last executing test programs: 50.177280826s ago: executing program 2 (id=858): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb7AJ\n\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8\x1cXVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x62, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) ftruncate(r1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010102, 0x2, 0xfffe, 0x4e1d, 0x0, 0xa}, {0x9, 0x9, 0x7f, 0x54ae, 0x0, 0x0, 0x8000, 0x2}, {0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x0, 0x1, 0x2, 0x0, 0x3, 0x0, 0xfffffffe}}, 0xe8) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000020105000000000000000000030000042c0001800c000280050001002f00000006000340000000000c0002800500010011000000060003400003000008000c4000000000100002800c00028005000100840000000c00198008000200100000000400018008000840000000063c001980080001000000000008000100040000000800020002090000080001000000000008090100020000000800010040000000"], 0xac}}, 0x4) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000020105000000000000000000030000042c0001800c000280050001002f00000006000340000000000c0002800500010011000000060003400003000008000c4000000000100002800c00028005000100840000000c00198008000200100000000400018008000840000000063c001980080001000000000008000100040000000800020002090000080001000000000008090100020000000800010040000000"], 0xac}}, 0x4) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0f63d547b5598cff7cf9080000005345204c696e7578"], 0x2000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) read$FUSE(r5, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000240)=0x3) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14040000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000090900010073797a30000000000900020073797a32000000000900020073797a3200000000a003048050000180080001006f73660044000280080001400000000d080003400000000108000140000000170800014000000000080001400000000c050002000600000008000140000000170500020000000000100001800a00010072616e676500000038000180080001006f7366002c0002800800034000000001080003400000000105000200f700000008000340000000010800014000000011880101800a00010072616e6765"], 0x43c}}, 0x0) 50.060370512s ago: executing program 2 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x102, 0x1}) io_uring_enter(r1, 0x415, 0xbebe, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) 49.851617483s ago: executing program 2 (id=865): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @loopback}, {0x22, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r4, 0x101, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xa6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) 49.847559473s ago: executing program 2 (id=866): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x54, r2, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xa7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="10000180040004800800010000000003"], 0x28}}, 0x0) 49.787447259s ago: executing program 2 (id=869): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff1, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r4, 0x0, 0x20000023893) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1f, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 49.729913171s ago: executing program 2 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded', 0x80, 0x80) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) (async) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)={0x1c, r7, 0x2586ad4018a3b31b, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x41000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r5, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x44000) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r5, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x44000) r10 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',privport,access=', @ANYRESDEC]) 35.981458889s ago: executing program 3 (id=1076): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000f66f9370830000000000000000000000000000000000000000000000000000000000000000000000000000f700000000000000000000000000000000ffff0000000000feffffffffffffff00"], 0xb8}}, 0x0) 35.071429568s ago: executing program 3 (id=1088): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r3, 0x1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b", 0x1, 0xfffffffffffffffe) creat(&(0x7f0000000140)='./file0\x00', 0x0) keyctl$read(0xb, r7, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) 34.717516795s ago: executing program 32 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded', 0x80, 0x80) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) (async) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)={0x1c, r7, 0x2586ad4018a3b31b, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x41000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r5, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x44000) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r5, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x44000) r10 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',privport,access=', @ANYRESDEC]) 33.760040582s ago: executing program 3 (id=1108): gettid() timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000040)) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0xf8, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'm'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xfff, 0x0, 0xb0}, {0x6, 0x24, 0x1a, 0xfff8, 0x3d}, [@mbim={0xc, 0x24, 0x1b, 0x800, 0xa45b, 0x8, 0x9, 0x5, 0xde}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x40, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xb2, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x40, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x8, 0x3a, 0x7, 0x10, 0x1}, 0x1b8, &(0x7f0000000140)={0x5, 0xf, 0x1b8, 0x6, [@ptm_cap={0x3}, @generic={0xf9, 0x10, 0x2, "c5493998ef18ce1cdcee2d24b791f307f3bd546e6afcf5e88a0ef431decc213c247a8cc810ceb608a13dfdbdd30bbe05822f888f27fe8c37c784d3688a2eff3c14453dc6786f433edede5af5230293762c6027e038f79641b849768ec543a02fcc6ae582c3a8f277c38d8846fda785d765c42d3f9b2c854ef5390fcb0182a67dd306062b09621f15343128d0e1703d82184dc078b5568072c942025a19cdf79dcb73a58dc2aea8a930516e985245a70e6c31483c70b120adb732bee60ce334a05aa842fb6acaaab6a01b674fb25ddd2da2bdcf043bc7003c9da20b6da1cba906cc008e9112158eb4e7278ef1410a7a53064adeaa57d3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0xd8, 0x6, 0x1f, 0x4, 0xf}, @wireless={0xb, 0x10, 0x1, 0x8, 0x30, 0x5, 0x7, 0x9, 0x1}, @generic={0x97, 0x10, 0x1, "e99e89d149645f932e71da0a864c8161f19379e1cb848defb1f8a451d7c1a0116c172eb55f99642eeb4405769a6f5a002a1ae0abec08306d681c9b2e89bd4d62105c271382a0c82d3160d977e0bc32583ca040e174519c5bd831df24633a21d16bc146048fe7a234704025a0e275982afb4d9ead30275309fed71388b8e322a5565441f34da11daa0a1ba615eab77fb4a06cf8ab"}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc09}}, {0x8, &(0x7f0000000380)=@string={0x8, 0x3, "91e369989ea6"}}]}) 33.549887228s ago: executing program 3 (id=1115): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e22, @private=0xa011102}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e22, @private=0xa011102}}) (async) 20.716534084s ago: executing program 3 (id=1115): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e22, @private=0xa011102}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e22, @private=0xa011102}}) (async) 3.819129095s ago: executing program 0 (id=1270): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r4]) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000067000000080001000201000008000300", @ANYRES32=0x0, @ANYBLOB="0c008500030000005e000000"], 0x30}}, 0x400c810) 3.619977468s ago: executing program 0 (id=1272): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x80000001}, 0xc}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x1cb202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0xc0844123, &(0x7f0000000080)={0x0, 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000100)={{0x7, 0x2}, 'port1\x00', 0xc, 0x10, 0x8, 0x9, 0x9, 0xb1d, 0x1, 0x0, 0x0, 0x9}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x1c, r8, 0x8, 0x70bd27, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x200040c4) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x401, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 2.57084159s ago: executing program 4 (id=1278): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400005887143324fc0693d145c20005000000080009000200000008000c00a80a000008000b0000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x30) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x30, r1, 0xb41bf000) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000180)=""/5) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000006520001"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f00000000c0)='\x00\x00\x00\x00\x00', 0x5}], 0x1, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="0800260085ff0000000018000000dc223860dec0b40e320000000000001c00"], 0x4c}}, 0x80) (async) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) 2.467153434s ago: executing program 4 (id=1279): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) read(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a0009e16000008009f000d000000080026000816"], 0x40}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x38, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8, 0x5, "4480f3ba"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x306, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x20004000) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040afb07020a000000040000a118000200fe80ffff00000e1208000f01008104017f0016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.288379395s ago: executing program 4 (id=1280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="2b84000020ad01002c0012800b00010062726964676500001c0002800c00200004000000000000000c0021"], 0x4c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="e1cdf1c9d746bcaa9854", 0xa}], 0x1}}], 0x1, 0x20000050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x40100}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbfd, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x20008000) ioctl$FBIOGET_CON2FBMAP(r5, 0x460f, &(0x7f0000000140)={0x36, 0x1}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="130000001a001f00030300f9002304000a04d6", 0x13) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x20}) 1.840882037s ago: executing program 4 (id=1281): r0 = socket$kcm(0x10, 0xa, 0x0) socket$inet(0x2, 0x4, 0x80) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000000)={0xf, 0x1}, &(0x7f00000000c0)) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'io'}, {0x0, 'devices'}]}, 0xd) msgrcv(0x0, 0x0, 0x8, 0x0, 0x4800) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121fa1e5a2b6c4d6782d380298b7124e2a6ebc0333fd9ab1c5c4ccbcfe90f470193cb33c63bcc6b48e55849859cadda364f3fcde01b001630d9be57c1d1f24cb0ea60d5b840de85243347a13f0be3a", 0x7b}], 0x1}, 0x40804) 1.69586991s ago: executing program 1 (id=1282): r0 = syz_open_dev$I2C(&(0x7f0000000140), 0xfffffffffffffffc, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x104, 0x2}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x40000006, 0x0}) r2 = socket(0x29, 0x800, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000280)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @multicast}, 0x50, {0x2, 0x4e22, @rand_addr=0x64010100}, 'ip6gre0\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7, 0xbe82}, 0x8) syz_open_dev$I2C(&(0x7f0000000140), 0xfffffffffffffffc, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x104, 0x2}) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x40000006, 0x0}) (async) socket(0x29, 0x800, 0x0) (async) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000280)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @multicast}, 0x50, {0x2, 0x4e22, @rand_addr=0x64010100}, 'ip6gre0\x00'}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) (async) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7, 0xbe82}, 0x8) (async) 1.695437438s ago: executing program 4 (id=1283): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async, rerun: 32) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) (rerun: 32) quotactl_fd$Q_GETINFO(r1, 0x1, r2, &(0x7f00000000c0)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.580435775s ago: executing program 1 (id=1284): request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='#@{*]^-^}$\\/-^.-:', 0xffffffffffffffff) r0 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x204000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0], 0x232) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ppoll(&(0x7f0000000100)=[{r0, 0x1298}, {r1, 0x6000}, {r1, 0x3039}, {r2, 0x4040}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={[0x4000000000]}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x1, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x2, 0xfffffc00}, 0x3}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000200)) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000080)) 1.461444942s ago: executing program 3 (id=1115): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e22, @private=0xa011102}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e22, @private=0xa011102}}) (async) 1.180251445s ago: executing program 1 (id=1285): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x2, @empty, 0x7b}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="530c9ded227c19577944c94261cb2f493ccb9c8d9c5550b0148764d0928dba57f47bf37d221aa363ab88a9b9585fff754d54b12e7034f546186d14bf546ae04561178e4a765f0ee45ea647ab2aa5eae610e4e552c849d9841781dd405b5eb02924883af884faa3bb1fca", 0x6a}, {&(0x7f0000000200)="67e6a4d674a7eca0f9bea17cb76a0434bba378ccbe17ed800ba71f6b664b538d0cbe2e2b28f593d770f9d4a06bc158a9c9a68034260f18fe8a8936b7fd38916e1984143d60142cb7aaab944b97bb9d47a485727908b84915825523020bfe9709a42b6841107b928a5336e948bf96d71eab2bfabd5cdab2252a1f188c115b75b523c5586701cdfa93cbb05e915e119a4d20b87d", 0x93}], 0x2}, 0x40000d0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000200000000000000000000090300000000000000000000010500000008000000000000000000008300"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x54, r2, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000884) (async) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x1a4, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa37}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x39}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d5f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000010) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, r3, 0x301, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6, 0x16, 0x80}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.035897961s ago: executing program 1 (id=1286): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x7ff, 0x4) (async) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xc0, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x8, 0x7fff, 0x3}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xe, 0x80, 0x7f}}}}}]}}]}}, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async, rerun: 32) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) (async, rerun: 32) recvmmsg$unix(r1, &(0x7f0000004740)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000180)}, {&(0x7f0000000640)=""/195, 0xc3}, {&(0x7f0000000740)=""/145, 0x91}, {&(0x7f0000000800)=""/64, 0x40}, {&(0x7f0000000840)=""/216, 0xd8}], 0x6, &(0x7f00000009c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000b00)=""/181, 0xb5}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/99, 0x63}, {&(0x7f0000001c40)=""/181, 0xb5}], 0x4, &(0x7f0000001d40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000003140)=[{&(0x7f0000001e80)=""/205, 0xcd}, {&(0x7f0000001f80)=""/36, 0x24}, {&(0x7f0000001fc0)=""/40, 0x28}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/68, 0x44}, {&(0x7f00000030c0)=""/122, 0x7a}], 0x7, &(0x7f00000031c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000004680)=[{&(0x7f0000003280)=""/204, 0xcc}, {&(0x7f0000003380)}, {&(0x7f00000033c0)=""/50, 0x32}, {&(0x7f0000003400)=""/223, 0xdf}, {&(0x7f0000003500)=""/191, 0xbf}, {&(0x7f00000035c0)=""/181, 0xb5}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x7, &(0x7f0000004700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x4, 0x40010003, &(0x7f0000004840)={0x0, 0x989680}) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r5 = dup(r4) write$P9_RMKNOD(r5, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x1, 0x2, 0x3}}, 0xfffffd26) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040854}, 0x1) r6 = add_key$user(&(0x7f0000000a40), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="c6", 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000480), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='.', 0x1, 0xfffffffffffffffd) (async) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r10, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x3c, r10, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1044}, 0x40) (async) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r12, 0x29, 0x11, &(0x7f0000000140)=0x4, 0x4) (async) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r6, r8, r7}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) 656.395444ms ago: executing program 1 (id=1287): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) getpid() (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000080)=[@x={0x94, 0x0, "79faa389770d"}], 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffb, 0x0, 0xd7, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x7, 0x10012, 0x2, 0x0}) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}]}]}, 0x58}}, 0x2) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000001c0)={0x0, 0x8}) 473.03206ms ago: executing program 0 (id=1288): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @default, @bpq0, 0x10001, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xec) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x134, 0x24, 0x5820a61ca228659, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x2, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb5}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0xd, 0x7, 0x3d, 0x0, 0xd9, 0x0, 0x3}}, {0xa, 0x2, [0x10, 0x6, 0x6]}}, {{0x1c, 0x1, {0xe, 0x9, 0x4, 0x10000, 0x0, 0x3, 0x0, 0x4}}, {0xc, 0x2, [0x8, 0xb1, 0x0, 0x7]}}, {{0x1c, 0x1, {0xa, 0x7, 0x9c1, 0xb08c, 0x1, 0x4, 0x2000, 0x3}}, {0xa, 0x2, [0x6, 0x6, 0x2]}}, {{0x1c, 0x1, {0x6, 0x6, 0x4, 0x1, 0x2, 0xe, 0x468, 0x5}}, {0xe, 0x2, [0x7, 0x89, 0x4, 0x1, 0x4]}}, {{0x1c, 0x1, {0x6, 0x40, 0x6, 0x2, 0x0, 0x6, 0x1, 0x4}}, {0xc, 0x2, [0x476, 0xe173, 0x9b, 0x5]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x134}}, 0x800) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtclass={0x24, 0x28, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff3, 0x5}, {0x8, 0x3}, {0xffe0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x48c0) (async, rerun: 32) bind$bt_hci(r8, &(0x7f0000000300)={0x1f, 0x0, 0x4}, 0x6) (rerun: 32) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) read$FUSE(0xffffffffffffffff, &(0x7f0000005080)={0x2020}, 0x2020) ioctl$IMHOLD_L1(r10, 0x80044948, &(0x7f0000000000)=0x9) 368.061257ms ago: executing program 0 (id=1289): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x500, 0x0, 0x0, 0x0, [0x4]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000140)={[{@upperdir}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}], [], 0x2c}) 367.758238ms ago: executing program 4 (id=1290): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000140)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 250.961786ms ago: executing program 1 (id=1291): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@my=0x0, 0x2}, @my=0x0, 0x5, 0x7fff, 0xfffffffffffffffc, 0x7, 0x3, 0xf67, 0x2}) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@remote, @loopback, 0x0}, &(0x7f0000000180)=0xc) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7, 0x9, 0x4, 0x2000, 0xffffffffffffffff, 0x85, '\x00', r0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xb, @void, @value, @void, @value}, 0x50) (async) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socket$inet(0x2, 0x1, 0xf) (async, rerun: 64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2d, 0x31, 0x3a, 0x31, 0x2f, 0x33]}}}, 0x4e}]}) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140c, 0x31b4363caaba38a7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x20}}, 0x0) 250.428597ms ago: executing program 0 (id=1292): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000019dc0)=""/4090, 0xffa) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x20003}, &(0x7f0000000200), 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)=ANY=[@ANYBLOB="a579bbcb1e8e00000000000008004503002c0000000000049078000000e0e00000010000000000189078040000000000000000220000000000000dcef2a5ab1bcaf64ee6318ea991207e938be879ce739faa04a6c41719a8b8217009ed01c6e2d6dd25895f381311748ef3524782c307d792ae8eabc2b4c2ff1e96ff8e792b0bba87bb03d43fbef534572c6afdd017d164b567000ab88fda06e7d74afabb50304f4955daa945ff8586516c68fb"], 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48}) r2 = semget$private(0x0, 0x4000000009, 0x38e) semop(r2, &(0x7f0000000000)=[{0x2, 0x9}, {0x2, 0x11, 0x1000}, {0x1, 0xa394, 0x1000}], 0x3) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) semctl$IPC_INFO(r2, 0x6, 0x3, &(0x7f0000000280)=""/216) creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x80}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@remote, @multicast2]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="8484", 0x2}], 0x2}}], 0x1, 0x4400c800) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000440)=""/210) sendto$inet6(r3, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) semctl$IPC_RMID(r2, 0x0, 0x0) 0s ago: executing program 0 (id=1293): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x56209516, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) (async, rerun: 32) r1 = syz_open_dev$media(&(0x7f0000000040), 0x876, 0x2) (rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x3, 0x0, &(0x7f0000000d00)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000d00), 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}, {}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x0, 0x0, 0x1d0, 0xf0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x440, 0xb, 0x0, {[{{@uncond, 0x74000000, 0xa8, 0xf0, 0x3006000, {0x0, 0xe004}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x28}, @ipv6=@empty, 0x3f}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x328}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [], [0x0, 0xffffffff], 'veth0_to_bond\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_to_bond\x00', 'ip6_vti0\x00', {}, {}, 0xc}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) (async) chdir(&(0x7f0000000280)='./file0\x00') (async) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb080045000028000000000006"], 0x0) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) close(r4) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001780)={0x30, r8, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x36) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) write$P9_RVERSION(r9, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x80000000, 0x8, '9P2000.L'}, 0x15) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) (rerun: 64) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(r9, 0x10) kernel console output (not intermixed with test programs): ntext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 49.800925][ T39] audit: type=1400 audit(1740115214.337:353): avc: denied { name_bind } for pid=6182 comm="syz.3.51" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.821421][ T39] audit: type=1400 audit(1740115214.337:354): avc: denied { node_bind } for pid=6182 comm="syz.3.51" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 49.829117][ T39] audit: type=1400 audit(1740115214.347:355): avc: denied { create } for pid=6182 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.838244][ T39] audit: type=1400 audit(1740115214.347:356): avc: denied { connect } for pid=6182 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.846514][ T39] audit: type=1400 audit(1740115214.347:357): avc: denied { write } for pid=6182 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.880342][ T6188] syz_tun: entered allmulticast mode [ 49.902828][ T6187] syz_tun: left allmulticast mode [ 49.936094][ T6181] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 49.937904][ T6181] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 49.951864][ T6181] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 49.959728][ T6181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 49.963263][ T6181] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 49.969046][ T6181] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 49.973484][ T6181] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 49.975408][ T6181] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 49.979317][ T6181] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 49.985190][ T6181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 49.987210][ T6181] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 49.990679][ T6181] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 49.997692][ T6197] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 50.116925][ T6205] capability: warning: `syz.3.58' uses deprecated v2 capabilities in a way that may be insecure [ 50.227384][ T6181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 50.313286][ T6221] openvswitch: netlink: IP tunnel dst address not specified [ 50.313933][ T6220] sctp: [Deprecated]: syz.1.63 (pid 6220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 50.313933][ T6220] Use struct sctp_sack_info instead [ 50.342427][ T6221] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 50.458959][ C3] sr 2:0:0:0: [sr0] tag#29 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 50.462113][ C3] sr 2:0:0:0: [sr0] tag#29 CDB: Maintenance in, sa=0x0 a3 00 00 00 00 00 [ 50.538262][ T6228] fuse: Unknown parameter 'f”8}•Þ0x0000000000000007' [ 50.616401][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 50.676408][ T6243] msdos: Unknown parameter 'discardF' [ 50.679589][ T6243] overlay: ./bus is not a directory [ 50.761506][ T6258] netlink: 36 bytes leftover after parsing attributes in process `syz.2.73'. [ 50.761799][ T6256] process 'syz.0.74' launched './file0' with NULL argv: empty string added [ 51.258572][ T6284] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 51.271435][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.431622][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 51.435101][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.438192][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.441268][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 51.445661][ T25] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 51.448148][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.463927][ T25] usb 6-1: config 0 descriptor?? [ 51.483015][ T5953] Bluetooth: hci3: unexpected event for opcode 0x203b [ 51.668041][ T6281] netlink: 'syz.1.81': attribute type 16 has an invalid length. [ 51.670830][ T6281] netlink: 56 bytes leftover after parsing attributes in process `syz.1.81'. [ 51.865810][ T5953] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 51.868325][ T5953] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 51.887992][ T25] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0002/input/input6 [ 51.955309][ T5953] Bluetooth: hci0: command 0x0419 tx timeout [ 51.955633][ T25] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0002/input/input7 [ 51.971648][ T25] kye 0003:0458:5011.0002: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 52.021604][ T5958] Bluetooth: hci1: command 0x0419 tx timeout [ 52.025767][ T5953] Bluetooth: hci2: command 0x0419 tx timeout [ 52.187382][ T64] usb 6-1: USB disconnect, device number 2 [ 52.281422][ T25] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 52.455674][ T25] usb 8-1: config 8 has an invalid interface number: 122 but max is 1 [ 52.458451][ T25] usb 8-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 52.460906][ T25] usb 8-1: config 8 has an invalid interface number: 6 but max is 1 [ 52.463284][ T25] usb 8-1: config 8 has an invalid interface number: 118 but max is 1 [ 52.465570][ T25] usb 8-1: config 8 has 3 interfaces, different from the descriptor's value: 2 [ 52.468994][ T25] usb 8-1: config 8 has no interface number 0 [ 52.471526][ T25] usb 8-1: config 8 has no interface number 1 [ 52.473885][ T25] usb 8-1: config 8 has no interface number 2 [ 52.476433][ T25] usb 8-1: config 8 interface 122 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 52.480567][ T25] usb 8-1: config 8 interface 122 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 52.484809][ T25] usb 8-1: config 8 interface 122 altsetting 1 endpoint 0xA has invalid maxpacket 1088, setting to 64 [ 52.488904][ T25] usb 8-1: config 8 interface 122 altsetting 1 has an endpoint descriptor with address 0x66, changing to 0x6 [ 52.493233][ T25] usb 8-1: config 8 interface 122 altsetting 1 endpoint 0x6 has invalid maxpacket 35637, setting to 64 [ 52.497394][ T25] usb 8-1: config 8 interface 122 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 52.503154][ T25] usb 8-1: config 8 interface 122 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 52.507181][ T25] usb 8-1: config 8 interface 122 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 10 [ 52.511895][ T25] usb 8-1: too many endpoints for config 8 interface 6 altsetting 153: 68, using maximum allowed: 30 [ 52.515308][ T25] usb 8-1: config 8 interface 6 altsetting 153 has an endpoint descriptor with address 0x51, changing to 0x1 [ 52.518613][ T25] usb 8-1: config 8 interface 6 altsetting 153 endpoint 0x1 has an invalid bInterval 155, changing to 4 [ 52.522024][ T25] usb 8-1: config 8 interface 6 altsetting 153 endpoint 0x1 has invalid maxpacket 32374, setting to 1023 [ 52.525668][ T25] usb 8-1: config 8 interface 6 altsetting 153 has a duplicate endpoint with address 0x3, skipping [ 52.529744][ T25] usb 8-1: config 8 interface 6 altsetting 153 endpoint 0xD has invalid wMaxPacketSize 0 [ 52.533627][ T25] usb 8-1: config 8 interface 6 altsetting 153 has 5 endpoint descriptors, different from the interface descriptor's value: 68 [ 52.538655][ T25] usb 8-1: config 8 interface 118 altsetting 253 has a duplicate endpoint with address 0x3, skipping [ 52.542889][ T25] usb 8-1: config 8 interface 122 has no altsetting 0 [ 52.545338][ T25] usb 8-1: config 8 interface 6 has no altsetting 0 [ 52.547189][ T25] usb 8-1: config 8 interface 118 has no altsetting 0 [ 52.551171][ T25] usb 8-1: Dual-Role OTG device on HNP port [ 52.553454][ T25] usb 8-1: New USB device found, idVendor=12d1, idProduct=5425, bcdDevice=fb.7f [ 52.556234][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.558621][ T25] usb 8-1: Product: ꒂ敧縤葇⓮錈䊥뉒䌻æžæ¶¯å²—é°å撢酂䊓爽⡉릹ꛄꢙ昋ጺ㈤ﾔ锌ç‹â–ŽëºæŒ¡ï©å€‘î¸ç£‘ë‘»æ“î˜å²£î¸ˆã£„瞓﫺ྮ㴵౦럨䕶Ψឱ敠ã£î†¦à²œë–ºê†œå¹ší”é³£å»èœ’섣ξ䱋éⲎ㢂錩㑰慗ꌟì“逄á¯í…¶á¾žê §ã¡”䧂茖旹ê¤ê·›å°³ì ¬çš—ᨕ覇䰾ѧ敖푹㸬徎곗簩 [ 52.567143][ T25] usb 8-1: Manufacturer: ä“ﳶ藄磞唭îŽëšä«­ïᮿ婅䳗୕䳃êœä¡Ÿé¢¸ì¿ä¦°ì¦žåŸ¼à¯•ï’¿í‹€ïŒ¤ëœ«í£íœ‹å»¾éŠ¢ä˜´îª¿ê¸‹èƒ·æºªëµ ã‰Šã†“ￓ᠉䡠䖸बڇ碣晛༔첵꯷ѭ呆竦糘鴇ꩱ⾢䶙宅쀧ᮼ࿽笣겹ᵫ笡봴碲ጪᄸ鎅柌æ½áœ‚覲㈲诽스悿龻旴瑺å¬ä³Ÿâƒ¨à¨¢åªå‘œê¯€êŸ¿à¤¡íœìŸŽç¿¯ã†µà¿©Öž [ 52.577228][ T25] usb 8-1: SerialNumber: ë— [ 52.584305][ T6317] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 52.796420][ T25] option 8-1:8.122: GSM modem (1-port) converter detected [ 52.809593][ T25] option 8-1:8.118: GSM modem (1-port) converter detected [ 52.813833][ T25] usb 8-1: USB disconnect, device number 3 [ 52.817297][ T25] option 8-1:8.122: device disconnected [ 52.822638][ T25] option 8-1:8.118: device disconnected [ 53.008064][ T6345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.026948][ T6345] program syz.1.100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.085573][ T6349] __nla_validate_parse: 1 callbacks suppressed [ 53.085627][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'. [ 53.139690][ T6352] ======================================================= [ 53.139690][ T6352] WARNING: The mand mount option has been deprecated and [ 53.139690][ T6352] and is ignored by this kernel. Remove the mand [ 53.139690][ T6352] option from the mount to silence this warning. [ 53.139690][ T6352] ======================================================= [ 53.278913][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 53.288804][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 53.326495][ T6383] batadv_slave_1: entered promiscuous mode [ 53.333074][ T6383] geneve2: entered promiscuous mode [ 53.334698][ T6383] geneve2: entered allmulticast mode [ 53.403910][ T6381] batadv_slave_1: left promiscuous mode [ 53.568112][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 54.022857][ T6451] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.031629][ T64] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 54.036157][ T5953] Bluetooth: hci0: command 0x0419 tx timeout [ 54.045848][ T6447] overlayfs: failed to clone upperpath [ 54.101575][ T5953] Bluetooth: hci2: command 0x0419 tx timeout [ 54.101714][ T5958] Bluetooth: hci1: command 0x0419 tx timeout [ 54.161504][ T64] usb 8-1: device descriptor read/64, error -71 [ 54.421449][ T64] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 54.505945][ T6477] tmpfs: Bad value for 'mpol' [ 54.561521][ T64] usb 8-1: device descriptor read/64, error -71 [ 54.632082][ T39] kauditd_printk_skb: 79 callbacks suppressed [ 54.632098][ T39] audit: type=1400 audit(1740115219.177:437): avc: denied { setattr } for pid=6479 comm="syz.2.129" name="/" dev="9p" ino=36050066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.660530][ T39] audit: type=1400 audit(1740115219.197:438): avc: denied { read write } for pid=6480 comm="syz.1.130" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.669773][ T39] audit: type=1400 audit(1740115219.197:439): avc: denied { open } for pid=6480 comm="syz.1.130" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.677284][ T39] audit: type=1400 audit(1740115219.217:440): avc: denied { ioctl } for pid=6480 comm="syz.1.130" path="socket:[9945]" dev="sockfs" ino=9945 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.682345][ T64] usb usb8-port1: attempt power cycle [ 54.686709][ T39] audit: type=1400 audit(1740115219.217:441): avc: denied { getopt } for pid=6480 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.760630][ T6504] netlink: 456 bytes leftover after parsing attributes in process `syz.1.132'. [ 54.799717][ T39] audit: type=1400 audit(1740115219.337:442): avc: denied { bind } for pid=6507 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.825804][ T39] audit: type=1400 audit(1740115219.367:443): avc: denied { ioctl } for pid=6506 comm="syz.1.133" path="net:[4026532882]" dev="nsfs" ino=4026532882 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.833599][ T6508] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 54.835776][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'. [ 54.846880][ T5958] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 54.847107][ T39] audit: type=1400 audit(1740115219.387:444): avc: denied { write } for pid=6506 comm="syz.1.133" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.859423][ T39] audit: type=1400 audit(1740115219.387:445): avc: denied { open } for pid=6506 comm="syz.1.133" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.868358][ T39] audit: type=1400 audit(1740115219.387:446): avc: denied { ioctl } for pid=6506 comm="syz.1.133" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.871121][ T5958] Bluetooth: hci0: Malformed Event: 0x2f [ 55.041503][ T64] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 55.072116][ T64] usb 8-1: device descriptor read/8, error -71 [ 55.158556][ T6528] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.175911][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 55.178531][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 55.181066][ T6530] netlink: 'syz.0.141': attribute type 12 has an invalid length. [ 55.186235][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 55.188801][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 55.191307][ T6531] netlink: 'syz.0.141': attribute type 12 has an invalid length. [ 55.199831][ T6533] openvswitch: netlink: Key type 5892 is out of range max 32 [ 55.259049][ T6538] ip6t_srh: unknown srh invflags 7D00 [ 55.331504][ T64] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 55.352838][ T64] usb 8-1: device descriptor read/8, error -71 [ 55.463306][ T64] usb usb8-port1: unable to enumerate USB device [ 55.620123][ T6567] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=6567 comm=syz.2.156 [ 55.665726][ T6570] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 55.669491][ T6570] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 55.724957][ T6576] team0: Port device team_slave_1 removed [ 55.753592][ T6582] hsr_slave_0: left promiscuous mode [ 55.756471][ T6582] hsr_slave_1: left promiscuous mode [ 55.865303][ T6594] netlink: 'syz.1.164': attribute type 62 has an invalid length. [ 56.181550][ T5958] Bluetooth: hci2: command 0x0419 tx timeout [ 56.182800][ T5953] Bluetooth: hci1: command 0x0419 tx timeout [ 56.567331][ T6643] ip6t_rpfilter: unknown options [ 56.586265][ T6643] kvm: emulating exchange as write [ 56.822623][ T6648] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 56.891758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 57.032240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.035232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.058013][ T6672] xt_l2tp: missing protocol rule (udp|l2tpip) [ 57.260950][ T6681] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 57.351790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.368238][ T6687] 9pnet_fd: Insufficient options for proto=fd [ 57.599071][ T6709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6709 comm=syz.2.199 [ 57.611100][ T6709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6709 comm=syz.2.199 [ 57.772009][ T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.798418][ T5953] Bluetooth: hci2: unexpected event for opcode 0x0016 [ 57.923982][ T6723] netfs: Couldn't get user pages (rc=-14) [ 57.945452][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 57.956002][ T64] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 57.959079][ T64] usb 6-1: config 0 has no interface number 0 [ 57.964502][ T64] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.968307][ T64] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 57.975000][ T64] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 57.978637][ T64] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 57.981078][ T64] usb 6-1: Product: syz [ 57.982934][ T64] usb 6-1: SerialNumber: syz [ 57.989164][ T64] usb 6-1: config 0 descriptor?? [ 57.995033][ T64] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 57.999507][ T64] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input8 [ 58.168809][ T6729] trusted_key: syz.3.206 sent an empty control message without MSG_MORE. [ 58.172811][ T6732] __nla_validate_parse: 13 callbacks suppressed [ 58.172855][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.207'. [ 58.196667][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 58.225904][ T6739] program syz.2.208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.272974][ T5953] Bluetooth: hci1: command 0x0419 tx timeout [ 58.293329][ T6742] mkiss: ax0: crc mode is auto. [ 58.338491][ T6744] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 58.344830][ T6744] team0: Cannot enslave team device to itself [ 58.404695][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 58.407978][ T6705] netlink: 'syz.1.198': attribute type 21 has an invalid length. [ 58.411572][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.415717][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.418285][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.420563][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.422991][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.425225][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.427466][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.430368][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.432436][ T1329] usb 6-1: USB disconnect, device number 3 [ 58.432496][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.432506][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 58.444118][ T1329] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 58.462898][ T6756] vxcan1: tx address claim with dlc 1 [ 58.465373][ T6756] vxcan1: tx address claim with dlc 1 [ 58.467512][ T6756] vxcan1: tx address claim with dlc 1 [ 58.469979][ T6756] vxcan1: tx address claim with dlc 1 [ 58.473864][ T6756] vxcan1: tx address claim with dlc 1 [ 58.476755][ T6756] vxcan1: tx address claim with dlc 1 [ 58.479115][ T6756] vxcan1: tx address claim with dlc 1 [ 58.481436][ T6756] vxcan1: tx address claim with dlc 1 [ 58.483519][ T6756] vxcan1: tx address claim with dlc 1 [ 58.485596][ T6756] vxcan1: tx address claim with dlc 1 [ 58.487703][ T6756] vxcan1: tx address claim with dlc 1 [ 58.490428][ T6756] vxcan1: tx address claim with dlc 1 [ 58.492892][ T6756] vxcan1: tx address claim with dlc 1 [ 58.496029][ T6756] vxcan1: tx address claim with dlc 1 [ 58.498118][ T6756] vxcan1: tx address claim with dlc 1 [ 58.500311][ T6756] vxcan1: tx address claim with dlc 1 [ 58.503902][ T6756] vxcan1: tx address claim with dlc 1 [ 58.507410][ T6756] vxcan1: tx address claim with dlc 1 [ 58.509600][ T6756] vxcan1: tx address claim with dlc 1 [ 58.511862][ T6756] vxcan1: tx address claim with dlc 1 [ 58.514150][ T6756] vxcan1: tx address claim with dlc 1 [ 58.516368][ T6756] vxcan1: tx address claim with dlc 1 [ 58.518436][ T6756] vxcan1: tx address claim with dlc 1 [ 58.518763][ T6762] netlink: 'syz.0.215': attribute type 62 has an invalid length. [ 58.520395][ T6756] vxcan1: tx address claim with dlc 1 [ 58.525016][ T6756] vxcan1: tx address claim with dlc 1 [ 58.527209][ T6756] vxcan1: tx address claim with dlc 1 [ 58.529271][ T6756] vxcan1: tx address claim with dlc 1 [ 58.531475][ T6756] vxcan1: tx address claim with dlc 1 [ 58.533713][ T6756] vxcan1: tx address claim with dlc 1 [ 58.536477][ T6756] vxcan1: tx address claim with dlc 1 [ 58.538573][ T6756] vxcan1: tx address claim with dlc 1 [ 58.540469][ T6756] vxcan1: tx address claim with dlc 1 [ 58.542307][ T6756] vxcan1: tx address claim with dlc 1 [ 58.544087][ T6756] vxcan1: tx address claim with dlc 1 [ 58.545998][ T6756] vxcan1: tx address claim with dlc 1 [ 58.548042][ T6756] vxcan1: tx address claim with dlc 1 [ 58.550326][ T6756] vxcan1: tx address claim with dlc 1 [ 58.552829][ T6756] vxcan1: tx address claim with dlc 1 [ 58.553179][ T6764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.216'. [ 58.554953][ T6756] vxcan1: tx address claim with dlc 1 [ 58.554999][ T6756] vxcan1: tx address claim with dlc 1 [ 58.562630][ T6756] vxcan1: tx address claim with dlc 1 [ 58.564868][ T6756] vxcan1: tx address claim with dlc 1 [ 58.566997][ T6756] vxcan1: tx address claim with dlc 1 [ 58.569088][ T6756] vxcan1: tx address claim with dlc 1 [ 58.571197][ T6756] vxcan1: tx address claim with dlc 1 [ 58.573447][ T6756] vxcan1: tx address claim with dlc 1 [ 58.575523][ T6756] vxcan1: tx address claim with dlc 1 [ 58.577748][ T6756] vxcan1: tx address claim with dlc 1 [ 58.579872][ T6756] vxcan1: tx address claim with dlc 1 [ 58.582153][ T6756] vxcan1: tx address claim with dlc 1 [ 58.584236][ T6756] vxcan1: tx address claim with dlc 1 [ 58.586319][ T6756] vxcan1: tx address claim with dlc 1 [ 58.589363][ T6756] vxcan1: tx address claim with dlc 1 [ 58.591960][ T6756] vxcan1: tx address claim with dlc 1 [ 58.595196][ T6756] vxcan1: tx address claim with dlc 1 [ 58.597238][ T6756] vxcan1: tx address claim with dlc 1 [ 58.599331][ T6756] vxcan1: tx address claim with dlc 1 [ 58.601490][ T6756] vxcan1: tx address claim with dlc 1 [ 58.603598][ T6756] vxcan1: tx address claim with dlc 1 [ 58.605696][ T6756] vxcan1: tx address claim with dlc 1 [ 58.607804][ T6756] vxcan1: tx address claim with dlc 1 [ 58.610918][ T6756] vxcan1: tx address claim with dlc 1 [ 58.613280][ T6756] vxcan1: tx address claim with dlc 1 [ 58.615440][ T6756] vxcan1: tx address claim with dlc 1 [ 58.617530][ T6756] vxcan1: tx address claim with dlc 1 [ 59.039734][ T6783] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.222'. [ 59.045200][ T6783] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.222'. [ 59.049524][ T6785] netlink: 'syz.1.223': attribute type 3 has an invalid length. [ 59.091745][ T6787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.225'. [ 59.095488][ T6789] dccp_invalid_packet: pskb_may_pull failed [ 59.096330][ T6790] gfs2: gfs2 mount does not exist [ 59.197995][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 59.203349][ T6797] IPVS: Error joining to the multicast group [ 59.359331][ T6813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 59.501514][ T834] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 59.641765][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 59.647053][ T6821] erspan0: entered promiscuous mode [ 59.655308][ T834] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.659359][ T834] usb 6-1: config 1 interface 0 has no altsetting 0 [ 59.663713][ T834] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.666234][ T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.668547][ T834] usb 6-1: Product: syz [ 59.669851][ T834] usb 6-1: Manufacturer: ᜗䩦稄ⅹ୾⟻钊畲ᜟ⯕줼ⷌäžï¿èŸŸç¼™ï«€êé¡è¼ìºéŠœè‘¾íŠ›ì¤Þ”욞뗕ꊳ퉛锳臨褕ì‘ꚡ觴뙧馓ႚé¯æ¡—諥ဆ飫Ẅ檼䋌㺜ϯ覅îƒçŽšî¶ƒã§£ï’¬í€§æ³™ç†žÛ²ì‘›æž»î¼«ê™ç„—꺔臔Ⓨྑ鱭ퟥ㗶뮅èºä¸›í€µO䚟⧒åžç„µïš²è©‰ç™§î§¬ã•»ê”©í–⪉♼ꋄ暯ã³áœŽäŠ„锴傶届蛺î°ä†®æ½šï«œê»˜æ†»î°‡ [ 59.679994][ T834] usb 6-1: SerialNumber: syz [ 59.680585][ T39] kauditd_printk_skb: 55 callbacks suppressed [ 59.680593][ T39] audit: type=1400 audit(1740115224.217:502): avc: denied { create } for pid=6822 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 59.681513][ T6822] delete_channel: no stack [ 59.895739][ T834] usb 6-1: USB disconnect, device number 4 [ 59.913800][ T6829] netlink: 132 bytes leftover after parsing attributes in process `syz.0.239'. [ 59.917421][ T6830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.239'. [ 59.961182][ T57] Process accounting resumed [ 60.025669][ T39] audit: type=1400 audit(1740115224.567:503): avc: denied { write } for pid=6835 comm="syz.2.238" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 60.133225][ T39] audit: type=1400 audit(1740115224.677:504): avc: denied { create } for pid=6847 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.133806][ T6837] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 60.141518][ T39] audit: type=1400 audit(1740115224.677:505): avc: denied { getopt } for pid=6835 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.263169][ T39] audit: type=1400 audit(1740115224.807:506): avc: denied { getopt } for pid=6855 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.303811][ T6860] sp0: Synchronizing with TNC [ 60.425146][ T39] audit: type=1400 audit(1740115224.967:507): avc: denied { mount } for pid=6871 comm="syz.1.254" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.436200][ T39] audit: type=1400 audit(1740115224.977:508): avc: denied { remount } for pid=6871 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.481537][ T39] audit: type=1400 audit(1740115225.017:509): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.546622][ T39] audit: type=1400 audit(1740115225.087:510): avc: denied { shutdown } for pid=6875 comm="syz.2.255" laddr=fe80::10 lport=45055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.602083][ T39] audit: type=1400 audit(1740115225.137:511): avc: denied { remove_name } for pid=6891 comm="syz.2.261" name="file0" dev="9p" ino=36050075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.835795][ T6933] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 60.837964][ T6933] netlink: 'syz.1.272': attribute type 3 has an invalid length. [ 60.915702][ T6945] capability: warning: `syz.2.276' uses 32-bit capabilities (legacy support in use) [ 60.935769][ T6947] batadv_slave_1: entered promiscuous mode [ 60.938787][ T6947] batadv_slave_1: left promiscuous mode [ 60.950290][ T5953] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 61.933838][ T7021] SELinux: Context Ü is not valid (left unmapped). [ 61.980724][ T7025] sctp: [Deprecated]: syz.2.288 (pid 7025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.980724][ T7025] Use struct sctp_sack_info instead [ 62.075322][ T7043] nftables ruleset with unbound chain [ 62.166465][ T7055] netlink: 'syz.3.297': attribute type 9 has an invalid length. [ 62.270317][ T7066] bridge_slave_0: default FDB implementation only supports local addresses [ 62.642998][ T7104] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 63.052272][ T7131] block device autoloading is deprecated and will be removed. [ 63.234110][ T7155] __nla_validate_parse: 10 callbacks suppressed [ 63.234126][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.0.321'. [ 63.319829][ T7163] loop6: detected capacity change from 0 to 524287999 [ 63.325983][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.328902][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.335901][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.338484][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.388973][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.391749][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.394482][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.397352][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.452393][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.455749][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.458777][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.462482][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.465734][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.468862][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.472031][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.475560][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.478639][ T7163] ldm_validate_partition_table(): Disk read failed. [ 63.485004][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.488487][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.492645][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.496022][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 63.500422][ T7163] Dev loop6: unable to read RDB block 0 [ 63.511982][ T7163] loop6: unable to read partition table [ 63.514108][ T7163] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 63.524382][ T5951] ldm_validate_partition_table(): Disk read failed. [ 63.529172][ T5951] Dev loop6: unable to read RDB block 0 [ 63.534633][ T5951] loop6: unable to read partition table [ 63.550447][ T7168] ldm_validate_partition_table(): Disk read failed. [ 63.555587][ T7168] Dev loop6: unable to read RDB block 0 [ 63.558152][ T7168] loop6: unable to read partition table [ 63.561469][ T7168] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 63.592765][ T7179] gfs2: gfs2 mount does not exist [ 63.754321][ T7181] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 63.757658][ T7181] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 63.761846][ T7187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.761974][ T7182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7182 comm=syz.3.331 [ 63.764655][ T7187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.769123][ T7181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7181 comm=syz.3.331 [ 63.829763][ T7188] netlink: 72 bytes leftover after parsing attributes in process `syz.2.332'. [ 63.837133][ T7195] netlink: 72 bytes leftover after parsing attributes in process `syz.2.332'. [ 63.918040][ T7197] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 63.932639][ T7197] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.334'. [ 64.006524][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'. [ 64.056192][ T7207] xt_hashlimit: max too large, truncated to 1048576 [ 64.070314][ T7206] 9pnet: Could not find request transport: xen [ 64.096024][ T7206] 9pnet: Could not find request transport: xen [ 64.113802][ T7206] 9pnet: Could not find request transport: xen [ 64.133203][ T7206] 9pnet: Could not find request transport: xen [ 64.152798][ T7206] 9pnet: Could not find request transport: xen [ 64.175842][ T7206] 9pnet: Could not find request transport: xen [ 64.198268][ T7206] 9pnet: Could not find request transport: xen [ 64.221241][ T7206] 9pnet: Could not find request transport: xen [ 64.241608][ T7206] 9pnet: Could not find request transport: xen [ 64.263786][ T7206] 9pnet: Could not find request transport: xen [ 64.285838][ T7206] 9pnet: Could not find request transport: xen [ 64.308483][ T7206] 9pnet: Could not find request transport: xen [ 64.326314][ T7206] 9pnet: Could not find request transport: xen [ 64.349181][ T7206] 9pnet: Could not find request transport: xen [ 64.366293][ T7206] 9pnet: Could not find request transport: xen [ 64.388216][ T7206] 9pnet: Could not find request transport: xen [ 64.405527][ T7206] 9pnet: Could not find request transport: xen [ 64.420708][ T7206] 9pnet: Could not find request transport: xen [ 64.436422][ T7206] 9pnet: Could not find request transport: xen [ 64.450733][ T7181] syz.3.331 (7181) used greatest stack depth: 19696 bytes left [ 64.455384][ T7206] 9pnet: Could not find request transport: xen [ 64.459719][ T7239] overlayfs: failed to clone upperpath [ 64.479774][ T7206] 9pnet: Could not find request transport: xen [ 64.511395][ T7206] 9pnet: Could not find request transport: xen [ 64.536367][ T7206] 9pnet: Could not find request transport: xen [ 64.551253][ T7206] 9pnet: Could not find request transport: xen [ 64.566247][ T7206] 9pnet: Could not find request transport: xen [ 64.581249][ T5953] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 64.586488][ T7206] 9pnet: Could not find request transport: xen [ 64.611416][ T7206] 9pnet: Could not find request transport: xen [ 64.637332][ T7206] 9pnet: Could not find request transport: xen [ 64.643262][ T7260] hfs: unable to load iocharset "io#harset" [ 64.660729][ T7206] 9pnet: Could not find request transport: xen [ 64.686398][ T7206] 9pnet: Could not find request transport: xen [ 64.706071][ T7206] 9pnet: Could not find request transport: xen [ 64.708580][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 64.708590][ T39] audit: type=1400 audit(1740115230.252:538): avc: denied { ioctl } for pid=7265 comm="syz.1.349" path="socket:[15495]" dev="sockfs" ino=15495 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.745464][ T7281] overlayfs: failed to clone upperpath [ 64.752777][ T7206] 9pnet: Could not find request transport: xen [ 64.784712][ T7206] 9pnet: Could not find request transport: xen [ 64.883466][ T7291] xt_nfacct: accounting object `syz1' does not exists [ 64.963914][ T39] audit: type=1400 audit(1740115230.512:539): avc: denied { setopt } for pid=7302 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.973416][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.358'. [ 65.072601][ T39] audit: type=1400 audit(1740115230.622:540): avc: denied { create } for pid=7309 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 65.111193][ T7315] netlink: 52 bytes leftover after parsing attributes in process `syz.2.362'. [ 65.114190][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 65.116887][ T7315] tipc: MTU too low for tipc bearer [ 65.228818][ T39] audit: type=1400 audit(1740115230.772:541): avc: denied { execmod } for pid=7329 comm="syz.2.367" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 65.247337][ T39] audit: type=1400 audit(1740115230.772:542): avc: denied { setopt } for pid=7329 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.258746][ T39] audit: type=1400 audit(1740115230.772:543): avc: denied { getopt } for pid=7329 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.269109][ T7338] 9pnet_virtio: no channels available for device syz [ 65.270028][ T7340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=251 sclass=netlink_route_socket pid=7340 comm=syz.2.370 [ 65.287453][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 65.290251][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 65.293881][ T7338] netlink: 'syz.3.368': attribute type 11 has an invalid length. [ 65.399374][ T39] audit: type=1400 audit(1740115230.942:544): avc: denied { setopt } for pid=7355 comm="syz.0.374" lport=59295 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 65.448600][ T5953] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 66.146108][ T39] audit: type=1400 audit(1740115231.692:545): avc: denied { mount } for pid=7387 comm="syz.2.383" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 66.153300][ T39] audit: type=1400 audit(1740115231.692:546): avc: denied { search } for pid=7387 comm="syz.2.383" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 66.159586][ T39] audit: type=1400 audit(1740115231.692:547): avc: denied { read } for pid=7387 comm="syz.2.383" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 66.322888][ T7406] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.422056][ T7415] ip6t_srh: unknown srh match flags 4000 [ 66.438349][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 66.472424][ T7423] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 66.481044][ T7428] overlayfs: failed to clone upperpath [ 66.515669][ T7435] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 66.529857][ T7439] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 66.627138][ T7445] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 66.708890][ T7456] vlan0: entered allmulticast mode [ 66.843185][ T7472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=224 sclass=netlink_route_socket pid=7472 comm=syz.2.409 [ 67.059565][ T7505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.176727][ T7513] use of bytesused == 0 is deprecated and will be removed in the future, [ 67.179985][ T7513] use the actual size instead. [ 67.383249][ T7517] veth1_vlan: left promiscuous mode [ 67.417039][ T7521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7521 comm=syz.0.423 [ 67.417048][ T7522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7522 comm=syz.0.423 [ 67.421820][ T7522] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 67.440651][ T7522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.456562][ T7522] bond2: (slave ip6gretap1): making interface the new active one [ 67.469110][ T7522] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 67.482531][ T7521] vlan2: entered promiscuous mode [ 67.484461][ T7521] bond2: entered promiscuous mode [ 67.486304][ T7521] ip6gretap1: entered promiscuous mode [ 67.488681][ T7521] vlan2: entered allmulticast mode [ 67.490464][ T7521] bond2: entered allmulticast mode [ 67.492190][ T7521] ip6gretap1: entered allmulticast mode [ 67.837718][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.842064][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.842726][ T7551] overlay: filesystem on ./bus is read-only [ 67.845362][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.851127][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.855480][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.858936][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.986694][ T7560] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 67.995753][ T7560] Illegal XDP return value 4294967294 on prog (id 121) dev N/A, expect packet loss! [ 68.583649][ T5958] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 68.586178][ T5958] Bluetooth: hci1: Injecting HCI hardware error event [ 68.590240][ T5958] Bluetooth: hci1: hardware error 0x00 [ 68.678912][ T7585] __nla_validate_parse: 14 callbacks suppressed [ 68.678926][ T7585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.445'. [ 68.683571][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.445'. [ 68.688363][ T7587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.446'. [ 68.900656][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 68.904291][ T7602] netlink: 'syz.3.450': attribute type 1 has an invalid length. [ 68.906679][ T7602] netlink: 'syz.3.450': attribute type 2 has an invalid length. [ 68.908771][ T7602] netlink: 16074 bytes leftover after parsing attributes in process `syz.3.450'. [ 69.028071][ T7609] bad cache= option: none [ 69.028071][ T7609] [ 69.030266][ T7609] CIFS: VFS: bad cache= option: none [ 69.075976][ T7611] hfsplus: unable to find HFS+ superblock [ 69.106360][ T7613] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.455'. [ 69.109006][ T7613] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.455'. [ 69.274043][ T7622] netlink: 277 bytes leftover after parsing attributes in process `syz.3.458'. [ 69.437678][ C3] vxcan1: j1939_tp_rxtimer: 0xffff888028b24000: rx timeout, send abort [ 69.441797][ C3] vxcan1: j1939_xtp_rx_abort_one: 0xffff888028b24000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 69.546247][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 69.549158][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.466'. [ 69.552160][ T7645] netlink: 'syz.1.466': attribute type 13 has an invalid length. [ 69.693510][ T7666] netlink: 'syz.2.471': attribute type 3 has an invalid length. [ 69.753529][ T7681] netlink: 'syz.0.475': attribute type 29 has an invalid length. [ 69.818979][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 69.818993][ T39] audit: type=1400 audit(1740115235.362:563): avc: denied { setopt } for pid=7687 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.828551][ T39] audit: type=1400 audit(1740115235.372:564): avc: denied { read } for pid=7687 comm="syz.3.477" path="socket:[17505]" dev="sockfs" ino=17505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.850173][ T7693] openvswitch: netlink: IP tunnel dst address not specified [ 70.091187][ T7710] fuse: Bad value for 'user_id' [ 70.092893][ T7710] fuse: Bad value for 'user_id' [ 70.127414][ T5953] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 70.127523][ T5953] Bluetooth: hci1: Dropping invalid advertising data [ 70.133408][ T6003] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 70.136311][ T5953] Bluetooth: hci1: Malformed LE Event: 0x02 [ 70.141784][ T7716] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 70.297364][ T6003] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 70.300805][ T6003] usb 8-1: config 0 has no interface number 0 [ 70.303470][ T6003] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 70.307186][ T6003] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 70.311235][ T6003] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 70.315818][ T6003] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 70.320255][ T6003] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 70.324193][ T6003] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 70.329144][ T6003] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 70.332879][ T6003] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.338835][ T6003] usb 8-1: config 0 descriptor?? [ 70.342399][ T7694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.354070][ T6003] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 70.547746][ T1329] usb 8-1: USB disconnect, device number 8 [ 70.553261][ T1329] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 70.573216][ T39] audit: type=1400 audit(1740115236.122:565): avc: denied { connect } for pid=7750 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.661835][ T5958] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 70.714142][ T39] audit: type=1400 audit(1740115236.262:566): avc: denied { write } for pid=7776 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.705407][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.707478][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.963329][ T39] audit: type=1400 audit(1740115237.512:567): avc: denied { accept } for pid=7819 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.974061][ T39] audit: type=1800 audit(1740115237.522:568): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.519" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 72.002609][ T7826] ipt_REJECT: TCP_RESET invalid for non-tcp [ 72.063322][ T5958] Bluetooth: hci3: Malformed Event: 0x02 [ 72.125035][ T7843] cgroup: name respecified [ 72.125165][ T7857] cgroup: name respecified [ 72.168059][ T7869] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 72.171228][ T5958] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 72.171717][ T7869] netlink: 'syz.2.533': attribute type 1 has an invalid length. [ 72.311582][ T7892] netlink: 'syz.0.540': attribute type 13 has an invalid length. [ 72.483645][ T7939] overlayfs: failed to clone upperpath [ 72.545750][ T39] audit: type=1400 audit(1740115238.092:569): avc: denied { accept } for pid=7949 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.551153][ T39] audit: type=1400 audit(1740115238.092:570): avc: denied { write } for pid=7949 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.557082][ T39] audit: type=1400 audit(1740115238.092:571): avc: denied { setopt } for pid=7949 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.837553][ T39] audit: type=1400 audit(1740115238.382:572): avc: denied { append } for pid=7984 comm="syz.3.568" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.886728][ T7990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.897338][ T7990] overlayfs: failed to clone upperpath [ 72.978848][ T7997] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.036887][ T7997] program syz.3.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.050887][ T8002] netlink: 'syz.1.574': attribute type 5 has an invalid length. [ 73.104341][ T8012] ip6t_REJECT: ECHOREPLY is not supported [ 73.309354][ T8028] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 73.316938][ T8028] CIFS mount error: No usable UNC path provided in device string! [ 73.316938][ T8028] [ 73.320184][ T8028] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 73.641709][ T8042] fuse: Bad value for 'group_id' [ 73.643695][ T8042] fuse: Bad value for 'group_id' [ 73.755752][ T8050] tmpfs: Cannot change global quota limit on remount [ 73.905432][ T8060] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 74.028481][ T8076] overlayfs: failed to clone lowerpath [ 74.125657][ T8094] ipt_rpfilter: unknown options [ 74.189963][ T6003] IPVS: starting estimator thread 0... [ 74.223358][ T8106] xfrm1: entered allmulticast mode [ 74.292246][ T8107] IPVS: using max 23 ests per chain, 55200 per kthread [ 74.295012][ T8113] __nla_validate_parse: 17 callbacks suppressed [ 74.295020][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 74.365932][ T8122] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 74.668881][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'. [ 74.932178][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.419442][ T8184] team0: Device ipip0 is of different type [ 75.440871][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 75.440883][ T39] audit: type=1400 audit(1740115240.982:588): avc: denied { bind } for pid=8178 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.450800][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 75.454641][ T8180] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 75.515027][ T8194] overlayfs: missing 'lowerdir' [ 75.554351][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 75.557186][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 75.560035][ T8198] netlink: 'syz.0.628': attribute type 13 has an invalid length. [ 75.589793][ T39] audit: type=1400 audit(1740115241.132:589): avc: denied { mount } for pid=8200 comm="syz.2.630" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.606896][ T39] audit: type=1400 audit(1740115241.152:590): avc: denied { read } for pid=8207 comm="syz.1.631" path="socket:[17865]" dev="sockfs" ino=17865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.654303][ T8216] 9pnet_fd: Insufficient options for proto=fd [ 75.657835][ T8217] 9pnet_fd: Insufficient options for proto=fd [ 75.803015][ T39] audit: type=1400 audit(1740115241.352:591): avc: denied { getopt } for pid=8234 comm="syz.3.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.902193][ T8249] fuse: Bad value for 'fd' [ 76.027298][ T8269] netlink: 'syz.0.650': attribute type 30 has an invalid length. [ 76.058210][ T8272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.648'. [ 76.069243][ T8274] loop6: detected capacity change from 0 to 524287999 [ 76.073872][ C0] blk_print_req_error: 43 callbacks suppressed [ 76.073889][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.079105][ T11] loop: Write error at byte offset 1, length 4096. [ 76.082064][ T8274] Dev loop6: unable to read RDB block 8 [ 76.084117][ T8274] loop6: unable to read partition table [ 76.085946][ T8274] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 76.089300][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 76.091960][ C0] buffer_io_error: 42 callbacks suppressed [ 76.091968][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 76.096020][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.098451][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 76.100615][ C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.103263][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 76.150276][ T8282] pimreg: entered allmulticast mode [ 76.190888][ T8288] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 76.196388][ T8290] nbd: must specify a device to reconfigure [ 76.269303][ T39] audit: type=1400 audit(1740115241.812:592): avc: denied { bind } for pid=8306 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 76.274811][ T39] audit: type=1400 audit(1740115241.812:593): avc: denied { name_bind } for pid=8306 comm="syz.0.660" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 76.280382][ T39] audit: type=1400 audit(1740115241.812:594): avc: denied { node_bind } for pid=8306 comm="syz.0.660" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 76.288913][ T39] audit: type=1400 audit(1740115241.812:595): avc: denied { listen } for pid=8306 comm="syz.0.660" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 76.296036][ T39] audit: type=1400 audit(1740115241.812:596): avc: denied { connect } for pid=8306 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 76.303291][ T39] audit: type=1400 audit(1740115241.812:597): avc: denied { name_connect } for pid=8306 comm="syz.0.660" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 76.322904][ T8309] overlay: ./bus is not a directory [ 76.329818][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.662'. [ 76.334812][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 76.336405][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 76.346107][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 76.434668][ T8311] bond0: (slave ip6_vti0): Error: Device can not be enslaved while up [ 76.440644][ T8320] bridge1: entered allmulticast mode [ 76.558197][ T8329] cgroup: none used incorrectly [ 76.841029][ T8363] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 77.006106][ T8389] netlink: 'syz.3.686': attribute type 3 has an invalid length. [ 77.120045][ T30] hid-generic 0003:0000:000E.0003: hidraw1: USB HID v0.3d Device [syz1] on syz1 [ 77.543625][ T8446] IPVS: Unknown mcast interface: dvmrp1 [ 77.574350][ T8460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.613671][ T8470] trusted_key: encrypted_key: insufficient parameters specified [ 77.760595][ T8487] overlayfs: failed to clone upperpath [ 78.184551][ T8523] netlink: 'syz.1.719': attribute type 2 has an invalid length. [ 78.186860][ T8523] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 78.509397][ T8557] sctp: [Deprecated]: syz.0.727 (pid 8557) Use of int in max_burst socket option deprecated. [ 78.509397][ T8557] Use struct sctp_assoc_value instead [ 78.542278][ T8560] tmpfs: Bad value for 'mpol' [ 78.678930][ T8570] overlayfs: failed to clone upperpath [ 78.785013][ T8582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 78.787963][ T8582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 78.790919][ T8582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 78.795342][ T8582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 78.798727][ T8582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 78.801854][ T8582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 78.804594][ T8582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 78.807341][ T8582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 78.810775][ T8582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 78.815909][ T8582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 79.164219][ T8596] tmpfs: Bad value for 'mpol' [ 79.240361][ T8604] fuse: Bad value for 'fd' [ 79.358377][ T8611] tc_dump_action: action bad kind [ 79.367451][ T8612] tc_dump_action: action bad kind [ 79.470625][ T8617] __nla_validate_parse: 16 callbacks suppressed [ 79.470637][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 79.475488][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 79.726311][ T8636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.752'. [ 79.730659][ T8636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.752'. [ 79.734820][ T8637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.752'. [ 79.738319][ T8637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.752'. [ 79.812127][ T8645] syz.1.755 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.879933][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.756'. [ 79.884541][ T8647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.756'. [ 79.897471][ T8647] bridge0: port 3(syz_tun) entered blocking state [ 79.900836][ T8647] bridge0: port 3(syz_tun) entered disabled state [ 79.903826][ T8647] syz_tun: entered allmulticast mode [ 79.907701][ T8647] syz_tun: entered promiscuous mode [ 79.912618][ T8647] bridge0: port 3(syz_tun) entered blocking state [ 79.915504][ T8647] bridge0: port 3(syz_tun) entered forwarding state [ 80.037843][ T8658] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.126973][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.762'. [ 80.278808][ T8669] netlink: 'syz.3.765': attribute type 10 has an invalid length. [ 80.318739][ T8669] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 80.342550][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.345285][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.348753][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.351642][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.515163][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 80.614771][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 80.614785][ T39] audit: type=1400 audit(1740115246.162:615): avc: denied { getopt } for pid=8674 comm="syz.0.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.627095][ T8675] xt_hashlimit: overflow, try lower: 0/0 [ 80.632439][ T39] audit: type=1400 audit(1740115246.182:616): avc: denied { ioctl } for pid=8672 comm="syz.3.767" path="socket:[19699]" dev="sockfs" ino=19699 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.985701][ T39] audit: type=1400 audit(1740115246.532:617): avc: denied { open } for pid=8698 comm="syz.3.776" path="/dev/ttyqb" dev="devtmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 80.994123][ T39] audit: type=1400 audit(1740115246.532:618): avc: denied { append } for pid=8698 comm="syz.3.776" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 81.061479][ T39] audit: type=1400 audit(1740115246.602:619): avc: denied { read append } for pid=8705 comm="syz.3.778" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.067454][ T39] audit: type=1400 audit(1740115246.602:620): avc: denied { open } for pid=8705 comm="syz.3.778" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.073234][ T39] audit: type=1400 audit(1740115246.602:621): avc: denied { ioctl } for pid=8705 comm="syz.3.778" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.135123][ T8711] IPVS: set_ctl: invalid protocol: 255 172.30.0.4:20003 [ 81.137890][ T8710] IPVS: set_ctl: invalid protocol: 255 172.30.0.4:20003 [ 81.239896][ T8722] overlayfs: failed to clone upperpath [ 81.451619][ T8737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8737 comm=syz.1.788 [ 81.451656][ T8738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8738 comm=syz.1.788 [ 81.460967][ T8737] xt_hashlimit: max too large, truncated to 1048576 [ 81.499634][ T8740] overlayfs: failed to clone upperpath [ 81.573767][ T8744] xt_cgroup: xt_cgroup: no path or classid specified [ 81.949016][ T39] audit: type=1400 audit(1740115247.492:622): avc: denied { mount } for pid=8763 comm="syz.0.797" name="/" dev="configfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.954082][ T835] cfg80211: failed to load regulatory.db [ 81.962430][ T39] audit: type=1400 audit(1740115247.492:623): avc: denied { search } for pid=8763 comm="syz.0.797" name="/" dev="configfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.971827][ T39] audit: type=1400 audit(1740115247.492:624): avc: denied { read } for pid=8763 comm="syz.0.797" name="/" dev="configfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.027474][ T8768] 9pnet_fd: Insufficient options for proto=fd [ 82.374785][ T8786] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 82.450956][ T8795] can: request_module (can-proto-4) failed. [ 82.477035][ T8799] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.495491][ T8803] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 83.758218][ T8869] netlink: 'syz.2.825': attribute type 64 has an invalid length. [ 83.764591][ T8869] netlink: 'syz.2.825': attribute type 4 has an invalid length. [ 84.003248][ T8895] tmpfs: Bad value for 'mpol' [ 84.611494][ T5972] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 84.642453][ T8929] sctp: [Deprecated]: syz.1.845 (pid 8929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.642453][ T8929] Use struct sctp_sack_info instead [ 84.762456][ T5972] usb 8-1: Using ep0 maxpacket: 8 [ 84.765507][ T5972] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 84.767902][ T5972] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 84.772355][ T5972] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 84.775892][ T5972] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.779420][ T5972] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.784457][ T5972] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.787646][ T5972] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.997778][ T5972] usb 8-1: usb_control_msg returned -32 [ 85.000045][ T5972] usbtmc 8-1:16.0: can't read capabilities [ 85.015624][ T1329] usb 8-1: USB disconnect, device number 9 [ 85.153127][ T8970] __nla_validate_parse: 6 callbacks suppressed [ 85.153140][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 85.264257][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'. [ 85.288569][ T8985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'. [ 85.355618][ T8984] netlink: 376 bytes leftover after parsing attributes in process `syz.2.858'. [ 85.359031][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.858'. [ 85.362905][ T8984] netlink: 376 bytes leftover after parsing attributes in process `syz.2.858'. [ 85.373199][ T5958] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 85.381170][ T8993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.389777][ T8993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 85.519430][ T8998] tipc: Started in network mode [ 85.520881][ T8998] tipc: Node identity ac14140f, cluster identity 4711 [ 85.523792][ T8998] tipc: New replicast peer: 255.255.255.255 [ 85.526722][ T8998] tipc: Enabled bearer , priority 10 [ 85.623987][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 85.624000][ T39] audit: type=1400 audit(1740115251.172:637): avc: denied { ioctl } for pid=9033 comm="syz.1.867" path="socket:[19984]" dev="sockfs" ino=19984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.655603][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 85.659768][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 85.664688][ T9038] netlink: 'syz.2.869': attribute type 20 has an invalid length. [ 85.931030][ T9077] netlink: 168 bytes leftover after parsing attributes in process `syz.1.881'. [ 86.523535][ T834] tipc: Node number set to 2886997007 [ 86.627274][ T9093] program syz.3.886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.633289][ T39] audit: type=1326 audit(1740115252.182:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.0.885" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0facf8d0a9 code=0x0 [ 86.672252][ T9095] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.675777][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.677056][ T9095] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 86.680297][ T9095] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 87.464648][ T9102] netlink: 'syz.0.889': attribute type 11 has an invalid length. [ 87.496065][ T9104] xt_hashlimit: invalid rate [ 87.525838][ T39] audit: type=1400 audit(1740115253.072:639): avc: denied { listen } for pid=9105 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.532018][ T39] audit: type=1400 audit(1740115253.072:640): avc: denied { bind } for pid=9105 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.539394][ T39] audit: type=1400 audit(1740115253.082:641): avc: denied { setopt } for pid=9105 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.566365][ T39] audit: type=1326 audit(1740115253.112:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.892" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0facf8d0a9 code=0x7ffc0000 [ 87.574683][ T39] audit: type=1326 audit(1740115253.112:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.892" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0facf8d0a9 code=0x7ffc0000 [ 87.581504][ T39] audit: type=1326 audit(1740115253.112:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.892" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0facf8d0a9 code=0x7ffc0000 [ 87.589373][ T39] audit: type=1326 audit(1740115253.112:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.892" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0facf8d0a9 code=0x7ffc0000 [ 87.595717][ T39] audit: type=1326 audit(1740115253.112:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.892" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0facf8d0a9 code=0x7ffc0000 [ 87.667910][ T9130] x_tables: duplicate underflow at hook 1 [ 87.820715][ T9165] x_tables: duplicate underflow at hook 1 [ 88.742341][ T5958] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 88.743406][ T5953] Bluetooth: hci4: command 0xfc11 tx timeout [ 88.816575][ T9231] netlink: 'syz.3.927': attribute type 2 has an invalid length. [ 88.819463][ T9231] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 88.872946][ T9235] xfs: Unknown parameter 'usrquota(' [ 88.918335][ T9241] netlink: 'syz.3.930': attribute type 12 has an invalid length. [ 88.977740][ T9241] overlayfs: failed to resolve './file0': -2 [ 89.013034][ T9249] CIFS mount error: No usable UNC path provided in device string! [ 89.013034][ T9249] [ 89.016548][ T9249] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 89.095822][ T9259] overlayfs: failed to clone upperpath [ 89.134297][ T9263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9263 comm=syz.1.936 [ 89.142866][ T9263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=9263 comm=syz.1.936 [ 89.154170][ T9263] bond2: entered allmulticast mode [ 89.157898][ T9263] bond2 (unregistering): Released all slaves [ 89.205453][ T9267] netlink: 'syz.3.938': attribute type 1 has an invalid length. [ 89.208836][ T9266] netlink: 'syz.3.938': attribute type 1 has an invalid length. [ 89.492816][ T9291] loop2: detected capacity change from 0 to 7 [ 89.502715][ T9291] Dev loop2: unable to read RDB block 7 [ 89.504401][ T9291] loop2: unable to read partition table [ 89.506052][ T9291] loop2: partition table beyond EOD, truncated [ 89.507858][ T9291] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 89.679181][ T9314] vxcan1: tx address claim with dlc 0 [ 89.977170][ T9351] overlayfs: failed to clone upperpath [ 90.037688][ T9356] netlink: 'syz.1.966': attribute type 10 has an invalid length. [ 90.043087][ T9356] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.045926][ T9356] bond0: (slave team0): Enslaving as an active interface with an up link [ 90.176627][ T9377] hpfs: Bad magic ... probably not HPFS [ 91.020383][ T9402] syzkaller1: entered promiscuous mode [ 91.023396][ T9402] syzkaller1: entered allmulticast mode [ 91.206652][ T9407] __nla_validate_parse: 9 callbacks suppressed [ 91.206664][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 91.285904][ T9414] CIFS mount error: No usable UNC path provided in device string! [ 91.285904][ T9414] [ 91.289989][ T9414] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 91.297494][ T9414] can0: slcan on ptm0. [ 91.304559][ T39] kauditd_printk_skb: 46 callbacks suppressed [ 91.304571][ T39] audit: type=1400 audit(1740115256.852:693): avc: denied { connect } for pid=9413 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.359057][ T9421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9421 comm=syz.3.984 [ 91.367323][ T9421] ipvlan2: entered promiscuous mode [ 92.184129][ T9413] can0 (unregistered): slcan off ptm0. [ 92.533254][ C2] vxcan0: j1939_tp_rxtimer: 0xffff888051623c00: rx timeout, send abort [ 92.536631][ C2] vxcan0: j1939_xtp_rx_abort_one: 0xffff888051623c00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 92.630084][ T9461] netfs: Couldn't get user pages (rc=-14) [ 92.802455][ T39] audit: type=1400 audit(1740115258.352:694): avc: denied { ioctl } for pid=9469 comm="syz.0.998" path="socket:[22097]" dev="sockfs" ino=22097 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 92.802829][ T9470] veth0_macvtap: left promiscuous mode [ 92.887015][ T9477] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1001'. [ 92.919194][ T39] audit: type=1400 audit(1740115258.462:695): avc: denied { connect } for pid=9479 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.101518][ T5949] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 93.254006][ T5949] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.258333][ T5949] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.261989][ T5949] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.267184][ T5949] usb 8-1: config 0 descriptor?? [ 93.383703][ T5953] Bluetooth: hci3: command 0x0419 tx timeout [ 93.476917][ T5949] usbhid 8-1:0.0: can't add hid device: -71 [ 93.479428][ T5949] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 93.487221][ T5949] usb 8-1: USB disconnect, device number 10 [ 93.931509][ T35] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 93.942924][ T39] audit: type=1400 audit(1740115259.492:696): avc: denied { ioctl } for pid=9495 comm="syz.0.1006" path="socket:[22565]" dev="sockfs" ino=22565 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.091483][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 94.094464][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.099876][ T35] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 94.103145][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.106458][ T35] usb 8-1: config 0 descriptor?? [ 94.112680][ T35] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 94.116149][ T35] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 94.296243][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 95.471464][ T5958] Bluetooth: hci3: command 0x0419 tx timeout [ 95.547923][ T9538] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1019'. [ 95.656233][ T39] audit: type=1326 audit(1740115261.202:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.1020" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddfe18d0a9 code=0x0 [ 95.865972][ T35] usb 8-1: USB disconnect, device number 11 [ 95.868932][ T35] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 96.129165][ T9560] netlink: 'syz.0.1027': attribute type 21 has an invalid length. [ 96.335134][ T9572] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744071562067969) [ 96.339101][ T9572] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 96.344701][ T9573] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744071562067969) [ 96.348490][ T9573] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 96.460729][ T9576] netlink: 700 bytes leftover after parsing attributes in process `syz.3.1033'. [ 96.644989][ T39] audit: type=1400 audit(1740115262.192:698): avc: denied { ioctl } for pid=9585 comm="syz.1.1037" path="socket:[21338]" dev="sockfs" ino=21338 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 97.424694][ T9610] netfs: Couldn't get user pages (rc=-14) [ 97.541535][ T5958] Bluetooth: hci3: command 0x0419 tx timeout [ 97.624492][ T9630] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1050'. [ 97.766623][ T9640] tipc: Enabling of bearer rejected, failed to enable media [ 97.874844][ T9627] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.898785][ T9669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1062'. [ 97.924965][ T9669] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 98.007230][ T9676] sctp: [Deprecated]: syz.0.1065 (pid 9676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.007230][ T9676] Use struct sctp_sack_info instead [ 98.053029][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1067'. [ 98.073529][ T9681] veth3: entered promiscuous mode [ 98.530022][ T9698] tmpfs: Bad value for 'huge' [ 98.691269][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 99.254163][ T9708] macvtap0: entered promiscuous mode [ 99.256568][ T9708] veth0_macvtap: entered promiscuous mode [ 99.266347][ T9708] team0: Device macvtap0 failed to register rx_handler [ 99.271235][ T9708] veth0_macvtap: left promiscuous mode [ 99.631545][ T5958] Bluetooth: hci3: command 0x0419 tx timeout [ 100.145816][ T39] audit: type=1400 audit(1740115265.692:699): avc: denied { read } for pid=9725 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.200597][ T9726] tmpfs: Unknown parameter 'noswëÏëIX‹£PÞ¥ÑKí$/m&' [ 100.249615][ T9735] fuse: Unknown parameter 'b„Jåƒ8' [ 100.324151][ T9742] tmpfs: Invalid uid '0x00000000ffffffff' [ 100.348035][ T9744] program syz.3.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.410202][ T9747] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 100.415471][ T39] audit: type=1400 audit(1740115265.962:700): avc: denied { relabelto } for pid=9745 comm="syz.0.1089" name="file0" dev="tmpfs" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ssh_agent_exec_t:s0" [ 100.423995][ T39] audit: type=1400 audit(1740115265.962:701): avc: denied { associate } for pid=9745 comm="syz.0.1089" name="file0" dev="tmpfs" ino=1982 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_agent_exec_t:s0" [ 100.465308][ T9749] netlink: 'syz.1.1090': attribute type 10 has an invalid length. [ 100.472797][ T9749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.476742][ T9749] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 100.532637][ T39] audit: type=1400 audit(1740115266.082:702): avc: denied { module_request } for pid=9757 comm="syz.0.1094" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 100.558329][ T9758] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=9758 comm=syz.0.1094 [ 100.562853][ T9758] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=9758 comm=syz.0.1094 [ 100.598502][ T9766] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ [ 100.601745][ T6003] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 100.653249][ T9768] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 100.692602][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 100.726945][ T39] audit: type=1400 audit(1740115266.272:703): avc: denied { execute } for pid=9773 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 100.735308][ T39] audit: type=1400 audit(1740115266.272:704): avc: denied { execute_no_trans } for pid=9773 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 100.776474][ T6003] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 100.779517][ T6003] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.783958][ T6003] usb 8-1: Product: syz [ 100.785236][ T6003] usb 8-1: Manufacturer: syz [ 100.786634][ T6003] usb 8-1: SerialNumber: syz [ 100.795811][ T6003] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 100.830769][ T6003] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 100.837219][ T5953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.840491][ T9780] veth0_macvtap: entered promiscuous mode [ 100.841253][ T5953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.844431][ T9780] team0: Device macvtap0 failed to register rx_handler [ 100.846439][ T5953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.848617][ T9780] veth0_macvtap: left promiscuous mode [ 100.850814][ T5953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.854965][ T5953] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.857731][ T5953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.872677][ T39] audit: type=1400 audit(1740115266.422:705): avc: denied { mounton } for pid=9778 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 100.944096][ T9778] chnl_net:caif_netlink_parms(): no params data found [ 100.990900][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.993077][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.995179][ T9778] bridge_slave_0: entered allmulticast mode [ 100.997419][ T9778] bridge_slave_0: entered promiscuous mode [ 101.001673][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.003839][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.006013][ T9778] bridge_slave_1: entered allmulticast mode [ 101.008165][ T9778] bridge_slave_1: entered promiscuous mode [ 101.027821][ T9778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.031994][ T9778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.059679][ T9778] team0: Port device team_slave_0 added [ 101.065904][ T9778] team0: Port device team_slave_1 added [ 101.094922][ T35] usb 8-1: USB disconnect, device number 12 [ 101.101516][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.103532][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.110572][ T9778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.114607][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.116594][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.123806][ T9778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.149386][ T9778] hsr_slave_0: entered promiscuous mode [ 101.151960][ T9778] hsr_slave_1: entered promiscuous mode [ 101.250066][ T9778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.255028][ T9778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.259995][ T9778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.263785][ T9778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.274116][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.276260][ T9778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.278512][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.280614][ T9778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.322642][ T9778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.335351][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.338956][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.353297][ T9778] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.361086][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.363082][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.368972][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.371856][ T9014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.472431][ T9778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.582596][ T9778] veth0_vlan: entered promiscuous mode [ 101.589752][ T9778] veth1_vlan: entered promiscuous mode [ 101.596333][ T9816] overlayfs: conflicting options: metacopy=off,verity=on [ 101.615152][ T9778] veth0_macvtap: entered promiscuous mode [ 101.620053][ T9778] veth1_macvtap: entered promiscuous mode [ 101.641126][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.647421][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.651226][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.655732][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.663553][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.690254][ T9819] ip6erspan0: entered promiscuous mode [ 101.693393][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.696919][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.699680][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.705970][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.711914][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.720522][ T9778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.725599][ T9778] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.729729][ T9778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.733632][ T9778] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.817387][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.820374][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.842934][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.846138][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.859615][ T39] audit: type=1400 audit(1740115267.402:706): avc: denied { mounton } for pid=9778 comm="syz-executor" path="/syzkaller.cVNdlH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 101.861723][ T6003] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 101.879642][ T6003] ath9k_htc: Failed to initialize the device [ 101.889157][ T35] usb 8-1: ath9k_htc: USB layer deinitialized [ 101.960044][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.055386][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.077588][ T9844] batadv0: entered promiscuous mode [ 102.079661][ T9844] macvtap1: entered allmulticast mode [ 102.081231][ T9844] batadv0: entered allmulticast mode [ 102.083536][ T9844] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 102.086758][ T9844] batadv0: left allmulticast mode [ 102.088594][ T9844] batadv0: left promiscuous mode [ 102.164430][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.189005][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.194522][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.197367][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.201601][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.204412][ T5958] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 102.206628][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.252384][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.309789][ T9850] chnl_net:caif_netlink_parms(): no params data found [ 102.361604][ T1329] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 102.432480][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.434681][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.437015][ T9850] bridge_slave_0: entered allmulticast mode [ 102.440289][ T9850] bridge_slave_0: entered promiscuous mode [ 102.444581][ T1142] bridge_slave_1: left allmulticast mode [ 102.447553][ T1142] bridge_slave_1: left promiscuous mode [ 102.453182][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.461733][ T1142] bridge_slave_0: left allmulticast mode [ 102.463957][ T1142] bridge_slave_0: left promiscuous mode [ 102.466358][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.516540][ T1329] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 102.520904][ T1329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.525370][ T1329] usb 9-1: Product: syz [ 102.527225][ T1329] usb 9-1: Manufacturer: syz [ 102.529017][ T1329] usb 9-1: SerialNumber: syz [ 102.535817][ T1329] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 102.614982][ T25] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 102.902093][ T5958] Bluetooth: hci4: command tx timeout [ 102.942294][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.947572][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.952958][ T1142] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 102.965043][ T1142] bond0 (unregistering): Released all slaves [ 102.969747][ T1142] bond1 (unregistering): Released all slaves [ 102.977127][ T9850] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.979204][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.981732][ T9850] bridge_slave_1: entered allmulticast mode [ 102.984119][ T9850] bridge_slave_1: entered promiscuous mode [ 102.999325][ T9861] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1120'. [ 103.022526][ T9850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.027326][ T9850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.200593][ T9890] netlink: 'syz.0.1126': attribute type 8 has an invalid length. [ 103.203154][ T9890] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.1126'. [ 103.208217][ T9850] team0: Port device team_slave_0 added [ 103.214644][ T9850] team0: Port device team_slave_1 added [ 103.256934][ T58] usb 9-1: USB disconnect, device number 2 [ 103.269070][ T9895] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1128'. [ 103.290201][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.294575][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.303965][ T9850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.308751][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.310789][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.319932][ T9850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.409963][ T9904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1129'. [ 103.414625][ T9850] hsr_slave_0: entered promiscuous mode [ 103.416734][ T9850] hsr_slave_1: entered promiscuous mode [ 103.418716][ T9850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.420894][ T9850] Cannot create hsr debugfs directory [ 103.496516][ T1142] hsr_slave_0: left promiscuous mode [ 103.499280][ T1142] hsr_slave_1: left promiscuous mode [ 103.531476][ T1142] veth1_macvtap: left promiscuous mode [ 103.534055][ T1142] veth0_macvtap: left promiscuous mode [ 103.536240][ T1142] veth1_vlan: left promiscuous mode [ 103.538308][ T1142] veth0_vlan: left promiscuous mode [ 103.581050][ T9911] 9pnet_fd: Insufficient options for proto=fd [ 103.626360][ T1142] pimreg (unregistering): left allmulticast mode [ 103.869067][ T25] usb 9-1: Service connection timeout for: 256 [ 103.871204][ T25] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 103.876489][ T25] ath9k_htc: Failed to initialize the device [ 103.878437][ T58] usb 9-1: ath9k_htc: USB layer deinitialized [ 104.139295][ T9923] netlink: 'syz.0.1134': attribute type 11 has an invalid length. [ 104.148183][ T9923] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1134'. [ 104.265300][ T5958] Bluetooth: hci3: command tx timeout [ 104.544699][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 104.637315][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 105.001690][ T5958] Bluetooth: hci4: command tx timeout [ 106.355176][ T5958] Bluetooth: hci3: command tx timeout [ 107.100417][ T5958] Bluetooth: hci4: command tx timeout [ 107.851745][ T9925] wg2: entered promiscuous mode [ 107.853738][ T9925] wg2: entered allmulticast mode [ 107.978848][ T39] audit: type=1400 audit(1740115273.502:707): avc: denied { relabelfrom } for pid=9930 comm="syz.4.1135" name="" dev="pipefs" ino=22458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 107.986687][ T39] audit: type=1401 audit(1740115273.512:708): op=setxattr invalid_context="system_u:" [ 108.043543][ T9937] fuse: Bad value for 'fd' [ 108.153986][ T9936] netem: change failed [ 108.388586][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1140'. [ 108.438432][ T5958] Bluetooth: hci3: command tx timeout [ 108.475218][ T9963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.585676][ T9965] netlink: 'syz.4.1144': attribute type 9 has an invalid length. [ 108.601004][ T9965] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1144'. [ 108.887790][ T1142] IPVS: stop unused estimator thread 0... [ 108.991871][ T6003] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 109.161585][ T6003] usb 9-1: Using ep0 maxpacket: 8 [ 109.162283][ T5958] Bluetooth: hci4: command tx timeout [ 109.198561][ T6003] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 109.239432][ T6003] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.263558][ T6003] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.290359][ T6003] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.310945][ T6003] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.316338][ T6003] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.333315][ T6003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.552142][T10002] autofs: Bad value for 'fd' [ 109.572386][ T6003] usb 9-1: usb_control_msg returned -32 [ 109.583633][ T6003] usbtmc 9-1:16.0: can't read capabilities [ 109.712596][T10007] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1154'. [ 109.717500][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 109.832292][ T834] usb 9-1: USB disconnect, device number 3 [ 109.926632][ T9850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.954595][ T9850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.988633][T10017] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 110.044124][ T9850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.047331][ T39] audit: type=1400 audit(1740115275.592:709): avc: denied { read } for pid=10015 comm="syz.1.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.178385][ T39] audit: type=1400 audit(1740115275.702:710): avc: denied { read } for pid=10015 comm="syz.1.1158" name="file0" dev="tmpfs" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.231669][ T9850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.283624][T10023] netlink: 1748 bytes leftover after parsing attributes in process `syz.4.1157'. [ 110.318050][T10023] netlink: 8416 bytes leftover after parsing attributes in process `syz.4.1157'. [ 110.380139][T10031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10031 comm=syz.1.1160 [ 110.396869][T10031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1160'. [ 110.405985][ T39] audit: type=1400 audit(1740115275.942:711): avc: denied { accept } for pid=10030 comm="syz.1.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 110.502784][ T5958] Bluetooth: hci3: command tx timeout [ 110.518777][ T9850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.587728][ T9850] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.634335][ T39] audit: type=1400 audit(1740115276.132:712): avc: denied { ioctl } for pid=10041 comm="syz.0.1162" path="socket:[23499]" dev="sockfs" ino=23499 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.695108][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.698282][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.715784][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.718809][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.932284][T10066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1166'. [ 111.779213][ T9850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.800249][ T39] audit: type=1400 audit(1740115277.342:713): avc: denied { setopt } for pid=10095 comm="syz.4.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 111.864366][ T9850] veth0_vlan: entered promiscuous mode [ 111.971272][ T9850] veth1_vlan: entered promiscuous mode [ 112.019634][ T9850] veth0_macvtap: entered promiscuous mode [ 112.058729][ T9850] veth1_macvtap: entered promiscuous mode [ 112.173852][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.197251][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.212841][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.218421][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.236130][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.246610][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.255061][ T9850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.292216][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.297461][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.307880][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.322655][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.334808][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.336612][ T39] audit: type=1400 audit(1740115277.882:714): avc: denied { read append } for pid=10100 comm="syz.4.1172" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.340481][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.375214][ T39] audit: type=1400 audit(1740115277.882:715): avc: denied { open } for pid=10100 comm="syz.4.1172" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.387361][ T9850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.453314][ T9850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.456366][ T39] audit: type=1400 audit(1740115278.002:716): avc: denied { write } for pid=10102 comm="syz.4.1173" name="ip6_flowlabel" dev="proc" ino=4026533907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 112.461939][ T9850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.490735][ T9850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.495429][ T9850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.841594][ T9014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.885871][ T9014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.068246][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.086471][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.183102][T10120] fuse: Bad value for 'fd' [ 113.216385][ T39] audit: type=1400 audit(1740115278.722:717): avc: denied { getopt } for pid=10119 comm="syz.0.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.455192][ T39] audit: type=1400 audit(1740115279.002:718): avc: denied { setopt } for pid=10129 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 113.541699][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 113.559748][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'. [ 114.087454][ T39] audit: type=1400 audit(1740115279.632:719): avc: denied { getopt } for pid=10148 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.114957][T10149] lo: entered promiscuous mode [ 114.133177][T10146] syzkaller1: entered promiscuous mode [ 114.136131][T10146] syzkaller1: entered allmulticast mode [ 114.271560][T10159] netlink: 'syz.0.1192': attribute type 1 has an invalid length. [ 114.335488][T10159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.011321][ T1171] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.037245][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'. [ 115.091236][T10179] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1197'. [ 115.099506][ T5958] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 115.129257][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.138206][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.154132][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.192121][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.214544][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.224411][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.228313][ T1171] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.426613][ T1171] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.570250][ T1171] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.706463][T10180] chnl_net:caif_netlink_parms(): no params data found [ 116.126394][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.130793][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.136658][T10180] bridge_slave_0: entered allmulticast mode [ 116.140920][T10180] bridge_slave_0: entered promiscuous mode [ 116.167119][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.182041][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.193805][T10180] bridge_slave_1: entered allmulticast mode [ 116.222503][T10180] bridge_slave_1: entered promiscuous mode [ 116.441681][ T9907] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 116.447958][T10240] sctp: [Deprecated]: syz.0.1208 (pid 10240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.447958][T10240] Use struct sctp_sack_info instead [ 116.492496][T10180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.502976][T10180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.566666][ T1171] bridge_slave_1: left allmulticast mode [ 116.569655][ T1171] bridge_slave_1: left promiscuous mode [ 116.574383][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.624090][ T9907] usb 9-1: Using ep0 maxpacket: 16 [ 116.629473][ T9907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.637482][ T9907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.638299][ T1171] bridge_slave_0: left allmulticast mode [ 116.647795][ T9907] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.649569][ T1171] bridge_slave_0: left promiscuous mode [ 116.655428][ T9907] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 116.672585][ T9907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.676352][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.691150][ T9907] usb 9-1: config 0 descriptor?? [ 116.717569][ T9907] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input9 [ 116.732179][ T5342] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 116.759347][T10253] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 116.763099][T10253] overlayfs: missing 'lowerdir' [ 116.796282][ T5342] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 116.805156][T10253] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1212'. [ 116.890722][ T5342] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 116.931734][T10229] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 116.999632][ T5342] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 117.006836][ T5949] usb 9-1: USB disconnect, device number 4 [ 117.121812][T10256] netlink: 'syz.1.1213': attribute type 2 has an invalid length. [ 117.142605][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'. [ 117.382051][ T5953] Bluetooth: hci3: command tx timeout [ 117.403859][ T39] audit: type=1400 audit(1740115282.942:720): avc: denied { write } for pid=10267 comm="syz.0.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 117.891587][ T5949] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 117.979815][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.000317][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.016220][ T1171] bond0 (unregistering): Released all slaves [ 118.061629][ T5949] usb 9-1: Using ep0 maxpacket: 32 [ 118.099445][ T5949] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 118.103558][ T5949] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 118.108236][ T5949] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 118.116439][ T5949] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.123031][ T5949] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.134154][ T5949] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.149679][ T5949] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 118.155870][ T5949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.182168][ T5949] usb 9-1: config 0 descriptor?? [ 118.205768][T10180] team0: Port device team_slave_0 added [ 118.218010][T10180] team0: Port device team_slave_1 added [ 118.464118][ T5949] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 118.546670][T10180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.549894][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.576234][T10180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.662374][T10180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.664801][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.676688][ T9115] usb 9-1: USB disconnect, device number 5 [ 118.682400][T10180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.729128][ T9115] usblp0: removed [ 118.994284][T10180] hsr_slave_0: entered promiscuous mode [ 119.000886][T10180] hsr_slave_1: entered promiscuous mode [ 119.017673][T10180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.021515][T10180] Cannot create hsr debugfs directory [ 119.293222][ T39] audit: type=1400 audit(2000000000.429:721): avc: denied { create } for pid=10310 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 119.426034][T10316] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 119.439214][ T39] audit: type=1400 audit(2000000000.569:722): avc: denied { mount } for pid=10315 comm="syz.0.1229" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 119.461662][ T5953] Bluetooth: hci3: command tx timeout [ 119.671534][ T1171] hsr_slave_0: left promiscuous mode [ 119.708439][ T39] audit: type=1400 audit(2000000000.839:723): avc: denied { setcurrent } for pid=10326 comm="syz.4.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 119.708921][ T1171] hsr_slave_1: left promiscuous mode [ 119.718339][ T39] audit: type=1401 audit(2000000000.839:724): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 119.740702][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.753764][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.782701][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.785412][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.859534][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'. [ 119.927572][ T1171] veth1_macvtap: left promiscuous mode [ 119.952551][ T1171] veth0_macvtap: left promiscuous mode [ 119.954932][ T1171] veth1_vlan: left promiscuous mode [ 119.957619][ T1171] veth0_vlan: left promiscuous mode [ 120.223749][T10351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10351 comm=syz.1.1233 [ 121.541498][ T5953] Bluetooth: hci3: command tx timeout [ 123.641318][ T5953] Bluetooth: hci3: command tx timeout [ 123.970915][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 124.373175][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 128.161171][T10381] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1241'. [ 128.165889][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 128.706544][T10404] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.001570][ T39] audit: type=1400 audit(2000000010.129:725): avc: denied { sys_chroot } for pid=10409 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 129.012037][ T39] audit: type=1400 audit(2000000010.129:726): avc: denied { setgid } for pid=10409 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 129.062822][ T39] audit: type=1400 audit(2000000010.129:727): avc: denied { setrlimit } for pid=10409 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 129.685814][ T39] audit: type=1400 audit(2000000010.819:728): avc: denied { name_connect } for pid=10422 comm="syz.0.1249" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 129.831022][ T39] audit: type=1800 audit(2000000010.959:729): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1253" name="file1" dev="tmpfs" ino=169 res=0 errno=0 [ 129.972280][T10445] 9pnet_fd: Insufficient options for proto=fd [ 129.987532][ T39] audit: type=1326 audit(2000000011.119:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10444 comm="syz.1.1254" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddfe18d0a9 code=0x0 [ 130.034711][ T39] audit: type=1400 audit(2000000011.119:731): avc: denied { execstack } for pid=10447 comm="syz.4.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 130.194033][T10455] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 130.223151][ T39] audit: type=1400 audit(2000000011.329:732): avc: denied { ioctl } for pid=10451 comm="syz.4.1256" path="/dev/ptyqc" dev="devtmpfs" ino=139 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 130.295376][T10180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.357208][T10180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.415369][ T39] audit: type=1400 audit(2000000011.539:733): avc: denied { read write } for pid=10459 comm="syz.4.1257" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 130.418181][T10180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.469098][T10180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.481492][ T39] audit: type=1400 audit(2000000011.539:734): avc: denied { open } for pid=10459 comm="syz.4.1257" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 130.633424][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.652923][T10180] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.715663][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.721006][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.745854][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.748479][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.980422][T10180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.020954][T10180] veth0_vlan: entered promiscuous mode [ 131.031207][T10180] veth1_vlan: entered promiscuous mode [ 131.083572][T10500] NILFS (nullb0): couldn't find nilfs on the device [ 131.099679][T10490] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.136580][T10180] veth0_macvtap: entered promiscuous mode [ 131.145389][T10180] veth1_macvtap: entered promiscuous mode [ 131.240524][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.246288][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.265878][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.277014][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.312272][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.316608][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.334468][T10508] openvswitch: netlink: Duplicate or invalid key (type 0). [ 131.369639][T10180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.370619][T10508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.384596][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.403899][T10508] Cannot find add_set index 0 as target [ 131.409453][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.413538][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.417731][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.448093][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.453089][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.465098][T10180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.512585][T10180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.555016][T10180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.558906][T10180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.562962][T10180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.763663][ T9016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.767971][ T9016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.915344][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.935079][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.102196][T10535] trusted_key: encrypted_key: hex blob is missing [ 132.118335][T10535] tmpfs: Cannot change global quota limit on remount [ 132.162659][T10530] xt_CT: No such helper "pptp" [ 132.320797][T10542] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 10542 comm: syz.4.1275) [ 132.738944][T10547] mmap: syz.4.1276 (10547) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.787163][T10547] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 132.787163][T10547] The task syz.4.1276 (10547) triggered the difference, watch for misbehavior. [ 133.164474][T10573] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 133.169079][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.182887][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.767737][ T25] libceph: connect (1)[c::]:6789 error -101 [ 133.771302][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 133.818770][ T64] libceph: connect (1)[c::]:6789 error -101 [ 133.822517][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 134.057807][ T25] libceph: connect (1)[c::]:6789 error -101 [ 134.090622][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 134.095241][ T64] libceph: connect (1)[c::]:6789 error -101 [ 134.099381][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 134.244502][ T1171] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.423071][T10607] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1286'. [ 134.428038][T10607] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1286'. [ 134.444226][T10607] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1286'. [ 134.475648][T10607] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1286'. [ 134.510662][T10607] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1286'. [ 134.515023][T10607] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1286'. [ 134.531008][T10607] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1286'. [ 134.537511][T10607] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1286'. [ 134.595467][T10587] ceph: No mds server is up or the cluster is laggy [ 134.598388][T10588] ceph: No mds server is up or the cluster is laggy [ 134.613714][ T25] libceph: connect (1)[c::]:6789 error -101 [ 134.627618][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 134.635179][ T64] libceph: connect (1)[c::]:6789 error -101 [ 134.659977][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 134.692941][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.700812][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.707669][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.738949][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.743310][ T5958] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.747297][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.095601][T10629] overlay: Bad value for 'upperdir' [ 135.177603][T10611] chnl_net:caif_netlink_parms(): no params data found [ 135.482839][T10649] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 135.489791][T10649] 9p: Unknown Cache mode or invalid value fscacheKSUM [ 135.493213][T10649] 9pnet: Tag 65535 still in use [ 135.495948][ C3] ------------[ cut here ]------------ [ 135.499829][ C3] refcount_t: underflow; use-after-free. [ 135.504969][ C3] WARNING: CPU: 3 PID: 10647 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 135.519237][ C3] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.520807][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.524150][ C3] CPU: 3 UID: 0 PID: 10647 Comm: syz.0.1293 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 135.553472][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.568554][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 135.572088][ C3] Code: ff 89 de e8 98 4e f5 fc 84 db 0f 85 66 ff ff ff e8 eb 53 f5 fc c6 05 a7 54 86 0b 01 90 48 c7 c7 40 02 d3 8b e8 87 85 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 c8 53 f5 fc 0f b6 1d 82 54 86 0b 31 [ 135.592214][ C3] RSP: 0018:ffffc90000708d90 EFLAGS: 00010082 [ 135.595588][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a1229 [ 135.599777][ C3] RDX: ffff888028092440 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 135.603805][ C3] RBP: ffff888032087a98 R08: 0000000000000001 R09: 0000000000000000 [ 135.608715][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888032087a98 [ 135.623062][ C3] R13: ffff88805f01d400 R14: 0000000000000015 R15: 0000000000000000 [ 135.628257][ C3] FS: 000055557bbe8500(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 135.638208][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.641749][ C3] CR2: 00007f0faadf6d58 CR3: 0000000023e28000 CR4: 0000000000352ef0 [ 135.652332][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.658673][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.671629][ C3] Call Trace: [ 135.673042][ C3] [ 135.674278][ C3] ? __warn+0xea/0x3c0 [ 135.690752][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.692658][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 135.694460][ C3] ? report_bug+0x3c0/0x580 [ 135.695940][ C3] ? handle_bug+0x54/0xa0 [ 135.697355][ C3] ? exc_invalid_op+0x17/0x50 [ 135.699605][ C3] ? asm_exc_invalid_op+0x1a/0x20 [ 135.702635][ C3] ? __warn_printk+0x199/0x350 [ 135.706538][ C3] ? __warn_printk+0x1a6/0x350 [ 135.719065][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 135.722185][ C3] p9_req_put+0x1ec/0x250 [ 135.724625][ C3] req_done+0x1e7/0x2f0 [ 135.726800][ C3] ? __pfx_req_done+0x10/0x10 [ 135.736092][ C3] ? __pfx_req_done+0x10/0x10 [ 135.738686][ C3] vring_interrupt+0x31b/0x400 [ 135.741241][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 135.744795][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 135.751180][ C3] handle_irq_event+0xab/0x1e0 [ 135.756617][ C3] handle_edge_irq+0x263/0xd10 [ 135.761680][ C3] __common_interrupt+0xdf/0x250 [ 135.771717][ C3] common_interrupt+0xba/0xe0 [ 135.774227][ C3] [ 135.775806][ C3] [ 135.777408][ C3] asm_common_interrupt+0x26/0x40 [ 135.789879][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 135.793219][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 f9 3c f6 48 89 df e8 fe 78 3d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 4f 2e f6 65 8b 05 a6 33 aa 74 85 c0 74 16 5b [ 135.804288][ C3] RSP: 0018:ffffc90003707b88 EFLAGS: 00000246 [ 135.807798][ C3] RAX: 0000000000000006 RBX: ffff888031be2e50 RCX: 1ffffffff20c4191 [ 135.813299][ C3] RDX: 0000000000000000 RSI: ffffffff8b6ceca0 RDI: ffffffff8bd35540 [ 135.817693][ C3] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000001 [ 135.821866][ C3] R10: ffffffff90625017 R11: ffffffff818ba9ce R12: ffff888031be2454 [ 135.827853][ C3] R13: ffff888031be2e50 R14: ffff888031be2440 R15: ffffc90003707be8 [ 135.835141][ C3] ? select_task_rq_fair+0x36e/0x44f0 [ 135.840451][ C3] try_to_wake_up+0x949/0x1490 [ 135.844244][ C3] ? __pfx_try_to_wake_up+0x10/0x10 [ 135.847831][ C3] ? __pfx_lock_release+0x10/0x10 [ 135.851026][ C3] ? plist_check_head+0xa3/0x150 [ 135.854031][ C3] wake_up_q+0x9c/0x160 [ 135.857900][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 135.861697][ C3] futex_wake+0x43e/0x4e0 [ 135.864045][ C3] ? __pfx_futex_wake+0x10/0x10 [ 135.866563][ C3] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 135.870376][ C3] ? __x64_sys_futex+0x3a9/0x4c0 [ 135.875086][ C3] do_futex+0x1e5/0x350 [ 135.877406][ C3] ? __pfx_do_futex+0x10/0x10 [ 135.880374][ C3] ? ktime_get+0x200/0x310 [ 135.882851][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.885492][ C3] ? read_tsc+0x9/0x20 [ 135.888127][ C3] __x64_sys_futex+0x1e1/0x4c0 [ 135.891324][ C3] ? __pfx___x64_sys_futex+0x10/0x10 [ 135.894593][ C3] do_syscall_64+0xcd/0x250 [ 135.897372][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.900712][ C3] RIP: 0033:0x7f0facf8d0a9 [ 135.903282][ C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.914960][ C3] RSP: 002b:00007fffb5af67e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.919307][ C3] RAX: ffffffffffffffda RBX: 00007f0fad1a6088 RCX: 00007f0facf8d0a9 [ 135.923530][ C3] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0fad1a6088 [ 135.929637][ C3] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000008b5af6adf [ 135.934928][ C3] R10: 00007f0fad1a5fa0 R11: 0000000000000246 R12: 00007f0fad1a608c [ 135.939329][ C3] R13: 00007f0fad1a6080 R14: 0000000000000fd1 R15: 0000000000000005 [ 135.943687][ C3] [ 135.945352][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.949218][ C3] CPU: 3 UID: 0 PID: 10647 Comm: syz.0.1293 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 135.955992][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.961237][ C3] Call Trace: [ 135.963043][ C3] [ 135.964892][ C3] dump_stack_lvl+0x3d/0x1f0 [ 135.968064][ C3] panic+0x71d/0x800 [ 135.971390][ C3] ? __pfx_panic+0x10/0x10 [ 135.974712][ C3] ? show_trace_log_lvl+0x29d/0x3d0 [ 135.977735][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 135.980400][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 135.984264][ C3] check_panic_on_warn+0xab/0xb0 [ 135.987890][ C3] __warn+0xf6/0x3c0 [ 135.990663][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.993733][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 135.996632][ C3] report_bug+0x3c0/0x580 [ 135.998722][ C3] handle_bug+0x54/0xa0 [ 136.000803][ C3] exc_invalid_op+0x17/0x50 [ 136.003243][ C3] asm_exc_invalid_op+0x1a/0x20 [ 136.005924][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 136.009923][ C3] Code: ff 89 de e8 98 4e f5 fc 84 db 0f 85 66 ff ff ff e8 eb 53 f5 fc c6 05 a7 54 86 0b 01 90 48 c7 c7 40 02 d3 8b e8 87 85 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 c8 53 f5 fc 0f b6 1d 82 54 86 0b 31 [ 136.021576][ C3] RSP: 0018:ffffc90000708d90 EFLAGS: 00010082 [ 136.024747][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a1229 [ 136.028672][ C3] RDX: ffff888028092440 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 136.032761][ C3] RBP: ffff888032087a98 R08: 0000000000000001 R09: 0000000000000000 [ 136.036478][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888032087a98 [ 136.040750][ C3] R13: ffff88805f01d400 R14: 0000000000000015 R15: 0000000000000000 [ 136.045637][ C3] ? __warn_printk+0x199/0x350 [ 136.048051][ C3] ? __warn_printk+0x1a6/0x350 [ 136.050691][ C3] p9_req_put+0x1ec/0x250 [ 136.052793][ C3] req_done+0x1e7/0x2f0 [ 136.054979][ C3] ? __pfx_req_done+0x10/0x10 [ 136.057554][ C3] ? __pfx_req_done+0x10/0x10 [ 136.059971][ C3] vring_interrupt+0x31b/0x400 [ 136.062325][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 136.064984][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 136.067675][ C3] handle_irq_event+0xab/0x1e0 [ 136.070306][ C3] handle_edge_irq+0x263/0xd10 [ 136.072941][ C3] __common_interrupt+0xdf/0x250 [ 136.076193][ C3] common_interrupt+0xba/0xe0 [ 136.078927][ C3] [ 136.080507][ C3] [ 136.082069][ C3] asm_common_interrupt+0x26/0x40 [ 136.084743][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 136.088718][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 f9 3c f6 48 89 df e8 fe 78 3d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 4f 2e f6 65 8b 05 a6 33 aa 74 85 c0 74 16 5b [ 136.099345][ C3] RSP: 0018:ffffc90003707b88 EFLAGS: 00000246 [ 136.102346][ C3] RAX: 0000000000000006 RBX: ffff888031be2e50 RCX: 1ffffffff20c4191 [ 136.107000][ C3] RDX: 0000000000000000 RSI: ffffffff8b6ceca0 RDI: ffffffff8bd35540 [ 136.111745][ C3] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000001 [ 136.115781][ C3] R10: ffffffff90625017 R11: ffffffff818ba9ce R12: ffff888031be2454 [ 136.120149][ C3] R13: ffff888031be2e50 R14: ffff888031be2440 R15: ffffc90003707be8 [ 136.124233][ C3] ? select_task_rq_fair+0x36e/0x44f0 [ 136.127378][ C3] try_to_wake_up+0x949/0x1490 [ 136.132180][ C3] ? __pfx_try_to_wake_up+0x10/0x10 [ 136.135000][ C3] ? __pfx_lock_release+0x10/0x10 [ 136.137469][ C3] ? plist_check_head+0xa3/0x150 [ 136.140155][ C3] wake_up_q+0x9c/0x160 [ 136.142160][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 136.145211][ C3] futex_wake+0x43e/0x4e0 [ 136.148497][ C3] ? __pfx_futex_wake+0x10/0x10 [ 136.151718][ C3] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 136.155802][ C3] ? __x64_sys_futex+0x3a9/0x4c0 [ 136.158232][ C3] do_futex+0x1e5/0x350 [ 136.160339][ C3] ? __pfx_do_futex+0x10/0x10 [ 136.162580][ C3] ? ktime_get+0x200/0x310 [ 136.165378][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.168742][ C3] ? read_tsc+0x9/0x20 [ 136.170978][ C3] __x64_sys_futex+0x1e1/0x4c0 [ 136.173092][ C3] ? __pfx___x64_sys_futex+0x10/0x10 [ 136.175957][ C3] do_syscall_64+0xcd/0x250 [ 136.177720][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.190332][ C3] RIP: 0033:0x7f0facf8d0a9 [ 136.192484][ C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.210952][ C3] RSP: 002b:00007fffb5af67e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 136.216257][ C3] RAX: ffffffffffffffda RBX: 00007f0fad1a6088 RCX: 00007f0facf8d0a9 [ 136.221118][ C3] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0fad1a6088 [ 136.232677][ C3] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000008b5af6adf [ 136.236497][ C3] R10: 00007f0fad1a5fa0 R11: 0000000000000246 R12: 00007f0fad1a608c [ 136.248106][ C3] R13: 00007f0fad1a6080 R14: 0000000000000fd1 R15: 0000000000000005 [ 136.251142][ C3] [ 136.262485][ C3] Kernel Offset: disabled [ 136.264842][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:21:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81adea47 RDX=0000000000000001 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000611f728 RSP=ffffc9000611f658 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=1ffff92000c23ed0 R13=0000000000000000 R14=0000000000000001 R15=ffff88806a93fbc0 RIP=ffffffff81b9d9ea RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3c38da2440 CR3=0000000065abc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcc0ff80 Opmask01=0000000004000004 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001d00000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f076520f257 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f076520f24f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f076520f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f076520f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f076520f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f076520f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f076520f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f076520f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000305f6576616c 735f656764697262 00007ffd9de49a00 00007ffdffffffff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003ff 00007ffd9de499d0 0000000000000000 0030656764697262 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000063 RCX=ffffffff8203d487 RDX=ffff888032b80000 RSI=ffffffff8203d497 RDI=0000000000000004 RBP=ffff88804da86518 RSP=ffffc90003367840 R8 =0000000000000004 R9 =00000000000001c0 R10=0000000000000063 R11=0000000000000003 R12=0000000000000063 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81b9df46 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd8f2ad7d60 CR3=000000002f72a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd8f1f7c6a3 00007fd8f1f7c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff877bebc0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558a02b6ab 000055558a02b4e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558a035668 000055558a035300 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080003d0031f ffffffffffff0403 c00300080003b803 00080003b0031fff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102a81000028004 0a1000060102de00 080004a003000800 0498032008000490 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 031fffffffffffff 040480031fffffff ffffff0403f00300 080003e803000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03e00300080003d8 0300080003d0031f ffffffffffff0403 c00300080003b803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080003b0031fff ffffffffff0403a0 0300080003980301 08000390032c0800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000e6795 RBX=0000000000000002 RCX=ffffffff8b572469 RDX=0000000000000000 RSI=ffffffff8b6ceca0 RDI=ffffffff8bd35540 RBP=ffffed1003ad3000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d698000 R14=ffffffff90625010 R15=0000000000000000 RIP=ffffffff8b57384f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4d423f3440 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000084000 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff497e390 0000003000000008 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff497e390 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6230636163386139 65672d3639303030 2d72656c6c616b7a 79732d3363722d30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726f20656c6966 2068637573206f4e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079726f74636572 696420726f20656c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85407215 RDI=ffffffff9ab80740 RBP=ffffffff9ab80700 RSP=ffffc900007086f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ab80700 R15=0000000000000000 RIP=ffffffff8540723f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557bbe8500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0faadf6d58 CR3=0000000023e28000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656863616373663d 65686361632c796e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fad00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00040009000a0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000