last executing test programs: 57.82349561s ago: executing program 3 (id=311): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xd0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r1, 0x0, 0xf}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r2, 0x0, 0xf}, 0x18) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.723363329s ago: executing program 3 (id=312): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x600000, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) 57.722958897s ago: executing program 3 (id=313): socket$nl_route(0x10, 0x3, 0x0) 57.664389769s ago: executing program 3 (id=314): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000002f80)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc8}}}, 0x8) (rerun: 64) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) 57.664068043s ago: executing program 3 (id=315): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x3c, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000280)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000140)={0x2, 0x9, 0x9, 0xd, 0x5, 0x6f, 0x4, 0x8000000000000000}, &(0x7f0000000240)={0x8b, 0xf135, 0x7, 0x7a1, 0xffffffffffffa299, 0xe, 0xfffffffffffffffa, 0x1}, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb, 0x9, 0x0, 0x1, 0x3010000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x4000105}, 0x4) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) write$cgroup_subtree(r3, &(0x7f0000000500)={[{0x6, 'blkio'}, {0x2b, 'pids'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'freezer'}]}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061145c0000000000a600000000000000a7db950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 57.464439555s ago: executing program 3 (id=316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x70) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x58, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x11) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000003c0)=ANY=[], 0x774}, 0x1, 0x0, 0x0, 0x48010}, 0x40881) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x774}], 0x1}, 0x0) 42.442734172s ago: executing program 32 (id=316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x70) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x58, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x11) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000003c0)=ANY=[], 0x774}, 0x1, 0x0, 0x0, 0x48010}, 0x40881) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x774}], 0x1}, 0x0) 42.223495543s ago: executing program 0 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b70700000000000063119f00000000000700000000000000950000000000000086b223c17fd5c6311e80752befb60f283890ff0a97195cba4872b282cd13a47f256c1748557c"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000540)="20de20", 0x3}], 0x1) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r7 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x2, 0x1fd}) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000280)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000200)={0x1d, r9}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[], 0xd4}}, 0x20044080) 42.134003327s ago: executing program 0 (id=492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$isdn_base(0x22, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) 41.994221644s ago: executing program 0 (id=493): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x81, 0x50000) fsopen(&(0x7f0000000080)='sockfs\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) preadv2(r3, &(0x7f0000002240)=[{&(0x7f0000002040)=""/76, 0x4c}], 0x1, 0x8, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@bridge_getvlan={0x17, 0x72, 0x301, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00}, 0x0) 41.932870829s ago: executing program 0 (id=494): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xefa4}}, './file0\x00'}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x1, 0x19000}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000800)=""/51, 0x33}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r6) add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b4704d113376b6ef0b486812c3f68ac8c4e54acc5a0c65caa7ba69833189b24d0456507cc902381c084575b2de6d799bb6aa9b3b4f0750faadba7a157f9562841877521b5714b97638e36c00829ce407e443ccf5af33faa90969bc9efb90bb90b1dd8c9ebb286681f45b11fef532c60b032cc680807fdd4763a1b3eb", 0x7c, r6) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x400003, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x1840}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xefa4}}, './file0\x00'}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x1, 0x19000}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000800)=""/51, 0x33}], 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r3) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r6) (async) add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b4704d113376b6ef0b486812c3f68ac8c4e54acc5a0c65caa7ba69833189b24d0456507cc902381c084575b2de6d799bb6aa9b3b4f0750faadba7a157f9562841877521b5714b97638e36c00829ce407e443ccf5af33faa90969bc9efb90bb90b1dd8c9ebb286681f45b11fef532c60b032cc680807fdd4763a1b3eb", 0x7c, r6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x400003, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x1840}, 0x44000) (async) 41.863998324s ago: executing program 0 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000068000100000000000000000002000027000000000c000880180005000000000008000600000a0000080005"], 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="0500000000000000002e63c3d856", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f00000003c0)=[{0x5, 0x61, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="52000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001000000060200002d1a00031105080800010000000003030000000176060480070006000000080026006c09000008009f0006000000381d02fe5fb7379082bd805c08000c006400000008000d00"/128], 0x90}, 0x1, 0x0, 0x0, 0x40025}, 0x0) 41.863660392s ago: executing program 0 (id=496): r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) tkill(r2, 0x13) (async) ptrace(0x10, r2) (async) ptrace$getsig(0x4202, r2, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') (async) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) (async) 26.852547036s ago: executing program 33 (id=496): r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) tkill(r2, 0x13) (async) ptrace(0x10, r2) (async) ptrace$getsig(0x4202, r2, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') (async) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) (async) 25.731422819s ago: executing program 1 (id=737): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) signalfd(r0, &(0x7f00000003c0), 0x8) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r0, 0x0, 0xd) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) (async) r4 = getpid() r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) poll(&(0x7f0000000080)=[{r5, 0x108}], 0x1, 0x74) (async) read$hidraw(r5, &(0x7f00000002c0)=""/232, 0xe8) (async) r6 = syz_pidfd_open(r4, 0x0) (async) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000080)={0x7, @pix={0x4, 0x6, 0x31363553, 0x0, 0xff800000, 0x50, 0x1, 0x3, 0x0, 0x3, 0x0, 0x1}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0500ffffffff000000004400000008000300", @ANYRES32=r10, @ANYBLOB="1400238006001000cd"], 0x30}}, 0x0) (async) ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000180)) (async) r11 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) sendto$inet(r0, &(0x7f00000001c0)="ffcfc1f0077fd4992ec43f459a8b961cf411635597e669fc15f8ddc844fa8f2bf474ec6721967ba882ede5673cfeac9adf7307a388183f9681429e73faacf08d4c0df0b263dbf5f017f4a46c458fea46aa8b9c9265d92ecdf1e8d355d7949a9a39507dcf01a32b917d420b28917fb1a20beb1f4e0d79cb5c50e4e5738ccb4ea7894e5708f5e71790a7a073be38f800e1911c2bc456f88e15abf42c311e24de3c5a8e70b75b3edeb8db3ef8d5ca6e0898b3e3ef0f52f8d9daff35a3b0b6cf10ce78a2df582f389551", 0xc8, 0x2004, &(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0x10) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="0a28e5f1ba23f922857ef4e6cb6966a800c23a1fe06a35819e2f577c0e65e7aa053d7c3f6552e3f7e9b20ce9d56010c1834b269cdae64fa53c0616d73879db3ed5a672ba7e4ca4d41861a07f27ffcd2158239340c361f40afd841c3d356753b1c2da6a620b225c8c8e34332934689fdf3ba9", 0x72, r11) 25.672651084s ago: executing program 1 (id=738): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) timer_create(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_deladdr={0x80, 0x15, 0x10, 0x70bd2c, 0x25dfdbfe, {0xa, 0x40, 0x4a, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x7ff, 0x2, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x80}}, 0x40800) 25.374243736s ago: executing program 1 (id=739): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e20, 0x0, 0x4e24, 0x2, 0x2, 0x20, 0x20, 0x32, 0x0, r4}, {0x7fff, 0x6, 0x837c, 0xc1, 0x8000000000000000, 0x3, 0x7, 0x8000000000000000}, {0x7, 0x1, 0x1, 0x4}, 0x1, 0x6e6bb5, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in6=@empty, 0x34ff, 0x3, 0x1, 0x0, 0x2, 0x8e5, 0x2}}, 0xe8) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 19.900435956s ago: executing program 1 (id=739): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e20, 0x0, 0x4e24, 0x2, 0x2, 0x20, 0x20, 0x32, 0x0, r4}, {0x7fff, 0x6, 0x837c, 0xc1, 0x8000000000000000, 0x3, 0x7, 0x8000000000000000}, {0x7, 0x1, 0x1, 0x4}, 0x1, 0x6e6bb5, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in6=@empty, 0x34ff, 0x3, 0x1, 0x0, 0x2, 0x8e5, 0x2}}, 0xe8) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 13.469092363s ago: executing program 1 (id=739): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e20, 0x0, 0x4e24, 0x2, 0x2, 0x20, 0x20, 0x32, 0x0, r4}, {0x7fff, 0x6, 0x837c, 0xc1, 0x8000000000000000, 0x3, 0x7, 0x8000000000000000}, {0x7, 0x1, 0x1, 0x4}, 0x1, 0x6e6bb5, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in6=@empty, 0x34ff, 0x3, 0x1, 0x0, 0x2, 0x8e5, 0x2}}, 0xe8) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 6.714522523s ago: executing program 1 (id=739): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e20, 0x0, 0x4e24, 0x2, 0x2, 0x20, 0x20, 0x32, 0x0, r4}, {0x7fff, 0x6, 0x837c, 0xc1, 0x8000000000000000, 0x3, 0x7, 0x8000000000000000}, {0x7, 0x1, 0x1, 0x4}, 0x1, 0x6e6bb5, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in6=@empty, 0x34ff, 0x3, 0x1, 0x0, 0x2, 0x8e5, 0x2}}, 0xe8) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 1.820819606s ago: executing program 5 (id=1039): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000300)={0x0, 0x2458, 0x0, 0x0, 0x15c, 0x0, r0}, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x34, 0x9, 0x1000, 0xfffffffe, {0x3}, [@typed={0x5, 0x8, 0x0, 0x0, @binary="e5"}]}, 0x1c}}, 0x4000010) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x64, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000d3ee61f42244b40d2d01290148f3fb00000000000000000000000085000000bb0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.748384663s ago: executing program 5 (id=1041): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x62adc78fd9ffe3ce}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) setuid(0xee00) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7c, 0x0, 0x17f}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x2c}}, 0x0) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x24, r2, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000e40)='./file0\x00', 0x82) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.74777346s ago: executing program 5 (id=1043): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = inotify_init1(0x80800) fallocate(r1, 0x8, 0x2, 0x8) r2 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000300)=[@ioring_restriction_sqe_flags_required={0x3, 0xa}], 0x1) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x1b, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf8fd, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x3a, &(0x7f00000003c0)=""/58, 0x0, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x10, 0x401, 0x2}, 0x10, 0x9978, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x2, 0x2, 0x1, 0x2}], 0x10, 0x400000}, 0x94) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000940)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0x63, 0x9a, &(0x7f00000005c0)="5a3cdb23d296426b1485d65b05c21288a22166b071af0c6366d145cdfa45de3b711441905b0be685b41a048cb6c398c8f24673638a3c27d82cf003593c3159aa6bb30e8c07be2075336f62643a5afcdb20702c6c02f9cf690de7bab6a9e264de7b0448", &(0x7f0000000640)=""/154, 0xfffff000, 0x0, 0xf9, 0x75, &(0x7f0000000700)="f825190450cf7d9d14af6078e06b7d16e9f6adf7a51d0fd133487ae7814b9e21dc0b0cb4bd3f0c52933d76d09058e2aeea75a1ec1dc953f3df352902ba3ec4600d05ba3c8818e3e3a63884f831868017524f3c11fc66df644ac86048f4f1cd214471fffc1dfe92c16cc45f3f7fb28702d0c624d6a1f506fe944c1a35650cf76ad75887be2779a89fe258cc7ddf6b29f8711a6f7b899d9fa04be61ac21127fa94238a6d87cc5656542e9e8ff7bd250788b736c739a84387d08ed709be3f6dbd77502ccd7758721995f4e493ca8bae355e037be04a4818d87a05bf51a57472f0a618ab18fb9678a9873bace92313a141100bc798ec0c9b5315bf", &(0x7f0000000800)="c75a09765f947913ea9457765890356b9a8170164c18df92f7266c54f3dffbb93cbfb1b7409ba389b2372f1be4abe4315d57295c52e7ce445c193374ea17ec937067006fbb7d3c3cd9123f05b3eee0c85e98bf1ea755b0afd88b57d38895a3287f52da8053d1bc17383612fd889213c1242ffdd440", 0x2, 0x0, 0xfffffffb}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f0000000080)="8ef0d896cb2578e4da59e265e221634feb9ea3870542b2fb613fc2270d197f2332f9c4c306d3773c1bcffe23da6f338ebb13557e1b77cbd2bca5dae19ad5bfbb8975c7f6f595f671783842e897862a569f36ebc2e6d004ed71be12d1447b105858a332e3f8f88a726147ce0ed201656f38a6cef4482cf48b60960a2afd0d2de91f8f5ca9c545ee01e10550e8438f648ad49098c3e047d456b19dcfe32685ae5b082b3a008f70fd6a28308f4fce", &(0x7f0000000000)=""/20, &(0x7f0000000140), &(0x7f0000000180)="adcf07254e1edc876cf0d148b0a3f7fb6ed8390274ebadfb1eef532279377bc02f30aca883bf11c2890921611f44762f93a5d2f8d1d7c42a7137797272789814bab936c7160dae", 0x1000000, r4, 0x4}, 0x38) open(&(0x7f0000000900)='./file0\x00', 0x600, 0x174) 1.681470365s ago: executing program 5 (id=1045): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "505c905e"}, @main=@item_012={0x1, 0x0, 0x0, "ec"}]}}, 0x0}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x22002) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000001300)=[{}]}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x200800, &(0x7f0000000080)=ANY=[]) read$FUSE(r1, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r1, &(0x7f0000000240)={0x18, 0x0, r3, {0x7}}, 0x18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 982.864284ms ago: executing program 4 (id=1057): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x700000000000000) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc111f000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 982.594537ms ago: executing program 4 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) r2 = dup(r1) read$FUSE(r2, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async) syz_emit_ethernet(0x3f, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@llc={0x8864, {@llc={0x2, 0x42, "eb", "c0371a0c2ae96e4e64ae33fe7476de46364666f18f3582d10447c4828844a32a6c6648916504d8c3916daf3b2838"}}}}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="abfbae37fa2b145e83a3645d4b795b9a8f4ec98e10277d2594b94cad192f82158660e16bc49e18a2df3b4cf185c37c2fc4c350eb324115e4cd85ca0dcf5768230118fc75bc7c3eb9937e54ea6b86e1cca8c2feace35b3f783965398f0d84949351e059c14190c711da020534c76f86f1b18ef97427abd046319ffbdcfd8c660f80a6", @ANYRES64=r3, @ANYBLOB="20002abd7000fd34df2503ff030000f9ff0000000000007ad8363b28d3bfb5e99632ac0db2ef6007162a852aec32fcb4452d0000000000000095e4e363399823a9a71557d5c30f89dcab6167adf71db2e6eb3f822d9a739980f8e93ecda70aed0980e0018e49352bfdd54d7bcff9fbd5af9ab5b78332ffa47eb1e83c6206f96139bbe95ff4c8db80497650fc"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000280), 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) 911.181644ms ago: executing program 4 (id=1059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r1, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c895}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r1, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c895}, 0x0) (async) 910.259309ms ago: executing program 4 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, r1, 0xb01, 0x0, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb2}]}, 0x1c}}, 0x0) 841.264796ms ago: executing program 4 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file1\x00', 0xe6340, 0xa) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='./file0\x00') symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 840.985628ms ago: executing program 4 (id=1062): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b45522027434427203030303030303030303030303030303030aaf28838852feadd54414c32202706006e652043617074557265272030303030303034303030303030303030303030300a20"], 0xb8) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r4, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) recvmsg(r3, &(0x7f00000002c0)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/27, 0x1b}, {&(0x7f0000000180)=""/46, 0x2e}], 0x2, &(0x7f0000000280)=""/37, 0x25}, 0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000000000000fad31900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r6}, 0x20) ppoll(&(0x7f0000000100)=[{r6, 0x200}], 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000740)=[{r4, 0x16210}, {r6, 0x4040}], 0x2, 0x476) 537.301954ms ago: executing program 2 (id=1065): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000040)=0x6, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000009a910a8c94ea8d212dca90ec239025d4029012d573f48f2613c1a6332829be685adf0bf84e61efad59d5d058adfa6b19a21e9de6d628b40e4bac48cb45e00e409329bb1ab4c6cda345404b3d827418541d2acd7ec5ed070157070bdd1eabc76e220bab30c68348f99c34b9cb2e0832be2f70e148ab451ed421d7890f6c832c3b428dfb25af9f2f1332cc39d4f44749a500f54659", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf250900000008000300", @ANYRES32=r3, @ANYBLOB="0800370002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c040) r5 = syz_io_uring_setup(0x5078, &(0x7f0000000300)={0x0, 0xe58, 0x10100}, &(0x7f0000000240), &(0x7f0000000000)) io_uring_enter(r5, 0xb15, 0xffffbffe, 0x8, 0x0, 0x0) 536.789769ms ago: executing program 2 (id=1066): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@loopback, @rand_addr=0x64010101, 0xffffffffffffffff, "65cda447a6264eb65f33975255f8fa21f99ad639cc7c75b7f4268ef347502d08", 0x2, 0xfffffff9, 0x1611, 0x5}, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e24, @rand_addr=0xac141421}}) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$LOOP_SET_FD(r3, 0x80044df9, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x10820, 0x400}}, 0x20}}, 0x4084) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) read$FUSE(r8, &(0x7f00000046c0)={0x2020}, 0x2020) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xc45}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') pread64(r9, &(0x7f0000000880)=""/4096, 0x1000, 0xa96) socket$nl_generic(0x10, 0x3, 0x10) 201.378763ms ago: executing program 2 (id=1067): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe88000000000000000000000000000120010000000000000000000000000000000046a200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe880000000000000000000000000001000000000000000000000000000000100000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000070000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00140073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004201"], 0x184}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002380)={0x44, 0x0, &(0x7f0000001300)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000001280)="7237427f"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4a8001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x44000) 201.154432ms ago: executing program 2 (id=1068): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x89f1, &(0x7f0000000000)) io_setup(0xb, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_kthread_stop\x00', r0}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000100000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 51.715388ms ago: executing program 5 (id=1069): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="6e60bcef5a5b", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x8, 0x87, 0x0, @private2={0xfc, 0x2, '\x00', 0xfd}, @mcast2, {[@srh={0x3b, 0x0, 0x4, 0x0, 0x3, 0x28, 0x8001}]}}}}}, 0x0) 51.085291ms ago: executing program 5 (id=1070): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r1, 0x16) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 335.002µs ago: executing program 2 (id=1071): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)="96", 0x1, 0xfffffffffffffffc}) (async, rerun: 64) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x3, r1, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, 0x8000000000000001}) (async, rerun: 64) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000000200)="cc", 0x1, 0x2}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x2, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000340)={0x18, r1}) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x40c0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x14c, 0x24, 0xd0f, 0x70bd27, 0x4000, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ff, 0x4, 0x296d, 0xa, 0x10, 0xf, 0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltfilter={0x64, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0x1}, {0x10, 0xffe0}, {0xffe0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x67, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0xce}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x2df}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 0s ago: executing program 2 (id=1072): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000040)=""/102) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000040)=""/102) (async) kernel console output (not intermixed with test programs): erlayfs: overlapping lowerdir path [ 64.688761][ T6912] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 64.692314][ T6912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.720340][ T6915] netlink: 'syz.1.261': attribute type 23 has an invalid length. [ 64.885487][ T6932] loop6: detected capacity change from 0 to 524287999 [ 64.888219][ T6932] ldm_validate_partition_table(): Disk read failed. [ 64.890426][ T6932] Dev loop6: unable to read RDB block 0 [ 64.894290][ T6932] loop6: unable to read partition table [ 64.896206][ T6932] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 64.920346][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.931800][ T6935] bridge_slave_0: left allmulticast mode [ 64.934670][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.986358][ T5942] Process accounting resumed [ 65.000126][ T6941] Process accounting resumed [ 65.117915][ T6952] warning: `syz.2.271' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.279271][ T6972] hpfs: hpfs_map_sector(): read error [ 65.347600][ T6992] xt_hashlimit: size too large, truncated to 1048576 [ 65.597050][ T7019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.601035][ T7020] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.723567][ T7038] syz.3.295: attempt to access beyond end of device [ 65.723567][ T7038] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 65.728206][ T7038] syz.3.295: attempt to access beyond end of device [ 65.728206][ T7038] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 65.733971][ T7038] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 65.737553][ T7038] syz.3.295: attempt to access beyond end of device [ 65.737553][ T7038] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 65.743476][ T7038] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 65.749000][ T7038] syz.3.295: attempt to access beyond end of device [ 65.749000][ T7038] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 65.756071][ T7038] syz.3.295: attempt to access beyond end of device [ 65.756071][ T7038] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 65.760233][ T7038] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 65.763725][ T7038] syz.3.295: attempt to access beyond end of device [ 65.763725][ T7038] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 65.769000][ T7038] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 65.773801][ T7038] syz.3.295: attempt to access beyond end of device [ 65.773801][ T7038] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 65.779210][ T7038] syz.3.295: attempt to access beyond end of device [ 65.779210][ T7038] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 65.784706][ T7038] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 65.788922][ T7038] syz.3.295: attempt to access beyond end of device [ 65.788922][ T7038] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 65.795153][ T7038] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 65.799483][ T7038] syz.3.295: attempt to access beyond end of device [ 65.799483][ T7038] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 65.804254][ T7038] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 65.808298][ T7038] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 65.812742][ T7038] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 66.175888][ T7052] xfrm0 speed is unknown, defaulting to 1000 [ 66.178228][ T7052] xfrm0 speed is unknown, defaulting to 1000 [ 66.181614][ T7052] xfrm0 speed is unknown, defaulting to 1000 [ 66.187369][ T7052] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.193579][ T7052] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 66.207678][ T7052] xfrm0 speed is unknown, defaulting to 1000 [ 66.210566][ T7052] xfrm0 speed is unknown, defaulting to 1000 [ 66.213826][ T7052] xfrm0 speed is unknown, defaulting to 1000 [ 66.217234][ T7052] xfrm0 speed is unknown, defaulting to 1000 [ 66.261667][ T7061] binfmt_misc: register: failed to install interpreter file ./file0 [ 66.263826][ T7064] netlink: 'syz.3.302': attribute type 10 has an invalid length. [ 66.268037][ T7064] macvlan0: entered promiscuous mode [ 66.270079][ T7064] macvlan0: entered allmulticast mode [ 66.348806][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 66.348821][ T40] audit: type=1400 audit(1750922816.648:395): avc: denied { setopt } for pid=7068 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.368617][ T40] audit: type=1400 audit(1750922816.648:396): avc: denied { create } for pid=7070 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 66.422686][ T40] audit: type=1400 audit(1750922816.728:397): avc: denied { write } for pid=7080 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.428658][ T40] audit: type=1400 audit(1750922816.728:398): avc: denied { setopt } for pid=7080 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.451302][ T7086] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 66.578811][ T40] audit: type=1400 audit(1750922816.878:399): avc: denied { append } for pid=7087 comm="syz.2.308" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.631930][ T5995] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.792859][ T40] audit: type=1400 audit(1750922817.098:400): avc: denied { setattr } for pid=5941 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.802769][ T5995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.806157][ T5995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.809183][ T5995] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.813569][ T5995] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.816402][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.820013][ T5995] usb 5-1: config 0 descriptor?? [ 67.225406][ T5995] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 67.229732][ T5995] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 67.235404][ T5995] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 67.354178][ T40] audit: type=1400 audit(1750922817.658:401): avc: denied { create } for pid=7104 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 67.357968][ T7105] vcan1: entered allmulticast mode [ 67.368789][ T7106] vcan2: entered allmulticast mode [ 67.487913][ T40] audit: type=1400 audit(1750922817.788:402): avc: denied { write } for pid=7076 comm="syz.0.307" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.496188][ T40] audit: type=1400 audit(1750922817.798:403): avc: denied { create } for pid=7076 comm="syz.0.307" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.498992][ T5942] usb 5-1: USB disconnect, device number 4 [ 67.502638][ T40] audit: type=1400 audit(1750922817.798:404): avc: denied { associate } for pid=7076 comm="syz.0.307" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.873863][ T7116] /dev/sr0: Can't open blockdev [ 68.033638][ T7116] /dev/sr0: Can't open blockdev [ 68.141919][ T7116] /dev/sr0: Can't open blockdev [ 68.243444][ T7116] /dev/sr0: Can't open blockdev [ 68.300868][ T7127] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 68.324537][ T7116] /dev/sr0: Can't open blockdev [ 68.415307][ T7133] hub 2-0:1.0: USB hub found [ 68.417215][ T7133] hub 2-0:1.0: 2 ports detected [ 68.452781][ T7116] /dev/sr0: Can't open blockdev [ 68.562967][ T7116] /dev/sr0: Can't open blockdev [ 68.581237][ T7138] syzkaller1: entered promiscuous mode [ 68.583350][ T7138] syzkaller1: entered allmulticast mode [ 68.705358][ T7116] /dev/sr0: Can't open blockdev [ 68.717399][ T7142] netlink: 'syz.1.328': attribute type 3 has an invalid length. [ 68.720015][ T7142] __nla_validate_parse: 5 callbacks suppressed [ 68.720023][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 68.752073][ T7144] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.845230][ T7153] syzkaller0: entered promiscuous mode [ 68.847027][ T7153] syzkaller0: entered allmulticast mode [ 68.852315][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 68.855119][ T7153] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 68.857530][ T7153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.857763][ T7150] netlink: 72 bytes leftover after parsing attributes in process `syz.0.331'. [ 69.176170][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 69.408651][ T7192] binder: Unknown parameter 'statsWglwJàf+™scs—ùix^_Ñ`+G‚“óë' [ 69.845515][ T7207] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 69.862585][ T7205] Bluetooth: hci0: invalid len left 7, exp >= 118 [ 69.865915][ T7209] xfrm0 speed is unknown, defaulting to 1000 [ 69.930006][ T7216] netlink: 'syz.2.350': attribute type 1 has an invalid length. [ 69.932668][ T7216] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 69.935334][ T7216] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.350'. [ 69.976422][ T7220] afs: Unknown parameter 'ryn' [ 70.005726][ T2293] IPVS: starting estimator thread 0... [ 70.008611][ T7221] mmap: syz.2.353 (7221) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.084735][ T7226] IPVS: length: 4096 != 24 [ 70.092400][ T7222] IPVS: using max 44 ests per chain, 105600 per kthread [ 70.198385][ T7239] netlink: 220 bytes leftover after parsing attributes in process `syz.1.356'. [ 70.220364][ T7239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 70.288779][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 70.363971][ T7252] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 70.410941][ T7254] netlink: 328 bytes leftover after parsing attributes in process `syz.2.363'. [ 70.415426][ T7254] xfs: Unknown parameter 'usrquotaì' [ 70.862525][ T7256] openvswitch: netlink: Multiple metadata blocks provided [ 71.070471][ T7265] Driver unsupported XDP return value 0 on prog (id 77) dev N/A, expect packet loss! [ 71.079177][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.081256][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.118742][ T7268] xt_recent: Unsupported userspace flags (000000c7) [ 71.129653][ T7268] netlink: 'syz.1.369': attribute type 9 has an invalid length. [ 71.202013][ T67] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 71.319333][ T7272] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.322665][ T7273] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.351902][ T67] usb 5-1: Using ep0 maxpacket: 32 [ 71.360683][ T67] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 71.363274][ T67] usb 5-1: config 0 has no interface number 0 [ 71.366721][ T67] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 71.369557][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.372233][ T67] usb 5-1: Product: syz [ 71.373884][ T67] usb 5-1: Manufacturer: syz [ 71.375753][ T67] usb 5-1: SerialNumber: syz [ 71.378715][ T67] usb 5-1: config 0 descriptor?? [ 71.382445][ T67] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 71.385181][ T67] usb 5-1: selecting invalid altsetting 1 [ 71.387014][ T67] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 71.391520][ T67] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 71.396423][ T67] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 71.399226][ T67] usb 5-1: media controller created [ 71.415454][ T67] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.443799][ T7279] netlink: 'syz.2.373': attribute type 15 has an invalid length. [ 71.448915][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'. [ 71.591557][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 71.626308][ T7291] gfs2: gfs2 mount does not exist [ 71.628255][ T7291] gfs2: gfs2 mount does not exist [ 71.630126][ T7291] gfs2: gfs2 mount does not exist [ 71.633010][ T7291] gfs2: gfs2 mount does not exist [ 71.634903][ T7291] gfs2: gfs2 mount does not exist [ 71.637290][ T7292] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 71.641243][ T7292] overlayfs: overlapping lowerdir path [ 71.642074][ T5995] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 71.674351][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 71.674361][ T40] audit: type=1400 audit(1750922821.978:428): avc: denied { mount } for pid=7258 comm="syz.0.365" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 71.676561][ T7297] IPVS: length: 4096 != 24 [ 71.801923][ T5995] usb 6-1: Using ep0 maxpacket: 32 [ 71.804786][ T5995] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 71.807537][ T5995] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.810674][ T5995] usb 6-1: config 0 has no interface number 0 [ 71.812943][ T5995] usb 6-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 71.816643][ T5995] usb 6-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 71.822456][ T5995] usb 6-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 71.825327][ T5995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.827836][ T5995] usb 6-1: Product: syz [ 71.829195][ T5995] usb 6-1: Manufacturer: syz [ 71.831009][ T5995] usb 6-1: SerialNumber: syz [ 71.833596][ T7302] trusted_key: syz.2.380 sent an empty control message without MSG_MORE. [ 71.834417][ T5995] usb 6-1: config 0 descriptor?? [ 71.839406][ T7277] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 71.842512][ T5995] usb-storage 6-1:0.231: USB Mass Storage device detected [ 71.893330][ T7312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.905095][ T7302] input: syz1 as /devices/virtual/input/input13 [ 72.516814][ T67] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 72.519621][ T7259] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 72.522223][ T67] zl10353_read_register: readreg error (reg=127, ret==-110) [ 72.540487][ T67] usb 5-1: USB disconnect, device number 5 [ 73.038901][ T40] audit: type=1400 audit(1750922823.338:429): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 73.149526][ T5995] usb 6-1: USB disconnect, device number 10 [ 73.324108][ T5940] Bluetooth: hci0: command 0x0419 tx timeout [ 73.327141][ T7328] bio_check_eod: 2 callbacks suppressed [ 73.327150][ T7328] syz.0.384: attempt to access beyond end of device [ 73.327150][ T7328] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 73.334155][ T7328] XFS (nbd0): SB validate failed with error -5. [ 73.382199][ T7336] unsupported nlmsg_type 40 [ 73.384321][ T40] audit: type=1400 audit(1750922823.688:430): avc: denied { shutdown } for pid=7335 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.596580][ T7345] input: syz0 as /devices/virtual/input/input14 [ 73.603325][ T7345] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 73.607372][ T40] audit: type=1400 audit(1750922823.908:431): avc: denied { shutdown } for pid=7344 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.810695][ T7351] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.887827][ T7351] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.957349][ T40] audit: type=1400 audit(1750922824.258:432): avc: denied { getopt } for pid=7355 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.970512][ T7351] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.277426][ T7351] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.286329][ T7351] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.310413][ T7351] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.318760][ T7351] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.321957][ T40] audit: type=1400 audit(1750922824.618:433): avc: denied { map } for pid=7360 comm="syz.2.394" path="socket:[19479]" dev="sockfs" ino=19479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.330974][ T40] audit: type=1400 audit(1750922824.618:434): avc: denied { read } for pid=7360 comm="syz.2.394" path="socket:[19479]" dev="sockfs" ino=19479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.355746][ T7363] vivid-003: disconnect [ 74.360437][ T7365] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 74.363743][ T7362] vivid-003: reconnect [ 74.365873][ T7366] 8021q: VLANs not supported on ip_vti0 [ 74.448066][ T7372] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 74.454348][ T7372] __nla_validate_parse: 2 callbacks suppressed [ 74.454363][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 74.486008][ T40] audit: type=1400 audit(1750922824.788:435): avc: denied { setopt } for pid=7373 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.502692][ T40] audit: type=1400 audit(1750922824.808:436): avc: denied { bind } for pid=7373 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.508662][ T40] audit: type=1400 audit(1750922824.808:437): avc: denied { name_bind } for pid=7373 comm="syz.0.401" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 74.583976][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 74.587468][ T7387] netlink: 'syz.1.402': attribute type 14 has an invalid length. [ 74.862327][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.021983][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 75.025056][ T29] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 75.028226][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.032951][ T29] usb 5-1: config 0 descriptor?? [ 75.037859][ T29] as10x_usb: device has been detected [ 75.040491][ T29] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 75.050250][ T29] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 75.065009][ T29] as10x_usb: error during firmware upload part1 [ 75.067374][ T29] Registered device nBox DVB-T Dongle [ 75.239477][ T29] usb 5-1: USB disconnect, device number 6 [ 75.249619][ T29] Unregistered device nBox DVB-T Dongle [ 75.250306][ T29] as10x_usb: device has been disconnected [ 75.391930][ T5940] Bluetooth: hci0: command 0x0419 tx timeout [ 75.675573][ T7436] loop6: detected capacity change from 0 to 524287999 [ 75.896630][ T7452] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 75.899275][ T7452] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.905976][ T7452] vhci_hcd vhci_hcd.0: Device attached [ 75.913190][ T5940] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 75.913233][ T5940] Bluetooth: hci2: Dropping invalid advertising data [ 75.914994][ T7453] vhci_hcd: connection closed [ 75.915638][ T5940] Bluetooth: hci2: Malformed LE Event: 0x02 [ 75.918952][ T59] vhci_hcd: stop threads [ 75.926326][ T59] vhci_hcd: release socket [ 75.928492][ T59] vhci_hcd: disconnect device [ 75.959724][ T7456] netlink: 'syz.1.427': attribute type 1 has an invalid length. [ 75.962246][ T7456] netlink: 216 bytes leftover after parsing attributes in process `syz.1.427'. [ 76.442344][ T7469] syz.0.431 (7469): /proc/7468/oom_adj is deprecated, please use /proc/7468/oom_score_adj instead. [ 76.681950][ T34] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 76.831896][ T34] usb 5-1: device descriptor read/64, error -71 [ 76.928596][ T7490] xt_hashlimit: size too large, truncated to 1048576 [ 76.939875][ T7490] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 76.979862][ T7491] C: renamed from lo [ 76.984548][ T7491] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 77.071946][ T34] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 77.212200][ T34] usb 5-1: device descriptor read/64, error -71 [ 77.257778][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 77.257789][ T40] audit: type=1400 audit(1750922827.558:449): avc: denied { watch_reads } for pid=7502 comm="syz.2.440" path="/118" dev="tmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.322106][ T34] usb usb5-port1: attempt power cycle [ 77.375927][ T40] audit: type=1400 audit(1750922827.678:450): avc: denied { bind } for pid=7508 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.671911][ T34] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 77.694414][ T40] audit: type=1400 audit(1750922827.998:451): avc: denied { read } for pid=7517 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.708706][ T34] usb 5-1: device descriptor read/8, error -71 [ 77.795093][ T7523] overlayfs: missing 'lowerdir' [ 77.879318][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 77.952211][ T34] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 77.974008][ T34] usb 5-1: device descriptor read/8, error -71 [ 78.027405][ T40] audit: type=1400 audit(1750922828.328:452): avc: denied { ioctl } for pid=7529 comm="syz.1.449" path="socket:[17138]" dev="sockfs" ino=17138 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.084144][ T34] usb usb5-port1: unable to enumerate USB device [ 78.097906][ T7539] MINIX-fs: blocksize too small for device [ 78.133408][ T7541] xt_CONNSECMARK: invalid mode: 0 [ 78.328021][ T5940] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 78.330867][ T5940] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 78.790141][ T29] IPVS: starting estimator thread 0... [ 78.891984][ T7550] IPVS: using max 44 ests per chain, 105600 per kthread [ 79.091998][ T61] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 79.254436][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.257858][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.260891][ T61] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.266825][ T61] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.269672][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.273448][ T61] usb 6-1: config 0 descriptor?? [ 79.432122][ T837] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 79.593765][ T837] usb 7-1: config index 0 descriptor too short (expected 8192, got 36) [ 79.596458][ T837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.599787][ T837] usb 7-1: config 0 has no interfaces? [ 79.601651][ T837] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.604944][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.608893][ T837] usb 7-1: config 0 descriptor?? [ 79.679911][ T61] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 79.685143][ T61] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 79.813759][ T837] usb 7-1: string descriptor 0 read error: -71 [ 79.816730][ T837] usb 7-1: USB disconnect, device number 4 [ 79.942407][ T7554] openvswitch: netlink: Key type 30 is not supported [ 79.947182][ T2293] usb 6-1: USB disconnect, device number 11 [ 80.342333][ T7573] netlink: 68 bytes leftover after parsing attributes in process `syz.2.462'. [ 80.418864][ T40] audit: type=1400 audit(1750922830.718:453): avc: denied { getopt } for pid=7574 comm="syz.0.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.474825][ T7584] syzkaller1: entered promiscuous mode [ 80.477254][ T7584] syzkaller1: entered allmulticast mode [ 80.501460][ T7588] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.466'. [ 80.519323][ T7583] bridge_slave_0: left promiscuous mode [ 80.550767][ T40] audit: type=1400 audit(1750922830.848:454): avc: denied { connect } for pid=7589 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.556821][ T7590] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.467'. [ 80.561718][ T40] audit: type=1400 audit(1750922830.848:455): avc: denied { write } for pid=7589 comm="syz.2.467" path="socket:[18819]" dev="sockfs" ino=18819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.679873][ T7600] tipc: Started in network mode [ 80.684190][ T7600] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 80.689483][ T7600] tipc: Enabled bearer , priority 10 [ 80.720355][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 80.724648][ T7600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7600 comm=syz.1.470 [ 80.866072][ T40] audit: type=1400 audit(1750922831.168:456): avc: denied { mounton } for pid=7614 comm="syz.2.476" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.867284][ T7615] fuse: Unknown parameter 'use2_id' [ 80.868370][ T7616] 9p: Unknown access argument 18446744073709551615: -34 [ 80.962180][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 80.970771][ T7625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.973263][ T7625] IPv6: NLM_F_CREATE should be set when creating new route [ 80.978486][ T61] IPVS: starting estimator thread 0... [ 80.981059][ T7625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.984120][ T7625] IPv6: NLM_F_CREATE should be set when creating new route [ 81.091961][ T7626] IPVS: using max 43 ests per chain, 103200 per kthread [ 81.110229][ T7631] overlay: ./file0 is not a directory [ 81.219879][ T7635] xt_TCPMSS: Only works on TCP SYN packets [ 81.313629][ T838] cfg80211: failed to load regulatory.db [ 81.652136][ T837] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 81.713830][ T29] tipc: Node number set to 4269801488 [ 81.813502][ T837] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.816864][ T837] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 81.826958][ T837] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.829794][ T837] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 81.834600][ T837] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 81.838104][ T40] audit: type=1400 audit(1750922832.138:457): avc: denied { execute } for pid=7644 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.852125][ T40] audit: type=1400 audit(1750922832.138:458): avc: denied { execute_no_trans } for pid=7644 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.864596][ T837] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.868678][ T837] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.873784][ T837] usb 6-1: Product: syz [ 81.875580][ T837] usb 6-1: Manufacturer: syz [ 81.884504][ T837] cdc_wdm 6-1:1.0: skipping garbage [ 81.886732][ T837] cdc_wdm 6-1:1.0: skipping garbage [ 81.891122][ T837] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 81.894072][ T837] cdc_wdm 6-1:1.0: Unknown control protocol [ 81.900061][ T7646] team0: No ports can be present during mode change [ 81.934974][ T7654] netlink: 52 bytes leftover after parsing attributes in process `syz.0.488'. [ 81.938517][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 81.971719][ T7008] bridge0: port 1(syz_tun) entered disabled state [ 81.978590][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.986426][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.987331][ T7008] syz_tun (unregistering): left allmulticast mode [ 81.990272][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.990825][ T7008] syz_tun (unregistering): left promiscuous mode [ 81.993535][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.995065][ T7008] bridge0: port 1(syz_tun) entered disabled state [ 81.997887][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.005844][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.009576][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.010619][ T7659] program syz.0.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.015904][ T7659] sctp: [Deprecated]: syz.0.489 (pid 7659) Use of int in maxseg socket option. [ 82.015904][ T7659] Use struct sctp_assoc_value instead [ 82.022874][ T7656] xfrm0 speed is unknown, defaulting to 1000 [ 82.091315][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.094612][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.109275][ T7656] chnl_net:caif_netlink_parms(): no params data found [ 82.207500][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.212254][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.215121][ T7656] bridge_slave_0: entered allmulticast mode [ 82.218229][ T7656] bridge_slave_0: entered promiscuous mode [ 82.241167][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.244736][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 82.253631][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.255917][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.258220][ T7656] bridge_slave_1: entered allmulticast mode [ 82.260915][ T7656] bridge_slave_1: entered promiscuous mode [ 82.294257][ T7656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.299587][ T7656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.327992][ T837] usb 6-1: USB disconnect, device number 12 [ 82.344876][ T7656] team0: Port device team_slave_0 added [ 82.354320][ T5939] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 82.355300][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.357064][ T5939] Bluetooth: hci0: Injecting HCI hardware error event [ 82.364361][ T5939] Bluetooth: hci0: hardware error 0x00 [ 82.365720][ T7656] team0: Port device team_slave_1 added [ 82.401941][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 82.404855][ T29] usb 7-1: config 2 interface 0 altsetting 8 endpoint 0x9 has invalid maxpacket 767, setting to 64 [ 82.408184][ T29] usb 7-1: config 2 interface 0 has no altsetting 0 [ 82.412035][ T29] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 82.413519][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.414900][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.417108][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.419632][ T29] usb 7-1: Product: syz [ 82.426843][ T34] kernel read not supported for file /video7 (pid: 34 comm: kworker/3:0) [ 82.427530][ T7656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.428405][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.428962][ T29] usb 7-1: Manufacturer: syz [ 82.431548][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.434854][ T29] usb 7-1: SerialNumber: syz [ 82.436010][ T7689] vivid-000: ================= START STATUS ================= [ 82.438704][ T7656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.438838][ T7689] vivid-000: Test Pattern: 75% Colorbar [ 82.459676][ T7689] vivid-000: Fill Percentage of Frame: 100 [ 82.462274][ T7689] vivid-000: Horizontal Movement: No Movement [ 82.464942][ T7689] vivid-000: Vertical Movement: No Movement [ 82.467432][ T7689] vivid-000: OSD Text Mode: All [ 82.469453][ T7689] vivid-000: Show Border: false [ 82.471578][ T7689] vivid-000: Show Square: false [ 82.473335][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.473549][ T7689] vivid-000: Sensor Flipped Horizontally: false [ 82.480131][ T7689] vivid-000: Sensor Flipped Vertically: false [ 82.482877][ T7689] vivid-000: Insert SAV Code in Image: false [ 82.485142][ T7689] vivid-000: Insert EAV Code in Image: false [ 82.487681][ T7689] vivid-000: Insert Video Guard Band: false [ 82.490212][ T7689] vivid-000: Reduced Framerate: false [ 82.492483][ T7689] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 82.495500][ T7689] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 82.498648][ T7689] vivid-000: Enable Capture Cropping: true grabbed [ 82.501343][ T7689] vivid-000: Enable Capture Composing: true grabbed [ 82.504278][ T7689] vivid-000: Enable Capture Scaler: true grabbed [ 82.506872][ T7689] vivid-000: Timestamp Source: End of Frame [ 82.509327][ T7689] vivid-000: Colorspace: sRGB [ 82.511246][ T7689] vivid-000: Transfer Function: Default [ 82.513828][ T7689] vivid-000: Y'CbCr Encoding: Default [ 82.515991][ T7689] vivid-000: HSV Encoding: Hue 0-179 [ 82.518114][ T7689] vivid-000: Quantization: Default [ 82.520212][ T7689] vivid-000: Apply Alpha To Red Only: false [ 82.522698][ T7689] vivid-000: Standard Aspect Ratio: 4x3 [ 82.525407][ T7689] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 82.528520][ T7689] vivid-000: DV Timings: 640x480p59 inactive [ 82.530831][ T7689] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 82.533741][ T7689] vivid-000: Maximum EDID Blocks: 2 [ 82.535734][ T7689] vivid-000: Limited RGB Range (16-235): false [ 82.538104][ T7689] vivid-000: Rx RGB Quantization Range: Automatic [ 82.540527][ T7689] vivid-000: Power Present: 0x00000001 [ 82.542745][ T7689] tpg source WxH: 320x180 (Y'CbCr) [ 82.545485][ T7689] tpg field: 1 [ 82.546964][ T7689] tpg crop: (0,0)/320x180 [ 82.548724][ T7689] tpg compose: (0,0)/320x180 [ 82.550602][ T7689] tpg colorspace: 8 [ 82.552285][ T7689] tpg transfer function: 0/2 [ 82.552372][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.554121][ T7689] tpg Y'CbCr encoding: 0/1 [ 82.554134][ T7689] tpg quantization: 0/2 [ 82.554141][ T7689] tpg RGB range: 0/2 [ 82.554149][ T7689] vivid-000: ================== END STATUS ================== [ 82.569779][ T7656] hsr_slave_0: entered promiscuous mode [ 82.572810][ T7656] hsr_slave_1: entered promiscuous mode [ 82.575740][ T7656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.578922][ T7656] Cannot create hsr debugfs directory [ 82.642448][ T29] usb 7-1: USB disconnect, device number 5 [ 82.970394][ T59] bond1 (unregistering): Released all slaves [ 83.027486][ T7656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.031469][ T7656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.035841][ T7656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.039829][ T7656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.083143][ T59] IPVS: stopping master sync thread 6499 ... [ 83.087992][ T7656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.120975][ T7709] netlink: 52 bytes leftover after parsing attributes in process `syz.1.499'. [ 83.124259][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 83.126968][ T7709] tipc: MTU too low for tipc bearer [ 83.135162][ T7656] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.140608][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.143595][ T6240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.153084][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.155976][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.176227][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.501'. [ 83.307122][ T59] hsr_slave_0: left promiscuous mode [ 83.309524][ T59] hsr_slave_1: left promiscuous mode [ 83.315562][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 83.315571][ T40] audit: type=1400 audit(1750922833.618:463): avc: denied { name_bind } for pid=7728 comm="syz.1.504" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 83.332823][ T7731] netlink: 'syz.1.504': attribute type 5 has an invalid length. [ 83.351780][ T59] veth1_macvtap: left promiscuous mode [ 83.357747][ T59] veth0_macvtap: left promiscuous mode [ 83.359587][ T59] veth1_vlan: left promiscuous mode [ 83.525566][ T59] team0 (unregistering): Port device vlan0 removed [ 84.044870][ T5940] Bluetooth: hci3: command tx timeout [ 84.352243][ T7731] ŠÄ: entered promiscuous mode [ 84.364446][ T7656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.403559][ T7736] netlink: 'syz.1.506': attribute type 10 has an invalid length. [ 84.419061][ T7736] bridge_slave_1: left allmulticast mode [ 84.421243][ T7736] bridge_slave_1: left promiscuous mode [ 84.423439][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.439099][ T7736] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 84.442154][ T5939] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 84.499454][ T40] audit: type=1400 audit(1750922834.798:464): avc: denied { remove_name } for pid=7744 comm="syz.1.508" name="control" dev="9p" ino=35913877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.500101][ T7656] veth0_vlan: entered promiscuous mode [ 84.515296][ T7656] veth1_vlan: entered promiscuous mode [ 84.517814][ T40] audit: type=1400 audit(1750922834.798:465): avc: denied { rmdir } for pid=7744 comm="syz.1.508" name="control" dev="9p" ino=35913877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.527260][ T40] audit: type=1400 audit(1750922834.818:466): avc: denied { link } for pid=7744 comm="syz.1.508" name="file1" dev="9p" ino=35913907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.534041][ T7656] veth0_macvtap: entered promiscuous mode [ 84.538468][ T7656] veth1_macvtap: entered promiscuous mode [ 84.556284][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.563196][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.566844][ T7656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.569684][ T7656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.575004][ T7656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.577709][ T7656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.584751][ T7751] kernel profiling enabled (shift: 63) [ 84.588401][ T7751] profiling shift: 63 too large [ 84.618923][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.623076][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.635780][ T40] audit: type=1400 audit(1750922834.938:467): avc: denied { write } for pid=7754 comm="syz.2.512" name="mouse1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 84.636157][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.648253][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.657057][ T40] audit: type=1400 audit(1750922834.958:468): avc: denied { mounton } for pid=7656 comm="syz-executor" path="/syzkaller.zQ7ylu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.707682][ T40] audit: type=1400 audit(1750922835.008:469): avc: denied { create } for pid=7765 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 84.721892][ T40] audit: type=1400 audit(1750922835.018:470): avc: denied { bind } for pid=7765 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 84.784459][ T5939] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 84.790671][ T40] audit: type=1400 audit(1750922835.088:471): avc: denied { setopt } for pid=7777 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.948618][ T7799] 9pnet: Found fid 0 not clunked [ 84.958883][ T7794] nvme_fabrics: missing parameter 'transport=%s' [ 84.960963][ T7794] nvme_fabrics: missing parameter 'nqn=%s' [ 85.048361][ T40] audit: type=1400 audit(1750922835.348:472): avc: denied { accept } for pid=7810 comm="syz.2.529" path=0000214E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 85.075924][ T7811] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 85.078920][ T7811] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 85.183889][ T7832] netlink: 'syz.1.533': attribute type 2 has an invalid length. [ 85.244888][ T7845] ALSA: mixer_oss: invalid OSS volume '' [ 85.260061][ T7847] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 85.321397][ T7864] binder: Binderfs stats mode cannot be changed during a remount [ 85.324171][ T7866] ptrace attach of "/syz-executor exec"[7656] was attempted by "/syz-executor exec"[7866] [ 85.337743][ T7866] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 85.369827][ T7872] __nla_validate_parse: 8 callbacks suppressed [ 85.369837][ T7872] netlink: 36 bytes leftover after parsing attributes in process `syz.4.544'. [ 85.394802][ T7869] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 85.399276][ T7869] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 85.744223][ T7906] afs: Unknown parameter 'd[ô' [ 86.111957][ T5939] Bluetooth: hci3: command tx timeout [ 86.180282][ T7919] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 86.185484][ T7920] xfrm1: entered allmulticast mode [ 86.212854][ T7924] netlink: 'syz.2.559': attribute type 1 has an invalid length. [ 87.318569][ T7963] overlay: Unknown parameter 'uid' [ 87.353423][ T7965] kAFS: No cell specified [ 87.400541][ T7969] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 87.409508][ T7969] CIFS: Unable to determine destination address [ 87.713267][ T7986] overlay: Unknown parameter 'uid<00000000000000000000' [ 87.849468][ T7991] binder: Unknown parameter 'fsname' [ 87.944564][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 88.201927][ T5939] Bluetooth: hci3: command tx timeout [ 88.830096][ T8007] syz.2.590 (8007) used greatest stack depth: 18792 bytes left [ 88.833325][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 88.893023][ T8023] netlink: 'syz.4.594': attribute type 29 has an invalid length. [ 88.896792][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 88.896806][ T40] audit: type=1400 audit(1750922839.198:487): avc: denied { append } for pid=8022 comm="syz.4.594" name="pfkey" dev="proc" ino=4026533897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.898385][ T8023] netlink: 604 bytes leftover after parsing attributes in process `syz.4.594'. [ 88.900654][ T40] audit: type=1400 audit(1750922839.198:488): avc: denied { map } for pid=8022 comm="syz.4.594" path="/proc/74/net/pfkey" dev="proc" ino=4026533897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 89.098900][ T40] audit: type=1400 audit(1750922839.398:489): avc: denied { create } for pid=8040 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.105294][ T40] audit: type=1400 audit(1750922839.398:490): avc: denied { bind } for pid=8040 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 89.113269][ T40] audit: type=1400 audit(1750922839.398:491): avc: denied { connect } for pid=8040 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 89.151804][ T40] audit: type=1400 audit(1750922839.448:492): avc: denied { ioctl } for pid=8040 comm="syz.4.602" path="socket:[23799]" dev="sockfs" ino=23799 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.170874][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.173300][ T8046] bond0: (slave rose0): Enslaving as an active interface with an up link [ 89.175068][ T40] audit: type=1400 audit(1750922839.478:493): avc: denied { read open } for pid=8048 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.187988][ T40] audit: type=1400 audit(1750922839.478:494): avc: denied { getattr } for pid=8048 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.188035][ T40] audit: type=1400 audit(1750922839.478:495): avc: denied { add_name } for pid=8047 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.188073][ T40] audit: type=1400 audit(1750922839.488:496): avc: denied { create } for pid=8047 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.211974][ T5942] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 89.372090][ T5942] usb 6-1: Using ep0 maxpacket: 16 [ 89.374307][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.374331][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.374350][ T5942] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 89.374362][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.375512][ T5942] usb 6-1: config 0 descriptor?? [ 89.379164][ T5942] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input15 [ 89.487493][ T8082] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.490383][ T8082] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.493788][ T8082] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.496615][ T8082] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.499853][ T8082] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 89.503092][ T8082] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 89.505904][ T8082] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 89.508709][ T8082] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 89.513592][ T8082] geneve2: entered promiscuous mode [ 89.515298][ T8082] geneve2: entered allmulticast mode [ 89.567937][ T8088] xt_hashlimit: max too large, truncated to 1048576 [ 89.570869][ T8088] xt_bpf: check failed: parse error [ 89.573858][ T8088] pim6reg1: entered promiscuous mode [ 89.575989][ T8088] pim6reg1: entered allmulticast mode [ 89.629844][ T5327] bcm5974 6-1:0.0: could not read from device [ 89.636577][ T8031] bcm5974 6-1:0.0: could not read from device [ 89.637043][ T5942] usb 6-1: USB disconnect, device number 13 [ 89.687755][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 89.745816][ T8106] netlink: 'syz.4.615': attribute type 29 has an invalid length. [ 89.748814][ T8106] netlink: 'syz.4.615': attribute type 29 has an invalid length. [ 89.754612][ T8106] netlink: 492 bytes leftover after parsing attributes in process `syz.4.615'. [ 89.867108][ T8121] syz.2.619 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 89.906759][ T8125] hfsplus: unable to find HFS+ superblock [ 90.050066][ T8129] can0: slcan on ptm0. [ 90.103525][ T8130] can0 (unregistered): slcan off ptm0. [ 90.147778][ T8137] use of bytesused == 0 is deprecated and will be removed in the future, [ 90.151235][ T8137] use the actual size instead. [ 90.235116][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 90.237948][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 90.240713][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.628'. [ 90.251931][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 90.272109][ T5939] Bluetooth: hci3: command tx timeout [ 90.326414][ T8153] ref_ctr_offset mismatch. inode: 0x424 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 90.364715][ T8155] xfrm0 speed is unknown, defaulting to 1000 [ 90.391433][ T8156] xfrm0 speed is unknown, defaulting to 1000 [ 90.757292][ T8173] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 90.760939][ T8173] macvtap1: entered allmulticast mode [ 90.763084][ T8173] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 90.767104][ T8173] batman_adv: batadv0: Adding interface: macvtap1 [ 90.769220][ T8173] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.778167][ T8173] batman_adv: batadv0: Interface activated: macvtap1 [ 90.806861][ T8177] syz_tun: entered allmulticast mode [ 90.815021][ T8176] syz_tun: left allmulticast mode [ 90.907729][ T8181] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 91.232478][ T67] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 91.397206][ T67] usb 6-1: unable to get BOS descriptor or descriptor too short [ 91.403595][ T67] usb 6-1: no configurations [ 91.405265][ T67] usb 6-1: can't read configurations, error -22 [ 91.563087][ T8192] netlink: 'syz.2.643': attribute type 29 has an invalid length. [ 91.569309][ T8192] netlink: 'syz.2.643': attribute type 2 has an invalid length. [ 91.571728][ T8192] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.643'. [ 91.575906][ T8192] nbd: must specify a device to reconfigure [ 91.679972][ T8195] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.692138][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'. [ 91.935384][ T8213] Bluetooth: hci0: load_link_keys: too big key_count value 28793 [ 91.971102][ T8215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.651'. [ 92.912007][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 92.912193][ T5940] Bluetooth: hci4: command 0x1003 tx timeout [ 93.151015][ T8255] netlink: 68 bytes leftover after parsing attributes in process `syz.1.664'. [ 93.208546][ T8263] tipc: Enabling of bearer rejected, failed to enable media [ 94.051168][ T8279] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 94.116499][ T8284] netlink: 68 bytes leftover after parsing attributes in process `syz.1.673'. [ 94.316363][ T8313] 9pnet_virtio: no channels available for device 127.0.0.1 [ 94.333480][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 94.333496][ T40] audit: type=1400 audit(1750922844.638:519): avc: denied { ioctl } for pid=8312 comm="syz.1.680" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 94.380362][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 94.392557][ T8321] netlink: 'syz.1.681': attribute type 1 has an invalid length. [ 94.396457][ T8321] usb usb9: usbfs: process 8321 (syz.1.681) did not claim interface 2 before use [ 94.568953][ T8327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.576519][ T8327] smc: net device bond0 applied user defined pnetid SYZ0 [ 95.176039][ T8343] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 95.190654][ T8343] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 95.196211][ T40] audit: type=1400 audit(1750922845.498:520): avc: denied { append } for pid=8342 comm="syz.4.689" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.207676][ T40] audit: type=1400 audit(1750922845.508:521): avc: denied { call } for pid=8342 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 95.439352][ T8352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8352 comm=syz.4.691 [ 95.444243][ T8352] bridge0: port 3(syz_tun) entered blocking state [ 95.446331][ T8352] bridge0: port 3(syz_tun) entered disabled state [ 95.448502][ T8352] syz_tun: entered allmulticast mode [ 95.450964][ T8352] syz_tun: entered promiscuous mode [ 95.453073][ T8352] bridge0: port 3(syz_tun) entered blocking state [ 95.455458][ T8352] bridge0: port 3(syz_tun) entered forwarding state [ 95.460786][ T8352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.691'. [ 95.465389][ T8352] netem: invalid attributes len -17 [ 95.467050][ T8352] netem: change failed [ 95.500671][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 95.566690][ T8361] vlan0: entered promiscuous mode [ 95.568909][ T8361] bridge0: entered promiscuous mode [ 95.747970][ T8367] netlink: 'syz.2.696': attribute type 1 has an invalid length. [ 95.752259][ T8370] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 95.769145][ T8367] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 95.849251][ T40] audit: type=1400 audit(1750922846.148:522): avc: denied { mounton } for pid=8375 comm="syz.1.699" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 95.986086][ T8389] Cannot find add_set index 0 as target [ 96.020298][ T40] audit: type=1400 audit(1750922846.318:523): avc: denied { map } for pid=8391 comm="syz.4.704" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.029263][ T40] audit: type=1400 audit(1750922846.318:524): avc: denied { execute } for pid=8391 comm="syz.4.704" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.040681][ T40] audit: type=1400 audit(1750922846.328:525): avc: denied { read } for pid=8393 comm="syz.2.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.697328][ T40] audit: type=1400 audit(1750922846.998:526): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 96.711958][ T61] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 96.784934][ T8408] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 96.834576][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 96.843233][ T40] audit: type=1400 audit(1750922847.138:527): avc: denied { mount } for pid=8411 comm="syz.1.711" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 96.857494][ T8412] devpts: Bad value for 'uid' [ 96.857528][ T40] audit: type=1400 audit(1750922847.158:528): avc: denied { remount } for pid=8411 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 96.859017][ T8412] devpts: Bad value for 'uid' [ 96.873354][ T61] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 96.875822][ T61] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.879174][ T61] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.883117][ T61] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.886152][ T8418] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 96.887443][ T61] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 96.890811][ T8418] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 96.895146][ T61] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 96.897809][ T8418] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 96.899904][ T61] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.906440][ T61] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.910103][ T61] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.914373][ T61] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 96.919312][ T61] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 96.921759][ T61] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.925424][ T61] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.929108][ T61] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.932844][ T61] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 96.939482][ T61] usb 7-1: string descriptor 0 read error: -22 [ 96.941502][ T61] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 96.944698][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.950210][ T61] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 97.151390][ T61] usb 7-1: USB disconnect, device number 6 [ 97.275871][ T8439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.719'. [ 97.569172][ T5939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.572454][ T5939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.575412][ T5939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.578528][ T5939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.586175][ T5939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.613018][ T8448] xfrm0 speed is unknown, defaulting to 1000 [ 97.690712][ T8448] chnl_net:caif_netlink_parms(): no params data found [ 97.730022][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 97.761497][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.764590][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.766842][ T8448] bridge_slave_0: entered allmulticast mode [ 97.772605][ T8448] bridge_slave_0: entered promiscuous mode [ 97.775723][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.777991][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.780270][ T8448] bridge_slave_1: entered allmulticast mode [ 97.783387][ T8448] bridge_slave_1: entered promiscuous mode [ 97.816731][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.821223][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.869057][ T8448] team0: Port device team_slave_0 added [ 97.873103][ T8448] team0: Port device team_slave_1 added [ 97.910607][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.913277][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.921443][ T8448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.929082][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.933872][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.945417][ T8448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.982500][ T8448] hsr_slave_0: entered promiscuous mode [ 97.984698][ T8448] hsr_slave_1: entered promiscuous mode [ 97.986745][ T8448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.989035][ T8448] Cannot create hsr debugfs directory [ 98.097351][ T8448] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.103571][ T8448] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.107576][ T8448] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.111488][ T8448] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.127037][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.129329][ T8448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.131696][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.133967][ T8448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.160655][ T8448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.169233][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.175167][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.187146][ T8448] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.193642][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.195895][ T6240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.202631][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.204913][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.307622][ T8448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.316457][ T8499] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.732'. [ 98.320189][ T8499] nfs4: Bad value for 'source' [ 98.345843][ T8502] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 98.455437][ T8448] veth0_vlan: entered promiscuous mode [ 98.460803][ T8448] veth1_vlan: entered promiscuous mode [ 98.486369][ T8448] veth0_macvtap: entered promiscuous mode [ 98.498609][ T8448] veth1_macvtap: entered promiscuous mode [ 98.508316][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.517883][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.523742][ T8448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.526480][ T8448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.529254][ T8448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.532523][ T8448] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.564534][ T8517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8517 comm=syz.4.734 [ 98.567256][ T6249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.573850][ T6249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.587681][ T6240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.590133][ T6240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.655536][ T8523] netlink: 44 bytes leftover after parsing attributes in process `syz.5.721'. [ 98.658647][ T8524] netlink: 44 bytes leftover after parsing attributes in process `syz.5.721'. [ 98.663839][ T8523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.668811][ T8523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.855447][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.934085][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.995717][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.084105][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.087929][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.091128][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.094823][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.097759][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.106416][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.120577][ T8526] xfrm0 speed is unknown, defaulting to 1000 [ 99.210388][ T8526] chnl_net:caif_netlink_parms(): no params data found [ 99.232377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.580605][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.587153][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.591764][ T59] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 99.595719][ T59] bond0 (unregistering): Released all slaves [ 99.635489][ T5944] Bluetooth: hci4: command tx timeout [ 99.664139][ T59] bond1 (unregistering): Released all slaves [ 99.670555][ T59] bond2 (unregistering): Released all slaves [ 99.730137][ T59] bond3 (unregistering): Released all slaves [ 99.828995][ T59] ŠÄ: left promiscuous mode [ 99.842309][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.845149][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.847539][ T8526] bridge_slave_0: entered allmulticast mode [ 99.850306][ T8526] bridge_slave_0: entered promiscuous mode [ 99.854101][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.856491][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.858844][ T8526] bridge_slave_1: entered allmulticast mode [ 99.861541][ T8526] bridge_slave_1: entered promiscuous mode [ 99.872593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.906698][ T8526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.912296][ T8526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.953801][ T59] tipc: Disabling bearer [ 99.959796][ T59] tipc: Left network mode [ 99.962307][ T5940] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 99.962502][ T5944] Bluetooth: hci5: command 0xfc11 tx timeout [ 99.968640][ T8526] team0: Port device team_slave_0 added [ 99.978072][ T8526] team0: Port device team_slave_1 added [ 99.990525][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.4.746'. [ 100.049306][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.051548][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.061951][ T8526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.068041][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.070246][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.080798][ T8526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.161343][ T8526] hsr_slave_0: entered promiscuous mode [ 100.164890][ T8526] hsr_slave_1: entered promiscuous mode [ 100.167607][ T8526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.171166][ T8526] Cannot create hsr debugfs directory [ 100.296569][ T59] hsr_slave_0: left promiscuous mode [ 100.300083][ T59] hsr_slave_1: left promiscuous mode [ 100.307095][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.309606][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.316984][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.319494][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.369072][ T59] hsr0: left allmulticast mode [ 100.370903][ T59] veth1_macvtap: left promiscuous mode [ 100.374941][ T59] veth0_macvtap: left promiscuous mode [ 100.532026][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 100.534781][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 100.537499][ T8618] netlink: 'syz.2.755': attribute type 14 has an invalid length. [ 100.712581][ T8631] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.004502][ T59] team0 (unregistering): Port device team_slave_1 removed [ 101.065704][ T59] team0 (unregistering): Port device team_slave_0 removed [ 101.164235][ T5940] Bluetooth: hci1: command tx timeout [ 101.492328][ T8631] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 101.494761][ T8631] macsec1: entered allmulticast mode [ 101.496910][ T8631] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 101.510548][ T8631] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 101.513153][ T8631] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 101.620896][ T8636] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 101.640170][ T8637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.712295][ T5940] Bluetooth: hci4: command tx timeout [ 101.752959][ T8641] ip6t_srh: unknown srh invflags 7D00 [ 101.935060][ T8651] input: syz1 as /devices/virtual/input/input16 [ 102.030773][ T59] IPVS: stop unused estimator thread 0... [ 102.038101][ T8526] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.048458][ T8526] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.058235][ T8526] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.064555][ T8526] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.079945][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 102.079956][ T40] audit: type=1400 audit(1750922852.378:543): avc: denied { connect } for pid=8658 comm="syz.5.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 102.116687][ T8526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.127018][ T8526] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.131960][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.134247][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.139492][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.141748][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.246049][ T8526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.266376][ T8526] veth0_vlan: entered promiscuous mode [ 102.271089][ T8526] veth1_vlan: entered promiscuous mode [ 102.284683][ T8526] veth0_macvtap: entered promiscuous mode [ 102.288487][ T8526] veth1_macvtap: entered promiscuous mode [ 102.298166][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.303699][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.307986][ T8526] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.310703][ T8526] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.314668][ T8526] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.317375][ T8526] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.343880][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.347150][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.359746][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.362508][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.441478][ T8668] tmpfs: Bad value for 'mpol' [ 102.444909][ T40] audit: type=1326 audit(1750922852.748:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.2.767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811078e929 code=0x7ffc0000 [ 102.453237][ T40] audit: type=1326 audit(1750922852.748:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.2.767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811078e929 code=0x7ffc0000 [ 102.460404][ T40] audit: type=1326 audit(1750922852.758:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.2.767" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f811078e929 code=0x7ffc0000 [ 102.467707][ T40] audit: type=1326 audit(1750922852.758:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.2.767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811078e929 code=0x7ffc0000 [ 102.475091][ T40] audit: type=1326 audit(1750922852.758:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.2.767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811078e929 code=0x7ffc0000 [ 102.483807][ T40] audit: type=1326 audit(1750922852.758:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.2.767" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f81107907bc code=0x7ffc0000 [ 102.490841][ T40] audit: type=1326 audit(1750922852.758:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.2.767" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f81107906f4 code=0x7ffc0000 [ 102.498190][ T40] audit: type=1326 audit(1750922852.758:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.2.767" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f81107906f4 code=0x7ffc0000 [ 102.506978][ T40] audit: type=1326 audit(1750922852.758:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.2.767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811078e929 code=0x7ffc0000 [ 102.525298][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 102.626510][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 102.629342][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'. [ 102.632841][ T8679] netlink: 'syz.2.772': attribute type 7 has an invalid length. [ 102.662421][ T8681] netlink: 'syz.4.773': attribute type 21 has an invalid length. [ 102.664508][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 102.664929][ T8681] netlink: 156 bytes leftover after parsing attributes in process `syz.4.773'. [ 102.669423][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 102.716499][ T8685] netlink: 596 bytes leftover after parsing attributes in process `syz.2.776'. [ 102.720219][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 102.723586][ T46] bond0: (slave bond_slave_0): interface is now down [ 102.725888][ T46] bond0: (slave bond_slave_1): interface is now down [ 102.730185][ T46] bond0: now running without any active interface! [ 102.884267][ T8706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=8706 comm=syz.2.781 [ 102.905574][ T8711] netlink: 80 bytes leftover after parsing attributes in process `syz.4.782'. [ 102.908386][ T8711] netlink: 80 bytes leftover after parsing attributes in process `syz.4.782'. [ 103.213076][ T8754] xfrm1: entered allmulticast mode [ 103.259954][ T8759] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 103.452005][ T53] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 103.571611][ T8787] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.576854][ T8787] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 103.614678][ T53] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 103.618255][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30838, setting to 64 [ 103.625844][ T53] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 103.629146][ T53] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 103.631802][ T53] usb 10-1: Manufacturer: syz [ 103.634958][ T53] usb 10-1: config 0 descriptor?? [ 103.684761][ T53] rc_core: IR keymap rc-hauppauge not found [ 103.687221][ T53] Registered IR keymap rc-empty [ 103.689585][ T53] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 103.693853][ T53] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input17 [ 103.761881][ T837] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 103.792046][ T5940] Bluetooth: hci4: command tx timeout [ 103.838470][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.841205][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.846090][ T10] usb 10-1: USB disconnect, device number 2 [ 103.932162][ T837] usb 9-1: Using ep0 maxpacket: 16 [ 103.935955][ T837] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 103.938463][ T837] usb 9-1: config 0 has no interface number 0 [ 103.940370][ T837] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.943860][ T837] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.948104][ T837] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 103.950890][ T837] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 103.953918][ T837] usb 9-1: Product: syz [ 103.955236][ T837] usb 9-1: SerialNumber: syz [ 103.957936][ T837] usb 9-1: config 0 descriptor?? [ 103.961992][ T837] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 103.964786][ T837] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input18 [ 104.196377][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.199702][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.202167][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.204396][ T10] usb 9-1: USB disconnect, device number 2 [ 104.206242][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.206254][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 104.214196][ T10] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 104.428703][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.527534][ T8819] xt_nat: multiple ranges no longer supported [ 104.607340][ T8831] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 104.673046][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.676687][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.680678][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.688704][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.691546][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.710579][ T8841] xfrm0 speed is unknown, defaulting to 1000 [ 104.798191][ T8841] chnl_net:caif_netlink_parms(): no params data found [ 104.867590][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.869901][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.872550][ T8841] bridge_slave_0: entered allmulticast mode [ 104.875314][ T8841] bridge_slave_0: entered promiscuous mode [ 104.878769][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.880986][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.883795][ T8841] bridge_slave_1: entered allmulticast mode [ 104.886394][ T8841] bridge_slave_1: entered promiscuous mode [ 104.923676][ T8841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.925190][ T8841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.955476][ T8841] team0: Port device team_slave_0 added [ 104.956964][ T8841] team0: Port device team_slave_1 added [ 105.003657][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.003669][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.003690][ T8841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.004607][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.004630][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.004652][ T8841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.051891][ T53] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 105.058303][ T8841] hsr_slave_0: entered promiscuous mode [ 105.084345][ T8841] hsr_slave_1: entered promiscuous mode [ 105.113124][ T8888] netlink: 'syz.5.835': attribute type 21 has an invalid length. [ 105.117206][ T8890] overlay: filesystem on ./bus is read-only [ 105.203501][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 105.206824][ T53] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 64 [ 105.211709][ T53] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.214560][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.217061][ T53] usb 7-1: Product: ↻ᇅå©á”‡å¼™ê»¦à¢™ç§°çƒä³³æŽ”뀙뒎䷔嘌ç à¡…ç«á¦¹à«ªÉ‹á·¬ï¬¾îœ²ç¼ì¯°Èºî§ æ±ªé’ƒêŸ°ëž’ä…½æ¡ë´£ç«¾æ¨îè®ë¸³á¾žï—›ì‚Ÿâ’˜äŸ‚Ú§ [ 105.221764][ T53] usb 7-1: Manufacturer: ј [ 105.223478][ T53] usb 7-1: SerialNumber: ÐŽ [ 105.226652][ T8864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.309398][ T8906] usb usb8: usbfs: process 8906 (syz.4.842) did not claim interface 0 before use [ 105.313595][ T8906] ucma_write: process 298 (syz.4.842) changed security contexts after opening file descriptor, this is not allowed. [ 105.540185][ T8920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.681621][ T8931] netlink: 'syz.5.849': attribute type 4 has an invalid length. [ 105.882097][ T5940] Bluetooth: hci4: command tx timeout [ 106.089015][ T8962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.166952][ T8962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.240541][ T8962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.257593][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.344485][ T8962] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.346249][ T8968] virtio-fs: tag not found [ 106.349721][ T8968] fuse: Unknown parameter '' [ 106.390623][ T8972] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 106.397848][ T8972] overlayfs: failed to set xattr on upper [ 106.399720][ T8972] overlayfs: ...falling back to redirect_dir=nofollow. [ 106.401535][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.401775][ T8972] overlayfs: ...falling back to index=off. [ 106.401794][ T8972] overlayfs: ...falling back to uuid=null. [ 106.401801][ T8972] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 106.419902][ T8972] fuse: blksize only supported for fuseblk [ 106.449607][ T8962] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.463401][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.476531][ T8962] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.485352][ T8962] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.492318][ T8962] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.559287][ T46] bridge_slave_1: left allmulticast mode [ 106.561082][ T46] bridge_slave_1: left promiscuous mode [ 106.564427][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.569248][ T46] bridge_slave_0: left allmulticast mode [ 106.571030][ T46] bridge_slave_0: left promiscuous mode [ 106.573428][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.667902][ T8976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.753786][ T5940] Bluetooth: hci1: command tx timeout [ 106.829937][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.834898][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.838831][ T46] bond0 (unregistering): Released all slaves [ 106.973342][ T8991] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 106.975684][ T8991] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 107.185684][ T46] hsr_slave_0: left promiscuous mode [ 107.188132][ T46] hsr_slave_1: left promiscuous mode [ 107.190223][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.192974][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.195830][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.198133][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.198903][ T9012] tmpfs: Bad value for 'size' [ 107.224900][ T46] veth1_macvtap: left promiscuous mode [ 107.226774][ T46] veth0_macvtap: left promiscuous mode [ 107.228727][ T46] veth1_vlan: left promiscuous mode [ 107.230935][ T46] veth0_vlan: left promiscuous mode [ 107.756128][ T53] cdc_ncm 7-1:1.0: bind() failure [ 107.764298][ T53] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 107.766347][ T53] cdc_ncm 7-1:1.1: bind() failure [ 107.777415][ T53] usb 7-1: USB disconnect, device number 7 [ 107.801801][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 107.801812][ T40] audit: type=1400 audit(1751447146.088:580): avc: denied { unlink } for pid=9026 comm="syz.2.874" name="file0" dev="9p" ino=35913903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.812630][ T40] audit: type=1400 audit(1751447146.098:581): avc: denied { create } for pid=9026 comm="syz.2.874" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.825335][ T46] team0 (unregistering): Port device team_slave_1 removed [ 107.887676][ T46] team0 (unregistering): Port device team_slave_0 removed [ 107.896530][ T40] audit: type=1400 audit(1751447146.185:582): avc: denied { connect } for pid=9028 comm="syz.2.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.903041][ T40] audit: type=1400 audit(1751447146.185:583): avc: denied { getopt } for pid=9028 comm="syz.2.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.099945][ T9036] __nla_validate_parse: 11 callbacks suppressed [ 108.099956][ T9036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.877'. [ 108.374329][ T9042] xt_hashlimit: size too large, truncated to 1048576 [ 108.380960][ T8841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.386342][ T8841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.391133][ T8841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.402955][ T8841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.436107][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 108.472258][ T8841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.476976][ T40] audit: type=1400 audit(1751447146.757:584): avc: denied { map } for pid=9054 comm="syz.5.880" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.482060][ T8841] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.483957][ T40] audit: type=1400 audit(1751447146.757:585): avc: denied { execute } for pid=9054 comm="syz.5.880" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.499663][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.500978][ T9059] CIFS mount error: No usable UNC path provided in device string! [ 108.500978][ T9059] [ 108.502049][ T6249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.505124][ T9059] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.512842][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.515030][ T6249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.646572][ T9082] netlink: 60 bytes leftover after parsing attributes in process `syz.5.888'. [ 108.667276][ T8841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.695567][ T8841] veth0_vlan: entered promiscuous mode [ 108.700259][ T8841] veth1_vlan: entered promiscuous mode [ 108.716150][ T9091] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.892'. [ 108.722459][ T8841] veth0_macvtap: entered promiscuous mode [ 108.723715][ T9091] Failed to get privilege flags for destination (handle=0x2:0x0) [ 108.729309][ T8841] veth1_macvtap: entered promiscuous mode [ 108.737483][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.744190][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.748763][ T40] audit: type=1800 audit(1751447147.009:586): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.893" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 108.756692][ T8841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.759488][ T8841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.762304][ T8841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.765054][ T8841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.813415][ T6249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.815805][ T6249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.835666][ T9107] tmpfs: Unknown parameter 'usrquotade_hardlimit' [ 108.836615][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.840590][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.857002][ T9111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.870571][ T5940] Bluetooth: hci1: command 0x041b tx timeout [ 108.875031][ T9111] batadv_slave_0: entered promiscuous mode [ 108.958407][ T9125] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.963032][ T9125] netlink: 292 bytes leftover after parsing attributes in process `syz.5.905'. [ 108.994264][ T40] audit: type=1400 audit(1751447147.261:587): avc: denied { read write } for pid=9132 comm="syz.5.907" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.001871][ T40] audit: type=1400 audit(1751447147.261:588): avc: denied { open } for pid=9132 comm="syz.5.907" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.054401][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.5.909'. [ 109.140879][ T40] audit: type=1400 audit(1751447147.397:589): avc: denied { getopt } for pid=9154 comm="syz.5.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.352595][ T5997] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 109.509173][ T5997] usb 9-1: Invalid ep0 maxpacket: 64 [ 109.641050][ T5997] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 109.805738][ T5997] usb 9-1: Invalid ep0 maxpacket: 64 [ 109.807667][ T5997] usb usb9-port1: attempt power cycle [ 109.900025][ T9167] netlink: 36 bytes leftover after parsing attributes in process `syz.2.917'. [ 110.186493][ T5997] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 110.188774][ T9178] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 110.207506][ T5997] usb 9-1: Invalid ep0 maxpacket: 64 [ 110.350798][ T5997] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 110.382123][ T5997] usb 9-1: Invalid ep0 maxpacket: 64 [ 110.383983][ T5997] usb usb9-port1: unable to enumerate USB device [ 110.860474][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.955657][ T9189] netlink: 16 bytes leftover after parsing attributes in process `syz.5.922'. [ 111.049382][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.053100][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.056201][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.059103][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.062535][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.082330][ T9193] xfrm0 speed is unknown, defaulting to 1000 [ 111.165263][ T9193] chnl_net:caif_netlink_parms(): no params data found [ 111.208438][ T9201] xfrm0 speed is unknown, defaulting to 1000 [ 111.228984][ T9211] netlink: 'syz.2.925': attribute type 5 has an invalid length. [ 111.259286][ T9193] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.261791][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.265169][ T9193] bridge_slave_0: entered allmulticast mode [ 111.268531][ T9193] bridge_slave_0: entered promiscuous mode [ 111.278833][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.281098][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.283277][ T9193] bridge_slave_1: entered allmulticast mode [ 111.285951][ T9193] bridge_slave_1: entered promiscuous mode [ 111.323036][ T9193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.329859][ T9193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.371391][ T9193] team0: Port device team_slave_0 added [ 111.375930][ T9193] team0: Port device team_slave_1 added [ 111.415888][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.418688][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.429411][ T9193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.436040][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.438669][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.448418][ T9193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.514552][ T9193] hsr_slave_0: entered promiscuous mode [ 111.517317][ T9193] hsr_slave_1: entered promiscuous mode [ 111.519970][ T9193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.523413][ T9193] Cannot create hsr debugfs directory [ 111.568501][ T9230] netlink: 96 bytes leftover after parsing attributes in process `syz.5.932'. [ 111.578921][ T9228] dvmrp1: entered allmulticast mode [ 111.584500][ T9230] xt_CONNSECMARK: invalid mode: 0 [ 111.724633][ T9238] netlink: 276 bytes leftover after parsing attributes in process `syz.2.934'. [ 111.769713][ T9241] binder: BINDER_SET_CONTEXT_MGR already set [ 111.771616][ T9241] binder: 9235:9241 ioctl 4018620d 200000000040 returned -16 [ 111.831682][ T9249] program syz.5.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.831723][ T9250] program syz.5.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.864419][ T9253] raw_sendmsg: syz.5.938 forgot to set AF_INET. Fix it! [ 111.900390][ T9255] tmpfs: Bad value for 'mpol' [ 112.290922][ T5942] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 112.423884][ T5942] usb 10-1: device descriptor read/64, error -71 [ 112.571569][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.635196][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.680105][ T5942] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 112.691725][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.775006][ T59] bridge_slave_1: left allmulticast mode [ 112.776835][ T59] bridge_slave_1: left promiscuous mode [ 112.778636][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.782671][ T59] bridge_slave_0: left allmulticast mode [ 112.784446][ T59] bridge_slave_0: left promiscuous mode [ 112.786535][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.825657][ T5942] usb 10-1: device descriptor read/64, error -71 [ 112.938658][ T5942] usb usb10-port1: attempt power cycle [ 113.016755][ T9294] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 113.018870][ T9294] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.023550][ T9294] vhci_hcd vhci_hcd.0: Device attached [ 113.026899][ T9295] usbip_core: unknown command [ 113.028767][ T9295] vhci_hcd: unknown pdu 0 [ 113.030155][ T9295] usbip_core: unknown command [ 113.031800][ T6249] vhci_hcd: stop threads [ 113.033080][ T6249] vhci_hcd: release socket [ 113.034430][ T6249] vhci_hcd: disconnect device [ 113.059268][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.067774][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.071648][ T59] bond0 (unregistering): Released all slaves [ 113.140898][ T5940] Bluetooth: hci1: command tx timeout [ 113.284280][ T5942] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 113.318216][ T5942] usb 10-1: device descriptor read/8, error -71 [ 113.422366][ T59] hsr_slave_0: left promiscuous mode [ 113.424747][ T59] hsr_slave_1: left promiscuous mode [ 113.426955][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.430036][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.433209][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.436074][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.457506][ T59] veth1_macvtap: left promiscuous mode [ 113.460073][ T59] veth0_macvtap: left promiscuous mode [ 113.462150][ T59] veth1_vlan: left promiscuous mode [ 113.465338][ T59] veth0_vlan: left promiscuous mode [ 113.561590][ T5942] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 113.577877][ T9303] netlink: 'syz.2.955': attribute type 2 has an invalid length. [ 113.582328][ T9303] __nla_validate_parse: 2 callbacks suppressed [ 113.582342][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 113.584807][ T5942] usb 10-1: device descriptor read/8, error -71 [ 113.694042][ T5942] usb usb10-port1: unable to enumerate USB device [ 113.759156][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 113.759167][ T40] audit: type=1400 audit(1751447151.898:595): avc: denied { setopt } for pid=9308 comm="syz.2.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 113.973937][ T40] audit: type=1400 audit(1751447152.114:596): avc: denied { write } for pid=9317 comm="syz.4.960" path="socket:[32013]" dev="sockfs" ino=32013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.100240][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 114.108818][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 114.146282][ T59] team0 (unregistering): Port device team_slave_1 removed [ 114.223634][ T59] team0 (unregistering): Port device team_slave_0 removed [ 114.759214][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 114.762227][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 114.765398][ T9353] netlink: 'syz.2.968': attribute type 7 has an invalid length. [ 114.766491][ T9193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.775907][ T9193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.788171][ T9193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.792371][ T9193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.835974][ T9193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.844522][ T9193] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.850151][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.850802][ T40] audit: type=1400 audit(1751447152.965:597): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 114.852583][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.865552][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.868510][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.014189][ T9375] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.971'. [ 115.016754][ T9193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.017073][ T9375] netlink: zone id is out of range [ 115.021288][ T9375] netlink: zone id is out of range [ 115.022775][ T40] audit: type=1400 audit(1751447153.142:598): avc: denied { bind } for pid=9376 comm="syz.4.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.023986][ T9375] netlink: zone id is out of range [ 115.029725][ T40] audit: type=1400 audit(1751447153.142:599): avc: denied { ioctl } for pid=9376 comm="syz.4.973" path="socket:[33155]" dev="sockfs" ino=33155 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.031399][ T9375] netlink: zone id is out of range [ 115.041559][ T9193] veth0_vlan: entered promiscuous mode [ 115.046880][ T9193] veth1_vlan: entered promiscuous mode [ 115.049335][ T9375] netlink: zone id is out of range [ 115.050997][ T9375] netlink: zone id is out of range [ 115.057235][ T9375] netlink: zone id is out of range [ 115.058889][ T9375] netlink: zone id is out of range [ 115.060495][ T9375] netlink: zone id is out of range [ 115.062138][ T9375] netlink: zone id is out of range [ 115.074561][ T9193] veth0_macvtap: entered promiscuous mode [ 115.078144][ T9193] veth1_macvtap: entered promiscuous mode [ 115.087208][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.094474][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.099409][ T9193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.102044][ T9193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.105320][ T9193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.107946][ T9193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.120252][ T9383] qnx4: no qnx4 filesystem (no root dir). [ 115.133040][ T9384] program syz.2.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.180655][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.183066][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.200651][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.203137][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.305360][ T9393] syz.5.977: attempt to access beyond end of device [ 115.305360][ T9393] loop5: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 115.309582][ T9393] gfs2: error -5 reading superblock [ 115.409714][ T67] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 115.416210][ T9392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.978'. [ 115.480243][ T9398] vcan1: entered allmulticast mode [ 116.081528][ T9403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.981'. [ 116.176553][ T9407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9407 comm=syz.4.983 [ 116.180377][ T9407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9407 comm=syz.4.983 [ 116.184377][ T9407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9407 comm=syz.4.983 [ 116.188745][ T9407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9407 comm=syz.4.983 [ 116.192452][ T9407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9407 comm=syz.4.983 [ 116.196404][ T9407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9407 comm=syz.4.983 [ 116.202877][ T9407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9407 comm=syz.4.983 [ 116.208802][ T9407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9407 comm=syz.4.983 [ 116.212606][ T9407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9407 comm=syz.4.983 [ 116.216621][ T9407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9407 comm=syz.4.983 [ 116.388917][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'. [ 116.409783][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.985'. [ 116.465439][ T9419] bridge1: entered allmulticast mode [ 116.492107][ T67] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 116.665554][ T67] usb 9-1: config 0 has no interfaces? [ 116.667287][ T67] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.670087][ T67] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.674123][ T67] usb 9-1: config 0 descriptor?? [ 117.201000][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.204853][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.617571][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.196274][ T9427] qnx4: no qnx4 filesystem (no root dir). [ 118.242097][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.245153][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.248014][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.252507][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.255305][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.278007][ T9429] xfrm0 speed is unknown, defaulting to 1000 [ 118.355315][ T9429] chnl_net:caif_netlink_parms(): no params data found [ 118.418031][ T9429] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.420385][ T9429] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.422634][ T9429] bridge_slave_0: entered allmulticast mode [ 118.425343][ T9429] bridge_slave_0: entered promiscuous mode [ 118.428429][ T9429] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.430718][ T9429] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.432962][ T9429] bridge_slave_1: entered allmulticast mode [ 118.437011][ T9429] bridge_slave_1: entered promiscuous mode [ 118.478641][ T9429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.483208][ T9429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.522888][ T9429] team0: Port device team_slave_0 added [ 118.527109][ T9429] team0: Port device team_slave_1 added [ 118.561098][ T9429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.563317][ T9429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.573127][ T9429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.578987][ T9429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.579646][ T9444] program syz.5.991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.581210][ T9429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.581237][ T9429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.620379][ T9429] hsr_slave_0: entered promiscuous mode [ 118.622699][ T9429] hsr_slave_1: entered promiscuous mode [ 119.290930][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.318182][ T5997] usb 9-1: USB disconnect, device number 7 [ 119.336556][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 136 [ 119.376427][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.453218][ T9464] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 119.541739][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.572366][ T40] audit: type=1400 audit(1751447157.601:600): avc: denied { getopt } for pid=9478 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.613944][ T9487] misc userio: Can't change port type on an already running userio instance [ 119.684177][ T46] bridge_slave_1: left allmulticast mode [ 119.685999][ T46] bridge_slave_1: left promiscuous mode [ 119.689059][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.695934][ T46] bridge_slave_0: left allmulticast mode [ 119.703924][ T46] bridge_slave_0: left promiscuous mode [ 119.705778][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.933101][ T9500] tmpfs: Bad value for 'mpol' [ 120.156759][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.162239][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.168082][ T46] bond0 (unregistering): Released all slaves [ 120.182890][ T40] audit: type=1400 audit(1751447158.212:601): avc: denied { listen } for pid=9526 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.313087][ T5944] Bluetooth: hci1: command tx timeout [ 120.560764][ T9545] xt_hashlimit: size too large, truncated to 1048576 [ 120.608921][ T46] hsr_slave_0: left promiscuous mode [ 120.610979][ T46] hsr_slave_1: left promiscuous mode [ 120.612951][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.615360][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.621244][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.623624][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.647504][ T46] veth1_macvtap: left promiscuous mode [ 120.649562][ T46] veth0_macvtap: left promiscuous mode [ 120.651413][ T46] veth1_vlan: left promiscuous mode [ 120.653218][ T46] veth0_vlan: left promiscuous mode [ 120.930261][ T40] audit: type=1400 audit(1751447158.941:602): avc: denied { mount } for pid=9562 comm="syz.2.1025" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 120.941301][ T40] audit: type=1400 audit(1751447158.961:603): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 120.987399][ T9565] No control pipe specified [ 120.989596][ T9565] __nla_validate_parse: 2 callbacks suppressed [ 120.989605][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 121.113203][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1028'. [ 121.286192][ T46] team0 (unregistering): Port device team_slave_1 removed [ 121.355542][ T46] team0 (unregistering): Port device team_slave_0 removed [ 121.932133][ T9565] team0 (unregistering): Port device team_slave_0 removed [ 121.937666][ T9565] team0 (unregistering): Port device team_slave_1 removed [ 122.021166][ T9429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.032509][ T9429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.040331][ T9429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.050747][ T9592] can0: slcan on ptm0. [ 122.056947][ T9429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.110257][ T9592] usb usb8: usbfs: process 9592 (syz.5.1033) did not claim interface 0 before use [ 122.140044][ T9429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.152318][ T9429] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.158227][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.161042][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.168404][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.171225][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.274798][ T9429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.299536][ T9429] veth0_vlan: entered promiscuous mode [ 122.307265][ T9429] veth1_vlan: entered promiscuous mode [ 122.320448][ T9429] veth0_macvtap: entered promiscuous mode [ 122.324752][ T9429] veth1_macvtap: entered promiscuous mode [ 122.343732][ T9429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.353121][ T9429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.357764][ T9429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.360664][ T9429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.364997][ T9429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.367731][ T9429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.407848][ T9610] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1037'. [ 122.427550][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.430019][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.431883][ T5944] Bluetooth: hci1: command tx timeout [ 122.447210][ T9615] overlay: filesystem on ./bus is read-only [ 122.447810][ T9590] can0 (unregistered): slcan off ptm0. [ 122.458321][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.462641][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.497611][ T9619] usb usb8: usbfs: process 9619 (syz.4.1040) did not claim interface 0 before use [ 122.538246][ T5997] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 122.583930][ T9630] netlink: 'syz.4.1044': attribute type 1 has an invalid length. [ 122.600607][ T9630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.611179][ T9630] ip6erspan0: entered promiscuous mode [ 122.615504][ T9630] bond3: (slave ip6erspan0): making interface the new active one [ 122.618753][ T9630] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 122.699077][ T5997] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.701512][ T5997] usb 7-1: config 0 has no interface number 0 [ 122.703278][ T5997] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 31391, setting to 8 [ 122.706679][ T5997] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.709260][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.713620][ T5997] usb 7-1: config 0 descriptor?? [ 122.716118][ T9608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.722283][ T5997] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 122.838102][ T61] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 122.881982][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 122.923889][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.926702][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.930692][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.933442][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.937798][ T67] usb 7-1: USB disconnect, device number 8 [ 122.977926][ T9646] netlink: 'syz.4.1051': attribute type 10 has an invalid length. [ 122.988093][ T9646] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.992376][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.995794][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.998812][ T61] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.003435][ T61] usb 10-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 123.006284][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.011582][ T61] usb 10-1: config 0 descriptor?? [ 123.051253][ T40] audit: type=1400 audit(1751447161.043:604): avc: denied { bind } for pid=9647 comm="syz.4.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.188344][ T9654] fuse: Unknown parameter 'ÿ00000000000000000000003' [ 123.192557][ T40] audit: type=1400 audit(1751447161.182:605): avc: denied { setopt } for pid=9653 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.300535][ T9660] netlink: 'syz.4.1057': attribute type 5 has an invalid length. [ 123.334165][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'. [ 123.423147][ T61] hid-udraw 0003:20D6:CB17.0006: unknown main item tag 0x0 [ 123.427146][ T61] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:20D6:CB17.0006/input/input22 [ 123.461324][ T9676] ALSA: mixer_oss: invalid OSS volume '' [ 123.488699][ T61] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:20D6:CB17.0006/input/input23 [ 123.495632][ T61] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:20D6:CB17.0006/input/input24 [ 123.502251][ T61] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:20D6:CB17.0006/input/input25 [ 123.548242][ T61] hid-udraw 0003:20D6:CB17.0006: hidraw1: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.5-1/input0 [ 123.677193][ T9678] fuse: Unknown parameter '' [ 123.679722][ T9678] overlayfs: failed to resolve './file1': -2 [ 123.689115][ T10] usb 10-1: USB disconnect, device number 7 [ 123.780804][ T40] audit: type=1400 audit(1751447161.765:606): avc: denied { mount } for pid=9688 comm="syz.2.1066" name="/" dev="configfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 123.782069][ T9689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.828285][ T9689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.054083][ T40] audit: type=1400 audit(1751447162.031:607): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 124.101401][ T9695] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 124.109379][ T9695] bond0: (slave rose0): Releasing backup interface [ 124.291826][ T40] audit: type=1400 audit(1751447162.259:608): avc: denied { append } for pid=9707 comm="syz.2.1072" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.331804][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1073'. [ 124.335380][ T1146] ------------[ cut here ]------------ [ 124.337615][ T1146] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 124.341147][ T1146] WARNING: CPU: 2 PID: 1146 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 124.345552][ T1146] Modules linked in: [ 124.347710][ T1146] CPU: 2 UID: 0 PID: 1146 Comm: kworker/u32:7 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 124.352691][ T1146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.356989][ T1146] Workqueue: bond0 bond_mii_monitor [ 124.358656][ T1146] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 124.360545][ T1146] Code: 05 ff ff ff e8 24 1d 59 f8 c6 05 30 7f 2d 07 01 90 ba 48 00 00 00 48 c7 c6 00 9a e3 8c 48 c7 c7 a0 99 e3 8c e8 14 e0 17 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 44 a8 90 e8 1e f9 bf f8 e9 [ 124.367201][ T1146] RSP: 0018:ffffc900065af9f0 EFLAGS: 00010286 [ 124.369195][ T1146] RAX: 0000000000000000 RBX: ffff88802d1f4000 RCX: ffffffff817ae248 [ 124.371787][ T1146] RDX: ffff888029530000 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 124.374611][ T1146] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 124.377490][ T1146] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000cb5f48 [ 124.380123][ T1146] R13: ffff88802d1f4cc5 R14: ffffffff8c5916a0 R15: ffffffff899c3ef0 [ 124.382722][ T1146] FS: 0000000000000000(0000) GS:ffff8880d6952000(0000) knlGS:0000000000000000 [ 124.386425][ T1146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.389525][ T1146] CR2: 000000110c3b052d CR3: 000000000e382000 CR4: 0000000000352ef0 [ 124.392872][ T1146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 124.396696][ T1146] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 124.400062][ T1146] Call Trace: [ 124.401502][ T1146] [ 124.402799][ T1146] ethtool_op_get_link+0x1d/0x70 [ 124.404883][ T1146] bond_check_dev_link+0x3f9/0x710 [ 124.407140][ T1146] ? stack_trace_save+0x8e/0xc0 [ 124.409244][ T1146] ? __pfx_bond_check_dev_link+0x10/0x10 [ 124.411674][ T1146] bond_mii_monitor+0x3c0/0x2dc0 [ 124.413840][ T1146] ? __pfx_bond_mii_monitor+0x10/0x10 [ 124.416270][ T1146] ? rcu_is_watching+0x12/0xc0 [ 124.418315][ T1146] process_one_work+0x9cc/0x1b70 [ 124.420424][ T1146] ? __pfx_process_one_work+0x10/0x10 [ 124.422706][ T1146] ? assign_work+0x1a0/0x250 [ 124.424819][ T1146] worker_thread+0x6c8/0xf10 [ 124.427546][ T1146] ? __pfx_worker_thread+0x10/0x10 [ 124.429753][ T1146] kthread+0x3c2/0x780 [ 124.431514][ T1146] ? __pfx_kthread+0x10/0x10 [ 124.433481][ T1146] ? rcu_is_watching+0x12/0xc0 [ 124.435542][ T1146] ? __pfx_kthread+0x10/0x10 [ 124.437666][ T1146] ret_from_fork+0x5d4/0x6f0 [ 124.439698][ T1146] ? __pfx_kthread+0x10/0x10 [ 124.441685][ T1146] ret_from_fork_asm+0x1a/0x30 [ 124.443747][ T1146] [ 124.445070][ T1146] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.448132][ T1146] CPU: 2 UID: 0 PID: 1146 Comm: kworker/u32:7 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 124.453138][ T1146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.457598][ T1146] Workqueue: bond0 bond_mii_monitor [ 124.459731][ T1146] Call Trace: [ 124.460799][ T1146] [ 124.461766][ T1146] dump_stack_lvl+0x3d/0x1f0 [ 124.463291][ T1146] panic+0x71c/0x800 [ 124.464638][ T1146] ? __pfx_panic+0x10/0x10 [ 124.466140][ T1146] ? show_trace_log_lvl+0x29b/0x3e0 [ 124.467889][ T1146] ? check_panic_on_warn+0x1f/0xb0 [ 124.469557][ T1146] ? __linkwatch_sync_dev+0x1ed/0x230 [ 124.471306][ T1146] check_panic_on_warn+0xab/0xb0 [ 124.472891][ T1146] __warn+0xf6/0x3c0 [ 124.474169][ T1146] ? __pfx_vprintk_emit+0x10/0x10 [ 124.475795][ T1146] ? __linkwatch_sync_dev+0x1ed/0x230 [ 124.477530][ T1146] report_bug+0x3c3/0x580 [ 124.479010][ T1146] ? __linkwatch_sync_dev+0x1ed/0x230 [ 124.480721][ T1146] handle_bug+0x184/0x210 [ 124.482175][ T1146] exc_invalid_op+0x17/0x50 [ 124.483651][ T1146] asm_exc_invalid_op+0x1a/0x20 [ 124.485182][ T1146] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 124.487067][ T1146] Code: 05 ff ff ff e8 24 1d 59 f8 c6 05 30 7f 2d 07 01 90 ba 48 00 00 00 48 c7 c6 00 9a e3 8c 48 c7 c7 a0 99 e3 8c e8 14 e0 17 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 44 a8 90 e8 1e f9 bf f8 e9 [ 124.493029][ T1146] RSP: 0018:ffffc900065af9f0 EFLAGS: 00010286 [ 124.494953][ T1146] RAX: 0000000000000000 RBX: ffff88802d1f4000 RCX: ffffffff817ae248 [ 124.497430][ T1146] RDX: ffff888029530000 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 124.499937][ T1146] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 124.502386][ T1146] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000cb5f48 [ 124.504869][ T1146] R13: ffff88802d1f4cc5 R14: ffffffff8c5916a0 R15: ffffffff899c3ef0 [ 124.507335][ T1146] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 124.509097][ T1146] ? __warn_printk+0x198/0x350 [ 124.510616][ T1146] ? __warn_printk+0x1a5/0x350 [ 124.512149][ T1146] ethtool_op_get_link+0x1d/0x70 [ 124.513723][ T1146] bond_check_dev_link+0x3f9/0x710 [ 124.515381][ T1146] ? stack_trace_save+0x8e/0xc0 [ 124.516926][ T1146] ? __pfx_bond_check_dev_link+0x10/0x10 [ 124.518701][ T1146] bond_mii_monitor+0x3c0/0x2dc0 [ 124.520271][ T1146] ? __pfx_bond_mii_monitor+0x10/0x10 [ 124.521952][ T1146] ? rcu_is_watching+0x12/0xc0 [ 124.523492][ T1146] process_one_work+0x9cc/0x1b70 [ 124.525063][ T1146] ? __pfx_process_one_work+0x10/0x10 [ 124.526761][ T1146] ? assign_work+0x1a0/0x250 [ 124.528246][ T1146] worker_thread+0x6c8/0xf10 [ 124.529711][ T1146] ? __pfx_worker_thread+0x10/0x10 [ 124.531327][ T1146] kthread+0x3c2/0x780 [ 124.532617][ T1146] ? __pfx_kthread+0x10/0x10 [ 124.534086][ T1146] ? rcu_is_watching+0x12/0xc0 [ 124.535605][ T1146] ? __pfx_kthread+0x10/0x10 [ 124.537077][ T1146] ret_from_fork+0x5d4/0x6f0 [ 124.538576][ T1146] ? __pfx_kthread+0x10/0x10 [ 124.540039][ T1146] ret_from_fork_asm+0x1a/0x30 [ 124.541559][ T1146] [ 124.543302][ T1146] Kernel Offset: disabled [ 124.544673][ T1146] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:27:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=000000000000015c RCX=ffffffff820882d0 RDX=ffff88802aef0000 RSI=ffffffff82088279 RDI=0000000000000007 RBP=ffff888060fe5ae8 RSP=ffffc900072af600 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=000000000000015c R13=0000000000000000 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bc1db0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000040 CR3=00000000559a1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9691411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9691411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9691411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9691411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9691411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9691411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9691584488 00007f9691584480 00007f9691584478 00007f9691584450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96920ed100 00007f9691584440 00007f9691584458 00007f96915844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9691584498 00007f9691584490 00007f9691584488 00007f9691584480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000dc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffff8e5c4880 RCX=ffffffff822e9ee2 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88807ffd6560 RSP=ffffc90003f374d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff822e9d2a R13=0000000000000202 R14=ffff8880263c2440 R15=0000000000000000 RIP=ffffffff8198767f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c320bf0 CR3=00000000559a1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c00000000646e6f 6200010009801200 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110984488 00007f8110984480 00007f8110984478 00007f8110984450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81114ed100 00007f8110984440 00007f8110980004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110984498 00007f8110984490 00007f8110984488 00007f8110984480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855ba755 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc900065af360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000050 R14=ffffffff9b0882e0 R15=ffffffff855ba6f0 RIP=ffffffff855ba77f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3b052d CR3=00000000559a1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c00000000646e6f 6200010009801200 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110984488 00007f8110984480 00007f8110984478 00007f8110984450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81114ed100 00007f8110984440 00007f8110980004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8110984498 00007f8110984490 00007f8110984488 00007f8110984480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=000000000006a96e RCX=ffffffff822e918b RDX=ffff888028908000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90003cff738 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88801cf80000 R13=ffff88817ffef400 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bc1731 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f08c3ee7d60 CR3=0000000034289000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08c33846a3 00007f08c33846a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5bd33670 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556cecbcb4 000055556cecb740 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556cebd992 000055556cebd860 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc0b800402d08c08 0001000000080606 0126980000000000 00000010080b9203 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100002d18208 0001000000080606 0126cc0b800402d0 8c08000100000008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0606012698000000 000000000010080b 92032002000b9003 108004000b8c0304 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 889404000b880304 808404000b84030c 04000b8003001000 02d0ee0800010000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008060601279a00 1000010000000806 040174e809800408 80a2d0e208000100 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000