last executing test programs: 1m37.898309469s ago: executing program 2 (id=212): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}, 0xfec0}], 0x1, 0x20004855) 1m37.820911795s ago: executing program 2 (id=213): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000040)="afabc3684b5f33287edf87f4d5995458b1c458fef8c193cdf49dbd52028885c03e9e19c08d0240d532cd6ed22e602afd1c020445b008be652057bfa989023b14591284e402b41becb476d2668207f3f9591d4b574cfd618eee69724ef8335fc9d735d457886b49e7be3d66a50e113d5f9828918f44cc42a56ea754d829885365eaa2935cd67828c3e64f88db7c795b99fb61", 0xffffff3a) (async) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x44, 0x0, r1}) (async) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x8, @vbi={0x9f9, 0x100, 0xd, 0x5abb37001e896ccd, [0xcad7, 0x8], [0xe8d4, 0x8], 0x2}}) (async) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0xffffff7b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x8100}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1000}]}}}]}, 0x58}}, 0x40804) (async) io_uring_setup(0x146f, &(0x7f0000000100)={0x0, 0x6d6b, 0x20000, 0x1, 0xd0, 0x0, r1}) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1m29.105922656s ago: executing program 2 (id=421): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x1fff, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) sendto$inet6(r1, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x104b) 1m29.031411928s ago: executing program 2 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 1m29.03122353s ago: executing program 2 (id=426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000001000040"]) 1m28.810626487s ago: executing program 2 (id=430): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693f"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000200000000000000000000000a00"], 0xb8}}, 0x0) 1m28.771568066s ago: executing program 32 (id=430): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693f"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000200000000000000000000000a00"], 0xb8}}, 0x0) 1m13.268823495s ago: executing program 1 (id=883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfcfffffffffffffff5020000000900010073797a30000000000900020073797a32"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) 1m13.268629196s ago: executing program 1 (id=885): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x403f}}) 1m13.201005091s ago: executing program 1 (id=887): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049be) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4c0000001a001100000000000000000002000000000000000000000005001b0006000000080001007f000001"], 0x4c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000006c0)) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) setresuid(0x0, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000)=0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000140), 0xfffffffffffffff9, 0x127803) ioctl$VIDIOC_SUBDEV_G_CROP(r9, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0xffff0001, 0x0, 0x401, 0x8}}) setreuid(0x0, r8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x401, 0xfffffdfe, 0x25dfdbfc, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_PHYS(r11, 0x4008556c, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 1m13.111003901s ago: executing program 1 (id=890): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40c5, 0x130) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x804040, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') readv(r2, &(0x7f0000002300)=[{&(0x7f0000001080)=""/124, 0x7c}], 0x1) pread64(r2, &(0x7f0000002240)=""/163, 0xa3, 0x1ff) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r3, 0x0, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r4}) 1m12.952362346s ago: executing program 1 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x6e4}}, 0x0) 1m12.709649997s ago: executing program 1 (id=896): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffffffffffff, 0x16a81) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x6, 0x3, 0x7, 0x6, "e8e8dbb4a73395b794452e635281ed061e3a2beb25062f2bbe361b1a76c8480a"}) r1 = dup3(r0, r0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000080)={0x177, "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"}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x1, 0x5, 0x5, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000480)={&(0x7f00000003c0)="eef62b4cee1cfc5ebcbe6976b65a86286f9e48f77a601258d330e6dab479d87855ffa758357c6964d00ae0b797c2ff216688c6a9e49ee8e71871e3302526007e02fc1f386be86d67df34bfee5b638131597b768c248f44eb0b1d1ba3947e05daae8ecb1c655d6aff902e5333cb3d133aa7cf7b4bd3dbc8bc7b9f0b1feefda6f448cbed50829cec9ee1a2a9e2fd5906d378", 0x91, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f00000004c0)={0x2, r7, r11, 0xe0e0e0e0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_SOCK_GET(r12, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000580)={0x348, r13, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffeca}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x14}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1e000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd00958f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1a495833}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x30}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff03f}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd95}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000801) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000980)=0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) fcntl$getown(r14, 0x9) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000a00)={r1}, 0x1) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r15, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r16, 0x20, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4001}, 0x20000010) ioctl$SNDCTL_SEQ_NRSYNTHS(r14, 0x8004510a, &(0x7f0000000c00)) lseek(r14, 0x8, 0x4) ioctl$SCSI_IOCTL_GET_PCI(r14, 0x5387, &(0x7f0000000c40)) r17 = dup2(r14, r0) ioctl$PPPIOCATTACH(r14, 0x4004743d, &(0x7f0000000c80)=0x2) ioctl$RFKILL_IOC_MAX_SIZE(r1, 0x2, &(0x7f0000000cc0)=0x3ff) pwrite64(r14, &(0x7f0000000d00)="0bd944e948a10c4c92cc4c34fb5d824a5cdce666b2f9ad67fa579b02abf66b5a19c0e1ddb908c740910fff940ccc4029343d981e19d4236b4455737566b60b76f45922b065e9b1401e95b620cd135e202fc3aa33b77b1a66a126feb8cb897fb9648360f4602a37f4a07ee965e4ff9e", 0x6f, 0x10000) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r14) sendmsg$TIPC_NL_BEARER_ENABLE(r14, &(0x7f0000001000)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x1bc, r18, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b76}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x862}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x897}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "7a56f75423721a5d39ce6ed58359340ab45748d00e1cdadfa6826b3ff47005d7be2f7cb7da8b2d5167910d05e2eaacf395678fcf528bc5965231c6cf897cf24b71b274d37458617a2c93a7467997e416a6b30390821857dcdfbbb70b93c7ce9935b937dfd8f743"}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000001040)=0x40000) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r14, 0x8044610a, &(0x7f0000001080)={0x0, @raw}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r17, 0x81f8943c, &(0x7f0000001100)) ioctl$DRM_IOCTL_MODE_ATOMIC(r17, 0xc03864bc, &(0x7f00000017c0)={0x201, 0x6, &(0x7f0000001300)=[r2, r3, r4, r9, r5, r10], &(0x7f0000001340)=[0x2, 0x17], &(0x7f0000001740)=[r6, 0x0, r7, r5, r8], &(0x7f0000001780)=[0x5, 0x3, 0x2], 0x0, 0xffffffffffffffff}) 1m12.677692175s ago: executing program 33 (id=896): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffffffffffff, 0x16a81) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x6, 0x3, 0x7, 0x6, "e8e8dbb4a73395b794452e635281ed061e3a2beb25062f2bbe361b1a76c8480a"}) r1 = dup3(r0, r0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000080)={0x177, "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"}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x1, 0x5, 0x5, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000480)={&(0x7f00000003c0)="eef62b4cee1cfc5ebcbe6976b65a86286f9e48f77a601258d330e6dab479d87855ffa758357c6964d00ae0b797c2ff216688c6a9e49ee8e71871e3302526007e02fc1f386be86d67df34bfee5b638131597b768c248f44eb0b1d1ba3947e05daae8ecb1c655d6aff902e5333cb3d133aa7cf7b4bd3dbc8bc7b9f0b1feefda6f448cbed50829cec9ee1a2a9e2fd5906d378", 0x91, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f00000004c0)={0x2, r7, r11, 0xe0e0e0e0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_SOCK_GET(r12, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000580)={0x348, r13, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffeca}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x14}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1e000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd00958f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1a495833}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x30}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff03f}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd95}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000801) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000980)=0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) fcntl$getown(r14, 0x9) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000a00)={r1}, 0x1) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r15, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r16, 0x20, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4001}, 0x20000010) ioctl$SNDCTL_SEQ_NRSYNTHS(r14, 0x8004510a, &(0x7f0000000c00)) lseek(r14, 0x8, 0x4) ioctl$SCSI_IOCTL_GET_PCI(r14, 0x5387, &(0x7f0000000c40)) r17 = dup2(r14, r0) ioctl$PPPIOCATTACH(r14, 0x4004743d, &(0x7f0000000c80)=0x2) ioctl$RFKILL_IOC_MAX_SIZE(r1, 0x2, &(0x7f0000000cc0)=0x3ff) pwrite64(r14, &(0x7f0000000d00)="0bd944e948a10c4c92cc4c34fb5d824a5cdce666b2f9ad67fa579b02abf66b5a19c0e1ddb908c740910fff940ccc4029343d981e19d4236b4455737566b60b76f45922b065e9b1401e95b620cd135e202fc3aa33b77b1a66a126feb8cb897fb9648360f4602a37f4a07ee965e4ff9e", 0x6f, 0x10000) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r14) sendmsg$TIPC_NL_BEARER_ENABLE(r14, &(0x7f0000001000)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x1bc, r18, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b76}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x862}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x897}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "7a56f75423721a5d39ce6ed58359340ab45748d00e1cdadfa6826b3ff47005d7be2f7cb7da8b2d5167910d05e2eaacf395678fcf528bc5965231c6cf897cf24b71b274d37458617a2c93a7467997e416a6b30390821857dcdfbbb70b93c7ce9935b937dfd8f743"}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000001040)=0x40000) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r14, 0x8044610a, &(0x7f0000001080)={0x0, @raw}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r17, 0x81f8943c, &(0x7f0000001100)) ioctl$DRM_IOCTL_MODE_ATOMIC(r17, 0xc03864bc, &(0x7f00000017c0)={0x201, 0x6, &(0x7f0000001300)=[r2, r3, r4, r9, r5, r10], &(0x7f0000001340)=[0x2, 0x17], &(0x7f0000001740)=[r6, 0x0, r7, r5, r8], &(0x7f0000001780)=[0x5, 0x3, 0x2], 0x0, 0xffffffffffffffff}) 1m5.002021638s ago: executing program 5 (id=898): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x400000000000000) 56.46211111s ago: executing program 5 (id=898): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x400000000000000) 48.70986581s ago: executing program 5 (id=898): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x400000000000000) 40.879236265s ago: executing program 5 (id=898): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x400000000000000) 25.79182055s ago: executing program 4 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x55, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa016ec2000000080045000047fffc000000029078f5cfb8c79b87822e14009078b81414bb53f683785c5b987df5ff06000000007ee410f074b2c89256c505b9f363538d197ba32e76ab475756028ea9e27792dd0a"], 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x8, 0x6) (async) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r1 = socket(0xa, 0x801, 0x0) (rerun: 32) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) (async, rerun: 32) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000040)) (async, rerun: 32) getsockopt(r1, 0x29, 0x4b, 0x0, &(0x7f0000001ffc)) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$kcm(0x21, 0x2, 0x2) getsockopt$sock_int(r4, 0x1, 0x12, 0x0, &(0x7f00000002c0)) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x8, 0x5, [0x9, 0x8, 0x6, 0x9, 0x5]}, &(0x7f0000000140)=0x12) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r5, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0, 0x2, 0x400989, 0x0, 0x10}, 0x9c) (async, rerun: 32) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44010000a9a082f6676203a0735cac4c251b0bee1dc3653acc960562d2b04f0d639be3c5dd52580bf5e34eb2892bd33f0ea8e362c7e9b6b11c278f90da7b9a657a7254525042dfe1ffcefa81dd16a7362a7e601227325de7bfdfbe13", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25160000003001048014000780080002000800000008000100030000002c0007800800010017000000080003000600000008000400090000000800030004000000080004004b0100005400078008000100060000000800020009000000080002000500000008000400030000000800020001010000080002000300000008000300010000800800030006000000080001000000000008000100c95100003400078008000200090000000800030004000000080002006d0000000800040009000000080001000c000000080002000000000014000780080004000600000008000400b50600000900010073797a30000000000c00078008000400040000002c00078008000400000000000800020000f8ffff0800020007000000080002008100000008000400ff0100000900010073797a3000000000"], 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x80000) (rerun: 32) 25.531946457s ago: executing program 4 (id=2129): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="04010100000000001400030076657468305f766c616e00070000000008000a00", @ANYRES32=r1], 0x3c}}, 0x800) 25.481345867s ago: executing program 4 (id=2133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000001300000a20000000000a010100000000000000000200fffd0900010073797a3000000000a0000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000007ffe9006e6174001400048008000140000000000800024000000000580008800c00024000000000000000040c000240fffffffffffffffa0c00024000000000000000070c00014000000000000000060c00024000000000000000090c00014000000000000000060c000140000000000000090914000000020a0500000000000000000000000008140000001100010000000000"], 0xfc}}, 0x0) 25.480858821s ago: executing program 4 (id=2134): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x200f05d, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x301883, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2e}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 25.431768863s ago: executing program 4 (id=2136): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x4000000}, 0x0) 25.260309634s ago: executing program 4 (id=2143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000214001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) 25.211237215s ago: executing program 34 (id=2143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000214001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) 9.460979412s ago: executing program 6 (id=2144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d000000080005ff", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.835242211s ago: executing program 6 (id=2144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d000000080005ff", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.041677125s ago: executing program 6 (id=2144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d000000080005ff", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.120300555s ago: executing program 6 (id=2144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d000000080005ff", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.341456473s ago: executing program 3 (id=2311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000040030005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe88000000000000000000000000000100000000000000000100"], 0x88}}, 0x0) 2.264094879s ago: executing program 3 (id=2313): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31830000000000000000190000000c0001800800130005"], 0x20}, 0x1, 0x0, 0x0, 0xffffff21}, 0x0) 2.264001587s ago: executing program 3 (id=2314): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000100014001280090001007663616e000000000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 2.151997695s ago: executing program 3 (id=2315): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x78, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2b1b587e}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4f6f2074}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb441d5}]}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x20008dff) 2.151736539s ago: executing program 3 (id=2316): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'gre0\x00'}}, 0x1e) r3 = syz_usbip_server_init(0x5) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) io_submit(r2, 0x3, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000180)="ce2fdc732c2949c763afdc5c972534c3dc9be37483452bfb41812ebe0e4116e0eb568c2d4a629af868d292723bf1fc1baef24bc834d1018c469f2e8a607a8800354cf3c971650fc1d3a3dfa0ba777b624073cdf96f8cc9a17705522795f464893824b6c20ed3091b4dab7d72d6143395913dca8486c074eb9f126ed829871a2478e27bd356aca0d05c25a5853c6530ad3a77f2941c5871253435a9891cdb34ee325796862fcbb24a5164b3a11ed4bb627f0459c7553eae60c39d6afa9e1a1c2b6e4cfb69c4489316688cd24d88f8", 0xce, 0x5, 0x0, 0x7, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x94d, r3, &(0x7f0000000300)="03a605a1fa5d876474bb74206df0a8a91fb490ddddb2b889d1efd98da3ed6353b7ebf487f3c6aa86ad0df067e3f997d0fdeb1e9fbd3a5cc70ce97d6456e58f112e9df7848f66c153baf17436f46fa6a6366d4f12ae3f9845538bf9e3d6bd44c44b428bf48ae46ab04b19dce736f0dc70e0ddadd112861792fe16d19e094583c3f6baf296e84b0a991eb69a2d6b72a067d7d1d53464648c82a44020fc2669a74b47f3d6a0c45f3ef69fe5d89b1d0e649ca05bf65ad74fd2b0d662e7582701976d21478a8208717c6c6b3dbdab1d11cac5bca39d6e514ae0b91e587e5c3f8609", 0xdf, 0x4000000000000000, 0x0, 0x2, r1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x6, r4, &(0x7f0000000bc0)="cec79fa01771b6402523c2da6c1da627f0387dee1db3f64c4b726bd5240419eafdf7b817b5007c5f273399aed872aa77737d1d9b7e5f84e42555c3fbc8ba59d3073a4dfa44e1e9b1840e219ff773d03982d36c6dd72edb5b4205244c19d260b716765e1cf4dc79bfbdc071a1b948916e86360b1328be8d30bdd28d7d0aba4277a639e51989cef013ec4dfb914cf8c7bc7fdd877a94fa983f9a62b76569d93ce0960707442d3c1cbb823c9a37a1bad4bd7717cab1668c934961d341c427aa736411a883cd4487eb967cea65cc1cf4e2bb75221bdf5595f258e223008d9d1c69446eca77ef65f583882c96b6789d676b20a95d32eeed033cc9b010b5995f75b3db326d79902e4d7623646b9b182a3770f8d29165099ab68bd26b9370be433066393d58c5503ca6acc33990092a93b1f687a3852aefe80d351bc437339deb010a79b84eb57801541a6eefdae10e7bcbce036df2176f6b23c97a7fe85f00a39e787134e05bd0e293a2fbc833adcd6bcd633d94c92fe7eee4b60663aa24c558a43c18614ce191c136aff413b7695d7bf6d9e134e095ac26734c5569d2dc0dbfe9f04c4be59edb34866fcf330a095e9cd7284f8fd6a04d97b835ff9240805e82e346c8475c817bfd80687a8052b0b2a50558457798bf15cb5b58899fc26d29c2d7e778a4c12cb4fe0b2f1fc455c368646ef29ea8d257f994a61580af953e01c0913e0be5089c298dd3dbd7e7bf745239ba6c0eb3813f2a679034ce4b6602093a72c1f201440ed175d87336f07d5d367ae7ced58b88397e6e95240802bf9a543d42351f85e8ea11507dd01379c70f798515e9268d95dbe41b69560505ae3dc341c53d9dcb0d932fe12163ee9e42c2cc1e49c569aab2ce7984d8dfed6e3308d2d285b860344ce0e5e86a43de3afc58fc38031caf967fe85ff1451bd44ad7b23218d5c9e01c82dbda8e0f25d1638b71d3818f237220b852760910e1b1d558562331fc8e3fc5edf2942a1078f2c004e13aa61451ccff5370aa3a8ab1264d0ed0bb6de77cfe7e5cb149e4bb6e45d69b53b9228a9366552b3cc0af974bca827cbb2d41a14f88a6b0168535b06298bc49cddfbc944fb523afba03b6201d3dab28849cfcad1f7eb6364e84b15227b1b8b1321ffd1c2d37151c2463676730565af00bfb52e42b3c9f02779e74f21d519fb93837bba863df7db8d6d7158c4780232f616fef39f11c9307250932918dbb71a0c668fab2bd0f2f31162de56cf4cf810e0006fd858303c170020b1f309c187e785e9c83c90c5ce65f3cc9f31e8507156e9a44fe437cd4fe4bf8e9b30bb40baf2be52dfee6d937d334f146fe5789a4b9c38b1471f90158537b88340aac0caae58325c2f1953a2309f4d5e079e117db9de4ca3adee22db319e1e532e1e97fc5ddb76c4bb146c9b1df1408d8bd3110d818b3a912a312d7df4cf40771471e677ed58cda57046af1df5f46feae3d6bb0f4d93da750c3025d9612a52ab8831e9b9e8f5bdb29a155f29617764c1adf0adcc77326dbf5f6e495d1f941d1226f9787f4ab1d58706a4582d40ff7fb0c458a72cce6ddbaf8c9f9b348e719e263abf0642e3f98819b295c47a49ed2328d9a6760d92173aa01dbbca5be533e028c0559a3e54ddf447bedcb5a0e8bfbef71a044389ed818cc9bdfb8e89244d0718c46c331fecf25e81f59e86a0a69d92f13530a11b9b9edee27f23b84a5456663d268624528e77c8faa5d3763ac0a22f50d0de99a7added55f847a9f66f70ead9be4abcbf52d7f6e1023dfb92c3320140d678fdbdc99c8fe984207b26e534baef96e7e202746389862aa2c785f8979e6b108129d03cd72baf0c5492aab6cd51db28bfb55d71f9ba784d6415cf5cea835064423545e8ac5f1648101e5471f2c8c030d64e50b362c7e0fd808a4beafd360180b9ba610a70664a9a11b9ce2885267c31bda7222f15b4bd778c18afd7f8a21c9884c82d0f57c3357e4849dafedaed56e3dfc218188a5393a81d08f4badb77a169f336affdd558db975f1908f911039a6363bd95d757105087434297654b1aa886188d43552e3094d7594b04fd128fe361a4e0c6825a8056e9d9b04bb3d65c93483f5d31c736e8828c2fe13a251c0d2d143da90218f23b8ad8c15405dcceacb3cddcd0c4d4c0723ae046b9cf900f2aebf4e22c086df482bde86af9b3fa192501eded7187bb38ef9ef824a31fd87320d375bc8ed3b5bffceea1a18eb6b4aba232540ad791fb55c3f5563091c8e93dcfb5314ec1fa229f18abc88edad03386faa17d61e72768660cda830f576997df05a7499f203936964bbe4f0503992d6e83d5b99c6d9cfb6dbd04807ae9afc27c235aa0b71f66bd6a32ecd6d43adff175260736eebc898c3f6549898db2daeefbac9a11007b2b5b1b2ec845dce1ed17f10c0fdfedd68a7cb512081981f78b7f7f2d7e54767dbc82eeb0cbbe33a0efa2d0441c7ec905b9e8f6048131a67e6f9ef1d8e899a1e3427fa77b636f5889efc6200b7ece597648da30bed66991aae74aad3f38fa900ecf93f9a99294c8b0c339693e3e3efff3e5c25ae3a9b023ef9ef8607cf8694f33996e38c89afc2f874f29fa692de15e5608b0a314f5354b97fe269e85617d10c92a68f137c63252c355faeb7ea62e2f0c8b97b2899ccb44b5bf04ee7591885f635c8af2ed367c4a954f01364a1529726f5c1062465812e2b0ba667e49ac946ffadf95b6e50b68954a469a45cc889dd6fc08131d817afdf528acd1ba3557dd843f70eb531f63c913d89dd824fd2c53cc62859bc266c9daffaa0a723e6d3ecc871006a030728a953230ce84229cc5021ca48c1345232e13070e9fca8f2728fc40e11e443c8aac9e399a384a169341dbcf51e117d78212c388608300c9ba6ee28cef4ea0ea81461aac2910326456c55188d363fdc38e81ebdfcdaed5c94da0e21fc5764042b0cd82606ea27454f4c537c681fbcf57ba54c9dd6aac6c37287d6a8b606ffaec2dedb78a5174ccd251523e4dd59eeada2b170cec21536425d673885a387980196f7107c4f7afd929f0637ff9e61f947a91e55b20696dc32109c0d2b745241c0d50e8f9a198646609b09db66c00f53459ab3c3bfa5d338469fbfed65fd01ea72bc84909d7c55c32cc5bb2b8c4aba8d6f82da373217d6f7cddcb46cb7406991ce780b5cedd98d778f61327da3a230b745d35f2057fe2f24aa77d3d7c228362f74532fa034ee60014f0975e16b9c96d5daa85133a51148834f6b1a54157faadfc46a0c7efa57678740dd99a5cb9166c03b3f39ac71138a98f5fe2aa3cce445651ad8f4cb48ccf6f7e1ae6cb69e8d8ad6d44c4e17301d00d944c3c8d671b0900a24bbb2aad52cd31cd77b6f6d7e0d43ba0b9c3967e61719b220c0b4ce24c1c6898946cc0e0bdb05bbda26315727c40fad463c22095f763f00f562259b3b39255585c148d15e36f93682c4eeb1e29bff6c731038633919fbf02eb6a2dae809669e66c1fde8efe4f581f0310292de2ea67d031c8948ebe96c94ba75ee4121c20369ac42fa9ee08717ea5c7f3f5b83bd117fb633f93977e97fe56c2a2a796d419b9c25a689e884fc57c38172f1a13782a967f79c02fef2bfbb8ba494774e35629b5c17d0d4e2712eeedad31230471a3dd966f620f7ac69aafe9b7e14ba5216cbfb79d763e89cdf8e0bccb2b25e5c7e15b579b75dca353c32b99ffa642e20b4b061ce9f7f1631b0d3a1a24288e185db9fc21d8255e7eb30ed6cdfa87e69982c72f742521ffde43a771a3ff78d25dd4b6af192c261558a0ad6b85240a43463438f2803d843045800499d745031b592034ae62ad12b1de6b808fdbcb90aab9767f99bae2f51eba1084066c92543ea87a831e814412842ccab052b37df6769883655c6a8040a2d059856d6ff33b0bdeddf93cb5b12ba98ac95876349faf87c6acfe60ed244c4b393530e3fd070760591497c94e126e96a498e5834ae63315057ae397d1c248c3c906b5872d8516fc00398efeffadee20806fa4826bca7978ef79773df97eef18de585e7228e0ca0825e044783414d2684408afeb2a634968a1074a43539dce6fdff23ac340899604599bd5b963c76f0b2bb430966e11d5cdcf705866f96778ec4d2429874adbd42143529933322819bcc7ef7b500003e2220f2c180c01c7bc73cae46f1deaa00ad6ad2e0de660c50166a44751112e2482918374293551ad683d5e3138b15c538187829a4aba3974a68b9c1b822028799da021f497ecb615b1d264e97a0c0f56e10be914c36030ce436038c7bc767dc61595be91704f9411c6b9bf6d39ebde61ee9aa6ef6cf4281e27d37ecad4efe5e971340ed9aa01afbb324c25a3e73ea34df65c42e8644b68038bdc51879d7fd2d5e3fa0e1c5ac599c4dc980e88e0232732be6e302a4a8f385cbe83b05def5dc8ea83729ff9fafd3a8e7d70f093ce2b234293647c1a31e1c3cc5dfd5f0bedf37e8ad10be7afc58a7ae0d4bd323ea31d44a035da3f734defd55b77f3b3e8d4133e2c277a42af1250d0a867a289bfd0371c2c28c7e9f08770a877a35fc68d0f091c90e2ede2f9342ad057b66581b2816b3656b29bef3c714a0e760ce7f06c0706ace43a1a0949c9bfe05a7384ce448d2520a04bfa75d8a4b118dd2a0a73125400301a9a27402207449db5fe89e13c6194bc81e26fb5f340d2fca7c2a42440fd15b76f0ca710268927d71d3de2e403d141813a281aaf92f82b46c23f5f16d6f59bbc99c48ee0a845cecba8a55c36d7f50d720ee0c2d708590f77c56e676266fe15c3d7ba841b2f8b38b385a8f7b8e040ed64cf4adc8637c34810a9252109d6171811575798de5fb203a40c8f260414921a789486d14576adc5386901552dd7c00ee8bd182453b7b0476dc574564b125afcf308354c5a87274664a311abab39abfb9a6595cace3434db0d76e6835101515093b3953b89b7b298f13f62e219b249f07d0b24820b47a36ab28663590b1af352e180067d6da37dfce8fa173b744a958e2902c35b278de4a578d550f4eee22f3ea03bf047564d0867099f1ba2d1324d90b83e1365e4df29918064e421d65df25a6839f68f425be0c29b7da8d9fd6624f9ba1fdb4a0f477faf41f895a44891e204f19da5ada3a408759c0f09de23f24d73d388a39f534857ed203e7e2dd49b52dd77b17160748823b357db5827c28dd026d7d60459b63139730343f54ac4f015ba6507b49a8142aa1a0630e9e1aea19365f05c8f95ee9f3c4789140110dd0efbe841a62b494f9e46e9a42b4824b33b6f23e7767ad546548562d5e213023f7964cf3d2ec911e5ff16f7a76a74468e3ff4cfda64bf7deb4e422c79c5fd9521bdcf8d90b2e563f5593779c62a791741df2e317f08fb482d80f34da54f9da0fb4481b1ba51caad4caefe8c1c1c341782feeb4ccf8228d2408a77d8bfc0049d55539e84e66ada02a2552a37088c4bd58ede639e3fa35400d90b1ac11d0f02771e8b8c449a061a5022b3f8988c6b0208b69d91121f8cc5e5cfaae8a62b9b99eb1a85860af4b5f85993931b5394e3e2a36ed2b10a4c84598286fdb0fbd094bd3d2b93cf5160fff0b4ecae5d7f3543a20c20ba8cd1542a969543c71176c3ac8c1fb8a4af0674d11e679d47aeb40cf77b6476dc24bec0fb2a4778dad6f96f4c230105f429d3f33253010d0a9d950cfa041dd95691762694c7a8719703bb033791785b215a6d64603604f498137a967a1a2b6de2cbb74aa9d7391aa6a1a43e3a80c5299cdc213ab45555d054c658f0b7fa48daa63f1c1750", 0x1000, 0x10001, 0x0, 0x1, r1}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, 0x0, 0x20000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060009"], 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYRES8=r5], 0x48}, 0x1, 0x0, 0x0, 0x40440c0}, 0x40000) 2.092545152s ago: executing program 6 (id=2144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d000000080005ff", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 234.265349ms ago: executing program 3 (id=2318): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000280)=""/239, 0xef) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="e6", 0x1}], 0x1) syz_usb_disconnect(r1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000030c0)=ANY=[@ANYBLOB="180000001600050200e616566e25b8ab660008"], 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe8, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IE={0x2b, 0x2a, [@ht={0x2d, 0x1a, {0x4000, 0x1, 0x1, 0x0, {0x2, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x6, 0x4, 0x5}}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x47e8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x3, 0x0, {0x5, 0x7, 0x0, 0xe1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0xfb, 0x42}}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xe}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xc75}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x32}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xc2}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x401}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000800000000ffffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066580000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 171.652055ms ago: executing program 0 (id=2319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x160}}, 0x0) 171.544932ms ago: executing program 0 (id=2320): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5, 0x0) write$cgroup_pid(r0, &(0x7f00000002c0), 0x12) 91.88748ms ago: executing program 0 (id=2321): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859891d875397bab22d0000b420a9c81f40f45f819e01177d3d458dac00000000000000000000003b00", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000480)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0xf, 0x4, 0x0, 0x0, 0x7, 0xd, "fee8a2ab78fc179fd1f8a0e91dda000000000000deff0000000000000014000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x400000001000000, 0x2]}}) 91.733984ms ago: executing program 0 (id=2322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x600}}}}]}]}, 0x64}}, 0x0) 20.231633ms ago: executing program 0 (id=2323): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x10}}], 0x1, 0x0) 19.529789ms ago: executing program 0 (id=2324): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001", @ANYRES32=r0], 0x18}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000100)) io_setup(0x10, &(0x7f0000000240)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x10}}], 0x1, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0) syz_io_uring_setup(0x2bff, &(0x7f0000000340)={0x0, 0xaa00, 0xc02, 0x3, 0x94, 0x0, r3}, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_setup(0x434, &(0x7f0000000480)={0x0, 0x694b, 0x1000, 0x2, 0x7}, &(0x7f0000000500), &(0x7f0000000540)=0x0) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x8, 0x0, r6, 0x1, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_SHUTDOWN={0x22, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xd4) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x440, 0x0) write$vga_arbiter(r11, &(0x7f00000002c0)=@other={'unlock', ' ', 'mem'}, 0xb) 0s ago: executing program 6 (id=2144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d000000080005ff", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): 0000000000000006 [ 78.937286][ T8414] RBP: 00007f2a39406090 R08: 0000000000000000 R09: 0000000000000000 [ 78.937304][ T8414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.937309][ T8414] R13: 0000000000000000 R14: 00007f2a387a5fa0 R15: 00007ffe5bd53948 [ 78.937321][ T8414] [ 78.937339][ T8414] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.106761][ T8297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.226537][ T8297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.284061][ T40] audit: type=1400 audit(2000000003.200:477): avc: denied { execute } for pid=8445 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 79.354564][ T8297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.403367][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.406869][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.408050][ T8459] syz.3.902: attempt to access beyond end of device [ 79.408050][ T8459] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 79.410490][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.415020][ T8459] EXT4-fs (nbd3): unable to read superblock [ 79.416668][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.420085][ T5952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.422246][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.429904][ T8459] 9pnet_fd: p9_fd_create_tcp (8459): problem creating socket [ 79.436487][ T8456] Failed to initialize the IGMP autojoin socket (err -2) [ 79.483767][ T8463] __nla_validate_parse: 6 callbacks suppressed [ 79.483777][ T8463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.904'. [ 79.488245][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 79.496445][ T8297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.662561][ T8456] chnl_net:caif_netlink_parms(): no params data found [ 79.697807][ T8297] bridge_slave_1: left allmulticast mode [ 79.699747][ T8297] bridge_slave_1: left promiscuous mode [ 79.703159][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.712393][ T8297] bridge_slave_0: left allmulticast mode [ 79.714023][ T8297] bridge_slave_0: left promiscuous mode [ 79.715685][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.971676][ T8483] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 80.050051][ T8297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.054033][ T8297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.057222][ T8297] bond0 (unregistering): Released all slaves [ 80.152912][ T8297] bond1 (unregistering): Released all slaves [ 80.230081][ T8297] bond2 (unregistering): Released all slaves [ 80.341616][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 80.381842][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.386329][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.389156][ T8456] bridge_slave_0: entered allmulticast mode [ 80.391513][ T8456] bridge_slave_0: entered promiscuous mode [ 80.413429][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.415551][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.417715][ T8456] bridge_slave_1: entered allmulticast mode [ 80.420525][ T8456] bridge_slave_1: entered promiscuous mode [ 80.505322][ T8456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.543326][ T8456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.620439][ T8456] team0: Port device team_slave_0 added [ 80.629853][ T8456] team0: Port device team_slave_1 added [ 80.661821][ T5952] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 80.668009][ T8498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.911'. [ 80.705350][ T8456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.707298][ T8456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.718774][ T8456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.728214][ T8456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.731206][ T8456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.741857][ T8456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.770716][ T8297] hsr_slave_0: left promiscuous mode [ 80.773383][ T8297] hsr_slave_1: left promiscuous mode [ 80.775861][ T8297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.779097][ T8297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.782429][ T8297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.784606][ T8297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.802224][ T8297] veth1_to_batadv: left promiscuous mode [ 80.803869][ T8297] veth1_macvtap: left promiscuous mode [ 80.805430][ T8297] veth0_macvtap: left promiscuous mode [ 80.807275][ T8297] veth1_vlan: left promiscuous mode [ 80.809533][ T8297] veth0_vlan: left promiscuous mode [ 80.872889][ T8504] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 81.427039][ T65] cfg80211: failed to load regulatory.db [ 81.435305][ T8297] team0 (unregistering): Port device team_slave_1 removed [ 81.499206][ T5952] Bluetooth: hci1: command tx timeout [ 81.500498][ T8297] team0 (unregistering): Port device team_slave_0 removed [ 82.071491][ T8456] hsr_slave_0: entered promiscuous mode [ 82.074282][ T8456] hsr_slave_1: entered promiscuous mode [ 82.109087][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'. [ 82.183214][ T8525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'. [ 82.357877][ T8456] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 82.367137][ T8456] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 82.378818][ T8456] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 82.385650][ T8456] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 82.431268][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 82.485780][ T8537] macvlan0: entered promiscuous mode [ 82.487424][ T8537] macvlan0: entered allmulticast mode [ 82.489575][ T8537] veth1_vlan: entered allmulticast mode [ 82.522628][ T8456] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.549023][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.551822][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.554569][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.556771][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.570078][ T8537] tmpfs: Bad value for 'mpol' [ 82.654092][ T8543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.928'. [ 82.656510][ T8543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.658464][ T8543] IPv6: NLM_F_CREATE should be set when creating new route [ 82.660364][ T8543] IPv6: NLM_F_CREATE should be set when creating new route [ 82.681115][ T8456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.810149][ T8456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.815662][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 82.815677][ T40] audit: type=1400 audit(2000000006.730:479): avc: denied { map } for pid=8556 comm="syz.3.932" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.822806][ T8558] Invalid logical block size (134217730) [ 82.827448][ T40] audit: type=1400 audit(2000000006.740:480): avc: denied { read } for pid=8556 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.828167][ T8558] : renamed from wg1 (while UP) [ 82.834005][ T40] audit: type=1400 audit(2000000006.740:481): avc: denied { ioctl } for pid=8556 comm="syz.3.932" path="socket:[28823]" dev="sockfs" ino=28823 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.019234][ T8456] veth0_vlan: entered promiscuous mode [ 83.026582][ T8456] veth1_vlan: entered promiscuous mode [ 83.049159][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 83.078136][ T8456] veth0_macvtap: entered promiscuous mode [ 83.091702][ T8456] veth1_macvtap: entered promiscuous mode [ 83.110103][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.113803][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.117750][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.121530][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.124861][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.128664][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.136390][ T8456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.145667][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.149715][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.152406][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.158926][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.162145][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.165953][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.181595][ T8456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.197072][ T8456] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 83.205031][ T8456] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 83.210911][ T8456] wireguard: wg0: Could not create IPv4 socket [ 83.213769][ T8594] netlink: 'syz.4.947': attribute type 11 has an invalid length. [ 83.213806][ T8596] netlink: 'syz.3.948': attribute type 27 has an invalid length. [ 83.216884][ T8456] wireguard: wg1: Could not create IPv4 socket [ 83.221642][ T8456] wireguard: wg2: Could not create IPv4 socket [ 83.286253][ T8602] input: syz0 as /devices/virtual/input/input14 [ 83.422375][ T40] audit: type=1400 audit(2000000007.340:482): avc: denied { read } for pid=8617 comm="syz.3.959" name="btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 83.429943][ T8620] 8021q: VLANs not supported on gre0 [ 83.430488][ T40] audit: type=1400 audit(2000000007.340:483): avc: denied { open } for pid=8617 comm="syz.3.959" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 83.437986][ T40] audit: type=1400 audit(2000000007.340:484): avc: denied { ioctl } for pid=8617 comm="syz.3.959" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 83.451076][ T40] audit: type=1400 audit(2000000007.340:485): avc: denied { ioctl } for pid=8617 comm="syz.3.959" path="socket:[29932]" dev="sockfs" ino=29932 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.492785][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 83.495241][ T8624] netlink: 'syz.4.962': attribute type 11 has an invalid length. [ 83.503763][ T8624] netlink: 'syz.4.962': attribute type 1 has an invalid length. [ 83.636250][ T8629] team0: Device veth0_vlan failed to register rx_handler [ 83.670783][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 83.673203][ T40] audit: type=1400 audit(2000000007.590:486): avc: denied { write } for pid=8631 comm="syz.4.965" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 83.768074][ T8643] affs: No valid root block on device nullb0 [ 84.105878][ T8661] netlink: 'syz.4.977': attribute type 39 has an invalid length. [ 84.236834][ T8675] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 84.250829][ T8675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.412877][ T8700] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 84.422169][ T40] audit: type=1400 audit(2000000008.340:487): avc: denied { read write } for pid=8701 comm="syz.3.989" dev="sockfs" ino=27312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.494475][ T8719] input: syz0 as /devices/virtual/input/input15 [ 84.559150][ T40] audit: type=1800 audit(2000000008.470:488): pid=8719 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.995" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 84.700197][ T5952] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 84.701856][ T8749] FAULT_INJECTION: forcing a failure. [ 84.701856][ T8749] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.702672][ T5952] Bluetooth: hci3: Injecting HCI hardware error event [ 84.706614][ T8749] CPU: 0 UID: 0 PID: 8749 Comm: syz.0.1002 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 84.706630][ T8749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.706637][ T8749] Call Trace: [ 84.706640][ T8749] [ 84.706645][ T8749] dump_stack_lvl+0x16c/0x1f0 [ 84.706664][ T8749] should_fail_ex+0x50a/0x650 [ 84.706682][ T8749] _copy_from_user+0x2e/0xd0 [ 84.706693][ T8749] ? __pfx_do_get_msr+0x10/0x10 [ 84.706707][ T8749] msr_io+0x94/0x290 [ 84.706718][ T8749] ? rcu_is_watching+0x12/0xc0 [ 84.706729][ T8749] ? __pfx_msr_io+0x10/0x10 [ 84.706738][ T8749] ? unwind_get_return_address+0x59/0xa0 [ 84.706753][ T8749] ? kvm_arch_vcpu_ioctl+0x2004/0x5050 [ 84.706763][ T8749] ? lock_acquire+0x2f/0xb0 [ 84.706775][ T8749] ? kvm_arch_vcpu_ioctl+0x2004/0x5050 [ 84.706786][ T8749] kvm_arch_vcpu_ioctl+0x2021/0x5050 [ 84.706796][ T8749] ? kvm_arch_vcpu_ioctl+0x2004/0x5050 [ 84.706807][ T8749] ? hlock_class+0x4e/0x130 [ 84.706817][ T8749] ? __lock_acquire+0x15a9/0x3c40 [ 84.706831][ T8749] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 84.706844][ T8749] ? kasan_save_track+0x14/0x30 [ 84.706853][ T8749] ? __kasan_slab_free+0x51/0x70 [ 84.706863][ T8749] ? __pfx___lock_acquire+0x10/0x10 [ 84.706876][ T8749] ? __x64_sys_ioctl+0xb7/0x200 [ 84.706888][ T8749] ? do_syscall_64+0xcd/0x250 [ 84.706901][ T8749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.706917][ T8749] ? hlock_class+0x4e/0x130 [ 84.706928][ T8749] ? lock_acquire.part.0+0x11b/0x380 [ 84.706945][ T8749] ? __mutex_trylock_common+0xea/0x250 [ 84.706959][ T8749] ? __pfx___mutex_trylock_common+0x10/0x10 [ 84.706973][ T8749] ? kvm_vcpu_ioctl+0x27f/0x16b0 [ 84.706985][ T8749] ? rcu_is_watching+0x12/0xc0 [ 84.706995][ T8749] ? trace_contention_end+0xee/0x140 [ 84.707010][ T8749] ? __mutex_lock+0x1cc/0xb10 [ 84.707024][ T8749] ? kvm_vcpu_ioctl+0x27f/0x16b0 [ 84.707035][ T8749] ? tomoyo_path_number_perm+0x298/0x590 [ 84.707049][ T8749] ? __pfx___mutex_lock+0x10/0x10 [ 84.707066][ T8749] ? tomoyo_path_number_perm+0x190/0x590 [ 84.707081][ T8749] ? kvm_vcpu_ioctl+0x1258/0x16b0 [ 84.707091][ T8749] kvm_vcpu_ioctl+0x1258/0x16b0 [ 84.707104][ T8749] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 84.707119][ T8749] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 84.707136][ T8749] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 84.707153][ T8749] ? __pfx_lock_release+0x10/0x10 [ 84.707171][ T8749] ? selinux_file_ioctl+0x180/0x270 [ 84.707186][ T8749] ? selinux_file_ioctl+0xb4/0x270 [ 84.707201][ T8749] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 84.707213][ T8749] __x64_sys_ioctl+0x190/0x200 [ 84.707227][ T8749] do_syscall_64+0xcd/0x250 [ 84.707242][ T8749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.707255][ T8749] RIP: 0033:0x7f8843f8d169 [ 84.707263][ T8749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.707273][ T8749] RSP: 002b:00007f8844d84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.707283][ T8749] RAX: ffffffffffffffda RBX: 00007f88441a5fa0 RCX: 00007f8843f8d169 [ 84.707289][ T8749] RDX: 00002000000000c0 RSI: 00000000c008ae88 RDI: 0000000000000006 [ 84.707294][ T8749] RBP: 00007f8844d84090 R08: 0000000000000000 R09: 0000000000000000 [ 84.707300][ T8749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.707305][ T8749] R13: 0000000000000000 R14: 00007f88441a5fa0 R15: 00007ffc496259d8 [ 84.707317][ T8749] [ 84.807012][ T5944] Bluetooth: hci3: hardware error 0x00 [ 84.832713][ T8762] __nla_validate_parse: 2 callbacks suppressed [ 84.832724][ T8762] netlink: 612 bytes leftover after parsing attributes in process `syz.3.1005'. [ 84.921407][ T8774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.962820][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1012'. [ 84.965408][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 84.987616][ T8774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.020765][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 85.036593][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 85.038505][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.040763][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.042947][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.045141][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.047386][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.049725][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.051895][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.054089][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.056272][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.058474][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.060604][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.062713][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.064799][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.066919][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.069130][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.071300][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.073435][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.075546][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.077692][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.079884][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.082094][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.084303][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.086434][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.088632][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.090826][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.092939][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.095015][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.097168][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.099290][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.101432][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.103513][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.105657][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.107776][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.109988][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.112135][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.114252][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.116420][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.118757][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.120982][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.123203][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.125299][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.127437][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.129590][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.131671][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.133749][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.135838][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.137953][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.140189][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.142312][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.144507][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.146691][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.148847][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.151029][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.153260][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.155403][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.157654][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.159892][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.162077][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 85.164209][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 85.201452][ T8774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.334768][ T8774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.368864][ T8813] netlink: 344 bytes leftover after parsing attributes in process `syz.3.1016'. [ 85.451572][ T8774] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.456940][ T8774] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.463942][ T8774] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.469358][ T8774] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.815836][ T8846] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 86.281933][ T8889] 8021q: VLANs not supported on gre0 [ 86.352604][ T8898] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1035'. [ 86.366163][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 86.503535][ T8921] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 86.515212][ T8921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 86.682666][ T8952] veth1_to_batadv: entered promiscuous mode [ 86.684392][ T8952] macsec1: entered promiscuous mode [ 86.755677][ T8962] netlink: 612 bytes leftover after parsing attributes in process `syz.4.1056'. [ 86.774140][ T8963] block device autoloading is deprecated and will be removed. [ 86.776967][ T8954] md: md2 stopped. [ 86.858936][ T5944] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 86.924621][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1062'. [ 86.927163][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'. [ 87.018648][ T8991] netlink: 'syz.0.1063': attribute type 10 has an invalid length. [ 87.142645][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.148070][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.151860][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.155069][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.158160][ T5952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.161254][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.173740][ T9007] Failed to initialize the IGMP autojoin socket (err -2) [ 87.822547][ T9099] Failed to initialize the IGMP autojoin socket (err -2) [ 87.900153][ T9107] omfs: Invalid superblock (0) [ 87.940965][ T9115] input: syz0 as /devices/virtual/input/input16 [ 88.001073][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 88.001084][ T40] audit: type=1400 audit(2000000011.920:498): avc: denied { getopt } for pid=9124 comm="syz.4.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.197897][ T9147] kvm: pic: non byte read [ 88.201378][ T9147] kvm: pic: level sensitive irq not supported [ 88.201714][ T9147] kvm: pic: non byte read [ 88.206784][ T9147] kvm: pic: level sensitive irq not supported [ 88.207096][ T9147] kvm: pic: non byte read [ 88.211562][ T9147] kvm: pic: level sensitive irq not supported [ 88.211780][ T9147] kvm: pic: non byte read [ 88.442357][ T9166] 8021q: VLANs not supported on gre0 [ 88.478934][ T9170] team0: Device veth0_vlan failed to register rx_handler [ 88.744604][ T40] audit: type=1400 audit(2000000012.660:499): avc: denied { mounton } for pid=9189 comm="syz.4.1113" path="/proc/541/task" dev="proc" ino=29696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 88.857767][ T9204] netlink: 'syz.3.1117': attribute type 1 has an invalid length. [ 88.883478][ T9204] 8021q: adding VLAN 0 to HW filter on device bond9 [ 88.939670][ T40] audit: type=1400 audit(2000000012.860:500): avc: denied { shutdown } for pid=9211 comm="syz.3.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.082433][ T9007] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 89.090836][ T9007] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 89.096794][ T9007] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 89.128809][ T9007] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 89.178852][ T5952] Bluetooth: hci1: command tx timeout [ 89.188611][ T834] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 89.268243][ T9255] overlayfs: cannot append lower layer [ 89.342928][ T834] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.346204][ T834] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 89.352073][ T834] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.354982][ T834] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 89.357954][ T834] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 89.362814][ T834] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.365296][ T834] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.367461][ T834] usb 9-1: Product: syz [ 89.369608][ T834] usb 9-1: Manufacturer: syz [ 89.370102][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.374106][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.377423][ T834] cdc_wdm 9-1:1.0: skipping garbage [ 89.377439][ T834] cdc_wdm 9-1:1.0: skipping garbage [ 89.379696][ T834] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 89.383062][ T834] cdc_wdm 9-1:1.0: Unknown control protocol [ 89.384683][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.387607][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.391658][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.394627][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.398927][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.401883][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.405005][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.407738][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.412017][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.415571][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.425113][ T9007] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 89.431442][ T9007] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 89.436735][ T9007] wireguard: wg0: Could not create IPv4 socket [ 89.439669][ T9007] wireguard: wg1: Could not create IPv4 socket [ 89.442247][ T9007] wireguard: wg2: Could not create IPv4 socket [ 90.086423][ T9335] netlink: 'syz.3.1143': attribute type 1 has an invalid length. [ 90.242032][ T9345] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 90.308979][ T5983] usb 9-1: USB disconnect, device number 3 [ 90.503362][ T9371] __nla_validate_parse: 9 callbacks suppressed [ 90.503373][ T9371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1152'. [ 90.568904][ T40] audit: type=1326 audit(2000000014.480:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.4.1155" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a3858d169 code=0x0 [ 90.753106][ T9400] wg2: left promiscuous mode [ 90.754448][ T9400] wg2: left allmulticast mode [ 90.784280][ T9400] wireguard: wg2: Could not create IPv4 socket [ 90.786001][ T9400] wg2: entered promiscuous mode [ 90.787407][ T9400] wg2: entered allmulticast mode [ 90.811951][ T9408] tmpfs: Bad value for 'mpol' [ 90.903117][ T9419] input: syz0 as /devices/virtual/input/input17 [ 90.962358][ T40] audit: type=1400 audit(2000000014.880:502): avc: denied { write } for pid=9422 comm="syz.3.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.059546][ T5985] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.228533][ T5985] usb 5-1: Using ep0 maxpacket: 16 [ 91.231245][ T5985] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 91.234448][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 91.240186][ T5985] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 91.243219][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.245487][ T5985] usb 5-1: Product: syz [ 91.246667][ T5985] usb 5-1: Manufacturer: syz [ 91.247969][ T5985] usb 5-1: SerialNumber: syz [ 91.252390][ T5985] usb 5-1: config 0 descriptor?? [ 91.503404][ T5985] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 91.509001][ T5985] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 91.518641][ T5985] usb 5-1: USB disconnect, device number 2 [ 91.586116][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1173'. [ 91.605080][ T9475] 8021q: adding VLAN 0 to HW filter on device bond11 [ 91.675222][ T40] audit: type=1400 audit(2000000015.550:503): avc: denied { create } for pid=9483 comm="syz.3.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 91.678620][ T9491] netlink: 'syz.3.1175': attribute type 27 has an invalid length. [ 91.687596][ T9493] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 91.801043][ T9503] overlayfs: failed to resolve './file1': -2 [ 91.911656][ T40] audit: type=1400 audit(2000000015.830:504): avc: denied { bind } for pid=9510 comm="syz.3.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.232949][ T40] audit: type=1400 audit(2000000016.150:505): avc: denied { remount } for pid=9531 comm="syz.0.1182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 92.310934][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 92.484302][ T40] audit: type=1400 audit(2000000016.400:506): avc: denied { ioctl } for pid=9575 comm="syz.4.1191" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 92.540745][ T9584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1193'. [ 92.544084][ T9584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.723601][ T40] audit: type=1400 audit(2000000016.640:507): avc: denied { module_request } for pid=9602 comm="syz.4.1197" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 92.911807][ T9617] netlink: 'syz.0.1194': attribute type 1 has an invalid length. [ 93.768021][ T9666] input: syz0 as /devices/virtual/input/input18 [ 93.913448][ T40] audit: type=1400 audit(2000000017.830:508): avc: denied { getopt } for pid=9681 comm="syz.4.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.001266][ T9720] mmap: syz.0.1212 (9720): VmData 37597184 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 94.074542][ T9731] wg1 speed is unknown, defaulting to 1000 [ 94.076269][ T9731] wg1 speed is unknown, defaulting to 1000 [ 94.080936][ T9731] wg1 speed is unknown, defaulting to 1000 [ 94.086338][ T9731] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.092730][ T9731] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 94.115285][ T9731] wg1 speed is unknown, defaulting to 1000 [ 94.118916][ T9731] wg1 speed is unknown, defaulting to 1000 [ 94.124312][ T9731] wg1 speed is unknown, defaulting to 1000 [ 94.166833][ T9735] ata1.00: invalid multi_count 128 ignored [ 94.290391][ T9748] openvswitch: netlink: Flow actions attr not present in new flow. [ 94.437543][ T9763] ata1.00: invalid multi_count 128 ignored [ 94.471703][ T9767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1231'. [ 94.524860][ T9769] FAULT_INJECTION: forcing a failure. [ 94.524860][ T9769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.531815][ T9769] CPU: 1 UID: 0 PID: 9769 Comm: syz.4.1232 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 94.531828][ T9769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.531835][ T9769] Call Trace: [ 94.531842][ T9769] [ 94.531845][ T9769] dump_stack_lvl+0x16c/0x1f0 [ 94.531875][ T9769] should_fail_ex+0x50a/0x650 [ 94.531896][ T9769] _copy_to_user+0x32/0xd0 [ 94.531908][ T9769] simple_read_from_buffer+0xd0/0x160 [ 94.531924][ T9769] proc_fail_nth_read+0x198/0x270 [ 94.531938][ T9769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.531953][ T9769] ? rw_verify_area+0xcf/0x680 [ 94.531966][ T9769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.531979][ T9769] vfs_read+0x1df/0xbf0 [ 94.531994][ T9769] ? __fget_files+0x1fc/0x3a0 [ 94.532004][ T9769] ? __pfx___mutex_lock+0x10/0x10 [ 94.532018][ T9769] ? __pfx_vfs_read+0x10/0x10 [ 94.532036][ T9769] ? __fget_files+0x206/0x3a0 [ 94.532048][ T9769] ksys_read+0x12b/0x250 [ 94.532062][ T9769] ? __pfx_ksys_read+0x10/0x10 [ 94.532081][ T9769] do_syscall_64+0xcd/0x250 [ 94.532095][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.532110][ T9769] RIP: 0033:0x7f2a3858bb7c [ 94.532122][ T9769] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 94.532132][ T9769] RSP: 002b:00007f2a39406030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.532141][ T9769] RAX: ffffffffffffffda RBX: 00007f2a387a5fa0 RCX: 00007f2a3858bb7c [ 94.532147][ T9769] RDX: 000000000000000f RSI: 00007f2a394060a0 RDI: 0000000000000007 [ 94.532153][ T9769] RBP: 00007f2a39406090 R08: 0000000000000000 R09: 0000000000000000 [ 94.532158][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.532164][ T9769] R13: 0000000000000000 R14: 00007f2a387a5fa0 R15: 00007ffe5bd53948 [ 94.532176][ T9769] [ 94.693421][ T40] audit: type=1400 audit(2000000018.610:509): avc: denied { getopt } for pid=9771 comm="syz.0.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.693754][ T9772] bpf: Bad value for 'gid' [ 94.795511][ T9781] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1237'. [ 94.996490][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 95.177609][ T9824] afs: Unknown parameter 'dùneÖ' [ 95.357345][ T9847] team0: Device veth0_vlan failed to register rx_handler [ 95.439392][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'. [ 95.582414][ T40] audit: type=1400 audit(2000000019.500:510): avc: denied { read } for pid=9878 comm="syz.3.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.644133][ T9887] mkiss: ax0: crc mode is auto. [ 95.665305][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.666454][ T9892] input: syz0 as /devices/virtual/input/input19 [ 95.673198][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.677285][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.685984][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.690762][ T5944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.693563][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.711810][ T9889] Failed to initialize the IGMP autojoin socket (err -2) [ 95.715660][ T9895] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1274'. [ 95.719675][ T9895] netlink: 'syz.4.1274': attribute type 16 has an invalid length. [ 95.721878][ T9895] netlink: 'syz.4.1274': attribute type 17 has an invalid length. [ 95.728294][ T9895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.740360][ T40] audit: type=1400 audit(2000000019.660:511): avc: denied { setopt } for pid=9894 comm="syz.4.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.771527][ T9900] netlink: 612 bytes leftover after parsing attributes in process `syz.4.1275'. [ 95.799468][ T9904] netlink: 'syz.4.1276': attribute type 27 has an invalid length. [ 96.011405][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 96.260517][ T9948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1285'. [ 96.263042][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 96.272984][ T9950] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 96.368335][ T9889] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 96.389991][ T9889] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 96.412211][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 96.415068][ T9965] mkiss: ax0: crc mode is auto. [ 96.416661][ T9889] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 96.444610][ T9889] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 96.641669][ T9998] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1296'. [ 96.705681][T10014] netlink: 'syz.0.1300': attribute type 3 has an invalid length. [ 96.707788][T10014] netlink: 'syz.0.1300': attribute type 1 has an invalid length. [ 96.711222][T10014] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1300'. [ 96.713773][T10014] NCSI netlink: No device for ifindex 33022 [ 96.741781][T10013] hfs: can't find a HFS filesystem on dev sr0 [ 96.773217][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.776984][T10027] netlink: 'syz.0.1305': attribute type 1 has an invalid length. [ 96.786320][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.790423][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.793485][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.796678][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.803621][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.827015][T10027] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.834373][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.837778][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.841350][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.845108][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.849250][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.852775][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.861750][ T9889] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 96.878513][ T9889] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 96.889927][T10041] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1308'. [ 96.890985][ T9889] wireguard: wg0: Could not create IPv4 socket [ 96.904253][T10041] mkiss: ax0: crc mode is auto. [ 96.906425][ T9889] wireguard: wg1: Could not create IPv4 socket [ 96.914530][ T9889] wireguard: wg2: Could not create IPv4 socket [ 97.066298][T10072] netlink: 'syz.3.1317': attribute type 10 has an invalid length. [ 97.075722][T10072] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.093824][T10072] bond0: (slave team0): Enslaving as an active interface with an up link [ 97.101806][T10079] netlink: 'syz.0.1319': attribute type 27 has an invalid length. [ 97.273982][T10101] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 97.436515][T10117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1329'. [ 97.440680][T10117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.567023][T10127] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 98.219059][ T40] audit: type=1400 audit(2000000022.140:512): avc: denied { getopt } for pid=10181 comm="syz.3.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 98.527383][ T40] audit: type=1400 audit(2000000022.440:513): avc: denied { ioctl } for pid=10217 comm="syz.4.1345" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.547850][T10226] team0: Device veth0_vlan failed to register rx_handler [ 98.585965][T10231] 8021q: VLANs not supported on gre0 [ 98.649845][T10239] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 98.659477][T10239] 8021q: adding VLAN 0 to HW filter on device bond5 [ 98.872465][T10267] 9pnet_fd: Insufficient options for proto=fd [ 98.927810][T10275] ptrace attach of "/syz-executor exec"[5940] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 99.090763][T10292] nbd: illegal input index 1507328 [ 99.131559][ T40] audit: type=1400 audit(2000000023.050:514): avc: denied { getopt } for pid=10285 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.259057][ T40] audit: type=1400 audit(2000000023.170:515): avc: denied { getopt } for pid=10304 comm="syz.0.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.407403][ T40] audit: type=1400 audit(2000000023.320:516): avc: denied { setopt } for pid=10317 comm="syz.3.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.449684][T10327] tmpfs: Bad value for 'mpol' [ 100.385727][T10438] No buffer was provided with the request [ 100.557219][T10459] team0: Device veth0_vlan failed to register rx_handler [ 100.581454][T10461] 8021q: adding VLAN 0 to HW filter on device bond13 [ 100.618467][ T40] audit: type=1400 audit(2000000024.530:517): avc: denied { search } for pid=5655 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.678102][ T40] audit: type=1400 audit(2000000024.530:518): avc: denied { read } for pid=5655 comm="dhcpcd" name="n153" dev="tmpfs" ino=5819 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.686080][ T40] audit: type=1400 audit(2000000024.530:519): avc: denied { open } for pid=5655 comm="dhcpcd" path="/run/udev/data/n153" dev="tmpfs" ino=5819 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.692913][ T40] audit: type=1400 audit(2000000024.530:520): avc: denied { getattr } for pid=5655 comm="dhcpcd" path="/run/udev/data/n153" dev="tmpfs" ino=5819 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.707322][ T40] audit: type=1400 audit(2000000024.540:521): avc: denied { append } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.721402][ T40] audit: type=1400 audit(2000000024.540:522): avc: denied { ioctl } for pid=10387 comm="syz.4.1396" path="socket:[32696]" dev="sockfs" ino=32696 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.730440][ T40] audit: type=1400 audit(2000000024.540:523): avc: denied { module_request } for pid=10387 comm="syz.4.1396" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 101.028261][T10499] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 101.055693][T10499] XFS (nbd0): no-recovery mounts must be read-only. [ 101.092820][T10497] __nla_validate_parse: 9 callbacks suppressed [ 101.092832][T10497] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1417'. [ 101.097327][T10497] validate_nla: 2 callbacks suppressed [ 101.097335][T10497] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 101.233440][T10505] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1420'. [ 101.520114][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 101.592957][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 101.688264][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1426'. [ 101.710879][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1426'. [ 101.830255][T10531] netlink: 'syz.3.1430': attribute type 2 has an invalid length. [ 101.832708][T10531] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 101.835095][T10531] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 101.837963][T10531] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1430'. [ 101.847025][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1431'. [ 101.884061][T10531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1430'. [ 102.040343][T10554] vivid-003: ================= START STATUS ================= [ 102.042767][T10554] vivid-003: Radio HW Seek Mode: Bounded [ 102.045746][T10554] vivid-003: Radio Programmable HW Seek: false [ 102.047544][T10554] vivid-003: RDS Rx I/O Mode: Block I/O [ 102.049706][T10554] vivid-003: Generate RBDS Instead of RDS: false [ 102.051526][T10554] vivid-003: RDS Reception: true [ 102.052914][T10554] vivid-003: RDS Program Type: 0 inactive [ 102.054509][T10554] vivid-003: RDS PS Name: inactive [ 102.056042][T10554] vivid-003: RDS Radio Text: inactive [ 102.057589][T10554] vivid-003: RDS Traffic Announcement: false inactive [ 102.077521][T10554] vivid-003: RDS Traffic Program: false inactive [ 102.083092][T10554] vivid-003: RDS Music: false inactive [ 102.084681][T10554] vivid-003: ================== END STATUS ================== [ 102.459580][T10578] overlayfs: failed to resolve './file0': -2 [ 102.461111][T10580] input: syz0 as /devices/virtual/input/input20 [ 102.679890][T10608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1459'. [ 102.682435][T10608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.743295][T10616] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 102.920825][T10637] 9pnet_fd: Insufficient options for proto=fd [ 103.129172][T10664] Failed to initialize the IGMP autojoin socket (err -2) [ 103.229636][T10673] openvswitch: netlink: IP tunnel TTL not specified. [ 103.533816][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.538249][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.541067][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.543535][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.546437][ T5944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 103.549643][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.569652][T10700] Failed to initialize the IGMP autojoin socket (err -2) [ 103.902709][T10750] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 103.984685][T10763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.025952][T10770] syz2: rxe_newlink: already configured on ipvlan1 [ 104.165022][T10786] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.292007][ T40] kauditd_printk_skb: 130 callbacks suppressed [ 104.292017][ T40] audit: type=1400 audit(2000000028.210:654): avc: denied { create } for pid=10794 comm="syz.3.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.300177][ T40] audit: type=1400 audit(2000000028.220:655): avc: denied { create } for pid=10794 comm="syz.3.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 104.307591][ T40] audit: type=1400 audit(2000000028.220:656): avc: denied { bind } for pid=10794 comm="syz.3.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.313458][ T40] audit: type=1400 audit(2000000028.220:657): avc: denied { listen } for pid=10794 comm="syz.3.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.342616][T10799] netlink: 'syz.0.1517': attribute type 1 has an invalid length. [ 104.583021][T10803] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 104.592225][T10803] CIFS mount error: No usable UNC path provided in device string! [ 104.592225][T10803] [ 104.595909][T10803] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 104.732434][T10824] MTD: Couldn't look up '/dev/sg0': -15 [ 104.734012][T10700] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 104.742080][ T40] audit: type=1400 audit(2000000028.660:658): avc: denied { accept } for pid=10823 comm="syz.3.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.760185][T10700] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 104.771888][T10700] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 104.787672][T10700] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 104.883654][T10829] /dev/sr0: Can't open blockdev [ 105.017493][ T40] audit: type=1400 audit(2000000028.930:659): avc: denied { create } for pid=10864 comm="syz.4.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.033604][ T40] audit: type=1400 audit(2000000028.930:660): avc: denied { read } for pid=10864 comm="syz.4.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.043849][ T40] audit: type=1400 audit(2000000028.930:661): avc: denied { listen } for pid=10864 comm="syz.4.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.049461][ T40] audit: type=1400 audit(2000000028.930:662): avc: denied { connect } for pid=10864 comm="syz.4.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.054728][ T40] audit: type=1400 audit(2000000028.930:663): avc: denied { setopt } for pid=10864 comm="syz.4.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.094682][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.099888][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.103392][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.107105][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.111491][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.115413][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.124186][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.128032][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.132201][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.136103][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.139768][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.143519][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.152303][T10700] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 105.162376][T10700] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 105.173112][T10700] wireguard: wg0: Could not create IPv4 socket [ 105.177631][T10700] wireguard: wg1: Could not create IPv4 socket [ 105.183699][T10700] wireguard: wg2: Could not create IPv4 socket [ 105.201148][T10885] 8021q: VLANs not supported on gre0 [ 105.243269][T10888] 8021q: adding VLAN 0 to HW filter on device bond7 [ 105.621522][T10931] Failed to initialize the IGMP autojoin socket (err -2) [ 105.802468][T10952] netlink: 'syz.3.1545': attribute type 27 has an invalid length. [ 105.990303][T10981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.109913][T10994] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 106.252111][T11005] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 106.254162][T11005] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.259565][T11005] vhci_hcd vhci_hcd.0: Device attached [ 106.303231][T11022] cgroup: release_agent respecified [ 106.306080][T11022] cgroup: release_agent respecified [ 106.307680][T11022] cgroup: release_agent respecified [ 106.310555][T11022] cgroup: release_agent respecified [ 106.312164][T11022] cgroup: release_agent respecified [ 106.313897][T11022] cgroup: release_agent respecified [ 106.315554][T11022] cgroup: release_agent respecified [ 106.317536][T11022] cgroup: release_agent respecified [ 106.321007][T11022] cgroup: release_agent respecified [ 106.323749][T11022] cgroup: release_agent respecified [ 106.325616][T11022] cgroup: release_agent respecified [ 106.327387][T11022] cgroup: release_agent respecified [ 106.330069][T11022] cgroup: release_agent respecified [ 106.331650][T11022] cgroup: release_agent respecified [ 106.333345][T11022] cgroup: release_agent respecified [ 106.335098][T11022] cgroup: release_agent respecified [ 106.336815][T11022] cgroup: release_agent respecified [ 106.339415][T11022] cgroup: release_agent respecified [ 106.341935][T11022] cgroup: release_agent respecified [ 106.344049][T11022] cgroup: release_agent respecified [ 106.346354][T11022] cgroup: release_agent respecified [ 106.348150][T11022] cgroup: release_agent respecified [ 106.350238][T11022] cgroup: release_agent respecified [ 106.351983][T11022] cgroup: release_agent respecified [ 106.353659][T11022] cgroup: release_agent respecified [ 106.355282][T11022] cgroup: release_agent respecified [ 106.357017][T11022] cgroup: release_agent respecified [ 106.359368][T11022] cgroup: release_agent respecified [ 106.362830][T11022] cgroup: release_agent respecified [ 106.364979][T11022] cgroup: release_agent respecified [ 106.367146][T11022] cgroup: release_agent respecified [ 106.369661][T11022] cgroup: release_agent respecified [ 106.371416][T11022] cgroup: release_agent respecified [ 106.373055][T11022] cgroup: release_agent respecified [ 106.374667][T11022] cgroup: release_agent respecified [ 106.377556][T11022] cgroup: release_agent respecified [ 106.380054][T11022] cgroup: release_agent respecified [ 106.381800][T11022] cgroup: release_agent respecified [ 106.383474][T11022] cgroup: release_agent respecified [ 106.385228][T11022] cgroup: release_agent respecified [ 106.387080][T11022] cgroup: release_agent respecified [ 106.389682][T11022] cgroup: release_agent respecified [ 106.391775][T11022] cgroup: release_agent respecified [ 106.394252][T11022] cgroup: release_agent respecified [ 106.398756][T11022] cgroup: release_agent respecified [ 106.400527][T11022] cgroup: release_agent respecified [ 106.402137][T11022] cgroup: release_agent respecified [ 106.403815][T11022] cgroup: release_agent respecified [ 106.405421][T11022] cgroup: release_agent respecified [ 106.407479][T11022] cgroup: release_agent respecified [ 106.414481][T11022] cgroup: release_agent respecified [ 106.417506][T11022] cgroup: release_agent respecified [ 106.421896][T11022] cgroup: release_agent respecified [ 106.424261][T11022] cgroup: release_agent respecified [ 106.426997][T11022] cgroup: release_agent respecified [ 106.430210][T11022] cgroup: release_agent respecified [ 106.432790][T11022] cgroup: release_agent respecified [ 106.434456][T11022] cgroup: release_agent respecified [ 106.436056][T11022] cgroup: release_agent respecified [ 106.438267][T11022] cgroup: release_agent respecified [ 106.440456][ T58] vhci_hcd: vhci_device speed not set [ 106.441263][T11022] cgroup: release_agent respecified [ 106.444872][T11022] cgroup: release_agent respecified [ 106.447302][T11022] cgroup: release_agent respecified [ 106.450583][T11022] cgroup: release_agent respecified [ 106.452774][T11022] cgroup: release_agent respecified [ 106.499311][ T58] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 106.520318][T11043] overlayfs: missing 'workdir' [ 106.674251][T11062] random: crng reseeded on system resumption [ 106.848455][ T5982] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.913807][T11062] Restarting kernel threads ... done. [ 106.998429][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 107.001277][ T5982] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.004040][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.006756][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.009963][ T5982] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.013560][ T5982] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.016179][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.024144][T11015] vhci_hcd: connection reset by peer [ 107.030462][ T1144] vhci_hcd: stop threads [ 107.032349][ T1144] vhci_hcd: release socket [ 107.034799][ T1144] vhci_hcd: disconnect device [ 107.221216][ T5982] usb 5-1: GET_CAPABILITIES returned 0 [ 107.222761][ T5982] usbtmc 5-1:16.0: can't read capabilities [ 107.429012][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 107.452192][ T65] usb 5-1: USB disconnect, device number 3 [ 107.585930][T11125] netlink: 'syz.0.1578': attribute type 6 has an invalid length. [ 107.675736][T11157] nfs: Bad value for 'source' [ 107.683508][T11161] team0: Device veth0_vlan failed to register rx_handler [ 107.713878][T11165] __nla_validate_parse: 11 callbacks suppressed [ 107.713890][T11165] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1588'. [ 107.734995][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1590'. [ 107.890553][T11187] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 107.894681][T11191] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 107.932657][T11191] 8021q: adding VLAN 0 to HW filter on device bond6 [ 107.981130][T11198] input: syz0 as /devices/virtual/input/input23 [ 108.028515][ T65] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.088240][T11216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1608'. [ 108.090983][T11216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.180247][ T65] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 108.183579][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.187611][ T65] usb 5-1: config 0 descriptor?? [ 108.192242][ T65] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 108.911111][ T834] usb 5-1: USB disconnect, device number 4 [ 108.965740][T11240] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1616'. [ 109.138235][T11246] netlink: 612 bytes leftover after parsing attributes in process `syz.3.1619'. [ 109.202000][T11234] delete_channel: no stack [ 109.386252][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 109.388752][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 109.388763][ T40] audit: type=1400 audit(2000000033.300:691): avc: denied { mount } for pid=11262 comm="syz.3.1627" name="/" dev="hugetlbfs" ino=42063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 109.390336][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 109.391828][ T40] audit: type=1400 audit(2000000033.310:692): avc: denied { remount } for pid=11262 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 109.400183][T11263] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1624'. [ 109.402532][T11264] hugetlbfs: Bad value 'e' for mount option 'size' [ 109.402532][T11264] [ 109.410937][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1624'. [ 109.414453][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 109.423723][ T40] audit: type=1400 audit(2000000033.340:693): avc: denied { execute } for pid=11262 comm="syz.3.1627" name="file2" dev="tmpfs" ino=2411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.431230][ T40] audit: type=1400 audit(2000000033.340:694): avc: denied { execute_no_trans } for pid=11262 comm="syz.3.1627" path="/461/file2" dev="tmpfs" ino=2411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.437623][ T40] audit: type=1400 audit(2000000033.350:695): avc: denied { mounton } for pid=11262 comm="syz.3.1627" path="/461/file0" dev="hugetlbfs" ino=42063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 109.482670][T11264] netlink: 'syz.3.1627': attribute type 3 has an invalid length. [ 109.518772][T11264] nvme_fabrics: missing parameter 'transport=%s' [ 109.520692][T11264] nvme_fabrics: missing parameter 'nqn=%s' [ 109.553665][T11267] loop9: detected capacity change from 0 to 7 [ 109.556121][T11267] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.560623][T11267] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.562724][T11267] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.564787][T11267] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.567361][T11267] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.570354][T11267] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.572857][T11267] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.575164][T11267] ldm_validate_partition_table(): Disk read failed. [ 109.577055][T11267] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.580371][T11267] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.582581][T11267] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.584881][T11267] Dev loop9: unable to read RDB block 0 [ 109.586615][T11267] loop9: unable to read partition table [ 109.595039][T11267] loop9: partition table beyond EOD, truncated [ 109.596921][T11267] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 109.596921][T11267] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 109.614170][ T40] audit: type=1400 audit(2000000033.530:696): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 109.734873][T11284] netlink: 'syz.3.1633': attribute type 27 has an invalid length. [ 109.742853][T11288] input: syz0 as /devices/virtual/input/input24 [ 109.795483][T11294] program syz.0.1637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.872973][ T40] audit: type=1400 audit(2000000033.790:697): avc: denied { write } for pid=11310 comm="syz.4.1644" path="socket:[40915]" dev="sockfs" ino=40915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.936374][T11322] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 109.966269][T11325] ubi31: attaching mtd0 [ 109.974217][T11325] ubi31: scanning is finished [ 109.976037][T11325] ubi31: empty MTD device detected [ 110.134183][T11325] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 110.136241][T11325] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 110.138305][T11325] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 110.140560][T11325] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 110.142634][T11325] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 110.145109][T11325] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 110.148014][T11325] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 950929332 [ 110.152036][T11325] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 110.156696][T11334] ubi31: background thread "ubi_bgt31d" started, PID 11334 [ 110.425225][ T40] audit: type=1400 audit(2000000034.340:698): avc: denied { read } for pid=11360 comm="syz.4.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.480437][T11366] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 110.482709][T11366] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 110.486386][T11366] vhci_hcd vhci_hcd.0: Device attached [ 110.493783][ T40] audit: type=1400 audit(2000000034.410:699): avc: denied { mount } for pid=11365 comm="syz.0.1666" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 110.658586][ T3233] vhci_hcd: vhci_device speed not set [ 110.718591][ T3233] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 110.783701][ T40] audit: type=1400 audit(2000000034.700:700): avc: denied { setopt } for pid=11386 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.988633][T11402] 9pnet_virtio: no channels available for device syz [ 111.084220][T11408] openvswitch: netlink: Multiple metadata blocks provided [ 111.088438][T11407] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 111.090357][T11407] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.094067][T11407] vhci_hcd vhci_hcd.0: Device attached [ 111.096608][T11409] vhci_hcd: connection closed [ 111.098214][ T8306] vhci_hcd: stop threads [ 111.102433][ T8306] vhci_hcd: release socket [ 111.103995][ T8306] vhci_hcd: disconnect device [ 111.310434][T11367] vhci_hcd: connection reset by peer [ 111.312147][ T3764] vhci_hcd: stop threads [ 111.313459][ T3764] vhci_hcd: release socket [ 111.314893][ T3764] vhci_hcd: disconnect device [ 111.642411][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.646839][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.648507][ T58] vhci_hcd: vhci_device speed not set [ 111.650314][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.652816][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.655914][ T5944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 111.658434][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.673733][T11422] Failed to initialize the IGMP autojoin socket (err -2) [ 112.058460][ T8539] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 112.203413][ T8539] usb 9-1: device descriptor read/64, error -71 [ 112.224020][T11422] netdevsim netdevsim5 netdevsim0: renamed from eth10 [ 112.237878][T11422] netdevsim netdevsim5 netdevsim1: renamed from eth11 [ 112.247368][T11422] netdevsim netdevsim5 netdevsim2: renamed from eth12 [ 112.268830][T11422] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 112.448479][ T8539] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 112.472971][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.477078][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.482267][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.485302][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.489656][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.492641][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.496881][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.501067][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.503936][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.506862][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.509927][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.513163][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.517515][T11422] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 112.525189][T11422] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 112.530755][T11422] wireguard: wg0: Could not create IPv4 socket [ 112.533718][T11422] wireguard: wg1: Could not create IPv4 socket [ 112.536514][T11422] wireguard: wg2: Could not create IPv4 socket [ 112.580664][ T8539] usb 9-1: device descriptor read/64, error -71 [ 112.688692][ T8539] usb usb9-port1: attempt power cycle [ 112.894394][ T5952] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 112.923577][T11489] __nla_validate_parse: 9 callbacks suppressed [ 112.923588][T11489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1709'. [ 112.927868][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 113.031315][T11503] netlink: 612 bytes leftover after parsing attributes in process `syz.3.1715'. [ 113.038469][ T8539] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 113.059033][ T8539] usb 9-1: device descriptor read/8, error -71 [ 113.116878][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'. [ 113.146659][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1721'. [ 113.165255][T11520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1722'. [ 113.211342][T11526] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.218182][T11526] JFS: discard option not supported on device [ 113.223527][T11526] syz.0.1725: attempt to access beyond end of device [ 113.223527][T11526] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 113.230666][T11526] syz.0.1725: attempt to access beyond end of device [ 113.230666][T11526] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 113.235393][T11526] Mount JFS Failure: -5 [ 113.284875][T11530] input: syz0 as /devices/virtual/input/input25 [ 113.318580][ T8539] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 113.339262][ T8539] usb 9-1: device descriptor read/8, error -71 [ 113.384776][T11538] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 113.399404][T11538] 8021q: adding VLAN 0 to HW filter on device bond15 [ 113.452952][ T8539] usb usb9-port1: unable to enumerate USB device [ 113.511373][T11554] syz2: rxe_newlink: already configured on ipvlan1 [ 113.572580][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1739'. [ 113.682012][T11574] bond16: entered promiscuous mode [ 113.683628][T11574] bond16: entered allmulticast mode [ 113.685282][T11574] 8021q: adding VLAN 0 to HW filter on device bond16 [ 113.738617][ T5952] Bluetooth: hci1: command tx timeout [ 113.768868][T11582] support for the xor transformation has been removed. [ 113.819415][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 114.051082][T11597] overlayfs: failed to resolve './file1': -2 [ 114.073570][T11597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.701235][ T6008] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 114.860155][ T6008] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 114.864000][ T6008] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 114.867535][ T6008] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 114.870423][ T6008] usb 5-1: string descriptor 0 read error: -22 [ 114.873352][ T6008] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.876729][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.888796][T11614] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 115.081264][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 115.081276][ T40] audit: type=1400 audit(2000000038.990:714): avc: denied { execute } for pid=11660 comm="syz.4.1778" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=42709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 115.082273][T11663] netlink: 612 bytes leftover after parsing attributes in process `syz.3.1777'. [ 115.091216][T11614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=11614 comm=syz.0.1758 [ 115.091604][T11661] mmap: syz.4.1778 (11661) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.096594][T11664] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 115.106927][T11664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.127051][T11664] vhci_hcd vhci_hcd.0: Device attached [ 115.127520][ T6008] cdc_ncm 5-1:1.0: bind() failure [ 115.133919][ T6008] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 115.136409][ T6008] cdc_ncm 5-1:1.1: bind() failure [ 115.139139][ T40] audit: type=1400 audit(2000000039.060:715): avc: denied { create } for pid=11660 comm="syz.4.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.146565][ T40] audit: type=1400 audit(2000000039.060:716): avc: denied { connect } for pid=11660 comm="syz.4.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.148223][ T6008] usb 5-1: USB disconnect, device number 5 [ 115.151006][T11672] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1780'. [ 115.155654][ T40] audit: type=1400 audit(2000000039.060:717): avc: denied { connect } for pid=11660 comm="syz.4.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.170730][ T40] audit: type=1400 audit(2000000039.070:718): avc: denied { write } for pid=11660 comm="syz.4.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.282372][T11678] team0: No ports can be present during mode change [ 115.368604][ T8539] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 115.398856][ T58] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 115.532706][ T40] audit: type=1400 audit(2000000039.450:719): avc: denied { getopt } for pid=11694 comm="syz.3.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.558557][ T58] usb 9-1: Using ep0 maxpacket: 16 [ 115.564841][ T58] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 115.568961][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.572081][ T58] usb 9-1: Product: syz [ 115.573725][ T58] usb 9-1: Manufacturer: syz [ 115.575507][ T58] usb 9-1: SerialNumber: syz [ 115.579762][ T58] usb 9-1: config 0 descriptor?? [ 115.583856][ T58] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 115.591144][ T58] usb 9-1: Detected FT232H [ 115.700398][T11701] netlink: 'syz.3.1792': attribute type 11 has an invalid length. [ 115.783316][T11665] usb 45-1: recv xbuf, 0 [ 115.789188][ T8305] vhci_hcd: stop threads [ 115.790646][ T8305] vhci_hcd: release socket [ 115.791779][ T58] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 115.791921][ T8305] vhci_hcd: disconnect device [ 115.796756][ T58] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 115.802272][ T58] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 115.809589][ T58] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.812854][ T3233] vhci_hcd: vhci_device speed not set [ 115.818635][ T58] usb 9-1: USB disconnect, device number 8 [ 115.824709][ T58] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 115.827668][ T58] ftdi_sio 9-1:0.0: device disconnected [ 115.859582][ T8539] vhci_hcd: vhci_device speed not set [ 115.864570][ T40] audit: type=1400 audit(2000000039.780:720): avc: denied { lock } for pid=11708 comm="syz.3.1796" path="socket:[42885]" dev="sockfs" ino=42885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 115.965214][T11712] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 116.293929][T11736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=11736 comm=syz.0.1807 [ 116.493449][ T40] audit: type=1400 audit(2000000040.410:721): avc: denied { read } for pid=11746 comm="syz.4.1812" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 116.506703][ T40] audit: type=1400 audit(2000000040.410:722): avc: denied { open } for pid=11746 comm="syz.4.1812" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 116.523238][ T40] audit: type=1400 audit(2000000040.410:723): avc: denied { read write } for pid=11746 comm="syz.4.1812" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.177719][T11802] team0: Device veth0_vlan failed to register rx_handler [ 117.209423][T11805] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 117.249539][T11811] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ [ 117.405997][T11826] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 117.583547][T11831] netlink: 'syz.0.1845': attribute type 1 has an invalid length. [ 117.947143][T11840] netlink: 'syz.4.1850': attribute type 32 has an invalid length. [ 117.950067][T11840] __nla_validate_parse: 8 callbacks suppressed [ 117.950078][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'. [ 117.954536][T11840] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 117.972381][T11840] batadv1: entered promiscuous mode [ 117.974290][T11840] batadv1: entered allmulticast mode [ 118.090745][T11843] netlink: 'syz.4.1851': attribute type 1 has an invalid length. [ 118.105286][T11843] 8021q: adding VLAN 0 to HW filter on device bond8 [ 118.281978][T11856] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 118.345153][T11859] netlink: 'syz.0.1858': attribute type 10 has an invalid length. [ 118.349301][T11859] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1858'. [ 118.352688][T11859] team0: entered promiscuous mode [ 118.354519][T11859] team_slave_0: entered promiscuous mode [ 118.356719][T11859] team_slave_1: entered promiscuous mode [ 118.362066][T11859] bridge0: port 3(team0) entered blocking state [ 118.364008][T11859] bridge0: port 3(team0) entered disabled state [ 118.365998][T11859] team0: entered allmulticast mode [ 118.367452][T11859] team_slave_0: entered allmulticast mode [ 118.369665][T11859] team_slave_1: entered allmulticast mode [ 118.704850][T11891] syz.4.1867: attempt to access beyond end of device [ 118.704850][T11891] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 118.709284][T11891] EXT4-fs (nbd4): unable to read superblock [ 118.720754][T11891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1867'. [ 118.960187][T11916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1878'. [ 118.964643][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 118.984051][T11918] team0: Device veth0_vlan failed to register rx_handler [ 119.255790][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1891'. [ 119.346228][T11953] netlink: 'syz.0.1896': attribute type 27 has an invalid length. [ 119.460772][T11961] smc: net device bond0 applied user defined pnetid SYZ0 [ 119.518405][T11961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11961 comm=syz.4.1901 [ 119.689948][T11982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1909'. [ 119.750897][T11990] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1912'. [ 119.752332][T11992] netlink: 'syz.0.1914': attribute type 1 has an invalid length. [ 119.775334][T11992] 8021q: adding VLAN 0 to HW filter on device bond9 [ 119.798084][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 119.809581][T11999] cgroup: release_agent respecified [ 119.870722][T12006] netlink: set zone limit has 8 unknown bytes [ 119.873964][T12006] netlink: del zone limit has 4 unknown bytes [ 119.898489][T12008] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 119.916558][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'. [ 120.026617][T12025] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 120.219597][T12031] netlink: 'syz.0.1929': attribute type 2 has an invalid length. [ 120.222255][T12031] netlink: 'syz.0.1929': attribute type 1 has an invalid length. [ 120.282654][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 120.282670][ T40] audit: type=1400 audit(2000000044.200:836): avc: denied { map } for pid=12036 comm="syz.4.1932" path="/dev/vsock" dev="devtmpfs" ino=1334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.285071][T12037] geneve2: entered promiscuous mode [ 120.294202][T12037] geneve2: entered allmulticast mode [ 120.302269][T12037] CIFS mount error: No usable UNC path provided in device string! [ 120.302269][T12037] [ 120.304998][T12037] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 120.308350][ T40] audit: type=1400 audit(2000000044.220:837): avc: denied { shutdown } for pid=12036 comm="syz.4.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.374900][ T40] audit: type=1400 audit(2000000044.290:838): avc: denied { open } for pid=12041 comm="syz.0.1934" path="/dev/ttyq4" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 120.870636][T12068] team0: Device veth0_vlan failed to register rx_handler [ 120.882969][T12070] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 120.882969][T12070] program syz.0.1947 not setting count and/or reply_len properly [ 121.140379][ T40] audit: type=1400 audit(2000000045.060:839): avc: denied { mounton } for pid=12092 comm="syz.4.1958" path="mnt:[4026532882]" dev="nsfs" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 121.306935][ T40] audit: type=1400 audit(2000000045.220:840): avc: denied { wake_alarm } for pid=12114 comm="syz.4.1967" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.452573][T12130] input: syz0 as /devices/virtual/input/input26 [ 121.661193][ T40] audit: type=1400 audit(2000000045.580:841): avc: denied { setopt } for pid=12150 comm="syz.4.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 121.686585][T12157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.750333][ T40] audit: type=1400 audit(2000000045.670:842): avc: denied { execute } for pid=12164 comm="syz.4.1990" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 121.753846][T12165] tmpfs: Unknown parameter 'smackfshat' [ 121.928766][T12177] netlink: 'syz.0.1995': attribute type 1 has an invalid length. [ 121.938178][T12177] 8021q: adding VLAN 0 to HW filter on device bond10 [ 122.008604][ T40] audit: type=1400 audit(2000000045.930:843): avc: denied { read } for pid=12186 comm="syz.3.1999" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 122.010614][T12187] loop9: detected capacity change from 0 to 7 [ 122.014795][ T40] audit: type=1400 audit(2000000045.930:844): avc: denied { open } for pid=12186 comm="syz.3.1999" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 122.014819][ T40] audit: type=1400 audit(2000000045.930:845): avc: denied { ioctl } for pid=12186 comm="syz.3.1999" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 122.017849][T12187] buffer_io_error: 4 callbacks suppressed [ 122.017859][T12187] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.034393][T12187] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.036488][T12187] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.039664][T12187] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.043275][T12187] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.046743][T12187] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.050117][T12187] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.053165][T12187] ldm_validate_partition_table(): Disk read failed. [ 122.055688][T12187] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.058232][T12187] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.061566][T12187] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.064109][T12187] Dev loop9: unable to read RDB block 0 [ 122.065716][T12187] loop9: unable to read partition table [ 122.067318][T12187] loop9: partition table beyond EOD, truncated [ 122.070092][T12187] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 122.070092][T12187] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 122.106104][T12193] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 122.716072][T12239] netlink: 'syz.0.2017': attribute type 1 has an invalid length. [ 122.755658][T12241] team0: Device veth0_vlan failed to register rx_handler [ 122.873153][T12238] (unnamed net_device) (uninitialized): option mode: invalid value (68) [ 123.064535][T12251] fuse: Unknown parameter 'rootlode' [ 123.066946][T12251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.199870][T12256] __nla_validate_parse: 8 callbacks suppressed [ 123.199885][T12256] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2029'. [ 123.265702][T12261] netlink: 'syz.3.2031': attribute type 1 has an invalid length. [ 123.288282][T12261] 8021q: adding VLAN 0 to HW filter on device bond18 [ 123.450829][T12276] netlink: 'syz.0.2036': attribute type 10 has an invalid length. [ 123.540780][T12287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2040'. [ 123.622381][T12298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2045'. [ 123.626223][T12298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.748216][T12311] netfs: Couldn't get user pages (rc=-14) [ 123.751293][T12311] netfs: Zero-sized read [R=2] [ 123.784292][T12313] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 123.793909][T12313] 8021q: adding VLAN 0 to HW filter on device bond19 [ 123.819808][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 124.011534][T12327] syz2: rxe_newlink: already configured on ipvlan1 [ 124.044151][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2060'. [ 124.241325][T12349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2067'. [ 124.272899][T12342] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2064'. [ 124.292673][T12342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2064'. [ 124.298264][T12342] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.527088][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 124.992724][T12413] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2092'. [ 125.037861][T12419] vivid-003: ================= START STATUS ================= [ 125.040626][T12419] vivid-003: Radio HW Seek Mode: Bounded [ 125.042314][T12419] vivid-003: Radio Programmable HW Seek: false [ 125.044202][T12419] vivid-003: RDS Rx I/O Mode: Block I/O [ 125.046233][T12419] vivid-003: Generate RBDS Instead of RDS: false [ 125.048237][T12419] vivid-003: RDS Reception: true [ 125.051638][T12419] vivid-003: RDS Program Type: 0 inactive [ 125.053219][T12419] vivid-003: RDS PS Name: inactive [ 125.054629][T12419] vivid-003: RDS Radio Text: inactive [ 125.056543][T12419] vivid-003: RDS Traffic Announcement: false inactive [ 125.060959][T12419] vivid-003: RDS Traffic Program: false inactive [ 125.062753][T12419] vivid-003: RDS Music: false inactive [ 125.064274][T12419] vivid-003: ================== END STATUS ================== [ 125.298539][ T8539] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 125.325666][T12441] validate_nla: 2 callbacks suppressed [ 125.325677][T12441] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 125.331106][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 125.331164][ T40] audit: type=1400 audit(2000000049.250:864): avc: denied { bind } for pid=12439 comm="syz.0.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.450473][T12444] input: syz0 as /devices/virtual/input/input27 [ 125.454407][ T8539] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.457704][ T8539] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 125.461519][ T8539] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.466489][ T8539] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.489533][T12419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.514326][ T8539] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.733407][ T8539] usb 9-1: USB disconnect, device number 9 [ 125.850596][T12459] VFS: could not find a valid V7 on nullb0. [ 125.855346][T12459] VFS: could not find a valid V7 on nullb0. [ 125.939203][T12466] vivid-003: ================= START STATUS ================= [ 125.945755][T12466] vivid-003: Radio HW Seek Mode: Bounded [ 125.947928][T12466] vivid-003: Radio Programmable HW Seek: false [ 125.951651][T12466] vivid-003: RDS Rx I/O Mode: Block I/O [ 125.953835][T12466] vivid-003: Generate RBDS Instead of RDS: false [ 125.956127][T12466] vivid-003: RDS Reception: true [ 125.957843][T12466] vivid-003: RDS Program Type: 0 inactive [ 125.962877][T12466] vivid-003: RDS PS Name: inactive [ 125.964831][T12466] vivid-003: RDS Radio Text: inactive [ 125.966865][T12466] vivid-003: RDS Traffic Announcement: false inactive [ 125.969758][T12466] vivid-003: RDS Traffic Program: false inactive [ 125.972276][T12466] vivid-003: RDS Music: false inactive [ 125.974482][T12466] vivid-003: ================== END STATUS ================== [ 126.028437][ T40] audit: type=1400 audit(2000000049.930:865): avc: denied { setopt } for pid=12471 comm="syz.3.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.037171][T12476] netlink: zone id is out of range [ 126.038744][T12476] netlink: zone id is out of range [ 126.040224][T12476] netlink: zone id is out of range [ 126.041673][T12476] netlink: zone id is out of range [ 126.042537][ T40] audit: type=1400 audit(2000000049.960:866): avc: denied { bind } for pid=12471 comm="syz.3.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.043107][T12476] netlink: zone id is out of range [ 126.051922][ T40] audit: type=1400 audit(2000000049.960:867): avc: denied { getopt } for pid=12471 comm="syz.3.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.082331][ T40] audit: type=1400 audit(2000000050.000:868): avc: denied { read write } for pid=12481 comm="syz.4.2118" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 126.105271][ T40] audit: type=1400 audit(2000000050.000:869): avc: denied { open } for pid=12481 comm="syz.4.2118" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 126.137225][T12492] random: crng reseeded on system resumption [ 126.413369][T12515] team0: Device veth0_vlan failed to register rx_handler [ 126.510531][ T40] audit: type=1400 audit(2000000050.430:870): avc: denied { unmount } for pid=7103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.592630][T12532] netlink: 'syz.3.2138': attribute type 3 has an invalid length. [ 126.696536][T11883] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.784818][T11883] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.901302][T11883] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.922519][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.927056][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.931925][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.934895][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.938823][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.941000][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.942208][T12558] input: syz0 as /devices/virtual/input/input28 [ 126.955524][T11883] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.974272][T12555] Failed to initialize the IGMP autojoin socket (err -2) [ 127.043317][ T40] audit: type=1400 audit(2000000050.960:871): avc: denied { relabelfrom } for pid=12555 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 127.051219][ T40] audit: type=1400 audit(2000000050.960:872): avc: denied { relabelto } for pid=12555 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 127.146761][T11883] bridge_slave_1: left allmulticast mode [ 127.149402][T11883] bridge_slave_1: left promiscuous mode [ 127.151669][T11883] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.156093][T11883] bridge_slave_0: left allmulticast mode [ 127.158274][T11883] bridge_slave_0: left promiscuous mode [ 127.163166][T11883] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.206759][T12578] netlink: 'syz.3.2159': attribute type 27 has an invalid length. [ 127.269652][ T40] audit: type=1400 audit(2000000051.190:873): avc: denied { bind } for pid=12579 comm="syz.3.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.286931][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.292735][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.295545][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.295986][T11883] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 127.302533][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.305586][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 127.308763][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.749876][T11883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.755010][T11883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.760588][T11883] bond0 (unregistering): Released all slaves [ 127.766074][T11883] bond1 (unregistering): Released all slaves [ 127.859252][T11883] bond2 (unregistering): Released all slaves [ 127.944687][T11883] bond3 (unregistering): Released all slaves [ 128.032685][T11883] bond4 (unregistering): Released all slaves [ 128.037042][T11883] bond5 (unregistering): Released all slaves [ 128.123698][T11883] bond6 (unregistering): Released all slaves [ 128.131775][T11883] bond7 (unregistering): Released all slaves [ 128.230962][T11883] bond8 (unregistering): Released all slaves [ 128.252244][T12584] Failed to initialize the IGMP autojoin socket (err -2) [ 128.313485][T12611] __nla_validate_parse: 10 callbacks suppressed [ 128.313499][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2173'. [ 128.585738][T12622] io-wq is not configured for unbound workers [ 128.598183][T11883] hsr_slave_0: left promiscuous mode [ 128.622553][T11883] hsr_slave_1: left promiscuous mode [ 128.624409][T11883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.626515][T11883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.641289][T11883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.643406][T11883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.670500][T11883] veth1_to_batadv: left promiscuous mode [ 128.672745][T11883] veth1_macvtap: left promiscuous mode [ 128.674617][T11883] veth0_macvtap: left promiscuous mode [ 128.676674][T11883] veth1_vlan: left promiscuous mode [ 128.695661][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.702775][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.709448][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.713617][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.716903][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 128.733264][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.544383][T11883] team0 (unregistering): Port device team_slave_1 removed [ 129.635165][T11883] team0 (unregistering): Port device team_slave_0 removed [ 130.202644][T12633] Failed to initialize the IGMP autojoin socket (err -2) [ 130.334213][T12644] syz.3.2186: attempt to access beyond end of device [ 130.334213][T12644] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 130.342600][T12644] EXT4-fs (nbd3): unable to read superblock [ 130.359045][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 130.364784][ T40] audit: type=1400 audit(2000000054.280:877): avc: denied { ioctl } for pid=12643 comm="syz.3.2186" path="socket:[46982]" dev="sockfs" ino=46982 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.447359][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2187'. [ 130.596821][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.601919][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.605483][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.611742][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.615858][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 130.619232][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.639094][T12658] Failed to initialize the IGMP autojoin socket (err -2) [ 130.649507][ T40] audit: type=1400 audit(2000000054.570:878): avc: denied { write } for pid=12656 comm="syz.3.2191" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 130.708751][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2191'. [ 131.375762][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.383979][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.386642][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.390552][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.392855][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 131.395766][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.410362][T12679] Failed to initialize the IGMP autojoin socket (err -2) [ 131.475580][T12684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2200'. [ 131.552766][ T40] audit: type=1400 audit(2000000055.469:879): avc: denied { read write } for pid=5938 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.559279][ T40] audit: type=1400 audit(2000000055.469:880): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.565702][ T40] audit: type=1400 audit(2000000055.469:881): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.573115][ T40] audit: type=1400 audit(2000000055.489:882): avc: denied { append } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.053225][ T40] audit: type=1400 audit(2000000055.969:883): avc: denied { execute } for pid=12687 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 132.063739][ T40] audit: type=1400 audit(2000000055.969:884): avc: denied { execute_no_trans } for pid=12687 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 132.074849][ T40] audit: type=1400 audit(2000000055.979:885): avc: denied { execmem } for pid=12687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 132.082157][ T40] audit: type=1400 audit(2000000055.979:886): avc: denied { prog_load } for pid=12688 comm="syz.0.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.167186][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.173680][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.177829][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.182941][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.185534][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 132.188921][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.203453][T12692] Failed to initialize the IGMP autojoin socket (err -2) [ 132.623468][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.625883][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.048905][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.052877][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.055405][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.058855][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.061674][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 133.063853][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.082016][T12706] Failed to initialize the IGMP autojoin socket (err -2) [ 134.086907][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.090267][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.093125][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.095634][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.097410][T12741] netlink: 'syz.0.2222': attribute type 21 has an invalid length. [ 134.099518][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.100015][T12741] netlink: 'syz.0.2222': attribute type 20 has an invalid length. [ 134.102059][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.104045][T12741] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.120429][T12736] Failed to initialize the IGMP autojoin socket (err -2) [ 134.170953][T12754] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2227'. [ 134.195598][T12756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2228'. [ 134.198083][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2228'. [ 135.115808][T12767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2232'. [ 135.139939][T12771] netlink: 612 bytes leftover after parsing attributes in process `syz.0.2233'. [ 135.190666][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.195237][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.197852][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.201141][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.203492][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 135.205631][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.219335][T12777] Failed to initialize the IGMP autojoin socket (err -2) [ 135.344427][ T67] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 135.417873][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 135.417884][ T40] audit: type=1400 audit(2000000059.329:958): avc: denied { bind } for pid=12787 comm="syz.0.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.425528][ T40] audit: type=1400 audit(2000000059.339:959): avc: denied { write } for pid=12787 comm="syz.0.2240" path="socket:[51201]" dev="sockfs" ino=51201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.323638][ T40] audit: type=1400 audit(2000000060.239:960): avc: denied { read write } for pid=12793 comm="syz.3.2242" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.324092][T12795] input: syz0 as /devices/virtual/input/input29 [ 136.337198][ T40] audit: type=1400 audit(2000000060.239:961): avc: denied { open } for pid=12793 comm="syz.3.2242" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.348286][ T40] audit: type=1400 audit(2000000060.239:962): avc: denied { ioctl } for pid=12793 comm="syz.3.2242" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.357088][ T40] audit: type=1400 audit(2000000060.249:963): avc: denied { create } for pid=12794 comm="syz.0.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.371769][ T40] audit: type=1400 audit(2000000060.249:964): avc: denied { read } for pid=5340 comm="acpid" name="js0" dev="devtmpfs" ino=2937 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.377991][ T40] audit: type=1400 audit(2000000060.249:965): avc: denied { connect } for pid=12794 comm="syz.0.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.385616][ T40] audit: type=1400 audit(2000000060.249:966): avc: denied { open } for pid=5340 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2937 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.392343][ T40] audit: type=1400 audit(2000000060.249:967): avc: denied { ioctl } for pid=5340 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2937 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.422547][ T5952] Bluetooth: hci3: sending frame failed (-49) [ 136.427438][ T67] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 136.481628][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.484951][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.487515][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.491760][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.494162][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 136.496285][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.509217][T12803] Failed to initialize the IGMP autojoin socket (err -2) [ 136.562337][T12813] netlink: 'syz.3.2248': attribute type 27 has an invalid length. [ 137.778295][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.789455][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.792193][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.795627][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.798920][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.801159][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.821858][T12826] Failed to initialize the IGMP autojoin socket (err -2) [ 137.848541][T12829] 9pnet: Found fid 0 not clunked [ 139.132486][T12841] team0: Device veth0_vlan failed to register rx_handler [ 139.185328][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.191261][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.194748][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.199779][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.202896][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.206678][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.222166][T12846] Failed to initialize the IGMP autojoin socket (err -2) [ 140.656336][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 140.656351][ T40] audit: type=1400 audit(2000000064.569:975): avc: denied { create } for pid=12877 comm="syz.3.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.667208][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.672380][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.674252][ T40] audit: type=1400 audit(2000000064.569:976): avc: denied { getopt } for pid=12877 comm="syz.3.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.676183][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.681964][ T40] audit: type=1400 audit(2000000064.579:977): avc: denied { open } for pid=12877 comm="syz.3.2274" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 140.684261][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.691182][ T40] audit: type=1400 audit(2000000064.579:978): avc: denied { ioctl } for pid=12877 comm="syz.3.2274" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 140.695514][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 140.701765][T12882] input: syz0 as /devices/virtual/input/input30 [ 140.702484][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.704958][T12884] netlink: 'syz.3.2276': attribute type 27 has an invalid length. [ 140.720361][T12879] Failed to initialize the IGMP autojoin socket (err -2) [ 140.753905][T12888] netlink: 612 bytes leftover after parsing attributes in process `syz.0.2278'. [ 140.800147][T12890] nfs4: Unknown parameter 'PL' [ 140.801598][ T40] audit: type=1400 audit(2000000064.719:979): avc: denied { mounton } for pid=12889 comm="syz.3.2279" path="/695/file0" dev="tmpfs" ino=3604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.808954][ T40] audit: type=1400 audit(2000000064.719:980): avc: denied { ioctl } for pid=12889 comm="syz.3.2279" path="socket:[49139]" dev="sockfs" ino=49139 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.816166][ T40] audit: type=1400 audit(2000000064.729:981): avc: denied { module_request } for pid=12889 comm="syz.3.2279" kmod="crypto-blake2s-256-arm" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 142.238543][ T40] audit: type=1400 audit(2000000066.149:982): avc: denied { execute } for pid=12901 comm="syz.0.2281" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 142.319942][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.330730][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.334354][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.337091][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.341593][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.344516][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.365266][T12908] Failed to initialize the IGMP autojoin socket (err -2) [ 142.443425][ T40] audit: type=1400 audit(2000000066.359:983): avc: denied { read } for pid=12918 comm="syz.0.2289" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 142.450856][ T40] audit: type=1400 audit(2000000066.359:984): avc: denied { open } for pid=12918 comm="syz.0.2289" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.950300][T12926] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2291'. [ 144.030246][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.030821][T12934] netlink: 612 bytes leftover after parsing attributes in process `syz.0.2294'. [ 144.033481][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.037673][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.043505][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.045748][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.048793][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.056446][T12931] Failed to initialize the IGMP autojoin socket (err -2) [ 145.732917][T12941] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 145.817837][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.819707][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.821143][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.821472][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.821664][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.822321][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.834245][T12946] Failed to initialize the IGMP autojoin socket (err -2) [ 147.631915][ T40] audit: type=1400 audit(2000000071.549:985): avc: denied { sys_module } for pid=12952 comm="syz.3.2301" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 147.701709][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.706360][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.711121][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.716768][ T40] audit: type=1400 audit(2000000071.629:986): avc: denied { nlmsg_write } for pid=12968 comm="syz.3.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 147.717080][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.728761][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.733426][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.744305][T12964] Failed to initialize the IGMP autojoin socket (err -2) [ 147.767660][ T40] audit: type=1400 audit(2000000071.679:987): avc: denied { write } for pid=12971 comm="syz.3.2308" name="igmp6" dev="proc" ino=4026533413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 149.655828][ T40] audit: type=1400 audit(2000000073.569:988): avc: denied { create } for pid=12988 comm="syz.0.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.665954][ T40] audit: type=1400 audit(2000000073.579:989): avc: denied { listen } for pid=12988 comm="syz.0.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.672056][T12989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12989 comm=syz.0.2312 [ 149.678611][ T40] audit: type=1400 audit(2000000073.589:990): avc: denied { audit_write } for pid=12988 comm="syz.0.2312" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 149.684245][ T40] audit: type=1107 audit(2000000073.589:991): pid=12988 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 149.687805][ T40] audit: type=1400 audit(2000000073.589:992): avc: denied { ioctl } for pid=12988 comm="syz.0.2312" path="socket:[49661]" dev="sockfs" ino=49661 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.696659][ T40] audit: type=1400 audit(2000000073.599:993): avc: denied { accept } for pid=12988 comm="syz.0.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.724729][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.729733][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.734753][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.738593][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.742411][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.745343][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.760172][T12994] Failed to initialize the IGMP autojoin socket (err -2) [ 149.806235][ T40] audit: type=1400 audit(2000000073.719:994): avc: denied { read write } for pid=12998 comm="syz.3.2316" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 149.815286][T12999] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 149.817144][T12999] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 149.819750][T12999] vhci_hcd vhci_hcd.0: Device attached [ 149.823964][T13000] vhci_hcd: connection closed [ 149.824432][T11883] vhci_hcd: stop threads [ 149.827906][T11883] vhci_hcd: release socket [ 149.830386][T11883] vhci_hcd: disconnect device [ 151.806024][T13010] program syz.0.2320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.844769][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.847896][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.854854][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.860736][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.863530][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.866039][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.881911][T13011] Failed to initialize the IGMP autojoin socket (err -2) [ 152.471431][ T3233] ================================================================== [ 152.474297][ T3233] BUG: KASAN: slab-use-after-free in __mutex_lock+0x9eb/0xb10 [ 152.477033][ T3233] Read of size 8 at addr ffff888033291b20 by task kworker/1:2/3233 [ 152.481068][ T3233] [ 152.482694][ T3233] CPU: 1 UID: 0 PID: 3233 Comm: kworker/1:2 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 152.482712][ T3233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.482724][ T3233] Workqueue: events l2cap_chan_timeout [ 152.482753][ T3233] Call Trace: [ 152.482759][ T3233] [ 152.482766][ T3233] dump_stack_lvl+0x116/0x1f0 [ 152.482789][ T3233] print_report+0xc3/0x670 [ 152.482803][ T3233] ? __virt_addr_valid+0x5e/0x590 [ 152.482819][ T3233] ? __phys_addr+0xc6/0x150 [ 152.482835][ T3233] kasan_report+0xd9/0x110 [ 152.482851][ T3233] ? __mutex_lock+0x9eb/0xb10 [ 152.482873][ T3233] ? __mutex_lock+0x9eb/0xb10 [ 152.482896][ T3233] __mutex_lock+0x9eb/0xb10 [ 152.482916][ T3233] ? l2cap_chan_timeout+0x6d/0x310 [ 152.482939][ T3233] ? __pfx___mutex_lock+0x10/0x10 [ 152.482970][ T3233] ? rcu_is_watching+0x12/0xc0 [ 152.482989][ T3233] ? trace_lock_acquire+0x14e/0x1f0 [ 152.483009][ T3233] ? l2cap_chan_timeout+0x6d/0x310 [ 152.483032][ T3233] l2cap_chan_timeout+0x6d/0x310 [ 152.483057][ T3233] process_one_work+0x9c5/0x1ba0 [ 152.483082][ T3233] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 152.483105][ T3233] ? __pfx_process_one_work+0x10/0x10 [ 152.483129][ T3233] ? assign_work+0x1a0/0x250 [ 152.483149][ T3233] worker_thread+0x6c8/0xf00 [ 152.483173][ T3233] ? __kthread_parkme+0x148/0x220 [ 152.483189][ T3233] ? __pfx_worker_thread+0x10/0x10 [ 152.483210][ T3233] kthread+0x3af/0x750 [ 152.483229][ T3233] ? __pfx_kthread+0x10/0x10 [ 152.483248][ T3233] ? lock_acquire+0x2f/0xb0 [ 152.483271][ T3233] ? __pfx_kthread+0x10/0x10 [ 152.483290][ T3233] ret_from_fork+0x45/0x80 [ 152.483311][ T3233] ? __pfx_kthread+0x10/0x10 [ 152.483329][ T3233] ret_from_fork_asm+0x1a/0x30 [ 152.483352][ T3233] [ 152.483357][ T3233] [ 152.541926][ T3233] Allocated by task 11469: [ 152.543599][ T3233] kasan_save_stack+0x33/0x60 [ 152.545382][ T3233] kasan_save_track+0x14/0x30 [ 152.547135][ T3233] __kasan_kmalloc+0xaa/0xb0 [ 152.548902][ T3233] l2cap_conn_add.part.0+0x60/0xa60 [ 152.550825][ T3233] l2cap_chan_connect+0x15e8/0x2010 [ 152.552767][ T3233] l2cap_sock_connect+0x3b8/0x740 [ 152.554642][ T3233] kernel_connect+0x105/0x180 [ 152.556403][ T3233] rfcomm_dlc_open+0x823/0xaa0 [ 152.558189][ T3233] rfcomm_sock_connect+0x418/0x630 [ 152.560130][ T3233] __sys_connect_file+0x13e/0x1a0 [ 152.562082][ T3233] __sys_connect+0x14f/0x170 [ 152.563916][ T3233] __x64_sys_connect+0x72/0xb0 [ 152.565784][ T3233] do_syscall_64+0xcd/0x250 [ 152.567510][ T3233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.569897][ T3233] [ 152.570856][ T3233] Freed by task 11422: [ 152.572474][ T3233] kasan_save_stack+0x33/0x60 [ 152.574249][ T3233] kasan_save_track+0x14/0x30 [ 152.576029][ T3233] kasan_save_free_info+0x3b/0x60 [ 152.577883][ T3233] __kasan_slab_free+0x51/0x70 [ 152.579658][ T3233] kfree+0x2c4/0x4d0 [ 152.581186][ T3233] l2cap_conn_del+0x5a0/0x730 [ 152.582904][ T3233] l2cap_disconn_cfm+0x96/0xd0 [ 152.584749][ T3233] hci_conn_hash_flush+0x10b/0x260 [ 152.586697][ T3233] hci_dev_close_sync+0x603/0x11a0 [ 152.588618][ T3233] hci_dev_do_close+0x2e/0x90 [ 152.590342][ T3233] hci_unregister_dev+0x213/0x620 [ 152.592254][ T3233] vhci_release+0x79/0xf0 [ 152.593811][ T3233] __fput+0x3ff/0xb70 [ 152.595268][ T3233] task_work_run+0x14e/0x250 [ 152.596960][ T3233] do_exit+0xad8/0x2db0 [ 152.598507][ T3233] do_group_exit+0xd3/0x2a0 [ 152.600236][ T3233] __x64_sys_exit_group+0x3e/0x50 [ 152.602125][ T3233] x64_sys_call+0x151f/0x1720 [ 152.603926][ T3233] do_syscall_64+0xcd/0x250 [ 152.605632][ T3233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.607781][ T3233] [ 152.608705][ T3233] The buggy address belongs to the object at ffff888033291800 [ 152.608705][ T3233] which belongs to the cache kmalloc-1k of size 1024 [ 152.613841][ T3233] The buggy address is located 800 bytes inside of [ 152.613841][ T3233] freed 1024-byte region [ffff888033291800, ffff888033291c00) [ 152.618917][ T3233] [ 152.619924][ T3233] The buggy address belongs to the physical page: [ 152.621722][ T3233] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33290 [ 152.624123][ T3233] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 152.626454][ T3233] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 152.628531][ T3233] page_type: f5(slab) [ 152.629679][ T3233] raw: 00fff00000000040 ffff88801b042dc0 dead000000000100 dead000000000122 [ 152.632037][ T3233] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 152.634487][ T3233] head: 00fff00000000040 ffff88801b042dc0 dead000000000100 dead000000000122 [ 152.636934][ T3233] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 152.639405][ T3233] head: 00fff00000000003 ffffea0000cca401 ffffffffffffffff 0000000000000000 [ 152.641734][ T3233] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 152.644107][ T3233] page dumped because: kasan: bad access detected [ 152.645890][ T3233] page_owner tracks the page as allocated [ 152.647471][ T3233] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5938, tgid 5938 (syz-executor), ts 47499887632, free_ts 47387593041 [ 152.653303][ T3233] post_alloc_hook+0x181/0x1b0 [ 152.654674][ T3233] get_page_from_freelist+0xfce/0x2f80 [ 152.656218][ T3233] __alloc_frozen_pages_noprof+0x221/0x2470 [ 152.657875][ T3233] alloc_pages_mpol+0x1fc/0x540 [ 152.659282][ T3233] new_slab+0x23d/0x330 [ 152.660474][ T3233] ___slab_alloc+0xc5d/0x1720 [ 152.661821][ T3233] __slab_alloc.constprop.0+0x56/0xb0 [ 152.663275][ T3233] __kmalloc_node_noprof+0x2f0/0x510 [ 152.664705][ T3233] qdisc_alloc+0xbb/0xc50 [ 152.665935][ T3233] qdisc_create_dflt+0x73/0x430 [ 152.667316][ T3233] dev_activate+0x63a/0x12b0 [ 152.668639][ T3233] __dev_open+0x3e4/0x540 [ 152.669895][ T3233] __dev_change_flags+0x561/0x720 [ 152.671324][ T3233] dev_change_flags+0x8f/0x160 [ 152.672640][ T3233] do_setlink.constprop.0+0x699/0x3f80 [ 152.674143][ T3233] rtnl_newlink+0x1306/0x1d60 [ 152.675470][ T3233] page last free pid 5950 tgid 5950 stack trace: [ 152.677258][ T3233] free_frozen_pages+0x6db/0xfb0 [ 152.678648][ T3233] qlist_free_all+0x4e/0x120 [ 152.679995][ T3233] kasan_quarantine_reduce+0x195/0x1e0 [ 152.681541][ T3233] __kasan_slab_alloc+0x69/0x90 [ 152.682924][ T3233] __kmalloc_cache_noprof+0x243/0x410 [ 152.684348][ T3233] netdevice_event+0x367/0x9d0 [ 152.685702][ T3233] notifier_call_chain+0xb7/0x410 [ 152.687124][ T3233] call_netdevice_notifiers_info+0xbe/0x140 [ 152.688758][ T3233] dev_set_mac_address+0x370/0x4a0 [ 152.690214][ T3233] dev_set_mac_address_user+0x30/0x50 [ 152.691731][ T3233] do_setlink.constprop.0+0x7bf/0x3f80 [ 152.693275][ T3233] rtnl_newlink+0x1306/0x1d60 [ 152.694611][ T3233] rtnetlink_rcv_msg+0x95b/0xea0 [ 152.696018][ T3233] netlink_rcv_skb+0x16b/0x440 [ 152.697375][ T3233] netlink_unicast+0x53c/0x7f0 [ 152.698751][ T3233] netlink_sendmsg+0x8b8/0xd70 [ 152.700125][ T3233] [ 152.700826][ T3233] Memory state around the buggy address: [ 152.702402][ T3233] ffff888033291a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.704645][ T3233] ffff888033291a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.706880][ T3233] >ffff888033291b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.709101][ T3233] ^ [ 152.710518][ T3233] ffff888033291b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.712756][ T3233] ffff888033291c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 152.714964][ T3233] ================================================================== [ 152.717467][ T3233] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 152.719418][ T3233] CPU: 1 UID: 0 PID: 3233 Comm: kworker/1:2 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 152.722398][ T3233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.725384][ T3233] Workqueue: events l2cap_chan_timeout [ 152.726931][ T3233] Call Trace: [ 152.727885][ T3233] [ 152.728763][ T3233] dump_stack_lvl+0x3d/0x1f0 [ 152.730070][ T3233] panic+0x71d/0x800 [ 152.731142][ T3233] ? mark_held_locks+0x9f/0xe0 [ 152.732479][ T3233] ? __pfx_panic+0x10/0x10 [ 152.733731][ T3233] ? irqentry_exit+0x3b/0x90 [ 152.735043][ T3233] ? lockdep_hardirqs_on+0x7c/0x110 [ 152.736514][ T3233] ? check_panic_on_warn+0x1f/0xb0 [ 152.737954][ T3233] check_panic_on_warn+0xab/0xb0 [ 152.739366][ T3233] end_report+0x117/0x180 [ 152.740603][ T3233] kasan_report+0xe9/0x110 [ 152.741866][ T3233] ? __mutex_lock+0x9eb/0xb10 [ 152.743209][ T3233] ? __mutex_lock+0x9eb/0xb10 [ 152.744567][ T3233] __mutex_lock+0x9eb/0xb10 [ 152.745866][ T3233] ? l2cap_chan_timeout+0x6d/0x310 [ 152.747316][ T3233] ? __pfx___mutex_lock+0x10/0x10 [ 152.748791][ T3233] ? rcu_is_watching+0x12/0xc0 [ 152.750108][ T3233] ? trace_lock_acquire+0x14e/0x1f0 [ 152.751568][ T3233] ? l2cap_chan_timeout+0x6d/0x310 [ 152.753019][ T3233] l2cap_chan_timeout+0x6d/0x310 [ 152.754404][ T3233] process_one_work+0x9c5/0x1ba0 [ 152.755810][ T3233] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 152.757391][ T3233] ? __pfx_process_one_work+0x10/0x10 [ 152.758944][ T3233] ? assign_work+0x1a0/0x250 [ 152.760293][ T3233] worker_thread+0x6c8/0xf00 [ 152.761618][ T3233] ? __kthread_parkme+0x148/0x220 [ 152.763048][ T3233] ? __pfx_worker_thread+0x10/0x10 [ 152.764498][ T3233] kthread+0x3af/0x750 [ 152.765665][ T3233] ? __pfx_kthread+0x10/0x10 [ 152.766942][ T3233] ? lock_acquire+0x2f/0xb0 [ 152.768220][ T3233] ? __pfx_kthread+0x10/0x10 [ 152.769515][ T3233] ret_from_fork+0x45/0x80 [ 152.770777][ T3233] ? __pfx_kthread+0x10/0x10 [ 152.772054][ T3233] ret_from_fork_asm+0x1a/0x30 [ 152.773370][ T3233] [ 152.774761][ T3233] Kernel Offset: disabled [ 152.775950][ T3233] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:21:06 Registers: info registers vcpu 0 CPU#0 RAX=000000000017c831 RBX=0000000000000000 RCX=ffffffff8b579469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd36a20 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6f85 R10=ffff88806a637c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90626c10 R15=0000000000000000 RIP=ffffffff8b57a84f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f339d8d8710 CR3=0000000030962000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=000000000000ffdf Opmask03=0104100080810010 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9b8b6fab0 000055b9b8b6f1b0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c57aaa442adf1d7 7373737628e8f828 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737072 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000003130323a 316963682f316963 682f68746f6f7465 756c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9b8b5af50 000055b9b8b718c0 0000000000000021 0000000000000033 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9b8b7dda0 000055b9b8b71380 0000000000000061 6b636f6c62000038 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382433273f397b27 697a787c69303b7e 69305f474f5b647c 6930382433273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8540c7f5 RDI=ffffffff9ab847c0 RBP=ffffffff9ab84780 RSP=ffffc9002591f530 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3330383838666666 R12=0000000000000000 R13=000000000000002f R14=ffffffff9ab84780 R15=0000000000000000 RIP=ffffffff8540c81f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffacbbd050 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f112b20f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f112b20f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f112b20f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f112b20f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f112b20f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f112b20f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=ffff888028a4d370 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b6cff80 RDI=ffffffff8bd36a20 RBP=ffff88806a83ec18 RSP=ffffc90006fbfa48 R8 =ffff88806a83f700 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=ffff888028a4c880 R13=0000000000000001 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b578698 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f339cc10218 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc0e0 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003e00000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f339cb8382a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000372e 312e30332e323731 00007f339cb45262 00007f339b1f76c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f339d8dd6c0 0000003665736f72 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a93fe00 RCX=ffffffff81adff94 RDX=ffff88801d2ba440 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc90000177d10 RSP=ffffc90000177c38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c38fd6 R12=1ffff9200002ef8c R13=0000000000000001 R14=0000000000000003 R15=ffffed100d527fc1 RIP=ffffffff81b9ec12 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555628b15c8 CR3=0000000030962000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000003 Opmask02=000000000000ffdf Opmask03=0104100080810010 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9b8b6fab0 000055b9b8b6f1b0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c57aaa442adf1d7 7373737628e8f828 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737072 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000003130323a 316963682f316963 682f68746f6f7465 756c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9b8b5af50 000055b9b8b718c0 0000000000000021 0000000000000033 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b9b8b7dda0 000055b9b8b71380 0000000000000061 6b636f6c62000038 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382433273f397b27 697a787c69303b7e 69305f474f5b647c 6930382433273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020