use the actual size instead. [ 55.373239][ T6373] : renamed from bond0 (while UP) [ 55.483334][ T6384] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.522830][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 55.650778][ T6388] netlink: 348 bytes leftover after parsing attributes in process `syz.2.105'. [ 55.766551][ T65] kernel read not supported for file bpf-map (pid: 65 comm: kworker/1:1) [ 55.861590][ T6419] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 55.867220][ T6419] Error validating options; rc = [-22] [ 56.254792][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.127'. [ 56.355080][ T6465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6465 comm=syz.1.131 [ 56.442332][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 56.442343][ T40] audit: type=1400 audit(1747991394.245:350): avc: denied { block_suspend } for pid=6474 comm="syz.1.133" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.588448][ T40] audit: type=1400 audit(1747991394.385:351): avc: denied { mount } for pid=6491 comm="syz.0.137" name="/" dev="configfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.598191][ T40] audit: type=1400 audit(1747991394.385:352): avc: denied { setattr } for pid=6491 comm="syz.0.137" name="/" dev="configfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.665289][ T40] audit: type=1400 audit(1747991394.465:353): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.673749][ T40] audit: type=1400 audit(1747991394.465:354): avc: denied { bind } for pid=6502 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.679813][ T40] audit: type=1400 audit(1747991394.465:355): avc: denied { name_bind } for pid=6502 comm="syz.1.140" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.687631][ T40] audit: type=1400 audit(1747991394.465:356): avc: denied { node_bind } for pid=6502 comm="syz.1.140" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 56.696329][ T40] audit: type=1400 audit(1747991394.485:357): avc: denied { create } for pid=6504 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 56.706718][ T40] audit: type=1400 audit(1747991394.495:358): avc: denied { write } for pid=6504 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 56.744587][ T40] audit: type=1400 audit(1747991394.545:359): avc: denied { mount } for pid=6506 comm="syz.0.142" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 56.850595][ T6522] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 56.853771][ T6522] nfs4: Unknown parameter ']$$' [ 56.881897][ T6526] capability: warning: `syz.2.146' uses 32-bit capabilities (legacy support in use) [ 57.032383][ T6533] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 57.035360][ T6533] overlayfs: missing 'lowerdir' [ 57.139647][ T6540] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 57.141894][ T6540] PKCS7: Only support pkcs7_signedData type [ 57.146579][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 57.580658][ T6550] ======================================================= [ 57.580658][ T6550] WARNING: The mand mount option has been deprecated and [ 57.580658][ T6550] and is ignored by this kernel. Remove the mand [ 57.580658][ T6550] option from the mount to silence this warning. [ 57.580658][ T6550] ======================================================= [ 57.594780][ T6552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.650140][ T6550] overlayfs: failed to clone upperpath [ 57.653177][ T6550] overlayfs: failed to clone lowerpath [ 58.004501][ T6565] netlink: 104 bytes leftover after parsing attributes in process `syz.2.159'. [ 58.118340][ T6571] kvm: pic: non byte write [ 58.636793][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.171'. [ 58.665721][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 58.668463][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 58.671267][ T6610] gre0: Master is either lo or non-ether device [ 58.719838][ T6619] futex_wake_op: syz.2.175 tries to shift op by -1; fix this program [ 58.738039][ T6624] overlayfs: failed to clone upperpath [ 58.753917][ T6624] bridge1: entered promiscuous mode [ 58.755779][ T6624] bridge1: entered allmulticast mode [ 58.967227][ T67] Bluetooth: hci1: Malformed Event: 0x02 [ 59.034073][ T6684] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 59.037755][ T6684] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 59.065441][ T6688] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 59.071611][ T6689] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 59.139680][ T6699] fuse: Bad value for 'fd' [ 59.169426][ T6703] Bluetooth: hci0: invalid len left 7, exp >= 81 [ 59.406668][ T6739] netlink: 'syz.3.203': attribute type 10 has an invalid length. [ 59.420572][ T6739] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 59.488656][ T6746] netlink: 'syz.3.206': attribute type 2 has an invalid length. [ 59.521606][ T6752] xt_connbytes: Forcing CT accounting to be enabled [ 59.526160][ T6752] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 59.531269][ T6752] ip6t_srh: unknown srh match flags B153 [ 59.536925][ T6757] ip6t_srh: unknown srh match flags B153 [ 59.568755][ T6764] 9pnet_fd: p9_fd_create_unix (6764): problem connecting socket: éq‰Y’3aK: -91 [ 59.877786][ T6790] 9pnet_virtio: no channels available for device syz [ 59.989056][ T6797] __nla_validate_parse: 6 callbacks suppressed [ 59.989067][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 60.095578][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 60.199506][ T6809] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 60.202617][ T6809] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 60.208779][ T6811] netlink: 'syz.0.224': attribute type 2 has an invalid length. [ 60.211447][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 60.217840][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 60.404907][ T6820] netlink: 144 bytes leftover after parsing attributes in process `syz.0.226'. [ 60.407963][ T6821] netlink: 144 bytes leftover after parsing attributes in process `syz.0.226'. [ 60.446419][ T6823] __vm_enough_memory: pid: 6823, comm: syz.0.227, bytes: 21199807533056 not enough memory for the allocation [ 60.622160][ T6842] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 60.624349][ T6842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.629019][ T6842] vhci_hcd vhci_hcd.0: Device attached [ 60.635846][ T6843] usbip_core: unknown command [ 60.637380][ T6843] vhci_hcd: unknown pdu 0 [ 60.638810][ T6843] usbip_core: unknown command [ 60.641352][ T6347] vhci_hcd: stop threads [ 60.644684][ T6347] vhci_hcd: release socket [ 60.646351][ T6347] vhci_hcd: disconnect device [ 60.782910][ T6847] input: syz0 as /devices/virtual/input/input9 [ 60.848712][ T6849] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 60.853292][ T6849] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 60.947240][ T6854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=6854 comm=syz.2.236 [ 60.990158][ T6857] syz_tun: entered allmulticast mode [ 60.993110][ T6857] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 60.996112][ T6857] mroute: pending queue full, dropping entries [ 61.166257][ T6873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.170971][ T6873] bridge_slave_0: default FDB implementation only supports local addresses [ 61.261976][ T5973] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 61.298121][ T6881] syzkaller0: entered promiscuous mode [ 61.299948][ T6881] syzkaller0: entered allmulticast mode [ 61.421796][ T5973] usb 8-1: Using ep0 maxpacket: 8 [ 61.432643][ T5973] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 61.435102][ T5973] usb 8-1: config 0 has no interface number 0 [ 61.437932][ T5973] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 61.441228][ T5973] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 61.444889][ T5973] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 61.448543][ T5973] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 61.452756][ T5973] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 61.455504][ T5973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.461249][ T5973] usb 8-1: config 0 descriptor?? [ 61.477379][ T5973] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 61.596621][ T5942] Bluetooth: hci1: command 0x0406 tx timeout [ 61.695571][ T5976] usb 8-1: USB disconnect, device number 2 [ 61.713583][ T5976] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 61.737389][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 61.737399][ T40] audit: type=1400 audit(1747991399.535:429): avc: denied { write } for pid=6888 comm="syz.3.243" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.144547][ T6899] tipc: Started in network mode [ 62.146167][ T6899] tipc: Node identity ff, cluster identity 4711 [ 62.148118][ T6899] tipc: Node number set to 255 [ 62.156070][ T40] audit: type=1400 audit(1747991399.955:430): avc: denied { write } for pid=6897 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.162464][ T40] audit: type=1400 audit(1747991399.955:431): avc: denied { read } for pid=6898 comm="syz.2.246" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.169523][ T40] audit: type=1400 audit(1747991399.955:432): avc: denied { open } for pid=6898 comm="syz.2.246" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.176954][ T40] audit: type=1400 audit(1747991399.955:433): avc: denied { execute } for pid=6897 comm="syz.3.245" path="/selinux/status" dev="selinuxfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 62.217918][ T40] audit: type=1400 audit(1747991400.015:434): avc: denied { write } for pid=6905 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.766055][ T6921] netlink: 'syz.1.250': attribute type 5 has an invalid length. [ 62.774108][ T40] audit: type=1400 audit(1747991400.575:435): avc: denied { map } for pid=6920 comm="syz.1.250" path="socket:[14439]" dev="sockfs" ino=14439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 62.982036][ T6901] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.984654][ T6901] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.990145][ T6931] netlink: 'syz.1.253': attribute type 6 has an invalid length. [ 62.990173][ T6932] netlink: 'syz.1.253': attribute type 6 has an invalid length. [ 62.991793][ T6901] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 63.000410][ T6901] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.002647][ T6901] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.007164][ T6901] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.009156][ T6901] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.013147][ T6901] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.017521][ T6901] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.020293][ T6901] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.036300][ T6901] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.096304][ T6939] futex_wake_op: syz.1.254 tries to shift op by 32; fix this program [ 63.193227][ T40] audit: type=1400 audit(1747991400.995:436): avc: denied { ioctl } for pid=6948 comm="syz.2.258" path="socket:[13785]" dev="sockfs" ino=13785 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.205689][ T6955] overlayfs: failed to resolve './file0': -2 [ 63.209585][ T40] audit: type=1400 audit(1747991400.995:437): avc: denied { create } for pid=6952 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.223889][ T6957] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 63.225288][ T40] audit: type=1400 audit(1747991401.025:438): avc: denied { setopt } for pid=6952 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.279965][ T6951] gretap0: left promiscuous mode [ 63.302463][ T6951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.365642][ T5942] block nbd3: Receive control failed (result -107) [ 63.445038][ T6977] nbd3: detected capacity change from 0 to 12 [ 63.449794][ T5948] block nbd3: Dead connection, failed to find a fallback [ 63.454266][ T5948] block nbd3: shutting down sockets [ 63.456611][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.460701][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 63.464932][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.468419][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 63.471597][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.475041][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 63.478089][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.481111][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 63.483641][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.486465][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 63.488955][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.494423][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 63.497520][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.500343][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 63.511378][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.515927][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 63.518400][ T5948] ldm_validate_partition_table(): Disk read failed. [ 63.520663][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.524865][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 63.527370][ T5948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.530207][ T5948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 63.532949][ T5948] Dev nbd3: unable to read RDB block 0 [ 63.535154][ T5948] nbd3: unable to read partition table [ 63.536984][ T5948] nbd3: partition table beyond EOD, truncated [ 63.542361][ T6964] ldm_validate_partition_table(): Disk read failed. [ 63.544845][ T6964] Dev nbd3: unable to read RDB block 0 [ 63.546934][ T6964] nbd3: unable to read partition table [ 63.548850][ T6964] nbd3: partition table beyond EOD, truncated [ 63.553715][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 63.557869][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=5, location=5 [ 63.561066][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 63.564140][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 63.567505][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 63.571139][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 63.574249][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 63.577213][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 63.580117][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 63.583039][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 63.587606][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 63.590734][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 63.593657][ T6964] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 63.596638][ T6964] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 63.605686][ T5948] ldm_validate_partition_table(): Disk read failed. [ 63.608001][ T5948] Dev nbd3: unable to read RDB block 0 [ 63.609918][ T5948] nbd3: unable to read partition table [ 63.612692][ T5948] nbd3: partition table beyond EOD, truncated [ 63.684282][ T7012] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 63.691210][ T7012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.796827][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.804415][ T7022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=7022 comm=syz.2.272 [ 63.920246][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'. [ 64.014138][ T7058] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 64.087573][ T7066] netlink: 44 bytes leftover after parsing attributes in process `syz.1.282'. [ 64.090383][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.282'. [ 64.110403][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 64.312033][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.385671][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 65.034043][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.034083][ T5934] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.034124][ T5937] Bluetooth: hci1: command 0x0406 tx timeout [ 65.170111][ T7184] netlink: 'syz.3.314': attribute type 5 has an invalid length. [ 65.545080][ T7219] fuse: Bad value for 'fd' [ 65.625112][ T7230] __nla_validate_parse: 1 callbacks suppressed [ 65.625123][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 65.630291][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'. [ 65.652258][ T7228] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 65.656022][ T7228] netlink: 'syz.0.329': attribute type 2 has an invalid length. [ 65.658867][ T7228] netlink: 784 bytes leftover after parsing attributes in process `syz.0.329'. [ 65.753974][ T7240] vlan2: entered allmulticast mode [ 65.755653][ T7240] bridge0: entered allmulticast mode [ 65.771810][ T5976] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.901827][ T5976] usb 8-1: device descriptor read/64, error -71 [ 66.171782][ T5976] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 66.301869][ T5976] usb 8-1: device descriptor read/64, error -71 [ 66.391875][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.422033][ T5976] usb usb8-port1: attempt power cycle [ 66.615569][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 66.712623][ T5942] Bluetooth: hci1: unexpected event for opcode 0xc923 [ 66.753734][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 66.753752][ T40] audit: type=1400 audit(1747991404.555:466): avc: denied { write } for pid=7268 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.781912][ T5976] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 66.803385][ T5976] usb 8-1: device descriptor read/8, error -71 [ 66.884176][ T40] audit: type=1400 audit(1747991404.685:467): avc: denied { read } for pid=7272 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.886184][ T7273] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 66.946560][ C2] vcan0: j1939_tp_rxtimer: 0xffff888027c56800: rx timeout, send abort [ 66.952178][ T7279] netlink: 56 bytes leftover after parsing attributes in process `syz.1.345'. [ 66.953478][ T40] audit: type=1400 audit(1747991404.755:468): avc: denied { read } for pid=5327 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 66.962064][ T40] audit: type=1400 audit(1747991404.755:469): avc: denied { search } for pid=5327 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.968638][ T40] audit: type=1400 audit(1747991404.755:470): avc: denied { write } for pid=5327 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.976640][ T40] audit: type=1400 audit(1747991404.755:471): avc: denied { add_name } for pid=5327 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.983286][ T40] audit: type=1400 audit(1747991404.755:472): avc: denied { create } for pid=5327 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.989578][ T40] audit: type=1400 audit(1747991404.755:473): avc: denied { append open } for pid=5327 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.996961][ T40] audit: type=1400 audit(1747991404.755:474): avc: denied { getattr } for pid=5327 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.002837][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 67.006851][ T7281] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 67.010292][ T7281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.015756][ T40] audit: type=1400 audit(1747991404.815:475): avc: denied { read } for pid=7280 comm="syz.1.346" path="socket:[16544]" dev="sockfs" ino=16544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.061838][ T5976] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 67.083483][ T5976] usb 8-1: device descriptor read/8, error -71 [ 67.111891][ T5934] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.114079][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.202531][ T5976] usb usb8-port1: unable to enumerate USB device [ 67.449930][ C2] vcan0: j1939_tp_rxtimer: 0xffff888027c56800: abort rx timeout. Force session deactivation [ 67.562943][ T7300] netlink: 'syz.2.351': attribute type 2 has an invalid length. [ 67.625583][ T6350] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.952096][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.356'. [ 67.954879][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 67.985154][ T7319] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 67.988076][ T7319] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 67.991287][ T7319] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 68.023995][ T7321] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 68.031239][ T7321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 68.097013][ T7327] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 68.481857][ T5934] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.546437][ T7336] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 68.663850][ T7341] ubi31: attaching mtd0 [ 68.665468][ T7341] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 68.669038][ T7341] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 68.724535][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.365'. [ 68.869858][ T7349] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 69.005121][ T7360] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 69.152243][ T7358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.370'. [ 69.191811][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.194042][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.219314][ T7374] netlink: 'syz.1.374': attribute type 6 has an invalid length. [ 69.406120][ T7388] batman_adv: batadv0: Adding interface: dummy0 [ 69.408098][ T7388] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.416084][ T7388] batman_adv: batadv0: Interface activated: dummy0 [ 69.423758][ T7389] batadv0: mtu less than device minimum [ 69.427001][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.431335][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.434929][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.438760][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.442429][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.446059][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.450084][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.453741][ T7389] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.671874][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 69.671904][ T5934] Bluetooth: hci4: command 0x1003 tx timeout [ 69.917935][ T7429] tmpfs: Bad value for 'mpol' [ 70.010788][ T7452] netlink: 'syz.1.395': attribute type 27 has an invalid length. [ 70.015018][ T7452] netlink: 'syz.1.395': attribute type 27 has an invalid length. [ 70.110686][ T7472] qnx6: unable to set blocksize [ 70.198098][ T7481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.547251][ T7507] tun0: tun_chr_ioctl cmd 1074025675 [ 70.548984][ T7507] tun0: persist disabled [ 70.683274][ T7507] kvm: kvm [7506]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 70.686758][ T7507] kvm: kvm [7506]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 70.693614][ T7515] xt_hashlimit: size too large, truncated to 1048576 [ 70.742309][ T7523] 9pnet_fd: Insufficient options for proto=fd [ 70.744672][ T7523] netlink: 'syz.2.407': attribute type 5 has an invalid length. [ 71.072701][ T7537] netlink: 'syz.0.411': attribute type 4 has an invalid length. [ 71.115958][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.118086][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.213417][ T7543] __nla_validate_parse: 3 callbacks suppressed [ 71.213428][ T7543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 71.218026][ T7543] block nbd0: not configured, cannot reconfigure [ 71.281773][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.582906][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.417'. [ 71.585639][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.417'. [ 71.710127][ T7566] bridge_slave_0: left allmulticast mode [ 71.711856][ T7568] random: crng reseeded on system resumption [ 71.711939][ T7566] bridge_slave_0: left promiscuous mode [ 71.715904][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.722173][ T7566] bridge_slave_1: left allmulticast mode [ 71.723925][ T7566] bridge_slave_1: left promiscuous mode [ 71.726087][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.734750][ T7566] bond0: (slave bond_slave_0): Releasing backup interface [ 71.738700][ T7566] bond0: (slave bond_slave_1): Releasing backup interface [ 71.753964][ T7566] team0: Port device team_slave_0 removed [ 71.761699][ T7566] team0: Port device team_slave_1 removed [ 71.765498][ T7566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.767742][ T7566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.771020][ T7566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.774235][ T7566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.787059][ T7569] team0: Mode changed to "broadcast" [ 71.805832][ T7566] vlan0: entered promiscuous mode [ 71.817741][ T7566] team0: Port device vlan0 added [ 71.821205][ T7566] tipc: Started in network mode [ 71.824063][ T7566] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 71.826541][ T7566] tipc: Enabled bearer , priority 0 [ 71.837553][ T7573] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.840654][ T1255] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.872602][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 71.872612][ T40] audit: type=1400 audit(1747991409.665:519): avc: denied { setattr } for pid=7571 comm="syz.0.422" name="/" dev="9p" ino=35913858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.876965][ T7572] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 71.945647][ T40] audit: type=1400 audit(1747991409.745:520): avc: denied { listen } for pid=7578 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.067543][ T7593] 9pnet_virtio: no channels available for device syz [ 72.132102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.136115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.254599][ T7605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 72.257369][ T7605] netlink: 'syz.2.431': attribute type 7 has an invalid length. [ 72.259831][ T7605] netlink: 'syz.2.431': attribute type 8 has an invalid length. [ 72.262732][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 72.394464][ T40] audit: type=1400 audit(1747991410.195:521): avc: denied { map } for pid=7622 comm="syz.2.435" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.435725][ T40] audit: type=1400 audit(1747991410.235:522): avc: denied { map } for pid=7626 comm="syz.3.436" path="socket:[15249]" dev="sockfs" ino=15249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.444279][ T40] audit: type=1400 audit(1747991410.235:523): avc: denied { read accept } for pid=7626 comm="syz.3.436" path="socket:[15249]" dev="sockfs" ino=15249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.451529][ T40] audit: type=1400 audit(1747991410.245:524): avc: denied { getopt } for pid=7626 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.524158][ T40] audit: type=1400 audit(1747991410.325:525): avc: denied { ioctl } for pid=7622 comm="syz.2.435" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.594996][ T5934] Bluetooth: hci2: unexpected event 0x1d length: 10 > 5 [ 72.595935][ T40] audit: type=1400 audit(1747991410.395:526): avc: denied { open } for pid=7629 comm="syz.3.437" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 72.605448][ T40] audit: type=1400 audit(1747991410.405:527): avc: denied { ioctl } for pid=7629 comm="syz.3.437" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 72.613168][ T40] audit: type=1400 audit(1747991410.405:528): avc: denied { mount } for pid=7629 comm="syz.3.437" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 72.659550][ T7636] netlink: 140 bytes leftover after parsing attributes in process `syz.2.438'. [ 72.750817][ T7647] syz.2.442 uses old SIOCAX25GETINFO [ 72.758079][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 72.831232][ T7649] netlink: 750 bytes leftover after parsing attributes in process `syz.2.443'. [ 72.833077][ T34] tipc: Node number set to 11578026 [ 72.902875][ T7653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7653 comm=syz.2.445 [ 72.906703][ T7653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7653 comm=syz.2.445 [ 72.911424][ T7653] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 72.914412][ T7653] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 72.981464][ T7655] blktrace: Concurrent blktraces are not allowed on sg0 [ 73.182565][ T7662] syzkaller1: entered promiscuous mode [ 73.184322][ T7662] syzkaller1: entered allmulticast mode [ 73.411829][ T7676] netlink: 'syz.1.454': attribute type 10 has an invalid length. [ 73.414503][ T7676] bridge0: port 1(team0) entered blocking state [ 73.416506][ T7676] bridge0: port 1(team0) entered disabled state [ 73.418507][ T7676] team0: entered allmulticast mode [ 73.420131][ T7676] vlan0: entered allmulticast mode [ 73.423522][ T7676] veth0_vlan: entered allmulticast mode [ 73.427952][ T7676] bridge0: port 1(team0) entered blocking state [ 73.430001][ T7676] bridge0: port 1(team0) entered forwarding state [ 73.460410][ T7679] tc_dump_action: action bad kind [ 73.600691][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 73.604952][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.457'. [ 73.911875][ T5934] Bluetooth: hci4: command 0x1003 tx timeout [ 73.911889][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.926036][ T7699] ip6erspan0: entered promiscuous mode [ 74.069959][ T5942] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 74.072256][ T5942] Bluetooth: hci1: unexpected event for opcode 0x203e [ 74.123156][ T7661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 74.125796][ T7661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 74.127771][ T7661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 74.129670][ T7661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 74.218322][ T7672] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 74.264219][ T7716] program syz.2.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.352070][ T7727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7727 comm=syz.0.476 [ 74.355786][ T7727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=7727 comm=syz.0.476 [ 74.359580][ T7727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7727 comm=syz.0.476 [ 74.363676][ T7727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7727 comm=syz.0.476 [ 74.367503][ T7727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7727 comm=syz.0.476 [ 74.371548][ T7727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7727 comm=syz.0.476 [ 74.375405][ T7727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=7727 comm=syz.0.476 [ 74.376035][ T7732] loop6: detected capacity change from 0 to 63 [ 74.379260][ T7727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7727 comm=syz.0.476 [ 74.389941][ T5948] buffer_io_error: 40 callbacks suppressed [ 74.389954][ T5948] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.398943][ T5948] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.402969][ T5948] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.406430][ T5948] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.409571][ T5948] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.411164][ T7735] atomic_op ffff8880381c3198 conn xmit_atomic 0000000000000000 [ 74.413058][ T5948] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.418620][ T5948] Buffer I/O error on dev loop6, logical block 3, async page read [ 74.475606][ T7747] overlayfs: failed to clone upperpath [ 74.596992][ T7772] netlink: 'syz.1.492': attribute type 11 has an invalid length. [ 74.630813][ T7777] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 74.688770][ T7786] net_ratelimit: 11 callbacks suppressed [ 74.688781][ T7786] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 74.700139][ T7790] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 74.825120][ T7810] xt_hashlimit: size too large, truncated to 1048576 [ 74.859754][ T7820] xt_hashlimit: overflow, try lower: 0/0 [ 75.186221][ T7849] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 75.189705][ T7849] SELinux: failed to load policy [ 75.201818][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.227769][ T7860] netlink: 'syz.2.514': attribute type 4 has an invalid length. [ 75.284066][ T7854] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.286087][ T7854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.288089][ T7854] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.292061][ T7854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.320090][ T7876] xt_hashlimit: size too large, truncated to 1048576 [ 75.773546][ T7907] netlink: 'syz.0.532': attribute type 9 has an invalid length. [ 75.852083][ T5976] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 76.011784][ T5976] usb 8-1: Invalid ep0 maxpacket: 16 [ 76.152044][ T5976] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 76.301818][ T5976] usb 8-1: Invalid ep0 maxpacket: 16 [ 76.303912][ T5976] usb usb8-port1: attempt power cycle [ 76.347002][ T7914] __nla_validate_parse: 10 callbacks suppressed [ 76.347013][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 76.458454][ T7918] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 76.651976][ T5976] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 76.665400][ T7933] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 76.667892][ T7933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.672461][ T5976] usb 8-1: Invalid ep0 maxpacket: 16 [ 76.724826][ T7937] Unknown options in mask 5 [ 76.821787][ T5976] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 76.842897][ T5976] usb 8-1: Invalid ep0 maxpacket: 16 [ 76.845875][ T5976] usb usb8-port1: unable to enumerate USB device [ 76.927933][ T7950] 9pnet_fd: Insufficient options for proto=fd [ 77.016832][ T7953] qnx4: no qnx4 filesystem (no root dir). [ 77.351908][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.351911][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.361946][ T5934] Bluetooth: hci1: command 0x0406 tx timeout [ 77.361953][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.877455][ T9] cfg80211: failed to load regulatory.db [ 77.898311][ T7959] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 77.900756][ T7959] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.550'. [ 77.904302][ T7959] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 77.906695][ T7959] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.550'. [ 77.909830][ T7959] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 77.912460][ T7959] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.550'. [ 77.915566][ T7959] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 77.917934][ T7959] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.550'. [ 77.921095][ T7959] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 77.924002][ T7959] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.550'. [ 77.927889][ T7959] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 77.930505][ T7959] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.550'. [ 77.934341][ T7959] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 77.936700][ T7959] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.550'. [ 77.940305][ T7959] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 77.942935][ T7959] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.550'. [ 77.946068][ T7959] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.550'. [ 78.002316][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 78.002327][ T40] audit: type=1400 audit(1747991415.805:571): avc: denied { ioctl } for pid=7965 comm="syz.2.553" path="socket:[19457]" dev="sockfs" ino=19457 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.626544][ T8001] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 78.844550][ T40] audit: type=1400 audit(1747991416.645:572): avc: denied { write } for pid=8019 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.983002][ T8028] bond0 (unregistering): Released all slaves [ 79.008114][ T8044] No source specified [ 79.101636][ T8048] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 79.103759][ T8048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.106424][ T8048] vhci_hcd vhci_hcd.0: Device attached [ 79.160581][ T8062] vhci_hcd: unknown pdu 1 [ 79.165874][ T1255] vhci_hcd: stop threads [ 79.167280][ T1255] vhci_hcd: release socket [ 79.168702][ T1255] vhci_hcd: disconnect device [ 79.396410][ T8096] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 79.398501][ T8096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.402870][ T8096] syz.3.579: attempt to access beyond end of device [ 79.402870][ T8096] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 79.406660][ T8096] EXT4-fs (nbd3): unable to read superblock [ 79.451259][ T8103] random: crng reseeded on system resumption [ 79.479267][ T40] audit: type=1400 audit(1747991417.275:573): avc: denied { write } for pid=8107 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.479472][ T8108] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.503743][ T8109] Bluetooth: MGMT ver 1.23 [ 79.528627][ T40] audit: type=1400 audit(1747991417.325:574): avc: denied { firmware_load } for pid=8110 comm="syz.0.583" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 79.550476][ T8111] syz.0.583 (8111) used greatest stack depth: 19736 bytes left [ 79.559463][ T40] audit: type=1400 audit(1747991417.355:575): avc: denied { ioctl } for pid=8100 comm="syz.3.581" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.681171][ T5934] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 79.794548][ T5934] Bluetooth: hci3: unexpected event for opcode 0x0800 [ 79.820853][ T40] audit: type=1400 audit(1747991417.615:576): avc: denied { listen } for pid=8134 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.827250][ T40] audit: type=1400 audit(1747991417.615:577): avc: denied { accept } for pid=8134 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.853111][ T40] audit: type=1800 audit(1747991417.655:578): pid=8139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.594" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 79.853990][ T8139] mmap: syz.0.594 (8139) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.965400][ T40] audit: type=1400 audit(1747991417.765:579): avc: denied { create } for pid=8144 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 79.976180][ T40] audit: type=1400 audit(1747991417.765:580): avc: denied { write } for pid=8144 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 79.995058][ T8148] ip6t_srh: unknown srh invflags 7D00 [ 80.483564][ T5976] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 80.633231][ T5976] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 80.636301][ T5976] usb 8-1: config 0 interface 0 has no altsetting 0 [ 80.640013][ T5976] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.643970][ T5976] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 80.646507][ T5976] usb 8-1: Product: syz [ 80.648036][ T5976] usb 8-1: Manufacturer: syz [ 80.649930][ T5976] usb 8-1: SerialNumber: syz [ 80.656107][ T5976] usb 8-1: config 0 descriptor?? [ 80.663936][ T5976] usb 8-1: selecting invalid altsetting 0 [ 80.755643][ T8197] sctp: [Deprecated]: syz.1.613 (pid 8197) Use of int in max_burst socket option deprecated. [ 80.755643][ T8197] Use struct sctp_assoc_value instead [ 80.860954][ T5978] usb 8-1: USB disconnect, device number 11 [ 80.897561][ T24] IPVS: starting estimator thread 0... [ 80.991908][ T8220] IPVS: using max 47 ests per chain, 112800 per kthread [ 81.070264][ T8172] overlayfs: failed to resolve './file0': -2 [ 81.142165][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 81.294961][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.298388][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.301499][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.304922][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.309663][ T8217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 81.313933][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.549142][ T5976] usb 7-1: USB disconnect, device number 2 [ 81.663586][ T8229] binder_alloc: 8228: binder_alloc_buf, no vma [ 82.191649][ T8255] xt_NFQUEUE: number of total queues is 0 [ 82.492101][ T5976] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 82.645187][ T5976] usb 7-1: Using ep0 maxpacket: 8 [ 82.648925][ T5976] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 82.651618][ T5976] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.655067][ T5976] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.658215][ T5976] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.661335][ T5976] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.665505][ T5976] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.668308][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.875633][ T5976] usb 7-1: usb_control_msg returned -32 [ 82.877435][ T5976] usbtmc 7-1:16.0: can't read capabilities [ 83.842973][ T5934] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 83.845693][ T5934] Bluetooth: hci3: Injecting HCI hardware error event [ 83.848341][ T5934] Bluetooth: hci3: hardware error 0x00 [ 84.056060][ T8274] __nla_validate_parse: 30 callbacks suppressed [ 84.056071][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 84.061136][ T8274] netlink: 172 bytes leftover after parsing attributes in process `syz.1.636'. [ 84.575272][ T8283] infiniband syz1: set active [ 84.577984][ T8283] infiniband syz1: added veth1_to_batadv [ 84.602070][ T8283] RDS/IB: syz1: added [ 84.603759][ T8283] smc: adding ib device syz1 with port count 1 [ 84.605780][ T8283] smc: ib device syz1 port 1 has pnetid [ 84.948123][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 84.948133][ T40] audit: type=1326 audit(1747991422.745:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.640" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f994af8e969 code=0x0 [ 85.055473][ T8293] tipc: Can't bind to reserved service type 0 [ 85.057186][ T8292] overlay: ./file1 is not a directory [ 85.116331][ T65] hid (null): invalid report_size -1485618812 [ 85.122073][ T65] hid-generic 000F:042E:008E.0002: unknown main item tag 0x4 [ 85.125084][ T65] hid-generic 000F:042E:008E.0002: reserved main item tag 0xe [ 85.127708][ T40] audit: type=1400 audit(1747991422.925:588): avc: denied { append } for pid=8298 comm="syz.0.644" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.127841][ T65] hid-generic 000F:042E:008E.0002: invalid report_size -1485618812 [ 85.138300][ T40] audit: type=1326 audit(1747991422.935:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8294 comm="syz.3.643" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c2df8e969 code=0x0 [ 85.149424][ T65] hid-generic 000F:042E:008E.0002: item 0 4 1 7 parsing failed [ 85.152636][ T65] hid-generic 000F:042E:008E.0002: probe with driver hid-generic failed with error -22 [ 85.267576][ T24] usb 7-1: USB disconnect, device number 3 [ 85.290853][ T8318] Bluetooth: hci0: service_discovery: too big uuid_count value 60831 [ 85.394366][ T8337] validate_nla: 25 callbacks suppressed [ 85.394377][ T8337] netlink: 'syz.0.651': attribute type 3 has an invalid length. [ 85.398581][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 85.402146][ T40] audit: type=1400 audit(1747991423.205:590): avc: denied { setopt } for pid=8335 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.827782][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 85.832038][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 85.846201][ T8349] selinux_netlink_send: 318 callbacks suppressed [ 85.846212][ T8349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=8349 comm=syz.1.654 [ 85.909304][ T8358] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8358 comm=syz.1.658 [ 85.912152][ T5934] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 85.958407][ T40] audit: type=1400 audit(1747991423.755:591): avc: denied { setopt } for pid=8363 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.969166][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 85.972791][ T8369] netlink: 'syz.1.661': attribute type 29 has an invalid length. [ 85.993574][ T65] IPVS: starting estimator thread 0... [ 86.055090][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 86.063903][ T8385] binder: BINDER_SET_CONTEXT_MGR already set [ 86.066044][ T8385] binder: 8384:8385 ioctl 4018620d 200000000040 returned -16 [ 86.075369][ T8385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.092256][ T8374] IPVS: using max 46 ests per chain, 110400 per kthread [ 86.175570][ T8392] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 86.339976][ T40] audit: type=1400 audit(1747991424.135:592): avc: denied { ioctl } for pid=8407 comm="syz.3.670" path="socket:[19029]" dev="sockfs" ino=19029 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.364196][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.668'. [ 86.638236][ T8422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 86.641168][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 86.750793][ T8440] Cannot find del_set index 85 as target [ 86.861284][ T40] audit: type=1400 audit(1747991424.655:593): avc: denied { read } for pid=8449 comm="syz.1.680" path="socket:[21118]" dev="sockfs" ino=21118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.887675][ T40] audit: type=1326 audit(1747991424.685:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.3.681" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c2df8e969 code=0x0 [ 87.766086][ T40] audit: type=1400 audit(1747991425.565:595): avc: denied { create } for pid=8478 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 88.369438][ T8507] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 88.484027][ T8512] : entered promiscuous mode [ 88.814070][ T8544] fuse: Unknown parameter 'wroup_id' [ 88.814453][ T40] audit: type=1400 audit(1747991426.615:596): avc: denied { write } for pid=8543 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.843360][ T8549] syz.0.708: attempt to access beyond end of device [ 88.843360][ T8549] loop0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 88.847369][ T8549] qnx4: unable to read the superblock [ 89.134876][ T8566] team0 (unregistering): Port device team_slave_0 removed [ 89.141414][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.141942][ T8566] team0 (unregistering): Port device team_slave_1 removed [ 89.145113][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.222370][ T8572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8572 comm=syz.0.714 [ 89.382858][ T5976] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 89.535090][ T5976] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.537763][ T8604] __nla_validate_parse: 5 callbacks suppressed [ 89.537774][ T8604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.721'. [ 89.538928][ T5976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.545929][ T5976] usb 7-1: Product: syz [ 89.547303][ T5976] usb 7-1: Manufacturer: syz [ 89.548778][ T5976] usb 7-1: SerialNumber: syz [ 89.555055][ T5976] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 89.575099][ T1460] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.780456][ T3231] usb 7-1: USB disconnect, device number 4 [ 89.927871][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804ec13000: rx timeout, send abort [ 89.931875][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88804ec13000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 90.303992][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 90.304003][ T40] audit: type=1400 audit(1747991428.105:604): avc: denied { create } for pid=8618 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.313089][ T40] audit: type=1400 audit(1747991428.105:605): avc: denied { connect } for pid=8618 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.319418][ T40] audit: type=1400 audit(1747991428.105:606): avc: denied { bind } for pid=8618 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.352765][ T40] audit: type=1400 audit(1747991428.155:607): avc: denied { map } for pid=8626 comm="syz.2.728" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.631807][ T1460] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 90.634199][ T1460] ath9k_htc: Failed to initialize the device [ 90.642089][ T3231] usb 7-1: ath9k_htc: USB layer deinitialized [ 90.651222][ T8657] raw_sendmsg: syz.1.736 forgot to set AF_INET. Fix it! [ 90.708282][ T24] IPVS: starting estimator thread 0... [ 90.710995][ T8664] 9pnet_fd: p9_fd_create_tcp (8664): problem connecting socket to 127.0.0.1 [ 90.747426][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 90.750253][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'. [ 90.791843][ T8665] IPVS: using max 47 ests per chain, 112800 per kthread [ 90.800588][ T8681] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 90.816903][ T8681] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.819920][ T8681] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.825217][ T8681] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.828156][ T8681] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.832178][ T8681] bond0: (slave geneve2): making interface the new active one [ 90.835043][ T8681] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 90.990292][ T8699] netlink: 52 bytes leftover after parsing attributes in process `syz.1.748'. [ 90.994573][ T40] audit: type=1400 audit(1747991428.795:608): avc: denied { read } for pid=8698 comm="syz.1.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.028228][ T8708] fuse: Unknown parameter '000000000000000000000000x0000000000000009' [ 91.084970][ T8715] bond0 (unregistering): (slave geneve2): Releasing active interface [ 91.102548][ T8715] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 91.105461][ T8715] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 91.108271][ T8715] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 91.111398][ T8715] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 91.117391][ T8715] bond0 (unregistering): Released all slaves [ 91.221379][ T40] audit: type=1400 audit(1747991429.015:609): avc: denied { search } for pid=8732 comm="syz.3.758" name="/" dev="configfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.229348][ T40] audit: type=1400 audit(1747991429.025:610): avc: denied { read } for pid=8732 comm="syz.3.758" name="/" dev="configfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.231230][ T8735] tipc: Enabling of bearer rejected, failed to enable media [ 91.236226][ T40] audit: type=1400 audit(1747991429.025:611): avc: denied { open } for pid=8732 comm="syz.3.758" path="/" dev="configfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.410135][ T40] audit: type=1400 audit(1747991429.205:612): avc: denied { mount } for pid=8752 comm="syz.1.765" name="/" dev="9p" ino=35913858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 91.656027][ T8772] Cannot find add_set index 0 as target [ 91.701049][ T8776] syz.1.772 (8776): attempted to duplicate a private mapping with mremap. This is not supported. [ 91.832022][ T40] audit: type=1400 audit(1747991429.625:613): avc: denied { ioctl } for pid=8792 comm="syz.2.777" path="socket:[19454]" dev="sockfs" ino=19454 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 91.928935][ T8802] overlay: ./file0 is not a directory [ 92.237193][ T5934] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 92.632015][ T8836] netlink: 'syz.1.792': attribute type 21 has an invalid length. [ 92.662633][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 92.705267][ T8845] xt_TCPMSS: Only works on TCP SYN packets [ 93.139076][ T8894] 9pnet_fd: Insufficient options for proto=fd [ 93.142556][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 93.145282][ T8896] openvswitch: netlink: Flow key attr not present in new flow. [ 93.155359][ T8894] hfs: can't find a HFS filesystem on dev sr0 [ 93.244279][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 93.328185][ T8903] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 93.369967][ T8901] netlink: 'syz.0.812': attribute type 16 has an invalid length. [ 93.372737][ T8901] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.812'. [ 93.381793][ T1460] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 93.491513][ T8908] netlink: 56 bytes leftover after parsing attributes in process `syz.1.814'. [ 93.530935][ T8908] netlink: 'syz.1.814': attribute type 1 has an invalid length. [ 93.533536][ T1460] usb 8-1: Invalid ep0 maxpacket: 64 [ 93.538302][ T8908] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 93.587009][ T8911] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.814'. [ 93.671834][ T1460] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 93.716235][ T8919] /dev/nullb0: Can't lookup blockdev [ 93.725381][ T8918] bridge0: entered promiscuous mode [ 93.727451][ T8918] team0: entered promiscuous mode [ 93.729100][ T8918] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 93.732128][ T8918] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8918, name: syz.1.817 [ 93.736351][ T8918] preempt_count: 201, expected: 0 [ 93.738017][ T8918] RCU nest depth: 0, expected: 0 [ 93.739663][ T8918] 3 locks held by syz.1.817/8918: [ 93.741305][ T8918] #0: ffffffff8f4c4d60 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 93.744450][ T8918] #1: ffffffff901289e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 93.747430][ T8918] #2: ffff888029a34368 (&dev_addr_list_lock_key#6/3){+...}-{3:3}, at: dev_uc_add+0x6f/0x110 [ 93.750830][ T8918] Preemption disabled at: [ 93.750837][ T8918] [] dev_uc_add+0x63/0x110 [ 93.754255][ T8918] CPU: 2 UID: 0 PID: 8918 Comm: syz.1.817 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 93.754269][ T8918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.754276][ T8918] Call Trace: [ 93.754280][ T8918] [ 93.754285][ T8918] dump_stack_lvl+0x16c/0x1f0 [ 93.754303][ T8918] __might_resched+0x3c0/0x5e0 [ 93.754319][ T8918] ? __pfx___might_resched+0x10/0x10 [ 93.754333][ T8918] ? __pfx__printk+0x10/0x10 [ 93.754352][ T8918] __mutex_lock+0x106/0xb90 [ 93.754370][ T8918] ? team_change_rx_flags+0x39/0x220 [ 93.754406][ T8918] ? __pfx___mutex_lock+0x10/0x10 [ 93.754421][ T8918] ? rtnl_configure_link+0xfe/0x260 [ 93.754438][ T8918] ? rtnl_newlink+0xcd9/0x2000 [ 93.754453][ T8918] ? __pfx_netdev_info+0x10/0x10 [ 93.754470][ T8918] ? team_change_rx_flags+0x39/0x220 [ 93.754485][ T8918] team_change_rx_flags+0x39/0x220 [ 93.754506][ T8918] ? __dev_set_promiscuity+0x145/0x590 [ 93.754516][ T8918] ? __pfx_team_change_rx_flags+0x10/0x10 [ 93.754533][ T8918] __dev_set_promiscuity+0x217/0x590 [ 93.754548][ T8918] netif_set_promiscuity+0x52/0x150 [ 93.754560][ T8918] dev_set_promiscuity+0xb2/0x260 [ 93.754575][ T8918] br_manage_promisc+0x2ce/0x4f0 [ 93.754596][ T8918] br_dev_change_rx_flags+0x3b/0x50 [ 93.754609][ T8918] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 93.754622][ T8918] __dev_set_promiscuity+0x217/0x590 [ 93.754633][ T8918] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 93.754647][ T8918] __dev_set_rx_mode+0x205/0x2e0 [ 93.754659][ T8918] dev_uc_add+0xee/0x110 [ 93.754675][ T8918] macvlan_open+0x62e/0x8f0 [ 93.754687][ T8918] ? __pfx_macvlan_open+0x10/0x10 [ 93.754698][ T8918] __dev_open+0x2e4/0x7d0 [ 93.754709][ T8918] ? __pfx___dev_open+0x10/0x10 [ 93.754724][ T8918] __dev_change_flags+0x55d/0x720 [ 93.754737][ T8918] ? __pfx___dev_change_flags+0x10/0x10 [ 93.754751][ T8918] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 93.754764][ T8918] rtnl_configure_link+0xfe/0x260 [ 93.754783][ T8918] rtnl_newlink+0xcd9/0x2000 [ 93.754800][ T8918] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.754811][ T8918] ? find_held_lock+0x2b/0x80 [ 93.754824][ T8918] ? avc_has_perm_noaudit+0x117/0x3b0 [ 93.754839][ T8918] ? avc_has_perm_noaudit+0x149/0x3b0 [ 93.754862][ T8918] ? find_held_lock+0x2b/0x80 [ 93.754874][ T8918] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.754886][ T8918] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.754898][ T8918] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 93.754911][ T8918] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.754924][ T8918] rtnetlink_rcv_msg+0x95b/0xe90 [ 93.754938][ T8918] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.754958][ T8918] netlink_rcv_skb+0x16a/0x440 [ 93.754973][ T8918] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.754987][ T8918] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.755008][ T8918] ? netlink_deliver_tap+0x1ae/0xd30 [ 93.755024][ T8918] netlink_unicast+0x53d/0x7f0 [ 93.755039][ T8918] ? __pfx_netlink_unicast+0x10/0x10 [ 93.755057][ T8918] netlink_sendmsg+0x8d1/0xdd0 [ 93.755073][ T8918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.755092][ T8918] ____sys_sendmsg+0xa98/0xc70 [ 93.755108][ T8918] ? copy_msghdr_from_user+0x10a/0x160 [ 93.755120][ T8918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.755142][ T8918] ___sys_sendmsg+0x134/0x1d0 [ 93.755155][ T8918] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.755184][ T8918] __sys_sendmsg+0x16d/0x220 [ 93.755196][ T8918] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.755208][ T8918] ? __x64_sys_futex+0x1e0/0x4c0 [ 93.755227][ T8918] ? rcu_is_watching+0x12/0xc0 [ 93.755244][ T8918] do_syscall_64+0xcd/0x260 [ 93.755261][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.755273][ T8918] RIP: 0033:0x7f994af8e969 [ 93.755282][ T8918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.755293][ T8918] RSP: 002b:00007f994bdd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.755303][ T8918] RAX: ffffffffffffffda RBX: 00007f994b1b5fa0 RCX: 00007f994af8e969 [ 93.755309][ T8918] RDX: 0000000000000880 RSI: 0000200000000240 RDI: 0000000000000008 [ 93.755316][ T8918] RBP: 00007f994b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 93.755322][ T8918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.755328][ T8918] R13: 0000000000000000 R14: 00007f994b1b5fa0 R15: 00007ffdf0625298 [ 93.755341][ T8918] [ 93.755396][ T8918] [ 93.889811][ T8918] ============================= [ 93.891362][ T8918] [ BUG: Invalid wait context ] [ 93.892904][ T8918] 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 Tainted: G W [ 93.895610][ T8918] ----------------------------- [ 93.897162][ T8918] syz.1.817/8918 is trying to lock: [ 93.898958][ T8918] ffff88804ed28e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_change_rx_flags+0x39/0x220 [ 93.902159][ T8918] other info that might help us debug this: [ 93.904046][ T8918] context-{5:5} [ 93.905173][ T8918] 3 locks held by syz.1.817/8918: [ 93.906777][ T8918] #0: ffffffff8f4c4d60 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 93.909787][ T8918] #1: ffffffff901289e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 93.912614][ T8918] #2: ffff888029a34368 (&dev_addr_list_lock_key#6/3){+...}-{3:3}, at: dev_uc_add+0x6f/0x110 [ 93.915799][ T8918] stack backtrace: [ 93.916997][ T8918] CPU: 2 UID: 0 PID: 8918 Comm: syz.1.817 Tainted: G W 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 93.917014][ T8918] Tainted: [W]=WARN [ 93.917017][ T8918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.917024][ T8918] Call Trace: [ 93.917028][ T8918] [ 93.917032][ T8918] dump_stack_lvl+0x116/0x1f0 [ 93.917049][ T8918] __lock_acquire+0x3ff/0x1ba0 [ 93.917067][ T8918] ? dump_stack_lvl+0x197/0x1f0 [ 93.917082][ T8918] lock_acquire+0x179/0x350 [ 93.917098][ T8918] ? team_change_rx_flags+0x39/0x220 [ 93.917114][ T8918] ? __pfx___might_resched+0x10/0x10 [ 93.917128][ T8918] ? __pfx__printk+0x10/0x10 [ 93.917146][ T8918] __mutex_lock+0x199/0xb90 [ 93.917161][ T8918] ? team_change_rx_flags+0x39/0x220 [ 93.917177][ T8918] ? team_change_rx_flags+0x39/0x220 [ 93.917192][ T8918] ? __pfx___mutex_lock+0x10/0x10 [ 93.917207][ T8918] ? rtnl_configure_link+0xfe/0x260 [ 93.917223][ T8918] ? rtnl_newlink+0xcd9/0x2000 [ 93.917236][ T8918] ? __pfx_netdev_info+0x10/0x10 [ 93.917251][ T8918] ? team_change_rx_flags+0x39/0x220 [ 93.917265][ T8918] team_change_rx_flags+0x39/0x220 [ 93.917281][ T8918] ? __dev_set_promiscuity+0x145/0x590 [ 93.917291][ T8918] ? __pfx_team_change_rx_flags+0x10/0x10 [ 93.917307][ T8918] __dev_set_promiscuity+0x217/0x590 [ 93.917319][ T8918] netif_set_promiscuity+0x52/0x150 [ 93.917330][ T8918] dev_set_promiscuity+0xb2/0x260 [ 93.917344][ T8918] br_manage_promisc+0x2ce/0x4f0 [ 93.917363][ T8918] br_dev_change_rx_flags+0x3b/0x50 [ 93.917377][ T8918] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 93.917390][ T8918] __dev_set_promiscuity+0x217/0x590 [ 93.917400][ T8918] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 93.917413][ T8918] __dev_set_rx_mode+0x205/0x2e0 [ 93.917424][ T8918] dev_uc_add+0xee/0x110 [ 93.917439][ T8918] macvlan_open+0x62e/0x8f0 [ 93.917451][ T8918] ? __pfx_macvlan_open+0x10/0x10 [ 93.917461][ T8918] __dev_open+0x2e4/0x7d0 [ 93.917472][ T8918] ? __pfx___dev_open+0x10/0x10 [ 93.917484][ T8918] __dev_change_flags+0x55d/0x720 [ 93.917499][ T8918] ? __pfx___dev_change_flags+0x10/0x10 [ 93.917511][ T8918] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 93.917523][ T8918] rtnl_configure_link+0xfe/0x260 [ 93.917540][ T8918] rtnl_newlink+0xcd9/0x2000 [ 93.917554][ T8918] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.917566][ T8918] ? find_held_lock+0x2b/0x80 [ 93.917578][ T8918] ? avc_has_perm_noaudit+0x117/0x3b0 [ 93.917591][ T8918] ? avc_has_perm_noaudit+0x149/0x3b0 [ 93.917606][ T8918] ? find_held_lock+0x2b/0x80 [ 93.917618][ T8918] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.917630][ T8918] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.917641][ T8918] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 93.917654][ T8918] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.917666][ T8918] rtnetlink_rcv_msg+0x95b/0xe90 [ 93.917679][ T8918] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.917694][ T8918] netlink_rcv_skb+0x16a/0x440 [ 93.917708][ T8918] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.917721][ T8918] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.917737][ T8918] ? netlink_deliver_tap+0x1ae/0xd30 [ 93.917751][ T8918] netlink_unicast+0x53d/0x7f0 [ 93.917764][ T8918] ? __pfx_netlink_unicast+0x10/0x10 [ 93.917779][ T8918] netlink_sendmsg+0x8d1/0xdd0 [ 93.917793][ T8918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.917809][ T8918] ____sys_sendmsg+0xa98/0xc70 [ 93.917824][ T8918] ? copy_msghdr_from_user+0x10a/0x160 [ 93.917835][ T8918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.917853][ T8918] ___sys_sendmsg+0x134/0x1d0 [ 93.917864][ T8918] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.917882][ T8918] __sys_sendmsg+0x16d/0x220 [ 93.917894][ T8918] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.917905][ T8918] ? __x64_sys_futex+0x1e0/0x4c0 [ 93.917922][ T8918] ? rcu_is_watching+0x12/0xc0 [ 93.917936][ T8918] do_syscall_64+0xcd/0x260 [ 93.917952][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.917963][ T8918] RIP: 0033:0x7f994af8e969 [ 93.917972][ T8918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.917982][ T8918] RSP: 002b:00007f994bdd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.917991][ T8918] RAX: ffffffffffffffda RBX: 00007f994b1b5fa0 RCX: 00007f994af8e969 [ 93.917998][ T8918] RDX: 0000000000000880 RSI: 0000200000000240 RDI: 0000000000000008 [ 93.918004][ T8918] RBP: 00007f994b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 93.918010][ T8918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.918016][ T8918] R13: 0000000000000000 R14: 00007f994b1b5fa0 R15: 00007ffdf0625298 [ 93.918025][ T8918] [ 94.068484][ T8918] macvlan2: entered promiscuous mode [ 94.081928][ T1460] usb 8-1: Invalid ep0 maxpacket: 64 [ 94.083799][ T1460] usb usb8-port1: attempt power cycle [ 94.421779][ T1460] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 94.442479][ T1460] usb 8-1: Invalid ep0 maxpacket: 64 [ 94.581810][ T1460] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 94.602308][ T1460] usb 8-1: Invalid ep0 maxpacket: 64 [ 94.604213][ T1460] usb usb8-port1: unable to enumerate USB device VM DIAGNOSIS: 09:10:31 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88806a432de8 RCX=ffffffff816b7839 RDX=0000000000000000 RSI=ffffffff8bf4a220 RDI=ffffffff8dcf0d20 RBP=0000000000000000 RSP=ffffc900000c7968 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88807ffd6840 R13=0000000000000008 R14=8000000110afb103 R15=fffff52018bcb000 RIP=ffffffff81a0f060 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000200 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000cdb11 RBX=0000000000000001 RCX=ffffffff8b6d3419 RDX=0000000000000000 RSI=ffffffff8dbe43c5 RDI=ffffffff8bf4a2a0 RBP=ffffed1003ad9488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d6ca440 R14=ffffffff90852d10 R15=0000000000000000 RIP=ffffffff8b6d1caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ada000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000007900 CR3=0000000031161000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737469625f737365 726464612f6c656e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c2e011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c2e011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c2e011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c2e011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c2e011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c2e011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004010a09 0000003c00000000 307a797300010009 0000000700000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000900000000 317a797300020009 00000000400a0008 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00030a0b0000002c 1d00000040050008 00000000307a7973 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 4010000c00000000 307a797300010009 0000000700000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000030a0b 0000002c1d000000 4005000800000000 307a797300010009 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000317a7973 0002000900000000 400a000800000007 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04010a090000003c 00000000307a7973 0001000900000007 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb1dd66142af4103 d1fcc94afc7dc06b 7d5cc6cfabdfb9b7 7bd36e16659df8fe ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f9bb5 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc900273c6978 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000079 R14=ffffffff9adfe560 R15=ffffffff854f9b50 RIP=ffffffff854f9bdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f994bdd86c0 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f994bd96d58 CR3=00000000445d5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0330000000010000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 01e4000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0330000000200000 0001000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800080000 00140000002c0000 00440000005c0000 00740000008c0000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00a4000000bc0000 00d4000000ec0000 01040000011c0000 0134000001580000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e000000000000 0000000000000000 00fa00000000018c ba80000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=c9c7e43cc9c7e43c c9c7e43cc9c7e43c c9c7e43cc9c7e43c c9c7e43cc9c7e43c c9c7e43cc9c7e43c c9c7e43cc9c7e43c c9c7e43cc9c7e43c c9c7e43cc9c7e43c ZMM25=e11d2a4ce11d2a4c e11d2a4ce11d2a4c e11d2a4ce11d2a4c e11d2a4ce11d2a4c e11d2a4ce11d2a4c e11d2a4ce11d2a4c e11d2a4ce11d2a4c e11d2a4ce11d2a4c ZMM26=80c4aaf280c4aaf2 80c4aaf280c4aaf2 80c4aaf280c4aaf2 80c4aaf280c4aaf2 80c4aaf280c4aaf2 80c4aaf280c4aaf2 80c4aaf280c4aaf2 80c4aaf280c4aaf2 ZMM27=e0441949e0441949 e0441949e0441949 e0441949e0441949 e0441949e0441949 e0441949e0441949 e0441949e0441949 e0441949e0441949 e0441949e0441949 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5806000058060000 5806000058060000 5806000058060000 5806000058060000 5806000058060000 5806000058060000 5806000058060000 5806000058060000 info registers vcpu 3 CPU#3 RAX=00000000000bf213 RBX=0000000000000003 RCX=ffffffff8b6d3419 RDX=0000000000000000 RSI=ffffffff8dbe43c5 RDI=ffffffff8bf4a2a0 RBP=ffffed1003b5c000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dae0000 R14=ffffffff90852d10 R15=0000000000000000 RIP=ffffffff8b6d1caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f994bd95f98 CR3=00000000532f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a7dc11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a7dc11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a7dc11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a7dc11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a7dc11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a7dc11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f941a4a235a294fa 4283e508415398e4 ed366a1771bc1014 0aac001002080028 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000751e ffffdf4d00000707 00000001fff90004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000005bf 6000e60e00000326 00000020000006dc 2007ff0f00070635 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000037bf 0000000000001669 0000000000000095 000000000001032d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000037bf 0000000000001669 0000000000000095 000000000001032d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000005bf 6000e60e00000326 00000020000006dc 2007ff0f00070635 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000751e ffffdf4d00000707 00000001fff90765 000000000000630f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4aed37c594b1497e 107f9e258e53d95d aaaae130f8f6fb26 a92d14155ec84929 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000