last executing test programs: 11.483443376s ago: executing program 1 (id=6547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[]) chdir(&(0x7f0000000280)='./file0\x00') ftruncate(0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x1d, 0x0, &(0x7f0000000140)) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x4e, 0x2, 0x0, "b43ddddde5dbbbe40f00f401bbf689000000c67f00000000008000"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') open(&(0x7f0000002000)='./bus\x00', 0x14b142, 0x0) r6 = socket(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0xb, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000003c00)=0x90) 11.483045999s ago: executing program 2 (id=6548): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r2, 0x540b, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000200)=0x6, 0x4) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) symlinkat(&(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 11.467930792s ago: executing program 0 (id=6555): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@local, @in=@broadcast, 0x4e24, 0x0, 0x4e22, 0x0, 0x2, 0x140, 0x20, 0x2b}, {0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x2}, {0x1, 0xffffffffffffffff, 0x3, 0xfffffffffffff800}, 0x2, 0x6eebb6, 0x0, 0x3, 0x0, 0x1}, {{@in6=@private1}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0xe4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) r2 = syz_open_dev$video(&(0x7f00000000c0), 0x20, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) lseek(r4, 0xa09, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000000)={0xffff8003, 0x1, 0x5}) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x0, 0x4, 0x0, "e5e9153e0000b0dc78dd52107de8a9040000000000000000000000000100"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x5, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000005a40)=""/268, 0x10c}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x2}}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r9 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOBLANK(r9, 0x4611, 0x4) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d}}) 11.225072713s ago: executing program 1 (id=6549): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)={0xdc, 0x12, 0x703, 0x0, 0x0, "", [@generic="14f84d51ceb5a183b703171f970ba26e5547ac47e6ab4513d71e75f33cd78b2096d50cb0551255565025750bf1f75e0c564a89a9dbdbacf0c43dd4fd1f242331587b7b3aaffbb0772a880f47ac0c19f18be3973688344a3a2dafec3e8b20be708f84080230909295cb03909ecac3c388b054a8fb798f1f51f2df9c32f4c8e629d2fa3b9590ea9a9f8ae268717e0fa3249737f1c183eaef88b2a3aaedf7455d9d84773fa836ae71f81f5feb7251a1225be8efdab50d96fa9a514272e8d57b6a2baca040b30000000000"]}, 0xdc}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0x24, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000e40)=ANY=[@ANYBLOB="04030b00e5ae57c43ec78b8e0100"], 0xe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000080)={0x2, r6}) ptrace$peek(0xffffffffffffffff, r6, &(0x7f00000000c0)) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d", 0x5, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) 10.532288552s ago: executing program 0 (id=6550): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x54c) semtimedop(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7}, @ipv4=@igmp={{0x1a, 0x4, 0x2, 0x4, 0x90, 0x6, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x4c, 0xed, 0x1, 0x0, [{@multicast1, 0x6}, {@rand_addr=0x64010101, 0x9}, {@empty, 0xa2a}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x9}, {@multicast2, 0x40}, {@private=0xa010101, 0xffffffff}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7ff}]}, @noop, @ra={0x94, 0x4}]}}, {0x15, 0x9, 0x0, @rand_addr=0x64010100, "24bdfa45f2ea01dbd352afa231c7266b5b3947fd1b7902a696e73136c8567960"}}}, 0x9e) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 10.41333856s ago: executing program 2 (id=6551): socket$unix(0x1, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005ce697aa326088d525591b1fca6bca6dcf899f1b86711a1352884d32cc49ac9cb4b8a8802e4b4f6dd1bf4fb0fd54bb815723758e72f45f367aa217b5276b3005"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000180), 0x4) connect$inet6(r2, 0x0, 0x0) madvise(&(0x7f0000ac2000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f000018e000/0x3000)=nil, 0x3000, 0x1) r3 = io_uring_setup(0x344f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r6, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) socket(0x10, 0x3, 0x0) 10.178364031s ago: executing program 1 (id=6553): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x606) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xc000000000}, 0x0) sched_setaffinity(0x0, 0x3c, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = userfaultfd(0x1) fchownat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x100) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x40, 0x100}, 0xc64, 0xffffffffffff961a, 0x7fffffff, 0x100000000, r1, r1, 0x8}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r2, &(0x7f0000000200)=""/183, 0x28) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{0xfffd, 0x9}, 'syz1\x00', 0x4d}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = syz_open_dev$evdev(0x0, 0x40, 0x0) ioctl$EVIOCSFF(r4, 0x40044581, 0x0) close(r2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x308, 0x20a, 0x278, 0x308, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 9.355152227s ago: executing program 0 (id=6556): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x54c) semtimedop(r2, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7}, @ipv4=@igmp={{0x1a, 0x4, 0x2, 0x4, 0x90, 0x6, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x4c, 0xed, 0x1, 0x0, [{@multicast1, 0x6}, {@rand_addr=0x64010101, 0x9}, {@empty, 0xa2a}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x9}, {@multicast2, 0x40}, {@private=0xa010101, 0xffffffff}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7ff}]}, @noop, @ra={0x94, 0x4}]}}, {0x15, 0x9, 0x0, @rand_addr=0x64010100, "24bdfa45f2ea01dbd352afa231c7266b5b3947fd1b7902a696e73136c8567960"}}}, 0x9e) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.336881587s ago: executing program 3 (id=6557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x775800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 4.966393476s ago: executing program 3 (id=6558): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x23, 0x5, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f00000000c0)={0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x5}}, 0x20) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, 0xffffffffffffffff, 0xfffffffd}}, 0x48) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0xfc}}, 0x0) write$6lowpan_control(r6, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000020000103000000000000000002140000000000030000000008000b0001000100080001000a01018100f4683d21656c9e93a8580dac87246bebd78dca427e4e5713e34421c6c4ca36a6493991340600c8577ba11e"], 0x2c}}, 0x4010004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.964161472s ago: executing program 0 (id=6566): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x24, '\x00', 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00'}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x20}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x80fe) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="000100001a00010000fe5e7dffeb871576e888eb9ac34bfdab538eaf0b5f9302e7000000000000000000000001ffffffff00000000000000000000000000000000000000002b2b949e57fae84c149f8bf4d12dec19acf087b681aa1717fd49cbd538769d8a9a60617789ea56d261e3f868ed1a2b98776083edebb3f53abbfe7e1b4139c80a303e2bb79d1405785ba04c4c9d9897c37835a52b9c72abf5fdcca365209c3688b993181e210beafdb88c64f7cf872bc26940033adc880d89f989b4bc1868747b5f64c8967e863cf6a42d9db97d92aaca9c65b990c645fb91cf448ce57580b0556690", @ANYRES32=0x0, @ANYRES32=0x0], 0x100}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)=0xbf) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 4.958141766s ago: executing program 1 (id=6559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1a00) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={[{@dyn}]}) r4 = io_uring_setup(0x17ba, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/233, 0xe9}], 0x1}}], 0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, &(0x7f0000000200)={0x0, 0x0, 0x0, @lost_msgs}) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0, 0x0, 0x0, 0x4}) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) io_setup(0x2, &(0x7f0000006fc0)=0x0) io_submit(r8, 0x1, &(0x7f0000007080)=[&(0x7f0000007040)={0x0, 0x0, 0x0, 0x1, 0x5, r7, 0x0, 0x0, 0x10001}]) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f0000000000)={0x39b31d39, 0x4}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000001c0)={0x1, 0xffffffff, 0x7}) 4.95773455s ago: executing program 2 (id=6560): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) semget(0x0, 0x0, 0x411) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/138, 0x8a}], 0x1, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000140)=@framed={{}, [@jmp={0x6, 0x0, 0xc}, @alu={0x7, 0x0, 0x2}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000711136000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYBLOB="1c0000004a00010100010000000000000a000002"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket(0x0, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x3cd}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) readv(r6, &(0x7f0000000240)=[{&(0x7f0000001080)=""/213, 0xd5}], 0x1) mremap(&(0x7f00004f8000/0x1000)=nil, 0x1000, 0x400d, 0x3, &(0x7f00001f4000/0x4000)=nil) 4.129146891s ago: executing program 1 (id=6561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r2, 0x540b, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000200)=0x6, 0x4) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) symlinkat(&(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 3.902657694s ago: executing program 3 (id=6562): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)={0xdc, 0x12, 0x703, 0x0, 0x0, "", [@generic="14f84d51ceb5a183b703171f970ba26e5547ac47e6ab4513d71e75f33cd78b2096d50cb0551255565025750bf1f75e0c564a89a9dbdbacf0c43dd4fd1f242331587b7b3aaffbb0772a880f47ac0c19f18be3973688344a3a2dafec3e8b20be708f84080230909295cb03909ecac3c388b054a8fb798f1f51f2df9c32f4c8e629d2fa3b9590ea9a9f8ae268717e0fa3249737f1c183eaef88b2a3aaedf7455d9d84773fa836ae71f81f5feb7251a1225be8efdab50d96fa9a514272e8d57b6a2baca040b30000000000"]}, 0xdc}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0x24, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000e40)=ANY=[@ANYBLOB="04030b00e5ae57c43ec78b8e0100"], 0xe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000080)={0x2, r6}) ptrace$peek(0xffffffffffffffff, r6, &(0x7f00000000c0)) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d", 0x5, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) 3.754556285s ago: executing program 2 (id=6563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6}]}, 0x48}}, 0x0) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x880) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000075c000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) syz_open_dev$char_usb(0xc, 0xb4, 0x3) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000001c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472192b3f6cc72fdda9239180616ed775769a3db682879fecb5c1b36f07ee36334b2552f19101437df82b98cc523b496b166a8adbf798ed4714a9fbc73415", @ANYRESDEC=r5, @ANYRESHEX=r6, @ANYBLOB=',privport,access=']) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f00000001c0)) socket$kcm(0x1e, 0x5, 0x0) 2.819718333s ago: executing program 1 (id=6564): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioperm(0x0, 0xbbd3, 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x657, 0xfeffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x2}, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x16) r5 = io_uring_setup(0x4d66, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$vimc1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) getpid() bpf$PROG_LOAD(0x2, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208000a0043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) finit_module(r6, &(0x7f0000000000)='\\\x00', 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) 2.799892708s ago: executing program 3 (id=6565): socket$kcm(0x2, 0xa, 0x2) r0 = io_uring_setup(0x17ba, &(0x7f0000000380)={0x0, 0x6014, 0x20, 0x5, 0x15d}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r0, 0x6, &(0x7f0000000040)=[0xffffffffffffffff], 0x1) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x8, 0x10, 0xffffffffffffffff, 0x0) socket(0x200000100000011, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000007c0)={{0x10000, 0x2, 0xb, 0x7, 0x0, 0x81, 0x9b, 0x7, 0x4, 0x87, 0x8, 0x7}, {0x18f002, 0x4000, 0xa, 0x3, 0x8, 0xb, 0xb2, 0x9, 0x8, 0xb, 0xa, 0x2}, {0x6000, 0x5000, 0xd, 0xec, 0xb6, 0xfb, 0x2, 0x5, 0xe3, 0x56, 0x39, 0xfe}, {0xd000, 0x0, 0xb, 0xd5, 0xf8, 0x3, 0x7f, 0x8, 0x5, 0x2, 0x4, 0xb4}, {0x4000, 0x100000, 0x0, 0x67, 0x1, 0x8, 0x6, 0x3, 0x5f, 0xbe, 0x3, 0x1}, {0x6000, 0x6000, 0xc, 0xff, 0x1, 0xfd, 0x0, 0x2, 0x10, 0xa7, 0x4, 0x7}, {0xb6ff58cdf5116350, 0x1, 0x8, 0x2, 0xf1, 0x0, 0x4, 0xf3, 0x5, 0x3, 0x8, 0x40}, {0x1000, 0x4000, 0x9, 0x10, 0xe, 0x4, 0xf9, 0x3, 0x1, 0x5, 0x8, 0xe}, {0x1000, 0x3}, {0x0, 0x1}, 0x0, 0x0, 0x2, 0x20100, 0x6, 0xb5f2fc115ca8e637, 0x7004, [0x8000000000000000, 0x6, 0x6cd2, 0x6]}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002580)=""/107}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000004a150112790001020301090224000101000000090400000003010000092100000001220000090581030000000000"], 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) 2.794449564s ago: executing program 0 (id=6567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000a40)=0x400000bd2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$setsig(0x4203, 0x0, 0xb, 0x0) r2 = socket$inet(0x2, 0x4, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) poll(&(0x7f0000000b80)=[{r3}], 0x1, 0xffffffff) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff22) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r4 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x28) prctl$PR_SET_SECUREBITS(0x1b, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file2\x00', 0x400, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) 1.88142481s ago: executing program 2 (id=6568): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d74d4156a221296a665e18aa4c7a0acfd92aa9fb57dbd7cb2c9a9d1cd00b40d432e82bebeb0c176990de4eceb7f41b16a0543f95240979fdcd68b7db60965ca8232034538be7d93df76fead7bddf574c70e3a9724a6614c371b405d4a8126f90990422f978e5e7eb2eb9448d419377df69a9d9635429f06fabcb6655d5dda77848c25b97f87151d9c21709000257580be9edd4f3041fcf2473042c8f55c0aa71ef035f5b89b0d2e4b322ec9787a321450d1c164e8cfaacca90a9773e6b877e38e4237eb5da067a85c2c25a89aeeea93c278cab807f725d", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x10005, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000100)) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.667594175s ago: executing program 0 (id=6569): syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280), &(0x7f0000000340)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00000a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000469000/0x4000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000004500)={0x0, 0x20000, 0xff, 0x0, 0x6}) write$binfmt_aout(r4, 0x0, 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) syz_open_pts(r4, 0x0) 728.491208ms ago: executing program 2 (id=6570): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)={0xdc, 0x12, 0x703, 0x0, 0x0, "", [@generic="14f84d51ceb5a183b703171f970ba26e5547ac47e6ab4513d71e75f33cd78b2096d50cb0551255565025750bf1f75e0c564a89a9dbdbacf0c43dd4fd1f242331587b7b3aaffbb0772a880f47ac0c19f18be3973688344a3a2dafec3e8b20be708f84080230909295cb03909ecac3c388b054a8fb798f1f51f2df9c32f4c8e629d2fa3b9590ea9a9f8ae268717e0fa3249737f1c183eaef88b2a3aaedf7455d9d84773fa836ae71f81f5feb7251a1225be8efdab50d96fa9a514272e8d57b6a2baca040b30000000000"]}, 0xdc}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0x24, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000e40)=ANY=[@ANYBLOB="04030b00e5ae57c43ec78b8e0100"], 0xe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000080)={0x2, r6}) ptrace$peek(0xffffffffffffffff, r6, &(0x7f00000000c0)) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d", 0x5, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) 617.028292ms ago: executing program 3 (id=6571): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@ipv6_newnexthop={0x5c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_BLACKHOLE={0x4}, @NHA_ID={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x140893ea38446821}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="900000001d00000126bd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0000090814000300080000007f000000040000001f000000140003000002000008000000c1ffffff0001000008000a00990000000800070000040000080004000000000018000e8005000100dc000000050001007f0000000400020008000800", @ANYRES32=r2, @ANYBLOB="0a0001000180c200000e000008000a00ffff000099a04ffda578abeb8ff382c0b257d3ab54574c4597622785d1b94fd665864f0bcfd6791b609692097fafff577522d91cf33455cc02cd9b29929293766fc1486311fe6a5b16aa5c70a34dde64d136ebc538f53a7aa229c84f47dedccadd1d29ab39fc5a89db774531fa08c61b0471b0454f1229a30e6149fd2575f88bb06ca9a8036bac71317de6a97024e435dde3ac9e46d98d4edf5fa444d1f3d4f9cccfd5e80064a517c118d8ceb5f5098d3d7e36a8a398d369027e90c3bb60ef00b4f8ff4fde04d608383bb834197744ac396550b49f5de2b9f615dabd7ed125530e2cce6fe683"], 0x90}}, 0x4080) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x2020) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000340)=0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYBLOB="01000000010000001c0012000c38e80b1d39c0480001"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940), 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000001c0), 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x4004000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000b80)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0xfffffffe, @loopback, 0x8000}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in6={0xa, 0x4e20, 0x5, @remote, 0xffff65b7}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}], 0xc4) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000540)={{{@in6, @in=@dev}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xfffffffffffffc45) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) set_mempolicy(0x1, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) openat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xb1\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92y\x85\xbf\x04.7W\xedxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x5) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r7, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 0s ago: executing program 3 (id=6572): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000140)={0x39, 0x100}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f00000000c0)={0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32=r4, @ANYBLOB="0a0006005050505050500000140055003dd7b6d2db5b3550449e4977514874c208001f0101800000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x200000000000014e, &(0x7f0000000240)=ANY=[@ANYBLOB="185006003262499e9b35211f0100001c000000af00000000000000850000006d00000095"], &(0x7f0000000580)='syzkaller\x00', 0xe91, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000006800e97800000000000e4104004342f987e9e0806999fa9d1a7a06b10356d62a38312b9fa693bad0c63af206bf759f9634b90186ad10b85ba3f529bd0974a2b28c03f0a194a674bd22bfcd85019bab577d31b898753abd51ac929dcb3183db6116e4c4db8e2a979870e4c5712fb62814"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2400000a101000000000000000000008001e0001000000b887dc7b295afb41be49245b1b20c0150f03c23487dd4e7c45cd9fc44946a1edb681c32e124c4ac0b106cc6e703e5b4823d9cba4b2139c6d0031aebb1a51fe2b5c07226dbeec84c40495c61102b8e3a8894e5b555be53b1d31a137eacb778e975bada8752cb41b44476e432c85bdcdec1815be584bd4fe035a04f29528fac2de756c1c1324e9aecfb31ebf1463caf01b567c13cafc96280be41b51d570ae7ec7eee1ca884072cf7f1f96ff366e7badafdc8400"/214], 0x24}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r8, @ANYRESHEX=r2], 0x4c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="1df65c927320354844cfe852ccb205f8dc982229f42ecb852c1bba6e9de65d0b1d7c9f756ca1596579676c494dad19fec50a6a144c85d5b46bab52924342725f4816d42292c9be3a9d2f0eeb6ea02ee8b5f112a4", @ANYBLOB="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", @ANYRES16=r7], 0x1d0}, 0x1, 0x0, 0x0, 0xc040}, 0x4048012) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000007c0)='btrfs_convert_extent_bit\x00', r5}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): '. [ 2056.608255][T30612] program syz.3.5818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2056.738072][T30615] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5819'. [ 2057.796638][T30629] loop7: detected capacity change from 0 to 127 [ 2059.528841][T30654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39518 sclass=netlink_route_socket pid=30654 comm=syz.0.5825 [ 2060.661481][T30673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=30673 comm=syz.3.5831 [ 2060.675350][T30673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=30673 comm=syz.3.5831 [ 2060.687577][T30673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=30673 comm=syz.3.5831 [ 2060.700692][T30673] netlink: 300 bytes leftover after parsing attributes in process `syz.3.5831'. [ 2060.746619][T30673] program syz.3.5831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2061.001456][T30658] block nbd2: shutting down sockets [ 2062.596309][T30693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5835'. [ 2062.601535][T30693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5835'. [ 2064.011672][T30709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5839'. [ 2064.021742][T30709] Invalid ELF header magic: != ELF [ 2064.623730][T30717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=30717 comm=syz.0.5841 [ 2064.636956][T30717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=30717 comm=syz.0.5841 [ 2064.651060][T30717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=30717 comm=syz.0.5841 [ 2064.657829][T30717] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5841'. [ 2064.677863][T30717] program syz.0.5841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2065.239681][T30720] syzkaller1: entered promiscuous mode [ 2065.242069][T30720] syzkaller1: entered allmulticast mode [ 2065.336495][ T39] audit: type=1400 audit(1727139838.493:16457): avc: denied { setattr } for pid=30721 comm="syz.3.5843" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2066.172251][T30735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5846'. [ 2066.396331][T30738] netlink: 'syz.0.5847': attribute type 10 has an invalid length. [ 2066.408917][T30738] bridge0: port 3(team0) entered disabled state [ 2066.411904][T30738] team0: left allmulticast mode [ 2066.413516][T30738] mac80211_hwsim hwsim35 ÿÿÿÿÿÿ: left allmulticast mode [ 2066.415852][T30738] team0: left promiscuous mode [ 2066.417366][T30738] mac80211_hwsim hwsim35 ÿÿÿÿÿÿ: left promiscuous mode [ 2066.420271][T30738] bridge0: port 3(team0) entered disabled state [ 2066.429146][T30738] batman_adv: batadv0: Adding interface: team0 [ 2066.431103][T30738] batman_adv: batadv0: The MTU of interface team0 is too small (1279) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2066.439640][T30738] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2066.484499][T30737] netlink: 'syz.0.5847': attribute type 10 has an invalid length. [ 2066.486816][T30737] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5847'. [ 2066.512350][T30737] team0: entered promiscuous mode [ 2066.514364][T30737] mac80211_hwsim hwsim35 ÿÿÿÿÿÿ: entered promiscuous mode [ 2066.517224][T30737] 8021q: adding VLAN 0 to HW filter on device team0 [ 2066.519304][T30737] batman_adv: batadv0: Interface activated: team0 [ 2066.521278][T30737] batman_adv: batadv0: Interface deactivated: team0 [ 2066.523130][T30737] batman_adv: batadv0: Removing interface: team0 [ 2066.529654][T30737] bridge0: port 3(team0) entered blocking state [ 2066.531647][T30737] bridge0: port 3(team0) entered disabled state [ 2066.533730][T30737] team0: entered allmulticast mode [ 2066.535695][T30737] mac80211_hwsim hwsim35 ÿÿÿÿÿÿ: entered allmulticast mode [ 2066.562307][T30737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30737 comm=syz.0.5847 [ 2067.071438][T30750] (syz.0.5849,30750,3):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 2067.086393][T30750] overlayfs: failed to decode file handle (len=2, type=251, flags=0, err=-22) [ 2067.204713][T30757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5850'. [ 2067.218886][T30757] Invalid ELF header magic: != ELF [ 2068.668485][T30771] syzkaller1: entered promiscuous mode [ 2068.671135][T30771] syzkaller1: entered allmulticast mode [ 2070.141104][T30789] 9pnet: Could not find request transport: fd184467440737095516150000000000000000000000000000000000000000000010 [ 2070.984611][T30799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=30799 comm=syz.2.5859 [ 2070.987875][T30799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=30799 comm=syz.2.5859 [ 2071.003288][T30799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=30799 comm=syz.2.5859 [ 2071.011011][T30799] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5859'. [ 2071.020759][T30799] program syz.2.5859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2071.131110][T30801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5860'. [ 2071.137602][T30801] Invalid ELF header magic: != ELF [ 2071.353493][T30806] syzkaller1: entered promiscuous mode [ 2071.355147][T30806] syzkaller1: entered allmulticast mode [ 2071.838850][T30810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5864'. [ 2072.237799][T30815] netlink: 'syz.0.5865': attribute type 10 has an invalid length. [ 2073.391443][ T39] audit: type=1400 audit(1727139846.543:16458): avc: denied { write } for pid=30831 comm="syz.1.5869" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 2074.122450][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2074.281486][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 2074.291566][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2074.293971][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.296678][ T9] usb 5-1: Product: syz [ 2074.297832][ T9] usb 5-1: Manufacturer: syz [ 2074.299432][ T9] usb 5-1: SerialNumber: syz [ 2074.321475][ T9] usb 5-1: config 0 descriptor?? [ 2074.553365][T30847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=30847 comm=syz.1.5873 [ 2074.560984][T30847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=30847 comm=syz.1.5873 [ 2074.570924][T30847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=30847 comm=syz.1.5873 [ 2074.578810][T30847] netlink: 300 bytes leftover after parsing attributes in process `syz.1.5873'. [ 2074.591537][T30847] program syz.1.5873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2074.743367][ T9] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2075.293362][T30854] netlink: 'syz.3.5876': attribute type 8 has an invalid length. [ 2075.295865][T30854] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.5876'. [ 2075.316851][ T39] audit: type=1326 audit(1727139848.473:16459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30853 comm="syz.3.5876" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x0 [ 2075.524763][T30870] netlink: 'syz.1.5877': attribute type 2 has an invalid length. [ 2075.531044][T30870] netlink: 'syz.1.5877': attribute type 11 has an invalid length. [ 2075.536383][T30870] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5877'. [ 2076.310078][T30874] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 2076.342616][ T9] usb write operation failed. (-71) [ 2076.355153][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2076.358422][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 2076.360738][ T9] usb 5-1: media controller created [ 2076.369493][ T9] usb read operation failed. (-71) [ 2076.385192][ T9] usb write operation failed. (-71) [ 2076.397750][ T9] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2076.405184][ T9] usb 5-1: USB disconnect, device number 51 [ 2076.607595][T30880] syzkaller1: entered promiscuous mode [ 2076.610390][T30880] syzkaller1: entered allmulticast mode [ 2078.315276][T30903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5887'. [ 2078.328388][T30903] nbd: must specify a device to reconfigure [ 2079.404679][ T39] audit: type=1804 audit(1727139852.563:16460): pid=30914 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.5890" name="/newroot/156/bus/bus" dev="overlay" ino=876 res=1 errno=0 [ 2079.429118][T30914] Invalid ELF header magic: != ELF [ 2079.577825][T30920] (syz.3.5893,30920,2):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 2079.597557][T30920] overlayfs: failed to decode file handle (len=2, type=251, flags=0, err=-22) [ 2082.053707][T30941] binder: 30940:30941 ioctl c0306201 0 returned -14 [ 2082.703085][T30953] syzkaller1: entered promiscuous mode [ 2082.704621][T30953] syzkaller1: entered allmulticast mode [ 2083.451670][T30962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2085.297558][T30982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=30982 comm=syz.3.5909 [ 2085.331501][T30982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=30982 comm=syz.3.5909 [ 2085.335791][T30982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=30982 comm=syz.3.5909 [ 2085.356708][T30982] netlink: 300 bytes leftover after parsing attributes in process `syz.3.5909'. [ 2085.369909][T30982] program syz.3.5909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2086.445996][T30988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5910'. [ 2088.555327][T31017] netlink: 'syz.2.5919': attribute type 10 has an invalid length. [ 2088.766064][T31013] syzkaller1: entered promiscuous mode [ 2088.767516][T31013] syzkaller1: entered allmulticast mode [ 2090.681344][ T39] audit: type=1400 audit(1727139863.843:16461): avc: denied { map } for pid=31042 comm="syz.2.5923" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2090.692310][ T39] audit: type=1400 audit(1727139863.843:16462): avc: denied { execute } for pid=31042 comm="syz.2.5923" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2091.418141][T31054] 9pnet: Could not find request transport: fd184467440737095516150000000000000000000000000000000000000000000010 [ 2092.504707][T31073] input: syz0 as /devices/virtual/input/input115 [ 2093.415903][T31084] syzkaller1: entered promiscuous mode [ 2093.417500][T31084] syzkaller1: entered allmulticast mode [ 2095.566205][T31108] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2095.933715][T31120] syzkaller1: entered promiscuous mode [ 2095.935499][T31120] syzkaller1: entered allmulticast mode [ 2096.873437][T31134] syzkaller1: entered promiscuous mode [ 2096.875830][T31134] syzkaller1: entered allmulticast mode [ 2097.155464][ T39] audit: type=1326 audit(1727139870.313:16463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31140 comm="syz.2.5946" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccf6b7def9 code=0x0 [ 2097.183565][T31142] syzkaller0: renamed from bridge_slave_1 (while UP) [ 2097.297881][T31144] netlink: 'syz.2.5946': attribute type 8 has an invalid length. [ 2097.308493][T31144] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.5946'. [ 2098.206201][T31153] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5949'. [ 2098.238716][T31153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2098.785802][ T39] audit: type=1400 audit(1727139871.943:16464): avc: denied { append } for pid=31158 comm="syz.1.5951" name="event0" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2100.666940][T31183] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.5956'. [ 2101.357383][T31193] Invalid ELF header magic: != ELF [ 2102.336665][T31122] IPVS: starting estimator thread 0... [ 2102.430932][T31205] IPVS: using max 35 ests per chain, 84000 per kthread [ 2103.503858][T31225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2103.573825][ T39] audit: type=1326 audit(1727139876.733:16465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31222 comm="syz.3.5967" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x0 [ 2103.640962][T26438] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2103.821008][T26438] usb 6-1: Using ep0 maxpacket: 8 [ 2103.824579][T26438] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2103.826861][T26438] usb 6-1: config 179 has no interface number 0 [ 2103.829596][T26438] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2103.832839][T26438] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2103.835762][T26438] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2103.838690][T26438] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2103.841570][T26438] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2103.845222][T26438] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2103.847594][T26438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.851031][T31220] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2103.856002][T26438] xpad 6-1:179.65: probe with driver xpad failed with error -5 [ 2104.059250][T26438] usb 6-1: USB disconnect, device number 29 [ 2104.222261][T31229] netlink: 'syz.0.5968': attribute type 5 has an invalid length. [ 2104.224377][T31229] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5968'. [ 2104.735636][T31236] syzkaller1: entered promiscuous mode [ 2104.738268][T31236] syzkaller1: entered allmulticast mode [ 2106.585536][T31241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2108.031794][T31264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2109.739736][ T5334] Bluetooth: hci0: command tx timeout [ 2109.810952][T23721] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 2110.310583][ T39] audit: type=1326 audit(1727139883.463:16466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31280 comm="syz.1.5982" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f7def9 code=0x0 [ 2111.820892][ T5334] Bluetooth: hci0: command 0x206c tx timeout [ 2111.822533][T23721] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 2112.032613][T31302] netlink: 952 bytes leftover after parsing attributes in process `syz.0.5986'. [ 2112.035635][T31302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5986'. [ 2112.583049][T31308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31308 comm=syz.1.5988 [ 2112.587455][T31308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31308 comm=syz.1.5988 [ 2112.590758][T31308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31308 comm=syz.1.5988 [ 2112.595921][T31308] netlink: 300 bytes leftover after parsing attributes in process `syz.1.5988'. [ 2112.599963][T31308] program syz.1.5988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2112.663312][T31311] syzkaller1: entered promiscuous mode [ 2112.664961][T31311] syzkaller1: entered allmulticast mode [ 2113.124784][T31310] wlan0 speed is unknown, defaulting to 1000 [ 2113.380462][T31321] netlink: 'syz.2.5991': attribute type 10 has an invalid length. [ 2113.391413][T31321] team0: left promiscuous mode [ 2113.392878][T31321] team_slave_1: left promiscuous mode [ 2113.402390][T31321] bridge0: left promiscuous mode [ 2113.416575][T31321] batman_adv: batadv0: Adding interface: team0 [ 2113.418422][T31321] batman_adv: batadv0: The MTU of interface team0 is too small (1279) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2113.425243][T31321] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2113.502121][T31321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31321 comm=syz.2.5991 [ 2113.581520][T31322] netlink: 'syz.2.5991': attribute type 10 has an invalid length. [ 2113.588339][T31322] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5991'. [ 2113.594440][T31322] team0: entered promiscuous mode [ 2113.596169][T31322] team_slave_1: entered promiscuous mode [ 2113.598411][T31322] bridge0: entered promiscuous mode [ 2113.602870][T31322] 8021q: adding VLAN 0 to HW filter on device team0 [ 2113.606334][T31322] batman_adv: batadv0: Interface activated: team0 [ 2113.608549][T31322] batman_adv: batadv0: Interface deactivated: team0 [ 2113.610490][T31322] batman_adv: batadv0: Removing interface: team0 [ 2113.618392][T31322] bridge0: port 4(team0) entered blocking state [ 2113.620502][T31322] bridge0: port 4(team0) entered disabled state [ 2113.623943][T31322] team0: entered allmulticast mode [ 2113.625569][T31322] team_slave_1: entered allmulticast mode [ 2113.641214][T31322] team0: left allmulticast mode [ 2113.644899][T31322] team_slave_1: left allmulticast mode [ 2113.911238][ T5334] Bluetooth: hci0: command 0x206c tx timeout [ 2114.735334][T31336] syzkaller0: renamed from bridge_slave_1 (while UP) [ 2114.863896][T31342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31342 comm=syz.0.5995 [ 2114.869049][T31342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31342 comm=syz.0.5995 [ 2114.901919][T31342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31342 comm=syz.0.5995 [ 2114.938960][T31342] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5995'. [ 2114.957242][T31344] program syz.0.5995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2116.771122][ T39] audit: type=1400 audit(1727139889.913:16467): avc: denied { write } for pid=31357 comm="syz.2.6001" path="socket:[129780]" dev="sockfs" ino=129780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2118.044589][T31366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2118.046212][T31366] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2118.192732][ T39] audit: type=1326 audit(1727139891.353:16468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31372 comm="syz.0.6004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x7ffc0000 [ 2118.214140][ T39] audit: type=1326 audit(1727139891.353:16469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31372 comm="syz.0.6004" exe="/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fb70df7def9 code=0x7ffc0000 [ 2118.236453][ T39] audit: type=1326 audit(1727139891.353:16470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31372 comm="syz.0.6004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x7ffc0000 [ 2118.290944][ T39] audit: type=1326 audit(1727139891.353:16471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31372 comm="syz.0.6004" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb70df7def9 code=0x7ffc0000 [ 2118.329047][ T39] audit: type=1326 audit(1727139891.353:16472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31372 comm="syz.0.6004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x7ffc0000 [ 2118.341871][ T39] audit: type=1326 audit(1727139891.353:16473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31372 comm="syz.0.6004" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb70df7def9 code=0x7ffc0000 [ 2118.349596][ T39] audit: type=1326 audit(1727139891.353:16474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31372 comm="syz.0.6004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x7ffc0000 [ 2118.367976][ T39] audit: type=1326 audit(1727139891.353:16475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31372 comm="syz.0.6004" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb70df7def9 code=0x7ffc0000 [ 2118.376953][ T39] audit: type=1326 audit(1727139891.383:16476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31372 comm="syz.0.6004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x7ffc0000 [ 2118.838955][T31387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31387 comm=syz.3.6007 [ 2118.860898][T31387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31387 comm=syz.3.6007 [ 2118.864197][T31387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31387 comm=syz.3.6007 [ 2118.867470][T31387] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6007'. [ 2118.893298][T31387] program syz.3.6007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2119.009580][T31392] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0 [ 2119.859206][T31398] futex_wake_op: syz.2.6010 tries to shift op by 32; fix this program [ 2119.995977][T31403] syzkaller0: renamed from bridge_slave_1 (while UP) [ 2120.009772][T31402] netlink: 'syz.3.6011': attribute type 5 has an invalid length. [ 2120.012257][T31402] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6011'. [ 2120.082466][T31404] binder: 31395:31404 ioctl c0306201 200011c0 returned -14 [ 2122.196917][T31424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31424 comm=syz.0.6016 [ 2122.200127][T31424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31424 comm=syz.0.6016 [ 2122.203756][T31424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31424 comm=syz.0.6016 [ 2122.209528][T31424] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6016'. [ 2122.213410][T31424] program syz.0.6016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2122.269959][T31426] tipc: Started in network mode [ 2122.273333][T31426] tipc: Node identity 4, cluster identity 4711 [ 2122.275026][T31426] tipc: Node number set to 4 [ 2122.335873][T31427] netlink: 'syz.0.6017': attribute type 5 has an invalid length. [ 2123.367308][T31442] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2123.386484][T31446] netlink: 'syz.3.6022': attribute type 10 has an invalid length. [ 2123.393929][T31446] bridge0: port 3(team0) entered disabled state [ 2123.398689][T31446] team0: left allmulticast mode [ 2123.400158][T31446] team_slave_1: left allmulticast mode [ 2123.402553][T31446] team0: left promiscuous mode [ 2123.404507][T31446] team_slave_1: left promiscuous mode [ 2123.407026][T31446] bridge0: port 3(team0) entered disabled state [ 2123.414992][T31446] batman_adv: batadv0: Adding interface: team0 [ 2123.416771][T31446] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2123.423885][T31446] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2123.439993][T31446] netlink: 'syz.3.6022': attribute type 10 has an invalid length. [ 2123.442626][T31446] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6022'. [ 2123.445413][T31446] team0: entered promiscuous mode [ 2123.446825][T31446] team_slave_1: entered promiscuous mode [ 2123.450053][T31446] 8021q: adding VLAN 0 to HW filter on device team0 [ 2123.452252][T31446] batman_adv: batadv0: Interface activated: team0 [ 2123.454187][T31446] batman_adv: batadv0: Interface deactivated: team0 [ 2123.456122][T31446] batman_adv: batadv0: Removing interface: team0 [ 2123.465666][T31446] bridge0: port 3(team0) entered blocking state [ 2123.475180][T31446] bridge0: port 3(team0) entered disabled state [ 2123.477186][T31446] team0: entered allmulticast mode [ 2123.478614][T31446] team_slave_1: entered allmulticast mode [ 2123.481304][T31446] bridge0: port 3(team0) entered blocking state [ 2123.483109][T31446] bridge0: port 3(team0) entered forwarding state [ 2123.509299][T31446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31446 comm=syz.3.6022 [ 2124.893563][T31455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31455 comm=syz.2.6025 [ 2124.897926][T31455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31455 comm=syz.2.6025 [ 2124.904043][T31455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31455 comm=syz.2.6025 [ 2124.910375][T31455] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6025'. [ 2124.921816][T31455] program syz.2.6025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2125.187028][T31464] syzkaller1: entered promiscuous mode [ 2125.188734][T31464] syzkaller1: entered allmulticast mode [ 2126.663377][T31479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6032'. [ 2126.666142][T31479] netlink: 'syz.0.6032': attribute type 1 has an invalid length. [ 2127.594804][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 2127.594815][ T39] audit: type=1326 audit(1727139900.753:16481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31493 comm="syz.3.6037" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x0 [ 2127.631135][T24474] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2127.708521][T31497] fuse: Bad value for 'fd' [ 2127.752381][T31499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31499 comm=syz.0.6038 [ 2127.761131][T31499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31499 comm=syz.0.6038 [ 2127.764343][T31499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31499 comm=syz.0.6038 [ 2127.767592][T31499] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6038'. [ 2127.791553][T31499] program syz.0.6038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2127.794284][T24474] usb 6-1: config 0 has an invalid interface number: 76 but max is 3 [ 2127.796373][T24474] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 2127.798586][T24474] usb 6-1: config 0 has an invalid interface number: 12 but max is 3 [ 2127.800671][T24474] usb 6-1: config 0 has an invalid interface number: 63 but max is 3 [ 2127.802856][T24474] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2127.805437][T24474] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 2127.807722][T24474] usb 6-1: config 0 has no interface number 0 [ 2127.809306][T24474] usb 6-1: config 0 has no interface number 1 [ 2127.821559][T24474] usb 6-1: config 0 has no interface number 2 [ 2127.823234][T24474] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 2127.829396][T24474] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 2127.835718][T24474] usb 6-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2127.840710][T24474] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2127.847100][T24474] usb 6-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 2127.853885][T24474] usb 6-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 2127.859942][T24474] usb 6-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 2127.866043][T24474] usb 6-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 2127.871157][T24474] usb 6-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 2127.877337][T24474] usb 6-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 2127.884174][T24474] usb 6-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2127.891955][T24474] usb 6-1: config 0 interface 76 has no altsetting 0 [ 2127.894816][T24474] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2127.901940][T24474] usb 6-1: Dual-Role OTG device on HNP port [ 2127.905948][T24474] usb 6-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 2127.910570][T24474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.915057][T24474] usb 6-1: Product: syz [ 2127.917310][T24474] usb 6-1: Manufacturer: syz [ 2127.919659][T24474] usb 6-1: SerialNumber: syz [ 2127.932211][T24474] usb 6-1: config 0 descriptor?? [ 2127.940351][T24474] cp210x 6-1:0.76: cp210x converter detected [ 2128.149814][T31490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2128.153561][T31490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2128.163163][T31490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2128.170940][T31490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2128.392112][T24474] cp210x 6-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 2128.400896][T24474] cp210x 6-1:0.76: querying part number failed [ 2128.412068][T24474] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2128.422082][T24474] cp210x 6-1:0.12: cp210x converter detected [ 2128.430913][T24474] cp210x 6-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 2128.433361][T24474] cp210x 6-1:0.12: querying part number failed [ 2128.439676][T24474] usb 6-1: cp210x converter now attached to ttyUSB1 [ 2128.461344][T24474] cp210x 6-1:0.63: cp210x converter detected [ 2128.463335][T24474] cp210x 6-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 2128.465583][T24474] cp210x 6-1:0.63: querying part number failed [ 2128.470954][T24474] usb 6-1: cp210x converter now attached to ttyUSB2 [ 2128.475429][T24474] usb 6-1: USB disconnect, device number 30 [ 2128.486886][T24474] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2128.489128][T24474] cp210x 6-1:0.76: device disconnected [ 2128.515409][T24474] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 2128.517677][T24474] cp210x 6-1:0.12: device disconnected [ 2128.531324][T24474] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 2128.534200][T24474] cp210x 6-1:0.63: device disconnected [ 2128.611452][T31506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2128.751094][T26438] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2128.918203][T26438] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2128.925809][T26438] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2128.943348][T26438] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2128.946557][T26438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.961870][T31502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2128.975179][T26438] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2129.636346][T31122] usb 5-1: USB disconnect, device number 52 [ 2130.008491][T26438] kernel read not supported for file inotify (pid: 26438 comm: kworker/2:4) [ 2130.178085][T31524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31524 comm=syz.2.6044 [ 2130.187981][T31524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31524 comm=syz.2.6044 [ 2130.201414][T31524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31524 comm=syz.2.6044 [ 2130.204833][T31524] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6044'. [ 2130.212430][T31524] program syz.2.6044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2130.649307][T31530] input: syz0 as /devices/virtual/input/input117 [ 2131.190680][ T39] audit: type=1326 audit(1727139904.343:16482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31531 comm="syz.2.6048" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccf6b7def9 code=0x0 [ 2131.320508][T31533] wlan0 speed is unknown, defaulting to 1000 [ 2132.208207][T31545] syzkaller1: entered promiscuous mode [ 2132.209733][T31545] syzkaller1: entered allmulticast mode [ 2133.057260][T31551] xt_CT: No such helper "pptp" [ 2133.073524][T31555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31555 comm=syz.2.6054 [ 2133.076857][T31555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31555 comm=syz.2.6054 [ 2133.080100][T31555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31555 comm=syz.2.6054 [ 2133.105435][T31555] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6054'. [ 2133.114570][T31555] program syz.2.6054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2135.091205][T31589] syzkaller1: entered promiscuous mode [ 2135.093955][T31589] syzkaller1: entered allmulticast mode [ 2135.107229][T31583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2135.518971][T31596] syzkaller1: entered promiscuous mode [ 2135.522435][T31596] syzkaller1: entered allmulticast mode [ 2135.825768][T31599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31599 comm=syz.3.6063 [ 2135.829302][T31599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31599 comm=syz.3.6063 [ 2135.834536][T31599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31599 comm=syz.3.6063 [ 2135.838057][T31599] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6063'. [ 2135.851866][T31599] program syz.3.6063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2136.253568][T31605] input: syz0 as /devices/virtual/input/input118 [ 2137.402953][T31612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6067'. [ 2137.405745][T31612] netlink: 'syz.1.6067': attribute type 1 has an invalid length. [ 2139.242373][T31645] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6075'. [ 2139.252115][T31645] Invalid ELF header magic: != ELF [ 2140.115191][T31658] input: syz0 as /devices/virtual/input/input120 [ 2140.280916][T31663] €Â: renamed from bridge_slave_0 (while UP) [ 2141.277503][T31676] wlan0 speed is unknown, defaulting to 1000 [ 2141.939666][T31687] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6082'. [ 2142.625077][T31694] syzkaller1: entered promiscuous mode [ 2142.626888][T31694] syzkaller1: entered allmulticast mode [ 2143.707402][T31705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6096'. [ 2143.779322][T31708] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 2143.783312][T31709] input: syz0 as /devices/virtual/input/input122 [ 2143.786263][T31708] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 2145.448973][ T39] audit: type=1326 audit(1727139918.603:16483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31733 comm="syz.3.6095" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x0 [ 2145.532942][T31736] wlan0 speed is unknown, defaulting to 1000 [ 2145.576111][T31741] syzkaller1: entered promiscuous mode [ 2145.578064][T31741] syzkaller1: entered allmulticast mode [ 2147.223840][T31749] sp0: Synchronizing with TNC [ 2149.133867][T29344] bond2: (slave ip6gretap1): link status up again after 0 ms [ 2149.149708][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2149.392591][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2149.503858][T31782] syzkaller1: entered promiscuous mode [ 2149.505623][T31782] syzkaller1: entered allmulticast mode [ 2149.540966][ T1107] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2149.661624][ T1107] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2149.774751][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2149.881400][ T1107] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2149.924184][T31786] vimc link validate: Sensor A:src:16x16 (0x30314142, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2149.950177][T31780] Cannot find del_set index 4 as target [ 2150.000963][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2150.011154][ T39] audit: type=1400 audit(1727139923.173:16484): avc: denied { read } for pid=31778 comm="syz.1.6109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2150.110900][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2150.123635][T31795] wlan0 speed is unknown, defaulting to 1000 [ 2150.231013][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2150.435838][T31805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31805 comm=syz.2.6112 [ 2150.450867][T31805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31805 comm=syz.2.6112 [ 2150.461033][T31805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31805 comm=syz.2.6112 [ 2150.464370][T31805] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6112'. [ 2150.477480][T31805] program syz.2.6112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2152.066631][T31834] syzkaller1: entered promiscuous mode [ 2152.068247][T31834] syzkaller1: entered allmulticast mode [ 2152.089938][ T39] audit: type=1400 audit(1727139925.243:16485): avc: denied { setopt } for pid=31833 comm="syz.1.6120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2152.742956][T31845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31845 comm=syz.3.6122 [ 2152.759536][T31845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31845 comm=syz.3.6122 [ 2152.769330][T31845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31845 comm=syz.3.6122 [ 2152.822942][T31845] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6122'. [ 2152.825961][T31845] program syz.3.6122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2152.849261][T31848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6123'. [ 2152.857703][T31848] geneve2: entered promiscuous mode [ 2152.859049][T31848] geneve2: entered allmulticast mode [ 2152.944672][ T39] audit: type=1400 audit(1727139926.103:16486): avc: denied { ioctl } for pid=31847 comm="syz.2.6123" path="socket:[131685]" dev="sockfs" ino=131685 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2153.977824][T31873] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6130'. [ 2154.001835][T31871] input: syz1 as /devices/virtual/input/input124 [ 2154.231154][ T1107] net_ratelimit: 32 callbacks suppressed [ 2154.231166][ T1107] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2154.351489][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2154.472155][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2154.581184][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2154.692872][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2154.813377][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2154.921417][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2154.928226][T31885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31885 comm=syz.0.6133 [ 2154.933550][T31885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31885 comm=syz.0.6133 [ 2154.937081][T31885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31885 comm=syz.0.6133 [ 2154.941630][T31885] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6133'. [ 2154.944792][T31885] program syz.0.6133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2155.041680][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2155.163328][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2155.271117][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2156.809484][T31900] vimc link validate: Sensor A:src:16x16 (0x30314142, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2156.858344][ T39] audit: type=1400 audit(1727139930.013:16487): avc: denied { create } for pid=31905 comm="syz.3.6138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2156.870149][ T39] audit: type=1400 audit(1727139930.023:16488): avc: denied { bind } for pid=31905 comm="syz.3.6138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2156.985681][ T39] audit: type=1400 audit(1727139930.143:16489): avc: denied { nlmsg_read } for pid=31907 comm="syz.2.6137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2156.986531][T31911] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6137'. [ 2156.999779][T31910] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2157.050043][T31915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6137'. [ 2157.084064][T31914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31914 comm=syz.0.6139 [ 2157.109276][T31914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31914 comm=syz.0.6139 [ 2157.141754][T31916] program syz.0.6139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2157.144315][T31914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31914 comm=syz.0.6139 [ 2157.171877][T31914] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6139'. [ 2157.500803][ T39] audit: type=1400 audit(1727139930.653:16490): avc: denied { write } for pid=31920 comm="syz.0.6141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 2158.937969][T31937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31937 comm=syz.0.6145 [ 2159.280836][T25549] net_ratelimit: 32 callbacks suppressed [ 2159.280849][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2159.404368][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2159.511348][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2159.620934][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2159.744168][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2159.850933][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2159.970826][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2160.090935][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2160.201342][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2160.311405][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2160.426497][T31952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31952 comm=syz.3.6150 [ 2160.429823][T31952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=31952 comm=syz.3.6150 [ 2160.437332][T31952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=31952 comm=syz.3.6150 [ 2160.440944][T31952] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6150'. [ 2160.446967][T31952] program syz.3.6150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2160.502760][T31954] syzkaller1: entered promiscuous mode [ 2160.504811][T31954] syzkaller1: entered allmulticast mode [ 2161.346593][T31961] /dev/nullb0: Can't lookup blockdev [ 2161.573282][T31961] /dev/sr0: Can't open blockdev [ 2161.582358][ T39] audit: type=1326 audit(1727139934.743:16491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31963 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x7fc00000 [ 2161.620344][ T39] audit: type=1326 audit(1727139934.773:16492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31963 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fdaf7b7def9 code=0x7fc00000 [ 2161.641147][ T39] audit: type=1400 audit(1727139934.783:16493): avc: denied { ioctl } for pid=31962 comm="syz.1.6153" path="socket:[133035]" dev="sockfs" ino=133035 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2161.661973][ T39] audit: type=1326 audit(1727139934.823:16494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31970 comm="syz.0.6155" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x0 [ 2162.311748][ T39] audit: type=1326 audit(1727139935.463:16495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31963 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x7fc00000 [ 2164.258735][T32006] syzkaller1: entered promiscuous mode [ 2164.260361][T32006] syzkaller1: entered allmulticast mode [ 2164.381326][ T11] net_ratelimit: 31 callbacks suppressed [ 2164.381338][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2164.520990][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2164.631163][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2164.737221][T32015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6165'. [ 2164.761553][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2164.870940][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2165.001136][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2165.111260][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2165.201307][T32018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6166'. [ 2165.219555][T32018] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=32018 comm=syz.1.6166 [ 2165.301954][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2165.420866][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2165.456928][ T39] audit: type=1326 audit(1727139938.613:16496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32019 comm="syz.1.6167" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f7def9 code=0x0 [ 2165.532229][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2165.731266][T32024] mkiss: ax0: crc mode is auto. [ 2165.770901][T32024] mkiss: ax1: crc mode is auto. [ 2166.352897][T32030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=32030 comm=syz.3.6170 [ 2166.356193][T32030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=32030 comm=syz.3.6170 [ 2166.362455][T32030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=32030 comm=syz.3.6170 [ 2166.365735][T32030] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6170'. [ 2166.381482][T32030] program syz.3.6170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2166.621609][T32041] tipc: Enabling of bearer rejected, failed to enable media [ 2167.845741][ T39] audit: type=1326 audit(1727139941.003:16497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32053 comm="syz.1.6177" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f7def9 code=0x0 [ 2169.461200][T31878] net_ratelimit: 36 callbacks suppressed [ 2169.461213][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2169.574182][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2169.681321][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2169.791267][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2169.913380][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2170.020853][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2170.131877][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2170.241158][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2170.346896][T32088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6182'. [ 2170.351004][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2170.360472][T32088] netlink: 'syz.2.6182': attribute type 1 has an invalid length. [ 2170.363013][T32088] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6182'. [ 2170.514196][T32090] netlink: 'syz.2.6182': attribute type 1 has an invalid length. [ 2170.516204][T32090] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6182'. [ 2170.518901][T32090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6182'. [ 2170.531738][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2171.169241][ T39] audit: type=1400 audit(1727139944.323:16498): avc: denied { bind } for pid=32100 comm="syz.1.6185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2171.199212][T32101] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2171.579940][T32095] Process accounting resumed [ 2171.623289][T32109] ip6t_srh: unknown srh invflags 7863 [ 2172.388913][T32122] syzkaller1: entered promiscuous mode [ 2172.390632][T32122] syzkaller1: entered allmulticast mode [ 2173.640581][T32128] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 2173.761935][T32137] syz.2.6194: attempt to access beyond end of device [ 2173.761935][T32137] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 2173.780871][T32137] MINIX-fs: unable to read superblock [ 2173.900523][T32138] pimreg: entered allmulticast mode [ 2174.381557][T32145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=32145 comm=syz.1.6196 [ 2174.384994][T32145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=32145 comm=syz.1.6196 [ 2174.388360][T32145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=32145 comm=syz.1.6196 [ 2174.400811][T32145] netlink: 300 bytes leftover after parsing attributes in process `syz.1.6196'. [ 2174.420914][T32145] program syz.1.6196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2174.490873][ T12] net_ratelimit: 31 callbacks suppressed [ 2174.491450][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2174.601733][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2174.722799][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2174.794722][ T39] audit: type=1326 audit(1727139947.913:16499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32149 comm="syz.2.6198" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccf6b7def9 code=0x0 [ 2174.841005][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2174.950876][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2175.071103][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2175.181090][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2175.321187][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2175.442365][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2175.491351][T32162] syzkaller1: entered promiscuous mode [ 2175.492922][T32162] syzkaller1: entered allmulticast mode [ 2175.520202][ T39] audit: type=1400 audit(1727139948.673:16500): avc: denied { bind } for pid=32153 comm="syz.3.6199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2175.552440][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2176.818109][T32178] mkiss: ax0: crc mode is auto. [ 2177.849412][ T39] audit: type=1400 audit(1727139951.003:16501): avc: denied { create } for pid=32189 comm="syz.3.6207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2178.825241][ T39] audit: type=1326 audit(1727139951.983:16502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32202 comm="syz.3.6211" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x0 [ 2179.581689][ T12] net_ratelimit: 29 callbacks suppressed [ 2179.581701][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2179.701308][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2179.751574][T32219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=32219 comm=syz.0.6214 [ 2179.754831][T32219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=32219 comm=syz.0.6214 [ 2179.758246][T32219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=32219 comm=syz.0.6214 [ 2179.762403][T32219] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6214'. [ 2179.777463][T32219] program syz.0.6214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2179.821329][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2180.097783][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2180.211455][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2180.263961][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x1 [ 2180.265926][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.267837][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.269837][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.274573][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.278657][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x2 [ 2180.280586][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.286729][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.288624][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.290437][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.307898][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.309892][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.312956][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.314963][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.316858][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.318823][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.323616][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.325679][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.327654][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.329569][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.332412][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.334440][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.336314][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.338253][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.340163][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.342525][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2180.342826][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.347400][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.349328][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.352920][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.354891][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.356865][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.358862][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.361187][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.363126][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.365058][T26152] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 2180.371045][T26152] hid-generic 0000:0000:0000.0023: hidraw1: HID v0.00 Device [syz0] on syz0 [ 2180.451014][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2180.562216][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2180.589101][T32235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6218'. [ 2180.671626][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2180.808074][T32235] hub 9-0:1.0: USB hub found [ 2180.810980][T32235] hub 9-0:1.0: 1 port detected [ 2180.821078][T26152] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2180.951107][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2180.970788][T26152] usb 6-1: Using ep0 maxpacket: 16 [ 2180.974543][T26152] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 2180.976993][T26152] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 2180.979545][T26152] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 2180.992347][T26152] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2180.997380][T26152] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2181.002520][T26152] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 2181.006159][T26152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.186183][T32224] Process accounting resumed [ 2181.249497][T32240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=32240 comm=syz.3.6220 [ 2181.268381][T32240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=32240 comm=syz.3.6220 [ 2181.275083][T32240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=32240 comm=syz.3.6220 [ 2181.278307][T32240] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6220'. [ 2181.300818][T32240] program syz.3.6220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2181.311846][T26152] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 2181.722973][T32249] input: syz1 as /devices/virtual/input/input125 [ 2182.093152][T24735] usb 6-1: USB disconnect, device number 31 [ 2182.215152][ T39] audit: type=1326 audit(1727139955.373:16503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.2.6224" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccf6b7def9 code=0x0 [ 2182.329154][T32258] wlan0 speed is unknown, defaulting to 1000 [ 2183.208201][T32274] syzkaller1: entered promiscuous mode [ 2183.209799][T32274] syzkaller1: entered allmulticast mode [ 2184.611435][T31878] net_ratelimit: 24 callbacks suppressed [ 2184.611448][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2184.721054][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2184.861287][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2184.980847][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2185.103189][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2185.242143][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2185.313544][T32301] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6232'. [ 2185.361278][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2185.471656][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2185.591074][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2185.701119][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2186.012132][T32304] ªªªªª»: renamed from hsr0 (while UP) [ 2186.741779][T32315] input: syz1 as /devices/virtual/input/input126 [ 2187.084436][T32321] syzkaller1: entered promiscuous mode [ 2187.085980][T32321] syzkaller1: entered allmulticast mode [ 2187.316291][T32324] input: syz0 as /devices/virtual/input/input127 [ 2188.136472][T32328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=32328 comm=syz.3.6241 [ 2188.140178][T32328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=32328 comm=syz.3.6241 [ 2188.146203][T32328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=32328 comm=syz.3.6241 [ 2188.150257][T32328] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6241'. [ 2188.187530][T32333] program syz.3.6241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2188.191632][T32332] syzkaller1: entered promiscuous mode [ 2188.193095][T32332] syzkaller1: entered allmulticast mode [ 2188.891304][T32344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6245'. [ 2188.897069][T32344] Invalid ELF header magic: != ELF [ 2191.097550][T31878] net_ratelimit: 26 callbacks suppressed [ 2191.097567][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2191.485530][T32352] wlan0 speed is unknown, defaulting to 1000 [ 2191.731574][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2191.841103][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2191.951560][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2192.062047][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2192.171354][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2192.281598][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2192.400286][T32364] netlink: 'syz.0.6249': attribute type 10 has an invalid length. [ 2192.406381][T32364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6249'. [ 2192.438498][T32364] geneve0: entered promiscuous mode [ 2192.446925][T32364] geneve0: entered allmulticast mode [ 2192.448662][T32364] team0: Port device geneve0 added [ 2192.522140][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2192.537517][ T39] audit: type=1326 audit(1727139965.693:16504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32363 comm="syz.0.6249" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x0 [ 2192.644135][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2192.760851][T32376] mkiss: ax0: crc mode is auto. [ 2192.771182][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2193.381682][T32384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=32384 comm=syz.2.6254 [ 2193.395744][T32384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=32384 comm=syz.2.6254 [ 2193.406297][T32384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=32384 comm=syz.2.6254 [ 2193.421969][T32384] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6254'. [ 2193.431893][T32384] program syz.2.6254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2194.747848][T32393] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6256'. [ 2196.131381][T25549] net_ratelimit: 26 callbacks suppressed [ 2196.131394][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2196.251293][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2196.370844][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2196.481291][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2196.591346][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2196.710917][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2196.830867][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2196.950855][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2197.070820][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2197.190887][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2197.348054][T32422] wlan0 speed is unknown, defaulting to 1000 [ 2197.739015][T32431] syzkaller1: entered promiscuous mode [ 2197.740806][T32431] syzkaller1: entered allmulticast mode [ 2200.490310][T32467] netlink: 'syz.2.6279': attribute type 4 has an invalid length. [ 2200.523168][T32468] netlink: 'syz.2.6279': attribute type 4 has an invalid length. [ 2201.142570][T31878] net_ratelimit: 26 callbacks suppressed [ 2201.142588][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2201.261236][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2201.372136][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2201.423107][T32479] syzkaller1: entered promiscuous mode [ 2201.424788][T32479] syzkaller1: entered allmulticast mode [ 2201.483906][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2201.611060][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2201.730962][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2201.851086][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2201.970961][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2202.082663][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2202.209610][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2202.561670][T32486] syzkaller1: entered promiscuous mode [ 2202.563306][T32486] syzkaller1: entered allmulticast mode [ 2202.726406][ T39] audit: type=1400 audit(1727139975.883:16505): avc: denied { setattr } for pid=32487 comm="syz.2.6278" name="SCTPv6" dev="sockfs" ino=136362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2203.835678][ T39] audit: type=1400 audit(1727139976.993:16506): avc: denied { read } for pid=32496 comm="syz.3.6281" path="socket:[135741]" dev="sockfs" ino=135741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2203.899305][T32502] syzkaller1: entered promiscuous mode [ 2203.901454][T32502] syzkaller1: entered allmulticast mode [ 2204.464574][ T39] audit: type=1326 audit(1727139977.623:16507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32503 comm="syz.0.6284" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x0 [ 2204.482120][T32506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6283'. [ 2204.641175][T32507] ucma_write: process 944 (syz.1.6283) changed security contexts after opening file descriptor, this is not allowed. [ 2204.791964][ T39] audit: type=1400 audit(1727139977.953:16508): avc: denied { append } for pid=32510 comm="syz.3.6286" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 2204.856596][T32513] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6286'. [ 2205.168162][T32521] KVM: debugfs: duplicate directory 32521-4 [ 2206.068600][T32538] syzkaller1: entered promiscuous mode [ 2206.073794][T32538] syzkaller1: entered allmulticast mode [ 2206.912328][T29344] net_ratelimit: 31 callbacks suppressed [ 2206.912339][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2207.261322][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2207.263682][T32545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6292'. [ 2207.323735][T32551] syzkaller1: entered promiscuous mode [ 2207.325228][T32551] syzkaller1: entered allmulticast mode [ 2207.372308][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2207.480934][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2207.604120][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2207.725213][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2207.821979][T32557] syzkaller1: entered promiscuous mode [ 2207.823849][T32557] syzkaller1: entered allmulticast mode [ 2207.831248][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2207.950974][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2209.021651][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2209.131572][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2210.037976][T32582] wg2: entered promiscuous mode [ 2210.039394][T32582] wg2: entered allmulticast mode [ 2210.157979][T32586] input: syz0 as /devices/virtual/input/input128 [ 2210.255052][ T39] audit: type=1326 audit(1727139983.413:16509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32585 comm="syz.0.6302" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x0 [ 2210.640607][T32600] tipc: Enabling of bearer rejected, failed to enable media [ 2211.108497][T32610] syzkaller1: entered promiscuous mode [ 2211.110111][T32610] syzkaller1: entered allmulticast mode [ 2211.733489][T32617] syzkaller1: entered promiscuous mode [ 2211.735378][T32617] syzkaller1: entered allmulticast mode [ 2212.071268][ T77] net_ratelimit: 17 callbacks suppressed [ 2212.071280][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2212.180945][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2212.290798][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2212.402939][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2212.717713][T32627] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6310'. [ 2212.733758][T32626] syzkaller1: entered promiscuous mode [ 2212.737274][T32626] syzkaller1: entered allmulticast mode [ 2212.750831][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2212.861807][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2212.970955][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2213.091231][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2213.201039][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2213.811985][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2215.384878][T32658] syzkaller1: entered promiscuous mode [ 2215.386391][T32658] syzkaller1: entered allmulticast mode [ 2215.983660][T32666] vimc link validate: Sensor A:src:16x16 (0x30314142, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2216.577131][T32677] bridge0: port 3(team0) entered disabled state [ 2216.578951][T32677] bridge0: port 2(bridge_slave_1) entered disabled state [ 2216.580939][T32677] bridge0: port 1(bridge_slave_0) entered disabled state [ 2216.607066][T32677] bridge0: entered allmulticast mode [ 2217.120790][T29344] net_ratelimit: 27 callbacks suppressed [ 2217.120812][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2217.240759][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2217.360745][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2217.474315][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2217.593794][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2217.711883][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2217.831258][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2217.952896][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2218.071328][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2218.197864][T32697] syzkaller1: entered promiscuous mode [ 2218.205582][T32697] syzkaller1: entered allmulticast mode [ 2218.241702][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2218.279395][T32685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6324'. [ 2218.340111][T32701] syzkaller1: entered promiscuous mode [ 2218.341824][T32701] syzkaller1: entered allmulticast mode [ 2218.580060][T32702] syzkaller1: entered promiscuous mode [ 2218.582201][T32702] syzkaller1: entered allmulticast mode [ 2219.517426][T32712] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6330'. [ 2220.477305][ T39] audit: type=1326 audit(1727139993.633:16510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32722 comm="syz.1.6333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f7def9 code=0x7ffc0000 [ 2220.485326][ T39] audit: type=1326 audit(1727139993.643:16511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32722 comm="syz.1.6333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f7def9 code=0x7ffc0000 [ 2220.501676][ T39] audit: type=1326 audit(1727139993.653:16512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32722 comm="syz.1.6333" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5cf9f7def9 code=0x7ffc0000 [ 2220.552394][ T39] audit: type=1326 audit(1727139993.653:16513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32722 comm="syz.1.6333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f7def9 code=0x7ffc0000 [ 2220.572130][ T39] audit: type=1326 audit(1727139993.653:16514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32722 comm="syz.1.6333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f7def9 code=0x7ffc0000 [ 2220.578925][ T39] audit: type=1326 audit(1727139993.663:16515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32722 comm="syz.1.6333" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5cf9f7c9df code=0x7ffc0000 [ 2220.587157][ T39] audit: type=1326 audit(1727139993.663:16516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32722 comm="syz.1.6333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f7def9 code=0x7ffc0000 [ 2220.594022][ T39] audit: type=1326 audit(1727139993.663:16517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32722 comm="syz.1.6333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f7def9 code=0x7ffc0000 [ 2220.600491][ T39] audit: type=1326 audit(1727139993.663:16518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32722 comm="syz.1.6333" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cf9f7def9 code=0x7ffc0000 [ 2220.607088][ T39] audit: type=1326 audit(1727139993.663:16519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32722 comm="syz.1.6333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf9f7def9 code=0x7ffc0000 [ 2221.532686][ T5334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2221.540808][ T5334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2221.546615][ T5334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2221.564057][ T5334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2221.581129][ T5334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2221.583502][ T5334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2221.589363][T23721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2221.591438][T23721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2221.593371][T23721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2221.595525][T23721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2221.597518][T23721] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2221.599416][T23721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2221.675862][T32744] wlan0 speed is unknown, defaulting to 1000 [ 2222.093554][T32744] chnl_net:caif_netlink_parms(): no params data found [ 2222.453095][T32765] syzkaller1: entered promiscuous mode [ 2222.454619][T32765] syzkaller1: entered allmulticast mode [ 2222.465386][T32744] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.467575][T32744] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.481754][T32744] bridge_slave_0: entered allmulticast mode [ 2222.502507][T32744] bridge_slave_0: entered promiscuous mode [ 2222.510990][ T77] net_ratelimit: 30 callbacks suppressed [ 2222.511005][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2222.516167][T32744] bridge0: port 2(bridge_slave_1) entered blocking state [ 2222.518236][T32744] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.531403][T32744] bridge_slave_1: entered allmulticast mode [ 2222.534281][T32744] bridge_slave_1: entered promiscuous mode [ 2222.774972][T32744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2222.783914][T32744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2222.853258][T32744] team0: Port device team_slave_0 added [ 2222.862931][T32744] team0: Port device team_slave_1 added [ 2223.025758][T32744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2223.028042][T32744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2223.052559][T32744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2223.084336][T32744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2223.090023][T32744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2223.126700][T32744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2223.129249][ T303] can: request_module (can-proto-4) failed. [ 2223.221240][ T309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6343'. [ 2223.231027][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2223.313934][ T311] input: syz0 as /devices/virtual/input/input129 [ 2223.350035][T32744] hsr_slave_0: entered promiscuous mode [ 2223.358235][T32744] hsr_slave_1: entered promiscuous mode [ 2223.371704][T32744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2223.373717][T32744] Cannot create hsr debugfs directory [ 2223.481735][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2223.559024][T32744] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.591417][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2223.663540][T23721] Bluetooth: hci1: command tx timeout [ 2223.688097][T32744] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.741451][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2223.858076][T32744] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.911457][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2224.081398][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2224.191096][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2224.352002][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2224.482881][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2224.518196][T32744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2224.537001][T32744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2224.543726][T32744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2224.547819][T32744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2224.706280][T32744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2224.769560][T32744] 8021q: adding VLAN 0 to HW filter on device team0 [ 2224.784845][T25549] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.786949][T25549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2224.815158][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.817140][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2225.124326][T32744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2225.132322][ T332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6348'. [ 2225.142459][ T332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6348'. [ 2225.243346][T32744] veth0_vlan: entered promiscuous mode [ 2225.280257][T32744] veth1_vlan: entered promiscuous mode [ 2225.316113][T32744] veth0_macvtap: entered promiscuous mode [ 2225.360511][T32744] veth1_macvtap: entered promiscuous mode [ 2225.690492][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.698636][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.703562][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.706430][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.709253][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.712341][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.715219][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.718060][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.720935][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.723926][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.728601][T32744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2225.734266][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.734690][T23721] Bluetooth: hci1: command tx timeout [ 2225.737167][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.743985][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.746792][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.749388][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.753252][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.756113][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.759016][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.762234][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.765050][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.767801][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.770556][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.773255][T32744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.775908][T32744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.781296][T32744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2225.836110][T32744] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.838717][T32744] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.841535][T32744] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.844021][T32744] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.093455][ T350] syzkaller1: entered promiscuous mode [ 2226.095061][ T350] syzkaller1: entered allmulticast mode [ 2226.441923][T31878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2226.444119][T31878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2226.457506][T31878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2226.459418][T31878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2226.631383][ T39] kauditd_printk_skb: 48 callbacks suppressed [ 2226.631430][ T39] audit: type=1326 audit(1727139999.783:16568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=356 comm="syz.0.6351" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x0 [ 2226.670655][ T359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6339'. [ 2226.679500][ T359] Invalid ELF header magic: != ELF [ 2227.551330][ T77] net_ratelimit: 18 callbacks suppressed [ 2227.551341][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2227.559872][ T375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6354'. [ 2227.602039][ T375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6354'. [ 2227.671020][T31878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2227.781726][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2227.840891][T23721] Bluetooth: hci1: command tx timeout [ 2227.901129][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2228.020731][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2228.131456][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2228.250890][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2228.268118][ T388] syzkaller1: entered promiscuous mode [ 2228.269734][ T388] syzkaller1: entered allmulticast mode [ 2228.361064][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2228.378150][ T390] wlan0 speed is unknown, defaulting to 1000 [ 2228.471315][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2228.581199][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2228.658769][ T39] audit: type=1400 audit(1727140001.813:16569): avc: denied { setopt } for pid=389 comm="syz.1.6357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2228.663911][ T390] block nbd1: not configured, cannot reconfigure [ 2229.035019][ T400] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 2229.235060][ T409] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6359'. [ 2229.467709][ T400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2229.495998][ T400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2229.755396][ T414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=414 comm=syz.3.6362 [ 2229.758840][ T414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=414 comm=syz.3.6362 [ 2229.762627][ T414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=414 comm=syz.3.6362 [ 2229.766387][ T414] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6362'. [ 2229.774631][ T414] program syz.3.6362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2229.890890][ T5334] Bluetooth: hci1: command tx timeout [ 2230.259351][ T421] vimc link validate: Sensor A:src:16x16 (0x30314142, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2230.286316][ T421] Cannot find add_set index 0 as target [ 2230.562374][ T425] overlayfs: missing 'lowerdir' [ 2231.104030][ T433] input: syz0 as /devices/virtual/input/input130 [ 2231.191317][ T435] overlayfs: missing 'lowerdir' [ 2231.192860][ T39] audit: type=1400 audit(1727140004.353:16570): avc: denied { mounton } for pid=434 comm="syz.3.6368" path="/369/file0/bus" dev="9p" ino=42860674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2231.243742][ T39] audit: type=1400 audit(1727140004.403:16571): avc: denied { remove_name } for pid=434 comm="syz.3.6368" name="file1" dev="9p" ino=42860660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2231.260834][ T39] audit: type=1400 audit(1727140004.403:16572): avc: denied { rename } for pid=434 comm="syz.3.6368" name="file1" dev="9p" ino=42860660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2231.266819][ T39] audit: type=1400 audit(1727140004.403:16573): avc: denied { unlink } for pid=434 comm="syz.3.6368" name="bus" dev="9p" ino=42860674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2231.290615][ T39] audit: type=1400 audit(1727140004.443:16574): avc: denied { link } for pid=434 comm="syz.3.6368" name="bus" dev="9p" ino=42860660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2231.967049][ T39] audit: type=1326 audit(1727140005.123:16575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.6371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x7ffc0000 [ 2231.970869][ T5334] Bluetooth: hci1: command 0x0405 tx timeout [ 2232.024294][ T39] audit: type=1326 audit(1727140005.123:16576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.6371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x7ffc0000 [ 2232.047502][ T39] audit: type=1326 audit(1727140005.123:16577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.6371" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdaf7b7def9 code=0x7ffc0000 [ 2232.070912][ T39] audit: type=1326 audit(1727140005.123:16578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.6371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x7ffc0000 [ 2232.093132][ T39] audit: type=1326 audit(1727140005.123:16579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.6371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x7ffc0000 [ 2232.116421][ T39] audit: type=1326 audit(1727140005.123:16580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.6371" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdaf7b7def9 code=0x7ffc0000 [ 2232.142220][ T39] audit: type=1326 audit(1727140005.123:16581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.6371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x7ffc0000 [ 2232.148424][ T39] audit: type=1326 audit(1727140005.123:16582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.6371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x7ffc0000 [ 2232.171947][ T39] audit: type=1326 audit(1727140005.133:16583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.6371" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fdaf7b7def9 code=0x7ffc0000 [ 2232.196625][ T39] audit: type=1326 audit(1727140005.133:16584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=446 comm="syz.3.6371" exe="/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 2232.651609][T29344] net_ratelimit: 32 callbacks suppressed [ 2232.651622][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2232.770837][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2232.880759][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2233.001156][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2233.005268][T24735] IPVS: starting estimator thread 0... [ 2233.014147][ T464] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 2233.100902][ T465] IPVS: using max 35 ests per chain, 84000 per kthread [ 2233.111563][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2233.220888][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2233.330965][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2233.441826][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2233.551025][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2234.860887][ T5334] Bluetooth: hci1: command tx timeout [ 2235.350988][ T478] vimc link validate: Sensor A:src:16x16 (0x30314142, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2235.363267][ T478] Cannot find add_set index 0 as target [ 2235.999274][ T486] input: syz1 as /devices/virtual/input/input132 [ 2237.663223][ T501] syzkaller1: entered promiscuous mode [ 2237.664770][ T501] syzkaller1: entered allmulticast mode [ 2237.760811][ T11] net_ratelimit: 36 callbacks suppressed [ 2237.760823][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2237.795242][ T503] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6384'. [ 2237.881690][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2237.990814][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2238.111175][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2238.223818][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2238.344782][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2238.483412][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2238.600936][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2238.725545][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2238.841639][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2238.971373][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2239.134582][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2239.138457][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2239.150394][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2239.157782][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2239.168287][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2239.173641][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.181777][ T9] usb 5-1: config 0 descriptor?? [ 2241.928681][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 2241.930448][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2241.953492][ T541] No control pipe specified [ 2242.349476][ T9] usb 5-1: USB disconnect, device number 53 [ 2242.790806][T25549] net_ratelimit: 34 callbacks suppressed [ 2242.790819][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2242.911129][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2243.011078][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2243.130734][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2243.233093][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2243.341138][T25549] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2243.457684][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2243.561472][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2243.672952][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2243.760859][T24474] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2243.781927][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2243.864672][ T563] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 2243.931011][T24474] usb 6-1: Using ep0 maxpacket: 8 [ 2243.934367][T24474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2243.937183][T24474] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2243.939522][T24474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.952496][T24474] usb 6-1: config 0 descriptor?? [ 2244.101237][T28649] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2244.193920][T24474] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2244.254001][T28649] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 2244.256485][T28649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.258610][T28649] usb 5-1: Product: syz [ 2244.259732][T28649] usb 5-1: Manufacturer: syz [ 2244.262025][T28649] usb 5-1: SerialNumber: syz [ 2244.268539][T28649] usb 5-1: config 0 descriptor?? [ 2244.397531][T28649] usb 6-1: USB disconnect, device number 32 [ 2244.402349][T28649] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 2244.475139][T19550] usb 5-1: USB disconnect, device number 54 [ 2245.050998][ T571] 9pnet_fd: Insufficient options for proto=fd [ 2245.309625][ T577] syzkaller1: entered promiscuous mode [ 2245.313704][ T577] syzkaller1: entered allmulticast mode [ 2247.150958][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 2247.150971][ T39] audit: type=1400 audit(1727140020.313:16596): avc: denied { getopt } for pid=594 comm="syz.1.6405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2247.723237][ T607] netlink: 'syz.2.6406': attribute type 6 has an invalid length. [ 2247.726282][ T607] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6406'. [ 2247.821084][ T12] net_ratelimit: 34 callbacks suppressed [ 2247.821098][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2247.951276][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2248.066114][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2248.171394][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2248.281664][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2248.310739][T19550] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2248.311263][ T39] audit: type=1326 audit(1727140021.473:16597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=618 comm="syz.3.6411" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x0 [ 2248.391246][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2248.496730][T19550] usb 6-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 2248.499880][T19550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.501655][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2248.510924][T19550] usb 6-1: config 0 descriptor?? [ 2248.516047][T19550] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input133 [ 2248.611790][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2248.721849][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2248.831071][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2250.641608][ T580] usb 6-1: USB disconnect, device number 33 [ 2250.944719][ T655] wlan0 speed is unknown, defaulting to 1000 [ 2251.906416][ T39] audit: type=1400 audit(1727140025.063:16598): avc: denied { search } for pid=668 comm="syz.0.6419" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2251.920738][ T39] audit: type=1400 audit(1727140025.063:16599): avc: denied { write } for pid=668 comm="syz.0.6419" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2252.044363][ T39] audit: type=1400 audit(1727140025.193:16600): avc: denied { add_name } for pid=668 comm="syz.0.6419" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2252.054878][ T39] audit: type=1400 audit(1727140025.203:16601): avc: denied { create } for pid=668 comm="syz.0.6419" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 2252.853815][ T39] audit: type=1400 audit(1727140026.013:16602): avc: denied { execute } for pid=675 comm="syz.2.6421" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2252.870948][ T12] net_ratelimit: 32 callbacks suppressed [ 2252.870981][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2252.982322][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2253.091390][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2253.211452][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2253.329924][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2253.451017][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2253.571939][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2253.700889][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2253.774938][ T703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=703 comm=syz.1.6427 [ 2253.778421][ T703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=703 comm=syz.1.6427 [ 2253.810864][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2253.813243][ T703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=703 comm=syz.1.6427 [ 2253.819313][ T703] netlink: 300 bytes leftover after parsing attributes in process `syz.1.6427'. [ 2253.845969][ T703] program syz.1.6427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2253.931503][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2255.729257][ T39] audit: type=1804 audit(1727140028.883:16603): pid=722 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.6431" name="/newroot/1107/bus/bus" dev="overlay" ino=5981 res=1 errno=0 [ 2255.799018][ T725] input: syz0 as /devices/virtual/input/input134 [ 2257.808206][ T750] syzkaller1: entered promiscuous mode [ 2257.809793][ T750] syzkaller1: entered allmulticast mode [ 2257.872070][ T751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=751 comm=syz.0.6438 [ 2257.891290][ T751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=751 comm=syz.0.6438 [ 2257.894649][ T751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=751 comm=syz.0.6438 [ 2257.918478][ T751] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6438'. [ 2257.958748][ T751] program syz.0.6438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2257.962254][ T77] net_ratelimit: 34 callbacks suppressed [ 2257.962269][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2258.024443][ T755] syzkaller1: entered promiscuous mode [ 2258.025922][ T755] syzkaller1: entered allmulticast mode [ 2258.080745][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2258.190780][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2258.301831][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2258.420938][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2258.530967][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2258.642995][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2258.751102][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2258.862946][ T761] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6442'. [ 2258.911059][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2259.020754][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2260.645893][ T787] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6448'. [ 2260.648303][ T787] netlink: 'syz.0.6448': attribute type 1 has an invalid length. [ 2261.272631][ T796] netlink: 'syz.1.6449': attribute type 6 has an invalid length. [ 2261.275608][ T796] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6449'. [ 2263.050851][ T11] net_ratelimit: 35 callbacks suppressed [ 2263.050871][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2263.164651][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2263.280898][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2263.395502][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2263.500851][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2263.611771][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2263.731389][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2263.853376][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2263.961470][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2264.071843][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2266.333999][ T858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6459'. [ 2266.945156][ T867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=867 comm=syz.3.6461 [ 2266.945218][ T866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=866 comm=syz.1.6462 [ 2266.948386][ T867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=867 comm=syz.3.6461 [ 2266.971144][ T866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=866 comm=syz.1.6462 [ 2266.974578][ T866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=866 comm=syz.1.6462 [ 2266.974799][ T867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=867 comm=syz.3.6461 [ 2266.977945][ T866] netlink: 300 bytes leftover after parsing attributes in process `syz.1.6462'. [ 2266.998158][ T868] program syz.1.6462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2267.006494][ T867] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6461'. [ 2267.043121][ T867] program syz.3.6461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2267.347245][ T872] vimc link validate: Sensor A:src:16x16 (0x30314142, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2267.390414][ T872] Cannot find add_set index 0 as target [ 2268.110805][ T11] net_ratelimit: 33 callbacks suppressed [ 2268.110823][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2268.220907][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2268.330851][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2268.450949][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2268.571831][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2268.680819][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2268.790891][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2268.910841][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2269.023345][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2269.130854][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2270.246485][ T914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=914 comm=syz.3.6475 [ 2270.249661][ T914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=914 comm=syz.3.6475 [ 2270.281003][ T914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=914 comm=syz.3.6475 [ 2270.306136][ T914] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6475'. [ 2270.479830][ T914] program syz.3.6475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2270.964205][ T931] vimc link validate: Sensor A:src:16x16 (0x30314142, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2271.022662][ T931] Cannot find add_set index 0 as target [ 2271.430030][ T938] input: syz1 as /devices/virtual/input/input137 [ 2271.467904][ T937] xt_TCPMSS: Only works on TCP SYN packets [ 2272.845768][ T39] audit: type=1326 audit(1727140046.003:16604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=954 comm="syz.0.6483" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x0 [ 2272.921785][ T957] input: syz0 as /devices/virtual/input/input138 [ 2273.220888][ T11] net_ratelimit: 34 callbacks suppressed [ 2273.220907][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2273.340855][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2273.460879][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2273.581163][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2273.701298][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2273.811012][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2273.942959][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2274.061609][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2274.181977][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2274.300883][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2275.440308][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6489'. [ 2275.461245][ T39] audit: type=1800 audit(1727140048.603:16605): pid=992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.6490" name=2321200A dev="9p" ino=42860673 res=0 errno=0 [ 2275.583552][ T996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6488'. [ 2275.602899][ T39] audit: type=1326 audit(1727140048.763:16606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=997 comm="syz.2.6491" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccf6b7def9 code=0x0 [ 2276.398970][ T1008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6493'. [ 2276.572961][ T39] audit: type=1400 audit(1727140049.733:16607): avc: denied { execute } for pid=1009 comm="syz.0.6494" path="/1115/file0/bus" dev="9p" ino=42860660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2276.606339][ T1010] netfs: Couldn't get user pages (rc=-14) [ 2276.662730][ T1010] random: crng reseeded on system resumption [ 2277.217902][ T907] Bluetooth: hci1: SCO packet for unknown connection handle 768 [ 2277.248532][ T39] audit: type=1400 audit(1727140050.403:16608): avc: denied { map } for pid=1020 comm="syz.1.6496" path="socket:[138886]" dev="sockfs" ino=138886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2277.291114][ T907] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 2277.310756][ T39] audit: type=1400 audit(1727140050.403:16609): avc: denied { read } for pid=1020 comm="syz.1.6496" path="socket:[138886]" dev="sockfs" ino=138886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2278.321170][ T11] net_ratelimit: 33 callbacks suppressed [ 2278.321189][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2278.471192][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2278.600964][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2278.712145][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2278.822521][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2278.951768][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2279.062217][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2279.172506][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2279.233094][ T39] audit: type=1326 audit(1727140052.393:16610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.0.6500" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb70df7def9 code=0x0 [ 2279.300948][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2279.411800][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2282.965754][ T1110] netlink: 'syz.0.6518': attribute type 1 has an invalid length. [ 2282.998801][ T1110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6518'. [ 2283.007972][ T1110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6518'. [ 2283.389347][ T1125] vimc link validate: Sensor A:src:16x16 (0x30314142, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2283.401735][ T77] net_ratelimit: 33 callbacks suppressed [ 2283.401756][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2283.479470][ T1136] Cannot find add_set index 0 as target [ 2283.499956][ T39] audit: type=1800 audit(1727140056.653:16611): pid=1138 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.6511" name=2321200A dev="9p" ino=42860673 res=0 errno=0 [ 2283.521782][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2283.641255][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2283.771119][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2283.882002][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2284.001232][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2284.110972][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2284.172099][ T1145] syzkaller1: entered promiscuous mode [ 2284.174276][ T1145] syzkaller1: entered allmulticast mode [ 2284.231644][ T1107] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2284.345086][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2284.369049][ T1144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6514'. [ 2284.469685][ T1149] coredump: 1(syz.2.6514): written to core: VMAs: 3, size 12439552; core: 49731 bytes, pos 12447744 [ 2284.472982][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2284.507711][ T1150] coredump: 2(syz.2.6514): interrupted: fatal signal pending [ 2284.513691][ T1150] coredump: 2(syz.2.6514): written to core: VMAs: 3, size 12439552; core: 53826 bytes, pos 159744 [ 2284.779895][ T1154] wlan0 speed is unknown, defaulting to 1000 [ 2285.092316][ T1160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1160 comm=syz.3.6517 [ 2285.108249][ T1160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=1160 comm=syz.3.6517 [ 2285.115440][ T1160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=1160 comm=syz.3.6517 [ 2285.120408][ T1160] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6517'. [ 2285.129000][ T1160] program syz.3.6517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2286.310968][ T1168] netlink: 'syz.3.6520': attribute type 1 has an invalid length. [ 2286.314201][ T1168] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6520'. [ 2286.920803][ T39] audit: type=1400 audit(1727140060.053:16612): avc: denied { bind } for pid=1174 comm="syz.0.6529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2288.472301][ T77] net_ratelimit: 31 callbacks suppressed [ 2288.472323][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2288.581782][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2288.700885][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2288.821857][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2288.931390][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2289.050924][ T45] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2289.160826][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2289.280934][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2289.391855][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2289.405100][ T1201] netlink: 'syz.2.6527': attribute type 11 has an invalid length. [ 2289.407887][ T1201] netlink: 'syz.2.6527': attribute type 11 has an invalid length. [ 2289.410921][ T1201] netlink: 209800 bytes leftover after parsing attributes in process `syz.2.6527'. [ 2289.429470][ T1201] msdos: Unknown parameter 'b±Fs µÚì' [ 2289.506576][ T1107] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2290.172747][ T1209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1209 comm=syz.1.6528 [ 2290.190644][ T1209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=1209 comm=syz.1.6528 [ 2290.196981][ T1209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=1209 comm=syz.1.6528 [ 2290.208328][ T1209] netlink: 300 bytes leftover after parsing attributes in process `syz.1.6528'. [ 2290.217929][ T1210] vimc link validate: Sensor A:src:16x16 (0x30314142, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2290.221335][ T1209] program syz.1.6528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2290.277770][ T1210] Cannot find add_set index 0 as target [ 2290.583464][ T1215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6531'. [ 2290.625920][ T39] audit: type=1400 audit(1727140063.783:16613): avc: denied { append } for pid=1213 comm="syz.3.6531" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2291.801369][ T1227] netfs: Couldn't get user pages (rc=-14) [ 2291.829938][ T1232] random: crng reseeded on system resumption [ 2292.336130][ T1227] Restarting kernel threads ... done. [ 2292.756780][ T1214] Process accounting resumed [ 2293.059700][ T1251] syzkaller1: entered promiscuous mode [ 2293.062312][ T1251] syzkaller1: entered allmulticast mode [ 2293.540981][ T1107] net_ratelimit: 27 callbacks suppressed [ 2293.541000][ T1107] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2293.660936][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2293.852230][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2293.974651][ T1256] wlan0 speed is unknown, defaulting to 1000 [ 2294.043868][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2294.169742][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2294.313580][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2294.421295][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2294.541172][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2294.661354][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2294.781186][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2295.449647][ T1280] syzkaller1: entered promiscuous mode [ 2295.451676][ T1280] syzkaller1: entered allmulticast mode [ 2296.554401][ T39] audit: type=1800 audit(1727140069.713:16614): pid=1290 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.6547" name=2321200A dev="9p" ino=42860673 res=0 errno=0 [ 2296.608243][ T1289] netlink: 'syz.2.6548': attribute type 12 has an invalid length. [ 2297.574886][ T1301] syzkaller1: entered promiscuous mode [ 2297.576787][ T1301] syzkaller1: entered allmulticast mode [ 2298.174754][ T1308] input: syz1 as /devices/virtual/input/input140 [ 2298.294417][ T1308] xt_TCPMSS: Only works on TCP SYN packets [ 2298.581592][ T77] net_ratelimit: 30 callbacks suppressed [ 2298.581660][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2298.734275][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2298.793306][ T1315] syzkaller1: entered promiscuous mode [ 2298.795425][ T1315] syzkaller1: entered allmulticast mode [ 2298.840878][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2298.971130][ T45] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2299.362546][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2299.540979][ T45] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2299.672343][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2299.782903][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2299.832300][ T39] audit: type=1326 audit(1727140072.993:16615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1316 comm="syz.3.6557" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf7b7def9 code=0x0 [ 2299.900893][ T45] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2300.183299][ T45] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2300.438609][ T65] Bluetooth: Error in BCSP hdr checksum [ 2300.453774][T29344] Bluetooth: Error in BCSP hdr checksum [ 2300.681031][ T1107] Bluetooth: Error in BCSP hdr checksum [ 2300.940855][ T77] Bluetooth: Error in BCSP hdr checksum [ 2301.216432][ T1107] Bluetooth: Error in BCSP hdr checksum [ 2301.471311][ T1107] Bluetooth: Error in BCSP hdr checksum [ 2301.746503][ T1107] Bluetooth: Error in BCSP hdr checksum [ 2301.891132][ T5334] Bluetooth: hci0: command 0x1003 tx timeout [ 2301.892181][ T907] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2302.013259][ T1107] Bluetooth: Error in BCSP hdr checksum [ 2302.272372][ T77] Bluetooth: Error in BCSP hdr checksum [ 2302.542082][ T77] Bluetooth: Error in BCSP hdr checksum [ 2302.989270][ T1326] netlink: 'syz.1.6559': attribute type 10 has an invalid length. [ 2303.651513][ T1107] net_ratelimit: 28 callbacks suppressed [ 2303.651535][ T1107] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2303.656516][ T1335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6566'. [ 2303.781568][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2303.910707][T29344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2303.919939][ T1338] netlink: 'syz.1.6561': attribute type 12 has an invalid length. [ 2304.140666][ T45] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2304.261099][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2304.381084][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2304.491180][ T45] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2304.619610][ T45] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2304.731554][ T65] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2304.850896][ T77] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2305.331723][ T1357] random: crng reseeded on system resumption [ 2306.042931][ T39] audit: type=1400 audit(1727140079.203:16616): avc: denied { setopt } for pid=1353 comm="syz.0.6567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2306.089077][ T1368] team0: Port device team_slave_0 removed [ 2306.260241][ T1355] Restarting kernel threads ... done. [ 2308.002507][ T1389] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 2308.002520][ T1389] #PF: supervisor instruction fetch in kernel mode [ 2308.002527][ T1389] #PF: error_code(0x0010) - not-present page [ 2308.002532][ T1389] PGD 2fc7c067 P4D 2fc7c067 PUD 287a2067 PMD 0 [ 2308.002549][ T1389] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI [ 2308.002560][ T1389] CPU: 3 UID: 0 PID: 1389 Comm: syz.3.6572 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 2308.002572][ T1389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2308.002578][ T1389] RIP: 0010:0x0 [ 2308.002590][ T1389] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2308.002595][ T1389] RSP: 0018:ffffc90005f17818 EFLAGS: 00010246 [ 2308.002603][ T1389] RAX: 0000000000000008 RBX: ffff888106894000 RCX: 0000000000000001 [ 2308.002609][ T1389] RDX: ffff88803a4400c2 RSI: ffff888106894000 RDI: ffff88801b0b1000 [ 2308.002616][ T1389] RBP: ffff88801b0b1000 R08: 0000000000000000 R09: 0000000000000061 [ 2308.002622][ T1389] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88803a4400c2 [ 2308.002628][ T1389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000320 [ 2308.002634][ T1389] FS: 00007fdaf8a1f6c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 2308.002659][ T1389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2308.002669][ T1389] CR2: ffffffffffffffd6 CR3: 00000000292fe000 CR4: 0000000000350ef0 [ 2308.002675][ T1389] DR0: ffffffffffffffff DR1: 0000000000000001 DR2: 0000000000000000 [ 2308.002681][ T1389] DR3: 0000000080000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2308.002688][ T1389] Call Trace: [ 2308.002691][ T1389] [ 2308.002695][ T1389] ? __die+0x1e/0x60 [ 2308.002726][ T1389] ? page_fault_oops+0x3b6/0xb80 [ 2308.002741][ T1389] ? __pfx_page_fault_oops+0x10/0x10 [ 2308.002753][ T1389] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 2308.002769][ T1389] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 2308.002783][ T1389] ? vmap_small_pages_range_noflush+0x7d2/0xd30 [ 2308.002799][ T1389] ? do_user_addr_fault+0xa90/0x13f0 [ 2308.002812][ T1389] ? rcu_is_watching+0x12/0xc0 [ 2308.002825][ T1389] ? exc_page_fault+0x5c/0xc0 [ 2308.002843][ T1389] ? asm_exc_page_fault+0x26/0x30 [ 2308.002858][ T1389] fbcon_putcs+0x364/0x480 [ 2308.002880][ T1389] do_update_region+0x2e6/0x3f0 [ 2308.002896][ T1389] ? __pfx_fbcon_invert_region+0x10/0x10 [ 2308.002908][ T1389] invert_screen+0x1da/0x570 [ 2308.002920][ T1389] ? __pfx_invert_screen+0x10/0x10 [ 2308.002931][ T1389] ? __pfx_complement_pos+0x10/0x10 [ 2308.002942][ T1389] ? rcu_is_watching+0x12/0xc0 [ 2308.002952][ T1389] ? vc_do_resize+0x24e/0x10b0 [ 2308.002964][ T1389] clear_selection+0x59/0x70 [ 2308.002975][ T1389] vc_do_resize+0xd73/0x10b0 [ 2308.002992][ T1389] ? __pfx_vc_do_resize+0x10/0x10 [ 2308.003004][ T1389] fbcon_set_disp+0x7a5/0xe00 [ 2308.003018][ T1389] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 2308.003029][ T1389] set_con2fb_map+0x6fe/0x1060 [ 2308.003039][ T1389] fbcon_set_con2fb_map_ioctl+0x16d/0x220 [ 2308.003050][ T1389] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 2308.003061][ T1389] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2308.003075][ T1389] do_fb_ioctl+0x32a/0x7d0 [ 2308.003086][ T1389] ? __pfx_do_fb_ioctl+0x10/0x10 [ 2308.003098][ T1389] ? do_vfs_ioctl+0x50f/0x1aa0 [ 2308.003115][ T1389] ? selinux_file_ioctl+0x180/0x270 [ 2308.003129][ T1389] fb_ioctl+0xe5/0x150 [ 2308.003139][ T1389] ? __pfx_fb_ioctl+0x10/0x10 [ 2308.003149][ T1389] __x64_sys_ioctl+0x18d/0x210 [ 2308.003160][ T1389] do_syscall_64+0xcd/0x250 [ 2308.003174][ T1389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2308.003187][ T1389] RIP: 0033:0x7fdaf7b7def9 [ 2308.003194][ T1389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2308.003204][ T1389] RSP: 002b:00007fdaf8a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2308.003214][ T1389] RAX: ffffffffffffffda RBX: 00007fdaf7d35f80 RCX: 00007fdaf7b7def9 [ 2308.003220][ T1389] RDX: 00000000200000c0 RSI: 0000000000004610 RDI: 0000000000000003 [ 2308.003227][ T1389] RBP: 00007fdaf7bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 2308.003234][ T1389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2308.003241][ T1389] R13: 0000000000000000 R14: 00007fdaf7d35f80 R15: 00007ffe8750fa58 [ 2308.003250][ T1389] [ 2308.003253][ T1389] Modules linked in: [ 2308.003260][ T1389] CR2: 0000000000000000 [ 2308.003265][ T1389] ---[ end trace 0000000000000000 ]--- [ 2308.003270][ T1389] RIP: 0010:0x0 [ 2308.003278][ T1389] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2308.003283][ T1389] RSP: 0018:ffffc90005f17818 EFLAGS: 00010246 [ 2308.003291][ T1389] RAX: 0000000000000008 RBX: ffff888106894000 RCX: 0000000000000001 [ 2308.003297][ T1389] RDX: ffff88803a4400c2 RSI: ffff888106894000 RDI: ffff88801b0b1000 [ 2308.003303][ T1389] RBP: ffff88801b0b1000 R08: 0000000000000000 R09: 0000000000000061 [ 2308.003309][ T1389] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88803a4400c2 [ 2308.003316][ T1389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000320 [ 2308.003322][ T1389] FS: 00007fdaf8a1f6c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 2308.003332][ T1389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2308.003338][ T1389] CR2: ffffffffffffffd6 CR3: 00000000292fe000 CR4: 0000000000350ef0 [ 2308.003345][ T1389] DR0: ffffffffffffffff DR1: 0000000000000001 DR2: 0000000000000000 [ 2308.003351][ T1389] DR3: 0000000080000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2308.003358][ T1389] Kernel panic - not syncing: Fatal exception [ 2308.003815][ T1389] Kernel Offset: disabled VM DIAGNOSIS: 06:29:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff8132b390 RDX=ffffffff8de957c0 RSI=ffffffff8132b3d8 RDI=ffffffff937577c0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff26eaef8 R10=ffffffff937577c7 R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132b3d9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555d470808 CR3=0000000039178000 CR4=00350ef0 DR0=ffffffffffffffff DR1=0000000000000001 DR2=0000000000000000 DR3=0000000080000001 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff810080a6 ffffffff8100a0cf ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0cf ffffffff810080a6 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff810080a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb70dff199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb70dff19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb70dff19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb70dff19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb70dff1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb70dff1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0b3 ffffffff8100a0b3 ffffffff810080a6 ffffffff810080a6 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0b3 ffffffff8100a0b3 ffffffff00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0b3 ffffffff8100a0b3 ffffffff8100a0b3 ffffffff8100a0b3 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff8132b390 RDX=ffff888037e0c880 RSI=ffffffff8132b3d8 RDI=ffffffff937577c0 RBP=0000000000000001 RSP=ffffc900008b0fd0 R8 =0000000000000001 R9 =fffffbfff26eaef8 R10=ffffffff937577c7 R11=ffffc900008b0ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132b3d9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f24c64576c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2faefff8 CR3=000000002fe32000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5050505050500100 00110208e42ea5cb ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccf6bf199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccf6bf19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccf6bf19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccf6bf19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccf6bf1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccf6bf1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccf786d100 00007fccf6d0b440 00007fccf6d00004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccf6d0b498 00007fccf6d0b490 00007fccf6d0b488 00007fccf6d0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000b340a0 ac2b6a7bd5e87242 519afa960db5daef e85b22a15172eb5f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ff871ae36a83f77 849d5d45f7edaaa3 b288efea83c1f137 9724a30f7e7168e2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a9f9aea90953bfa d229e6c8f4329cdf f2511f8f79fba854 b088c3c3ca9e9003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb95929030020884 8f70be208b3eecaf 2d3a4a34883697e3 8bf1190cac470f88 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8132b390 RDX=ffff888031882440 RSI=ffffffff8132b3d8 RDI=ffffffff937577c0 RBP=0000000000000002 RSP=ffffc90000858fd0 R8 =0000000000000001 R9 =fffffbfff26eaef8 R10=ffffffff937577c7 R11=ffffc90000858ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132b3d9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa00c7656c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fccf6d0bca0 CR3=0000000029314000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed47a9a50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24c55f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24c55f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24c55f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24c55f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24c55f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24c55f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8507b870 RDI=ffffffff9aac0940 RBP=ffffffff9aac0900 RSP=ffffc90005f170e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff355817a R15=dffffc0000000000 RIP=ffffffff8507b897 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdaf8a1f6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffffffffd6 CR3=00000000292fe000 CR4=00350ef0 DR0=ffffffffffffffff DR1=0000000000000001 DR2=0000000000000000 DR3=0000000080000001 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaf7bf199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaf7bf19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaf7bf19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaf7bf19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaf7bf1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaf7bf1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaf7d0b488 00007fdaf7d0b480 00007fdaf7d0b478 00007fdaf7d0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaf886d100 00007fdaf7d0b440 00007fdaf7d0b458 00007fdaf7d0b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdaf7d0b498 00007fdaf7d0b490 00007fdaf7d0b488 00007fdaf7d0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000