last executing test programs: 1m6.827311954s ago: executing program 2 (id=28): r0 = socket(0x1f, 0x803, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x1, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x4, r1, 0x2}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f00000001c0)="a5069fa011c71d2b19a5b0c7dfb715abe8d8bc83377fe6a1ba9493fee61da774d80800e898cd9833cba91789b2", &(0x7f0000001380)=@udp=r2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r2, &(0x7f0000000880)={0x0, 0xfffffec0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x2) sendmmsg$unix(r2, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) getpeername$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x5, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0xfb, 0x9, 0xc, 0x0, 0x0, 0xfc}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SCSI_IOCTL_START_UNIT(r7, 0x5) ioctl$SG_SET_DEBUG(r7, 0x227e, &(0x7f0000000040)=0x1) ioctl$CEC_G_MODE(r7, 0x80046108, &(0x7f0000000240)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, r1, 0x25, 0x8, @val=@netfilter={0x3, 0x0, 0x50}}, 0x31) 1m5.961275185s ago: executing program 2 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000440)=0x4, 0x3) (async) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xb81, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) poll(&(0x7f0000000000)=[{r1, 0x20}], 0x1, 0x9) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) (async) io_uring_enter(r1, 0x6e2, 0x620, 0x1, 0x0, 0x0) (async) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x2, &(0x7f0000000200)='devpts\x00') 1m5.907807608s ago: executing program 2 (id=49): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = msgget$private(0x0, 0x10) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f00000002c0)=""/197) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x4480) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r3 = semget$private(0x0, 0x4000000009, 0x208) semop(r3, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semctl$SETALL(r3, 0x0, 0x11, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f00000003c0)=""/243) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000004c0)=""/27) io_uring_setup(0x5632, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x7, 0x20002f7}) 1m5.797931905s ago: executing program 2 (id=51): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000140)={0x0, "fc51620330dfc4536d7ae0257e5d07b15b112f495e1eb3291759e4e4ade8d52cb7d906f4da6e117989740a458a317c56f10755875efe7939ad7a23a8fd263c0885ebeae5910fc386bf61e776b00c983ed01bf9542b28ce546ebc56a05564b5705bbc884d64fbad597225093ce604ffa41783a9bc50e2c366938794f0fdd8da658784ecfac1ab9e7c2f6b8caaa11f3a1b799c9f227c57e07f4673f3119e1925b350b6e76ae1b001263a91e5f9b06ab664c976fbb11157382406f3793c2484c16989530b8becd66799e0376ca198a954ad29742c38af6af66da6da49ce52b07bb16508dabcdd5caa352d8dca7d6767a468ac1768dcc6cf4b91ba5f372bc32bce85"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) close(0x3) io_setup(0x2e, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfe, 0x4}]) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x11, r3) capset(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000280)={0x3, 0x40, 0x3, 0x5, 0x1, 0xff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x80, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m5.744689067s ago: executing program 2 (id=52): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1c0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], &(0x7f0000000040)='GPL\x00', 0x200, 0x1000, &(0x7f0000001140)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r9], 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1m5.457831568s ago: executing program 2 (id=54): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000b, 0x2) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x10000004000, 0x1) ioctl$BLKTRACESTOP(r5, 0x2279, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) 1m5.410928368s ago: executing program 32 (id=54): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000b, 0x2) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x10000004000, 0x1) ioctl$BLKTRACESTOP(r5, 0x2279, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="f210040fbc756187424138312bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) 19.776219564s ago: executing program 0 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) r4 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x4, r3}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x4, r3}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x40800, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, 0x0, &(0x7f0000000340)={'U-', 0x93}, 0x16, 0x0) 19.219145318s ago: executing program 0 (id=625): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x2}], 0x1, 0x9f) socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="10d40000b1eb502a200012800b00010067656e65766500001000028004000e"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7, 0xff, 0x1, 0x4}, {0x7ff, 0x8, 0x3, 0x8}, {0xc000, 0x4, 0x9, 0x81}, {0xc80, 0x3, 0x3, 0x4}]}) 19.00011074s ago: executing program 0 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @bcast}, 0x1c) 18.93023985s ago: executing program 0 (id=633): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_open_dev$sndpcmp(0x0, 0x6, 0x1000) socket(0x11, 0x2, 0xb7f) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000001d00)={0x0, 0x2, r0, 0x2, 0x80000}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x4, 0x2}, 0x10) close(r2) syz_emit_vhci(&(0x7f0000001d40)=ANY=[@ANYBLOB="02c82019001500010007030400ff0f09000109020000000e09f0ff050069"], 0x1e) 18.929412264s ago: executing program 0 (id=635): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xa) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00220f0000005ef838135b63dcbd83"], 0x0}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000002c0)={0x3, 0x6, 0x78, &(0x7f0000000100)=""/120}) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x6, 0x0) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x4, 0x30, 0x0, 0x0, 0x62, 0x0, 0x0, 0x38, 0x65, 0x0, 0x64, 0x35, 0x0, 0x64, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r6) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = geteuid() r11 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r11, 0x80044100, &(0x7f0000000280)={0x0, [[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb], [0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0x4}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x80}]}) mount$pvfs2(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x81000, &(0x7f0000000400)={[{'E*'}, {'\''}, {'qyz'}, {',[\x8a-'}, {'\x00'}, {'/dev/sg#\x00'}, {'-++$)A\x9b\x04\x00\x00\x00\x00\x00\x00\x00\n\x01\x00\x00\x00\x00\x00\x00\x00R\xcel\xd1g\xbf\xea)k\x92\xd9\xaak.\x02\x18\x9d\xacA\x92\xe7w\xd9\xdc\x10\xe5\x03\xda\xaa\xdb%\vl]7\x85\x1e3\xcftp\xc9\x9e\xd5U\x89\x8f\xe19k\xba\xf7\v\xf8>\x9e\xbd\x88\xe7+\xd0\xf5\xdc8\xb7\x19(\xb5\x93\xe7I\xf2QU{m\xe9\xafp\x94 \x8d\xc6\xbc\xed\xdf?\x93\xcem'}, {'\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x10\x00\x00\x00'}, {'/dev/usb/hiddev#\x00'}, {'-%'}], [{@audit}, {@smackfsroot={'smackfsroot', 0x3d, 'logon\x00'}}, {@subj_type={'subj_type', 0x3d, 'r\xa6\x9fJ\xa92\xff\x19\xe4a\x93\xc9\xa0\xf8\x8fS{c\xa2\x1d\xe2\xc4Jf\x0e\xde\xb6eLgW\xc49\f\xf8\xb4N\x906\xcd\xcc\x1cP\t\x8b\xb2\x9b\xa0\xd0\x0e\xef\x96\xcb\x00\x8d\x9c\xb5\x92\x91h\x7f\x7f\xe2\xd9\xf7n\b\xfb\xf7\xaa\xeaZ\xdd}h_\xdf\x902\xb8\xe8\tA\xca\xa9a2\xd4f\xce\a\x91}\x03\x94*t9\xc8\b\xf0dz\xd2\xcb\xca4L\xf7\xb9\x16S\xbb.@\x0eW\xf1\x92\xe31C\xeb)}\xdbd\xe3\xdb%\xdd\x18\xf8@W\xd1\x80f8k\x92)\xbb\x9e&\x91\xdd\x97/)\x0e\xe0Rm?\xe8\x80\xa7K\xcc\xd1\xa0\xda\x02\xdd\x1d\xed~@Y\xa5Wh1g\xa3\xd7\xe5{\x15Yv\xea\x13\xf5\xbc\xab*\xfeL\xbc0\x84$m\x1d\x92\x99O\n8r\x89\xdc\x11\xebf\xbflDu\xdeZ\x1c\xfa\xa6\xd8\xbf:\xda\x03\x05\xc4(\xce\xfc\xbcw\x1cl\xbc\xab<\xeb\x92-C\xc5\x13\xb6\x9a'}}, {@uid_gt={'uid>', r10}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@euid_lt={'euid<', r10}}, {@permit_directio}]}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000040)="e766c5404c88504675c791c36d8c5694", 0x10) close(0x3) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000640)={'veth0_to_hsr\x00', {0x2, 0x4e20, @local}}) keyctl$KEYCTL_MOVE(0x1e, r7, r6, 0x0, 0x0) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f00000000c0)={0x1, 0x200, 0x0, 0x2, 0x1, 0x775d}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="2ff8a81b133d", 0x0, 0x0, 0x10060, 0x0, 0x0}) 17.176020278s ago: executing program 0 (id=649): ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x6, [0x163, 0x0, 0x4, 0x1df, 0xffffffffffffff81, 0x4]}) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) (async) r1 = getpid() (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"db71d0011f95165faa05b0a64705876656b309661135d4394170bb5279ce40cb", 0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60) kcmp(r0, r1, 0x3, r2, r3) (async) move_pages(r0, 0x4, &(0x7f0000000180)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ff6000/0x2000)=nil], &(0x7f00000001c0)=[0x6, 0xff, 0xc6d5], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r4 = memfd_create(&(0x7f0000000240)=')-:$\x00', 0x1) (async, rerun: 64) move_pages(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000ff9000/0x4000)=nil], &(0x7f00000002c0)=[0x8, 0x1, 0xa793], &(0x7f0000000300)=[0x0], 0x2) (async, rerun: 64) r5 = syz_open_dev$evdev(&(0x7f0000000340), 0xfffffffffffffffd, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000380)=[0x2, 0x730]) (async) fallocate(r2, 0x18, 0x7, 0x1) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x1a028397, 0x5, {r0}, {0xee00}, 0x6, 0x6}) move_pages(r6, 0x6, &(0x7f0000000400)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000440)=[0x9, 0x5, 0x40f, 0xa], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x2) (async) fsetxattr$security_selinux(r4, &(0x7f00000004c0), &(0x7f0000000500)='system_u:object_r:hald_cache_t:s0\x00', 0x22, 0x3) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f0000000540)) (async, rerun: 64) r8 = syz_io_uring_setup(0x1772, &(0x7f00000005c0)={0x0, 0xa6d0, 0xbfc7d8c363bb9422, 0x0, 0x357}, &(0x7f0000000640), &(0x7f0000000680)) (rerun: 64) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f00000006c0)=[0x3, 0x1000], 0x2) (async) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000740)='\\\x00']}, &(0x7f0000000900)={[&(0x7f00000007c0)='\\{@\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='security.selinux\x00', &(0x7f0000000880)='security.selinux\x00', &(0x7f00000008c0)='/dev/input/event#\x00']}) (async) r9 = syz_io_uring_setup(0x1f33, &(0x7f0000000940)={0x0, 0x537f, 0x200, 0x2, 0x10d}, &(0x7f00000009c0), &(0x7f0000000a00)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f0000000a40)=[0x8, 0x5], 0x2) (async, rerun: 64) r10 = accept4(r3, &(0x7f0000000a80)=@ax25={{0x3, @netrom}, [@rose, @bcast, @default, @netrom, @bcast, @bcast, @null, @netrom]}, &(0x7f0000000b00)=0x80, 0x80000) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r4, &(0x7f0000002b80)={0x18, 0x0, r11, {0x9}}, 0x18) (async) getsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000002bc0)={@initdev, 0x0}, &(0x7f0000002c00)=0x14) sendmsg$can_raw(r10, &(0x7f0000002d40)={&(0x7f0000002c40)={0x1d, r12}, 0x10, &(0x7f0000002d00)={&(0x7f0000002c80)=@canfd={{0x0, 0x1}, 0x1c, 0x0, 0x0, 0x0, "f84cf3a2be68ebf8812104480b1b23cda29a8c8be4338dd0377e12a35594ea68859a49f6da8ec2b171ea167df2e9fc815ba873a4ef34d398e399025c4f728e76"}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) (async) r13 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002d80)='/dev/bsg/0:0:0:0\x00', 0x181, 0x0) pread64(r13, &(0x7f0000002dc0)=""/18, 0x12, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000002fc0)={'gretap0\x00', &(0x7f0000002f00)={'gre0\x00', 0x0, 0x7800, 0x700, 0x1ff, 0x4, {{0x24, 0x4, 0x1, 0x3b, 0x90, 0x67, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0xb, 0x0}, @private=0xa010102, {[@timestamp={0x44, 0xc, 0xb2, 0x0, 0x4, [0xffffffc0, 0x5]}, @generic={0x88, 0xc, "2fad3754d7fd6a0a1771"}, @lsrr={0x83, 0x17, 0xdf, [@broadcast, @broadcast, @multicast2, @remote, @empty]}, @rr={0x7, 0x23, 0x80, [@loopback, @loopback, @rand_addr=0x64010101, @multicast2, @private=0xa010102, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x6d, 0x3, 0x0, [{@broadcast, 0x5}]}, @ssrr={0x89, 0x7, 0x71, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x17, 0x3b, [@local, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @broadcast]}]}}}}}) 1.950413904s ago: executing program 4 (id=831): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.828334946s ago: executing program 4 (id=833): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/149, 0x95}, {&(0x7f0000000340)=""/134, 0x86}, {0x0}], 0x3) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/231, 0xe7}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000005480)={0x0, 'syz1\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000f40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001340)={0x11, 0x6, {0x8, @usage=0x3a, r2, 0x8, 0xb, 0x0, 0x5, 0x9, 0x4ca, @usage=0x3, 0x5, 0x1, [0x8, 0x5a2, 0xb, 0x1, 0xfffffffffffffff7, 0x5]}, {0x80000001, @struct={0x7fffffff, 0x2}, 0x0, 0x1, 0x5, 0x5, 0x8, 0x9, 0x81, @struct={0xc9a, 0x7524}, 0x10, 0x2, [0x1, 0x1, 0x8, 0x7, 0x80000001, 0x5]}, {0x7, @struct={0xf3, 0x5}, r3, 0x4, 0x5853, 0x7f, 0x862e, 0xffffffffffffb612, 0x30, @struct={0x5, 0x6}, 0x0, 0x3, [0xeb, 0x2c2, 0x6, 0x7, 0x12b3, 0x7fffffffffffffff]}, {0xffffffffffffa092, 0x3, 0x100000000}}) 1.683775022s ago: executing program 1 (id=835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r2, 0x4, 0x7c00) dup3(r3, r2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r4, r0, r0, r1, r0, r1, r0], 0x7) madvise(&(0x7f00001d6000/0x1000)=nil, 0x1000, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async) pipe2(&(0x7f0000000080), 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) (async) fcntl$setstatus(r2, 0x4, 0x7c00) (async) dup3(r3, r2, 0x0) (async) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r4, r0, r0, r1, r0, r1, r0], 0x7) (async) madvise(&(0x7f00001d6000/0x1000)=nil, 0x1000, 0x17) (async) 1.443901366s ago: executing program 1 (id=836): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r1, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6}, @val={0x8}, @val={0xc, 0x99, {0xd, 0x5f}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c19d3d5e8aa3f57414d332bec378dcfcc92a6bb84c6365be"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040}, 0x20000040) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000200)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d1}, 0x8040) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000380)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000002540)=0x0) lstat(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() read$FUSE(r0, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f00000049c0)='./file0\x00', &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() r10 = getegid() r11 = getuid() stat(&(0x7f0000004c00)='./file0\x00', &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000004dc0)='./file0\x00', &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) syz_fuse_handle_req(r0, &(0x7f00000003c0)="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", 0x2000, &(0x7f0000004fc0)={&(0x7f00000023c0)={0x50, 0xfffffffffffffff5, 0x3, {0x7, 0x2b, 0x9, 0x8c040008, 0x2, 0x8, 0x53, 0xfffffe01, 0x0, 0x0, 0x40, 0xfffffffa}}, &(0x7f0000002440)={0x18, 0x0, 0x9, {0x139}}, &(0x7f0000002480)={0x18, 0x0, 0x4, {0x5}}, &(0x7f00000024c0)={0x18, 0x0, 0xcb1a, {0x48}}, &(0x7f0000002500)={0x18, 0x0, 0x1, {0xb}}, &(0x7f0000002580)={0x28, 0x0, 0x80000000, {{0x5, 0x10000, 0x2, r4}}}, &(0x7f00000025c0)={0x60, 0x0, 0x1ff, {{0x100000000, 0x8000000000000001, 0x5f4, 0x6, 0x7, 0x637, 0x0, 0x1}}}, &(0x7f0000002640)={0x18, 0xffffffffffffffda, 0x8, {0xfb}}, &(0x7f0000002680)={0x18, 0xfffffffffffffffe, 0x2, {'geneve0\x00'}}, &(0x7f00000026c0)={0x20, 0x0, 0x10, {0x0, 0x2}}, &(0x7f00000027c0)={0x78, 0x0, 0x6, {0x8eb, 0x1ff, 0x0, {0x6, 0x3, 0xffffffff00000000, 0x9, 0x1, 0x1a91d237, 0x8, 0x7, 0x7, 0x8000, 0x8, r5, 0xee00, 0x8, 0x6}}}, &(0x7f0000004880)={0x90, 0xfffffffffffffffe, 0x9, {0x2, 0x3, 0x6, 0x0, 0xffff, 0x80000001, {0x5, 0x4, 0x7, 0x0, 0xc, 0x80000000, 0x4, 0x1, 0x4e2, 0x4000, 0xfffffffd, r6, r7, 0x4, 0x3}}}, &(0x7f0000004940)={0x50, 0x0, 0x7ff, [{0x0, 0x200, 0x4, 0x9, '@,{@'}, {0x0, 0x0, 0x8, 0x7, 'nl80211\x00'}]}, &(0x7f0000004a80)={0x150, 0x0, 0x7, [{{0x4, 0x1, 0x4, 0x4, 0x4, 0x40, {0x6, 0xfffffffffffffffb, 0x6, 0xcc, 0xfffffffffffffffd, 0x1, 0x5, 0x1, 0xffffffff, 0x8000, 0xd51, r8, 0xffffffffffffffff, 0x8}}, {0x0, 0xffffffffffffffff, 0x1, 0xff, '/'}}, {{0x5, 0x2, 0x2, 0x4, 0x1, 0xed3, {0x2, 0x4, 0x7, 0x3, 0x2, 0x4, 0x1, 0x0, 0x5, 0x4000, 0x9, r9, r10, 0x1, 0x6}}, {0x1, 0xffffffff, 0x8, 0x3, 'nl80211\x00'}}]}, &(0x7f0000004cc0)={0xa0, 0xffffffffffffffda, 0x8, {{0x5, 0x2, 0x7ff000000000, 0x8a3, 0x8, 0x0, {0x2, 0xffff, 0x5, 0xff, 0xf4, 0x5, 0x6, 0x38, 0x804, 0x6000, 0x80000001, r11, r12, 0x1, 0x8}}, {0x0, 0x6}}}, &(0x7f0000004d80)={0x20, 0x0, 0x5, {0x2f1fe95, 0x0, 0x43, 0x80}}, &(0x7f0000004e80)={0x130, 0xfffffffffffffff5, 0xb, {0x6, 0x65e, 0x0, '\x00', {0x1000, 0x10, 0x8, 0x3, r13, 0x0, 0xa000, '\x00', 0x8, 0x5, 0xc7, 0xaa, {0xe, 0x9}, {0x40, 0x1b}, {0xe1, 0x9}, {0x9, 0x2}, 0x4, 0x7, 0x33b, 0x8001}}}}) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000005080)={0x0, 0x39b}, 0x8) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000050c0)=0x7, 0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000005100)={0x0, 0x9}, &(0x7f0000005140)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000005180)={r14, 0x38, "9858e17c5cc7216dc640070a932efc6944ce01ef50f915a355a43dc6ad64d6406fa7c40e140147027dbc75b8e5c47e841ccd5374eb5c88a6"}, &(0x7f00000051c0)=0x40) fgetxattr(r0, &(0x7f0000005200)=@random={'system.', '&:*i/\x00'}, &(0x7f0000005240)=""/4096, 0x1000) setsockopt(r2, 0x6, 0x80000000, &(0x7f0000006240)="50dbddc7409e3663c069d17fd7c03c253058c72c0d3a636de0bc48a8424ed9a2ed6a062158039cc6d0fabb34b3c9cfcf9a76a1a2053a06103dc0bb1a67b4d8d506bdb6947a300341e22bbfc1bb5d3c2bf40b1cf00732a4fca3ffe6452b52f75dcbd45bd7eff8af4b61b98be3767592fdeed9b2435a345200b0261451904cbeeb61d65012e40ef5814b69ee99000a3a7a07ddf1b47df8308601b24aec3dc694432b6a9d846a4376eecf16197acde23ecc8e3cdef5a4a7dc55f01f50298f2cd5beab35fe3392addb6e", 0xc8) sendmsg$nl_route(r0, &(0x7f0000006400)={&(0x7f0000006340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006380)=@getaddr={0x14, 0x16, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000006440)={{{@in6=@empty, @in6=@empty, 0x4e24, 0x9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x21, 0x0, r11}, {0x174, 0x8000, 0x5, 0x8, 0x1, 0x2, 0x100000000, 0x2}, {0x400, 0x6, 0x4, 0x4}, 0x7, 0x6e6bb0, 0x0, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x32}, 0xa, @in=@private=0xa010102, 0x0, 0x4, 0x2, 0x1, 0x10001, 0xb, 0x5}}, 0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000006800)={0xffffffffffffffff, 0xe0, &(0x7f0000006700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000006540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000006580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000065c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000006600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000006640), &(0x7f0000006680), 0x8, 0x95, 0x8, 0x8, &(0x7f00000066c0)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000006840)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', r15, r0, 0x1}, 0x50) 1.442682946s ago: executing program 1 (id=837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x8001, 0x2, 0x4, 0x0, 0xd, 0xcc7, 0x10001, 0x800004, 0xa, 0xff, 0x2, 0x5, 0x8, 0x1100004, 0x1, 0xfffff543, 0x8, 0x1a449, 0x43, 0x40000003, 0xc, 0x7fc, 0xf27, 0x6, 0x8007, 0x8, 0x5, 0x8, 0x8, 0x7, 0xc]}) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0x5}, {0x8}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x100440a0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0xf}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.335349629s ago: executing program 1 (id=838): syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c00660000070290780a010102ac1414aa110190780000000073e91fd6699c153ccd6ecece1282be8e8bf58020f2a32616126f80749e7005ec965d28865283099135a710fa365f64a52571a9aea245e0aa72581c262f2d4952cbb243d4705e23e12e19b119365b7f4cdb9ad2"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) modify_ldt$write(0x1, &(0x7f0000000000)={0x6, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x5, &(0x7f0000000280)=[{0xefe, 0x2, 0x0, 0x1800000}, {0x4654, 0x9, 0xd0, 0x6}, {0x5, 0x15, 0x4f, 0xff}, {0xd62, 0xa, 0x0, 0x5}, {0x3, 0x40, 0x3, 0xf}]}) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) (rerun: 32) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x7, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0)={r3}, 0x4) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000002600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "e9ff00", 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001640ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r5 = socket(0x400000000010, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xf}}) sendto$packet(r5, &(0x7f0000001480)="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", 0x1000, 0x4001, &(0x7f0000000180)={0x11, 0xf6, r2, 0x1, 0x8e, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async, rerun: 32) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f00000003c0)={'raw\x00', 0x8c, "7680d5175132e813d6fbc5e8001ac20c341a75e82b76ba6a5f769737f5b5fc103a4ea450fd90221b81f7ce1716dbb3b4dd12f1b957a1592236100528eb3c77a4cf952e38dd85b4e67d20b1fca62349dcddb84a9e4f424c8a001ad3ef68d416b352e5adb95a4479587681cc1774b65ef37411635fcce137c6074f3385a169d0f072ca58fbeba452057d342a21"}, &(0x7f0000000040)=0xb0) (rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0xffc3, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000fc0)=@ethtool_ringparam={0x10, 0x403, 0xfffffffa, 0x8, 0xb, 0x3, 0x5, 0x0, 0x1}}) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000500)={0x1, @pix_mp={0x3, 0x8, 0x59455247, 0x4, 0xa, [{0x10000, 0x3}, {0x52, 0x3}, {0x2, 0xfffffffd}, {0xf}, {0xc, 0x9}, {0x6501a14a, 0x6}, {0xffff, 0x3}, {0x101, 0x7}], 0x9, 0x3, 0x2, 0x1, 0x7}}) 1.335118858s ago: executing program 1 (id=839): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000196fa68bc7f63345adfa060000000000674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000010a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000008000000000000000000000000000000000900000000000000010000000000008003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b76b6e000001000000000000"], 0xb8}}, 0xc000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000140)={&(0x7f0000010000/0x4000)=nil}) lseek(r1, 0xfffffffffffffffe, 0x1) close(r0) 1.240275249s ago: executing program 1 (id=840): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/57, 0x39}, {&(0x7f00000000c0)=""/88, 0x58}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/15, 0xf}, {&(0x7f0000000540)=""/143, 0x8f}], 0xa, &(0x7f00000006c0)=""/76, 0x4c}, 0x5a7}, {{&(0x7f0000000740)=@phonet, 0x80, &(0x7f0000001980)=[{&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000880)=""/41, 0x29}, {&(0x7f00000008c0)=""/42, 0x2a}, {&(0x7f0000000900)=""/92, 0x5c}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x5, &(0x7f0000001a00)=""/47, 0x2f}, 0x7}, {{&(0x7f0000001a40)=@vsock, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001ac0)=""/34, 0x22}, {&(0x7f0000001b00)=""/53, 0x35}, {&(0x7f0000001b40)=""/79, 0x4f}, {&(0x7f0000001bc0)=""/140, 0x8c}, {&(0x7f0000001c80)=""/89, 0x59}, {&(0x7f0000001d00)=""/4096, 0x1000}], 0x6, &(0x7f0000002d80)=""/125, 0x7d}, 0xa}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002e00)=""/37, 0x25}, {&(0x7f0000002e40)=""/59, 0x3b}, {&(0x7f0000002e80)=""/162, 0xa2}, {&(0x7f0000002f40)=""/228, 0xe4}, {&(0x7f0000003040)=""/104, 0x68}, {&(0x7f00000030c0)=""/61, 0x3d}, {&(0x7f0000003100)=""/66, 0x42}, {&(0x7f0000003180)=""/9, 0x9}], 0x8, &(0x7f0000003240)=""/140, 0x8c}, 0x7ff}, {{&(0x7f0000003300)=@nl=@proc, 0x80, &(0x7f0000003740)=[{&(0x7f0000003380)=""/138, 0x8a}, {&(0x7f0000003440)=""/23, 0x17}, {&(0x7f0000003480)=""/242, 0xf2}, {&(0x7f0000003580)=""/180, 0xb4}, {&(0x7f0000003640)=""/227, 0xe3}], 0x5, &(0x7f00000037c0)=""/2, 0x2}, 0x2}], 0x5, 0x40001025, &(0x7f0000003940)={0x0, 0x3938700}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x72) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x0) 1.154488914s ago: executing program 33 (id=649): ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x6, [0x163, 0x0, 0x4, 0x1df, 0xffffffffffffff81, 0x4]}) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) (async) r1 = getpid() (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"db71d0011f95165faa05b0a64705876656b309661135d4394170bb5279ce40cb", 0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60) kcmp(r0, r1, 0x3, r2, r3) (async) move_pages(r0, 0x4, &(0x7f0000000180)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ff6000/0x2000)=nil], &(0x7f00000001c0)=[0x6, 0xff, 0xc6d5], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r4 = memfd_create(&(0x7f0000000240)=')-:$\x00', 0x1) (async, rerun: 64) move_pages(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000ff9000/0x4000)=nil], &(0x7f00000002c0)=[0x8, 0x1, 0xa793], &(0x7f0000000300)=[0x0], 0x2) (async, rerun: 64) r5 = syz_open_dev$evdev(&(0x7f0000000340), 0xfffffffffffffffd, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000380)=[0x2, 0x730]) (async) fallocate(r2, 0x18, 0x7, 0x1) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x1a028397, 0x5, {r0}, {0xee00}, 0x6, 0x6}) move_pages(r6, 0x6, &(0x7f0000000400)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000440)=[0x9, 0x5, 0x40f, 0xa], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x2) (async) fsetxattr$security_selinux(r4, &(0x7f00000004c0), &(0x7f0000000500)='system_u:object_r:hald_cache_t:s0\x00', 0x22, 0x3) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f0000000540)) (async, rerun: 64) r8 = syz_io_uring_setup(0x1772, &(0x7f00000005c0)={0x0, 0xa6d0, 0xbfc7d8c363bb9422, 0x0, 0x357}, &(0x7f0000000640), &(0x7f0000000680)) (rerun: 64) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f00000006c0)=[0x3, 0x1000], 0x2) (async) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000740)='\\\x00']}, &(0x7f0000000900)={[&(0x7f00000007c0)='\\{@\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='security.selinux\x00', &(0x7f0000000880)='security.selinux\x00', &(0x7f00000008c0)='/dev/input/event#\x00']}) (async) r9 = syz_io_uring_setup(0x1f33, &(0x7f0000000940)={0x0, 0x537f, 0x200, 0x2, 0x10d}, &(0x7f00000009c0), &(0x7f0000000a00)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f0000000a40)=[0x8, 0x5], 0x2) (async, rerun: 64) r10 = accept4(r3, &(0x7f0000000a80)=@ax25={{0x3, @netrom}, [@rose, @bcast, @default, @netrom, @bcast, @bcast, @null, @netrom]}, &(0x7f0000000b00)=0x80, 0x80000) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r4, &(0x7f0000002b80)={0x18, 0x0, r11, {0x9}}, 0x18) (async) getsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000002bc0)={@initdev, 0x0}, &(0x7f0000002c00)=0x14) sendmsg$can_raw(r10, &(0x7f0000002d40)={&(0x7f0000002c40)={0x1d, r12}, 0x10, &(0x7f0000002d00)={&(0x7f0000002c80)=@canfd={{0x0, 0x1}, 0x1c, 0x0, 0x0, 0x0, "f84cf3a2be68ebf8812104480b1b23cda29a8c8be4338dd0377e12a35594ea68859a49f6da8ec2b171ea167df2e9fc815ba873a4ef34d398e399025c4f728e76"}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) (async) r13 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002d80)='/dev/bsg/0:0:0:0\x00', 0x181, 0x0) pread64(r13, &(0x7f0000002dc0)=""/18, 0x12, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000002fc0)={'gretap0\x00', &(0x7f0000002f00)={'gre0\x00', 0x0, 0x7800, 0x700, 0x1ff, 0x4, {{0x24, 0x4, 0x1, 0x3b, 0x90, 0x67, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0xb, 0x0}, @private=0xa010102, {[@timestamp={0x44, 0xc, 0xb2, 0x0, 0x4, [0xffffffc0, 0x5]}, @generic={0x88, 0xc, "2fad3754d7fd6a0a1771"}, @lsrr={0x83, 0x17, 0xdf, [@broadcast, @broadcast, @multicast2, @remote, @empty]}, @rr={0x7, 0x23, 0x80, [@loopback, @loopback, @rand_addr=0x64010101, @multicast2, @private=0xa010102, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x6d, 0x3, 0x0, [{@broadcast, 0x5}]}, @ssrr={0x89, 0x7, 0x71, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x17, 0x3b, [@local, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @broadcast]}]}}}}}) 1.003535209s ago: executing program 3 (id=845): r0 = socket(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (rerun: 64) fcntl$setstatus(r2, 0x4, 0x2400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r3, 0x8050640a, &(0x7f00000011c0)={0x0, 0x30000, 0x0, 0x82, 0xfffffe0c, 0x8, 0x20, 0x3, 0x1e0, 0x5, 0x40, 0x8001, 0x0, 0x0, 0x0}) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) (rerun: 32) 916.675441ms ago: executing program 3 (id=846): mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='nfs4\x00', 0x208000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) 915.037691ms ago: executing program 4 (id=847): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000911aa6bf004000000009000000000000000000000905000000070000e693a8d28d0ea7dbe9e8000000000e0100000000000000000000000000000d02000000000000000000000d00000000000000000000000200000000000000000000005f00"], 0x0, 0x61}, 0x20) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041305f8"], 0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8c100, 0x0) readahead(r3, 0x7, 0xfd76) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') rmdir(&(0x7f0000000140)='./file0\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x0, 0x0, 0x148, 0x1d0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x1b0, 0x1d0, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x2a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'veth0_virt_wifi\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) listen(r5, 0xfffffffc) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) 823.804214ms ago: executing program 3 (id=848): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0x12, 0x1, 0x15c1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x3, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28, 0x0, 0x1}, 0x20) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "30315be07b3d1cee0f1a117fbdeec3329037b9b8e6c681dc8eac25da10f27a47", "7efd27414f58889a465d7258bb318f7698a45c6dfcbedac24407b0e48b49b1a7", "787583f170175c961d218c79a6ed60a242369d3d4c9a32231f9a627581f599bb", "68f1b8696afe3855e825259d22f1828f5fec11b7668de8cf91630af3acdf3e7c", "7ed4de2376a9832f59cebfea5caa1742babb9a878cfdf5959438c02642dec8b8", "70efc203420f06debcb4f43b", 0xffff, 0x0, 0x4, 0x200, 0x7}}) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 765.360451ms ago: executing program 3 (id=849): r0 = dup(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) dup(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) (async) 598.834693ms ago: executing program 3 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xe8, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x70, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x4c, 0x1, 0x0, 0x1, [@nested={0x48, 0x10, 0x0, 0x1, [@nested={0x42, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb13"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 597.034852ms ago: executing program 3 (id=851): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000540)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1, 0x3a, '[', 0x3a, '-@', 0x3a, './file0', 0x3a, [0x4f, 0x9976defa49bbb28]}, 0x2c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="61050803cb3c4903048205060b0793cc26a2f70f6d0ffd08074a4669857db13bf6388d684dfa0bd0f28ee407451a8b5b6999d41a32c376e9b4cb44dcffccf5ecf9e71cbd2ba51ed4d67935d7a39b81180c8a4fb1b89444eef3b387337bc82da7f8"], 0x61) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) syz_usb_disconnect(r5) syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000001080)=ANY=[], 0x0) 289.026312ms ago: executing program 4 (id=852): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsopen(&(0x7f0000000180)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f0000000140)='./file0\x00') r3 = fsmount(r0, 0x1, 0xf9) r4 = openat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r5 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r5) getpid() syz_clone3(&(0x7f0000000940)={0x200000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0x0], 0x1, {r4}}, 0x58) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000140)={0x1, 0x6}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), r8) sendmsg$IEEE802154_ASSOCIATE_RESP(r8, &(0x7f000000b880)={0x0, 0x0, &(0x7f000000b840)={&(0x7f000000b7c0)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r11, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r13, 0x2cb3b0415539fbbb, 0x70bd2b, 0x21dfdbfd, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000340)={0x53, 0x6, 0x106, 0x8, @buffer={0x0, 0x8d, &(0x7f0000000500)=""/141}, &(0x7f00000005c0)="9eb07acda0b2313a0f0bf5d599415e1203ab7ae5aab29cdf88037a965ec7fe54fc469066dbccba990277b4f2dc031bb21133b63143620bb7232ffd8caa964305a2cc39d80d4e2101709dd98c8efdbb4ad8277c3509195e7a9ad7fc27dd792292f82d9e7c92a566633d00fb569fdbc191884215e0409d09551410c5fc702b5a23007dbbd2275803d40de887a9c05dbe1874afd35da5b42dc584e0970dcff45d663a5353becd46286b47492592e59b008994e16c75411b3c95061e202fb9460799f6bcdca9b66e5327af03da870cd6e2939f5e1a6ebfd13a5ccda48b1c9880e75da294a1160aa97d46d462ae0cff569de4b9e4741d25b5e13cb1978412848fdd7e115d8a6cd948", 0x0, 0xffffffff, 0x2, 0x4, 0x0}) 64.076228ms ago: executing program 4 (id=853): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x92040) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7f}, 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x6, [0xff, 0xd, 0x7ff, 0x2, 0x7, 0x7]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x4, 0x1, [0x40d0]}, 0xa) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x4, 0x1, [0x40d0]}, 0xa) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x101, {{0xa, 0x4e23, 0x1, @mcast2, 0x2d1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x101, {{0xa, 0x4e23, 0x1, @mcast2, 0x2d1}}}, 0x88) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={r2, 0x8, 0x2a, 0x7, 0x3, 0x65}, 0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300)={r2, 0xe8, "d25a142c140bce129e86b832ed0bfa9be8e03e2b0a86a0bd294bb323c358ec5a1935050d67921b9ec747feadb02bdf07b7a99291f3187c1081531da05cc430b334ef3a1a1e2884956573091398af2f4e8b6f8e9d34a1438d882f896d0001d6a1c6321acfe7390b332d898c92c823c5a4607dfba6411e8c55fbe414daf054b58598d718b5e136b0beba1732af11e0a6334b98083236f0a481e69db9f71447cc2ab08e07ad53c5d7b7f7cf0dec2f83dd9f5ef9dfb385ee7507ee429e00adbf1bb2220c8e2dbf274a9cfcfc2dd44b2c3657801cf7e9a404a942427be881068b87d27a82db2e8a885eaf"}, &(0x7f0000000400)=0xf0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000440), &(0x7f0000000480)=0xc) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f00000004c0)) getsockopt$inet6_buf(r0, 0x29, 0xacff1de80f23de7c, &(0x7f0000000500)=""/94, &(0x7f0000000580)=0x5e) r3 = socket(0x1f, 0x1, 0x8) connect$unix(r3, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000006c0)={r2, 0x1000, "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"}, &(0x7f0000001700)=0x1008) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001740)={r5, 0x8}, 0x8) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001740)={r5, 0x8}, 0x8) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000001780)=0x5, 0x1) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000017c0)={0x6, 0x118, 0xfa00, {{0x2, 0xc, "a65640e5922fbec2fb21b4e583aee80da1dffaa7d56e1ef75df3f8cf3bbd6fd0c650fc3dba526717fd131cf90ea53e8ab0ad4958c60632a82d2d1d1c11b1653d6f6a7f584abd295cee4e028b3dbfdd64533c22176b4498a3eb369d9c391366cd729d98ff4f2b7987223fa73cd4fb40d780f8fcbcddefe4b59b18cc5ed373366f00c3bc4e2451658c8a577a23fa7670c8ff0894b9d77adb3b8bcd30b995403840c4c874e8ef979ceba426dc67241a507e3e1cf6274e6df07f7c6d45dade4f4ea6250412f7d05ef8c366a1957dd8112494c5db2c3fa3400b9488c16afa34fb9a9436ac6ff466c8235d6d8271804e1e00d106bc3465acf629fc83da79f80c547626", 0x1, 0xc0, 0x3, 0xb, 0x81}, r1}}, 0x120) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001900)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r4) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000001980)={0x9, {{0xa, 0x4e23, 0x1ba, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000001980)={0x9, {{0xa, 0x4e23, 0x1ba, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000001a40)={'ipvs\x00'}, &(0x7f0000001a80)=0x1e) sendmsg$tipc(r3, &(0x7f0000001ec0)={&(0x7f0000001ac0)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001b00)="09ea61cb0d69214bb89750f586d111423b4548fc5dbcb4", 0x17}, {&(0x7f0000001b40)="b93eb9e31e67b77aa27d23e45d440f07ea7f75614072f0dd25ae977aaf32abc5baefbf0ee7ea546fb9768494ce796abb2872ed6e081c3779eb6de7042f5ecd7cb717e3ab54d42b1cb1e7082aecd60f8f1258d0fd5734facdebb436391460b6e14f6a5c8fbc35f1d5ec5d7c89aa25a058c15fe42dd1a0c51e9dec55a63200a32426a005818b62a78604cec8f4be3fd309b0789a79b23089246f6f3c324cd363821b380d61f77e08c00903", 0xaa}, {&(0x7f0000001c00)="5cbf59c9491b0ed54d9ee28161f5e8d9cfab5b096454def44d202f83022b2244f6ff4305b3410ec0ad3dbf9cbcc21bfbbf7dab9ee1b6ab683d3b073eb91ceda79254bb337459ad318f9f2b2a0907e1656122398f4db263c0f6f7d65d145b312febf5e26d768ddd3584f441d11da11e5ace0c0e107f384cdb1bad7caa55682cbbe8736f8d2ed8afa584d6f99696dda9af1ff7a8d71e9a3cdcf99cb3e73047c6547e04f381ca0eb3094d9891bd4765e03b106bd46a3f98733d62c982", 0xbb}, {&(0x7f0000001cc0)="6a35aff4ec8dbe5fc358df925e585dddcaa7aaf6a714f6c49023fb9d49f916e462faa9269a354d9721d15eb51ba2e1aa36f5481efb12f156dc97012b1eecbed1535b3fa27f3de799ea338cb822e9d05d40edb875deef2476acdf03179ffb42c64c760dada5869c454607c23d76ef8c08ae47a64f37f9ec35b3d6eafcf8164b5aad71dbfbbb112a6a15bccb5345de67b709dd3b0ba29887f73f3416fce427033e970310bd3d35a73bcddcc14cdce4", 0xae}], 0x4, &(0x7f0000001dc0)="038629cb327912bd05d2ae78af598437b230cbad50a3dde4f723c9fc5ee994b3047e4fc9eb34efc6af6e38c4a300fef467b6489e5defac7e173ee4b044edfc4c3628be323aae2d1bc0c73a0fe12bc2254b175553dfa0d8e52e40ee3125d05e9de074afdc4dcd47adad4f4cd4dcf2ac4411651f1a0265cdad5a7489b6e01b14c0c825deb219f8ecf6fd7b6602ab0b960d05d73154e3efad1092ce17d222f7e6b41121f2ea9977551f2462a47f655908668e10373dd451474ca522b48b50e8f94c1a31d3468c1ed0a9af494144b881c7ed1bb0ffb09366e7e45f0f6c67527ea781d55d16f41e8b6193c48c5d4984cc72659d95d5", 0xf3, 0x10}, 0x14) sendmsg$inet6(r3, &(0x7f00000020c0)={&(0x7f0000001f00)={0xa, 0x4e22, 0x1, @local, 0x3}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001f40)="fb0b1b1fff6283194c912708bfb2c32399657e65db9941cb85666016a1469550c1b0a375ee9bf90c751de841189634c017e3b10f029957b1ff8691325a28d48c2c7cf493aaea4399528c46105001ddb4fc73cb83a6e5e2b285a1cb3bb93d3db43e41c7", 0x63}, {&(0x7f0000001fc0)="bafea76f92c5bba6a8c0cd02398e8e38ae678b47a778d94170ec562d10da145c6c808d2d95a8feaeb1495ccf35b282ba015d3000b25d35252d02647542eaee1bcb70b2e2a273b56720ddadf02e5ecaec22efef770f0c16c2f1066f", 0x5b}], 0x2, &(0x7f0000002080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x70aa}}], 0x18}, 0x1) (async) sendmsg$inet6(r3, &(0x7f00000020c0)={&(0x7f0000001f00)={0xa, 0x4e22, 0x1, @local, 0x3}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001f40)="fb0b1b1fff6283194c912708bfb2c32399657e65db9941cb85666016a1469550c1b0a375ee9bf90c751de841189634c017e3b10f029957b1ff8691325a28d48c2c7cf493aaea4399528c46105001ddb4fc73cb83a6e5e2b285a1cb3bb93d3db43e41c7", 0x63}, {&(0x7f0000001fc0)="bafea76f92c5bba6a8c0cd02398e8e38ae678b47a778d94170ec562d10da145c6c808d2d95a8feaeb1495ccf35b282ba015d3000b25d35252d02647542eaee1bcb70b2e2a273b56720ddadf02e5ecaec22efef770f0c16c2f1066f", 0x5b}], 0x2, &(0x7f0000002080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x70aa}}], 0x18}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000021c0)={'tunl0\x00', &(0x7f0000002100)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0x4, {{0x21, 0x4, 0x1, 0x6, 0x84, 0x67, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x81, 0x3, 0x3, [{@rand_addr=0x64010100, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x9b, 0x3, 0x0, [{@rand_addr=0x64010100, 0x30bd}, {@multicast2, 0x8}]}, @cipso={0x86, 0x48, 0x2, [{0x0, 0xb, "26501d211f5aec0816"}, {0x5, 0x6, "ef67da86"}, {0x1, 0x8, "4baaad1af258"}, {0x2, 0xd, "e79b7e83b6793c3d98b799"}, {0x0, 0xa, "31dbd4dff9a47733"}, {0x6, 0x12, "8e55658d84770c7c63cbae6196ad89c8"}]}, @end, @noop, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000021c0)={'tunl0\x00', &(0x7f0000002100)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0x4, {{0x21, 0x4, 0x1, 0x6, 0x84, 0x67, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x81, 0x3, 0x3, [{@rand_addr=0x64010100, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x9b, 0x3, 0x0, [{@rand_addr=0x64010100, 0x30bd}, {@multicast2, 0x8}]}, @cipso={0x86, 0x48, 0x2, [{0x0, 0xb, "26501d211f5aec0816"}, {0x5, 0x6, "ef67da86"}, {0x1, 0x8, "4baaad1af258"}, {0x2, 0xd, "e79b7e83b6793c3d98b799"}, {0x0, 0xa, "31dbd4dff9a47733"}, {0x6, 0x12, "8e55658d84770c7c63cbae6196ad89c8"}]}, @end, @noop, @ra={0x94, 0x4}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002200)={{{@in6=@loopback, @in=@private=0xa010101, 0x4e22, 0x1043, 0x4e21, 0x7, 0xa, 0x20, 0xa0, 0x1d, r7, 0xee00}, {0x1, 0x2, 0x3b5b595e, 0x0, 0x80000001, 0xe, 0x8, 0x8}, {0x1, 0xe, 0x85b, 0x6}, 0x1, 0x6e6bbf, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010102, 0x4d4, 0x32}, 0x2, @in=@rand_addr=0x64010102, 0x3500, 0x0, 0x0, 0x9c, 0x0, 0x909d, 0x3d}}, 0xe8) 0s ago: executing program 4 (id=854): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4080) kernel console output (not intermixed with test programs): 63.790721][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.793139][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.796824][ T5950] Bluetooth: hci2: command tx timeout [ 63.806758][ T5298] Bluetooth: hci1: command tx timeout [ 63.809575][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.809662][ T5950] Bluetooth: hci0: command tx timeout [ 63.816105][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.818576][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.833350][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.835619][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.849439][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.851655][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.886949][ T5950] Bluetooth: hci3: command tx timeout [ 63.890609][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.915826][ T40] audit: type=1400 audit(1766822164.598:91): avc: denied { sys_module } for pid=5937 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.931196][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.946229][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.949588][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.963576][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.966880][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.042900][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.110538][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.124096][ T5937] veth0_vlan: entered promiscuous mode [ 64.140553][ T5937] veth1_vlan: entered promiscuous mode [ 64.175826][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.200961][ T5949] veth0_vlan: entered promiscuous mode [ 64.208546][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.213683][ T5937] veth0_macvtap: entered promiscuous mode [ 64.223306][ T5937] veth1_macvtap: entered promiscuous mode [ 64.228640][ T5949] veth1_vlan: entered promiscuous mode [ 64.256135][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.266624][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.278516][ T5946] veth0_vlan: entered promiscuous mode [ 64.281859][ T91] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.291925][ T5949] veth0_macvtap: entered promiscuous mode [ 64.296829][ T91] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.299806][ T91] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.306644][ T91] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.311661][ T5949] veth1_macvtap: entered promiscuous mode [ 64.325033][ T5946] veth1_vlan: entered promiscuous mode [ 64.345517][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.360223][ T5938] veth0_vlan: entered promiscuous mode [ 64.369313][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.379086][ T5938] veth1_vlan: entered promiscuous mode [ 64.392575][ T4480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.397597][ T4480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.408117][ T4480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.412098][ T4480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.428119][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.434396][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.440277][ T5946] veth0_macvtap: entered promiscuous mode [ 64.461432][ T5946] veth1_macvtap: entered promiscuous mode [ 64.467101][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.470790][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.493363][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.505549][ T5938] veth0_macvtap: entered promiscuous mode [ 64.514223][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.518131][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.524183][ T5938] veth1_macvtap: entered promiscuous mode [ 64.530801][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.534202][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.546675][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.550358][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.555619][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.566944][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.571525][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.603052][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.605698][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.609645][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.621359][ T91] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.626531][ T91] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.629955][ T91] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.634077][ T6025] input: syz0 as /devices/virtual/input/input5 [ 64.658015][ T91] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.747262][ T6037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.678027][ T6079] overlayfs: missing 'lowerdir' [ 65.886416][ T5950] Bluetooth: hci0: command tx timeout [ 65.886438][ T5298] Bluetooth: hci1: command tx timeout [ 65.886608][ T5947] Bluetooth: hci2: command tx timeout [ 65.966896][ T5298] Bluetooth: hci3: command tx timeout [ 66.756420][ T142] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 66.759542][ T142] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 67.966589][ T5298] Bluetooth: hci1: command tx timeout [ 67.966691][ T5950] Bluetooth: hci2: command tx timeout [ 68.036655][ T5950] Bluetooth: hci3: command tx timeout [ 68.837687][ T142] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 68.840177][ T142] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 70.037835][ T5950] Bluetooth: hci2: command tx timeout [ 70.116752][ T5950] Bluetooth: hci3: command tx timeout [ 70.916587][ T142] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 70.919303][ T142] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 72.996989][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.997046][ T142] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 73.002939][ T142] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 73.098773][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.102495][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.109203][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.112843][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.130270][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 73.130285][ T40] audit: type=1400 audit(1766822173.818:129): avc: denied { read write } for pid=6090 comm="syz.0.10" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.142888][ T40] audit: type=1400 audit(1766822173.818:130): avc: denied { open } for pid=6090 comm="syz.0.10" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.155450][ T40] audit: type=1400 audit(1766822173.818:131): avc: denied { ioctl } for pid=6090 comm="syz.0.10" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.163434][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.175187][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.189484][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.191883][ T40] audit: type=1400 audit(1766822173.878:132): avc: denied { read write } for pid=6092 comm="syz.1.12" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 73.193794][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.204388][ T40] audit: type=1400 audit(1766822173.878:133): avc: denied { open } for pid=6092 comm="syz.1.12" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 73.224791][ T40] audit: type=1400 audit(1766822173.908:134): avc: denied { create } for pid=6092 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.233457][ T40] audit: type=1400 audit(1766822173.908:135): avc: denied { write } for pid=6092 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.242750][ T40] audit: type=1400 audit(1766822173.908:136): avc: denied { nlmsg_write } for pid=6092 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.251407][ T40] audit: type=1400 audit(1766822173.918:137): avc: denied { read } for pid=6092 comm="syz.1.12" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.261077][ T40] audit: type=1400 audit(1766822173.918:138): avc: denied { open } for pid=6092 comm="syz.1.12" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.296815][ T6097] tmpfs: Bad value for 'mpol' [ 73.367677][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.430661][ T6103] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 73.438143][ T6103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14'. [ 73.526382][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 73.531749][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 73.540485][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 73.544536][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.548566][ T9] usb 5-1: Product: syz [ 73.550530][ T9] usb 5-1: Manufacturer: syz [ 73.552699][ T9] usb 5-1: SerialNumber: syz [ 73.558928][ T75] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.560195][ T9] usb 5-1: config 0 descriptor?? [ 73.572817][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 73.577429][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 73.662150][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.665454][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.696750][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.707986][ T75] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 73.711467][ T75] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 73.714445][ T75] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.719089][ T75] usb 7-1: config 0 descriptor?? [ 73.836764][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 73.839388][ T10] usb 6-1: device descriptor read/64, error -71 [ 73.896495][ T142] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 73.900804][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 73.903567][ T9] em28xx 5-1:0.0: board has no eeprom [ 73.928773][ T75] usb 7-1: string descriptor 0 read error: -71 [ 73.935979][ T75] usb 7-1: USB disconnect, device number 2 [ 73.974677][ T6091] em28xx 5-1:0.0: reading from i2c device at 0x6 failed (error=-5) [ 73.977664][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 73.980237][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 74.010866][ T1027] em28xx 5-1:0.0: Binding DVB extension [ 74.017011][ T9] usb 5-1: USB disconnect, device number 2 [ 74.019939][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 74.046385][ T1027] em28xx 5-1:0.0: Registering input extension [ 74.049116][ T9] em28xx 5-1:0.0: Closing input extension [ 74.062635][ T9] em28xx 5-1:0.0: Freeing device [ 74.085808][ T142] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 74.092295][ T142] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 74.097271][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.100372][ T142] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 74.105571][ T6117] trusted_key: syz.0.18 sent an empty control message without MSG_MORE. [ 74.123683][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 74.127603][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 74.131856][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 74.141490][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 74.141542][ T1155] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.144351][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 74.148049][ T1155] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.148084][ T1155] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.148110][ T1155] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.162394][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 74.162455][ T142] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 74.166593][ T6117] Zero length message leads to an empty skb [ 74.169166][ T142] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.178054][ T142] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 74.181025][ T142] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.183713][ T142] usb 8-1: Product: syz [ 74.185208][ T142] usb 8-1: Manufacturer: syz [ 74.186824][ T142] usb 8-1: SerialNumber: syz [ 74.190736][ T142] usb 8-1: config 0 descriptor?? [ 74.193637][ T6111] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 74.198951][ T142] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 74.246415][ T10] usb 6-1: device descriptor read/64, error -71 [ 74.293683][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 74.298393][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 74.376583][ T10] usb usb6-port1: attempt power cycle [ 74.398624][ T9] usb 8-1: USB disconnect, device number 2 [ 74.499487][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 74.510298][ T6129] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 74.726409][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 74.748301][ T10] usb 6-1: device descriptor read/8, error -71 [ 74.975597][ T6148] process 'syz.3.27' launched './file1' with NULL argv: empty string added [ 74.976934][ T6146] ªªªªªª: renamed from vlan0 (while UP) [ 74.986532][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.007544][ T10] usb 6-1: device descriptor read/8, error -71 [ 75.014399][ T6150] warning: `syz.2.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.083527][ T6155] program syz.2.28 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.116685][ T10] usb usb6-port1: unable to enumerate USB device [ 75.232676][ T6168] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 75.241637][ T6168] overlayfs: conflicting lowerdir path [ 75.282939][ T6176] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 75.282939][ T6176] program syz.3.34 not setting count and/or reply_len properly [ 75.411603][ T6185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6185 comm=syz.3.38 [ 75.454534][ T6187] binder: 6186:6187 ioctl c0306201 200000000640 returned -22 [ 75.546481][ T6192] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.936403][ T55] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.020557][ T6230] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 76.046164][ T6230] capability: warning: `syz.2.51' uses 32-bit capabilities (legacy support in use) [ 76.105502][ T55] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 76.112175][ T55] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 76.117090][ T55] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 76.121388][ T55] usb 5-1: config 220 has no interface number 1 [ 76.124449][ T55] usb 5-1: config 220 interface 0 has no altsetting 0 [ 76.127974][ T55] usb 5-1: config 220 interface 76 has no altsetting 0 [ 76.133180][ T55] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 76.137544][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.140382][ T55] usb 5-1: Product: syz [ 76.141959][ T55] usb 5-1: Manufacturer: syz [ 76.143551][ T55] usb 5-1: SerialNumber: syz [ 76.361306][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.363504][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.411768][ T4480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.513184][ T6245] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.527855][ T4480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.534626][ T6245] nbd: illegal input index 1879048192 [ 76.540283][ T5298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.543467][ T5298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.547284][ T5298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.551485][ T5298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.566317][ T5298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.640496][ T4480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.714002][ T4480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.727072][ T6248] chnl_net:caif_netlink_parms(): no params data found [ 76.809169][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.813064][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.816607][ T6248] bridge_slave_0: entered allmulticast mode [ 76.819994][ T6248] bridge_slave_0: entered promiscuous mode [ 76.824286][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.827171][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.829707][ T6248] bridge_slave_1: entered allmulticast mode [ 76.832791][ T6248] bridge_slave_1: entered promiscuous mode [ 76.854259][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.859879][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.902023][ T6248] team0: Port device team_slave_0 added [ 76.906971][ T6248] team0: Port device team_slave_1 added [ 76.932386][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.934808][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.944401][ T6248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.950263][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.953306][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.962795][ T6248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.013960][ T4480] bridge_slave_1: left allmulticast mode [ 77.019293][ T4480] bridge_slave_1: left promiscuous mode [ 77.023064][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.031031][ T4480] bridge_slave_0: left allmulticast mode [ 77.033096][ T4480] bridge_slave_0: left promiscuous mode [ 77.035054][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.319516][ T4480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.325539][ T4480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.330734][ T4480] bond0 (unregistering): Released all slaves [ 77.346025][ T6248] hsr_slave_0: entered promiscuous mode [ 77.350624][ T6248] hsr_slave_1: entered promiscuous mode [ 77.353130][ T6248] debugfs: 'hsr0' already exists in 'hsr' [ 77.355134][ T6248] Cannot create hsr debugfs directory [ 77.487831][ T6289] SELinux: Context system_u:object_r:devpts_t:s0 is not valid (left unmapped). [ 77.494976][ T6287] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.682549][ T6248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.715627][ T6248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.721668][ T6248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.738263][ T4480] hsr_slave_0: left promiscuous mode [ 77.740610][ T4480] hsr_slave_1: left promiscuous mode [ 77.742769][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.745296][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.748882][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.751428][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.761360][ T4480] veth1_macvtap: left promiscuous mode [ 77.763310][ T4480] veth0_macvtap: left promiscuous mode [ 77.765218][ T4480] veth1_vlan: left promiscuous mode [ 77.767600][ T4480] veth0_vlan: left promiscuous mode [ 77.826051][ T6303] SELinux: security policydb version 17 (MLS) not backwards compatible [ 77.830885][ T6303] SELinux: failed to load policy [ 78.051757][ T4480] team0 (unregistering): Port device team_slave_1 removed [ 78.081017][ T4480] team0 (unregistering): Port device team_slave_0 removed [ 78.260002][ T6248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.336659][ T40] kauditd_printk_skb: 135 callbacks suppressed [ 78.336670][ T40] audit: type=1400 audit(1766822179.028:274): avc: denied { setopt } for pid=6321 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.370210][ T40] audit: type=1400 audit(1766822179.028:275): avc: denied { create } for pid=6321 comm="syz.3.75" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.376553][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.389094][ T40] audit: type=1400 audit(1766822179.028:276): avc: denied { map } for pid=6321 comm="syz.3.75" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.397728][ T40] audit: type=1400 audit(1766822179.028:277): avc: denied { read write } for pid=6321 comm="syz.3.75" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.401604][ T6248] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.405726][ T40] audit: type=1400 audit(1766822179.038:278): avc: denied { read } for pid=6321 comm="syz.3.75" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.405753][ T40] audit: type=1400 audit(1766822179.038:279): avc: denied { open } for pid=6321 comm="syz.3.75" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.424066][ T1217] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.426722][ T1217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.427041][ T40] audit: type=1400 audit(1766822179.038:280): avc: denied { connect } for pid=6321 comm="syz.3.75" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.437331][ T40] audit: type=1400 audit(1766822179.048:281): avc: denied { create } for pid=6321 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.437822][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.444046][ T40] audit: type=1400 audit(1766822179.048:282): avc: denied { write } for pid=6321 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.446629][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.453314][ T40] audit: type=1400 audit(1766822179.048:283): avc: denied { nlmsg_write } for pid=6321 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.507778][ T6248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.596501][ T5950] Bluetooth: hci2: command tx timeout [ 78.614388][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.636402][ T1027] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 78.656337][ T55] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 78.662570][ T55] uvcvideo 5-1:220.0: No valid video chain found. [ 78.673043][ T55] usb 5-1: USB disconnect, device number 3 [ 78.692124][ T6351] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 78.794147][ T1027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.802538][ T1027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.819764][ T1027] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.825354][ T1027] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.830206][ T1027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.840633][ T1027] usb 6-1: config 0 descriptor?? [ 78.867938][ T6248] veth0_vlan: entered promiscuous mode [ 78.873702][ T6248] veth1_vlan: entered promiscuous mode [ 78.896956][ T6248] veth0_macvtap: entered promiscuous mode [ 78.901903][ T6248] veth1_macvtap: entered promiscuous mode [ 78.913631][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.923498][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.934206][ T378] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.938245][ T378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.942356][ T378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.945929][ T378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.966544][ T6382] __nla_validate_parse: 7 callbacks suppressed [ 78.966555][ T6382] netlink: 45 bytes leftover after parsing attributes in process `syz.3.83'. [ 79.023778][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.028155][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.042750][ T378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.047804][ T378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.118302][ T6395] tmpfs: Unknown parameter '/dev/net/tun' [ 79.132729][ T6393] netlink: 68 bytes leftover after parsing attributes in process `syz.0.87'. [ 79.139200][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.87'. [ 79.202406][ T6403] netlink: 'syz.4.89': attribute type 10 has an invalid length. [ 79.210050][ T6401] block device autoloading is deprecated and will be removed. [ 79.217696][ T6403] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 79.268066][ T1027] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xe [ 79.271264][ T1027] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 79.279862][ T1027] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 79.395734][ T6416] capability: warning: `syz.4.93' uses deprecated v2 capabilities in a way that may be insecure [ 79.571597][ T6430] program syz.4.97 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.653086][ T1149] Bluetooth: hci4: Frame reassembly failed (-84) [ 79.653265][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 79.653315][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 79.653360][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 79.653408][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 79.654439][ T6430] program syz.4.97 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.671645][ T6435] tmpfs: Bad value for 'mpol' [ 79.769066][ T6442] fuse: Unknown parameter '0x0000000000000006' [ 79.781422][ T6442] team0: Device xfrm1 is of different type [ 79.859677][ T6443] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.975597][ T6447] netlink: 104 bytes leftover after parsing attributes in process `syz.0.103'. [ 79.982429][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 80.101181][ T6452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.105'. [ 80.331404][ T6461] program syz.3.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.359446][ T142] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.521276][ T142] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.525416][ T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.529502][ T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 80.533755][ T142] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.538044][ T142] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.541041][ T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.547257][ T142] usb 5-1: config 0 descriptor?? [ 80.787211][ T5298] Bluetooth: hci2: command tx timeout [ 81.033684][ T142] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 81.042346][ T142] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 81.328373][ T5984] usb 5-1: USB disconnect, device number 4 [ 81.824356][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 81.824426][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 81.995586][ T6499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.118'. [ 82.002492][ T6499] fuse: Unknown parameter 'usj·ñA00000000000000000000' [ 82.023497][ T6499] vxlan0: entered promiscuous mode [ 82.025895][ T6499] vxlan0: entered allmulticast mode [ 82.026214][ T6501] ======================================================= [ 82.026214][ T6501] WARNING: The mand mount option has been deprecated and [ 82.026214][ T6501] and is ignored by this kernel. Remove the mand [ 82.026214][ T6501] option from the mount to silence this warning. [ 82.026214][ T6501] ======================================================= [ 82.040606][ T378] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.043443][ T378] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.046322][ T378] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.050121][ T378] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.107289][ T10] usb 6-1: USB disconnect, device number 6 [ 82.133924][ T6501] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.266041][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 82.431423][ T6533] syzkaller1: entered promiscuous mode [ 82.433257][ T6533] syzkaller1: entered allmulticast mode [ 82.447149][ T6536] afs: Unknown parameter '01777777777777777777777ÿÿ01777777777777777777777' [ 82.470560][ T6536] overlayfs: overlapping lowerdir path [ 83.085101][ T6565] program syz.0.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.354868][ T6538] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.357390][ T6538] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.361818][ T6538] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.373720][ T6581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.143'. [ 83.377031][ T6581] block nbd0: not configured, cannot reconfigure [ 83.405673][ T6585] overlayfs: cannot append lower layer [ 83.435866][ T6593] binder: 6592:6593 ioctl c018620c 200000002480 returned -22 [ 83.444835][ T6593] bond0: entered promiscuous mode [ 83.447320][ T6593] bond_slave_0: entered promiscuous mode [ 83.450817][ T6593] bond_slave_1: entered promiscuous mode [ 83.586085][ T6605] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 83.597590][ T6605] CIFS: Unable to determine destination address [ 83.631290][ T24] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 83.760117][ T6618] syzkaller0: entered promiscuous mode [ 83.761981][ T6618] syzkaller0: entered allmulticast mode [ 83.804301][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.807828][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 83.811103][ T24] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 83.818720][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.827780][ T24] usb 8-1: config 0 descriptor?? [ 83.843059][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 83.846383][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 83.852490][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 83.859117][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 83.862305][ T24] usb 8-1: media controller created [ 83.868401][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.884187][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 83.887987][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 83.891328][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 83.891337][ T40] audit: type=1400 audit(1766822184.258:343): avc: denied { bind } for pid=6622 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.893051][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input9 [ 83.909279][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 83.912193][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 84.049933][ T6554] dvb-usb: bulk message failed: -22 (2/0) [ 84.082463][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 84.082505][ T24] dvb-usb: error while querying for an remote control event. [ 84.262166][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 84.262196][ T24] dvb-usb: error while querying for an remote control event. [ 84.433550][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 84.433579][ T24] dvb-usb: error while querying for an remote control event. [ 84.476131][ T40] audit: type=1400 audit(1766822184.819:344): avc: denied { bind } for pid=6639 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.477059][ T40] audit: type=1400 audit(1766822184.819:345): avc: denied { listen } for pid=6639 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.533229][ T40] audit: type=1400 audit(1766822184.865:346): avc: denied { getopt } for pid=6644 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.533623][ T40] audit: type=1400 audit(1766822184.865:347): avc: denied { connect } for pid=6644 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.543109][ T6647] 9p: Unknown Cache mode or invalid value mmap…7§æë=9p2000.u [ 84.592136][ T40] audit: type=1400 audit(1766822184.912:348): avc: denied { append } for pid=6651 comm="syz.1.163" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.615007][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 84.615036][ T24] dvb-usb: error while querying for an remote control event. [ 84.691201][ T40] audit: type=1400 audit(1766822185.015:349): avc: denied { map } for pid=6656 comm="syz.0.164" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.721985][ T5950] Bluetooth: hci2: command 0x0419 tx timeout [ 84.751083][ T6661] netlink: 'syz.1.165': attribute type 10 has an invalid length. [ 84.753586][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.759870][ T6661] bridge_slave_1: left allmulticast mode [ 84.759885][ T6661] bridge_slave_1: left promiscuous mode [ 84.760010][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.766805][ T6661] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 84.786172][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 84.786199][ T24] dvb-usb: error while querying for an remote control event. [ 84.807010][ T40] audit: type=1400 audit(1766822185.118:350): avc: denied { ioctl } for pid=6662 comm="syz.1.166" path="socket:[14837]" dev="sockfs" ino=14837 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.923557][ T6671] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 84.957039][ T40] audit: type=1400 audit(1766822185.258:351): avc: denied { append } for pid=6675 comm="syz.1.169" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.957669][ T6676] dlm: no locking on control device [ 84.967926][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 84.999643][ T24] dvb-usb: error while querying for an remote control event. [ 85.022207][ C2] ata1: illegal qc_active transition (00000000->00000002) [ 85.156997][ T40] audit: type=1400 audit(1766822185.445:352): avc: denied { write } for pid=6692 comm="syz.0.174" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.157961][ T6693] binder: 6692:6693 ioctl c0306201 2000000000c0 returned -11 [ 85.167003][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 85.174228][ T24] dvb-usb: error while querying for an remote control event. [ 85.175897][ T6693] binder: 6692:6693 ioctl c0306201 200000000640 returned -22 [ 85.279519][ T6693] vivid-007: ================= START STATUS ================= [ 85.279570][ T6693] vivid-007: Generate PTS: true [ 85.279612][ T6693] vivid-007: Generate SCR: true [ 85.279631][ T6693] tpg source WxH: 320x240 (Y'CbCr) [ 85.279642][ T6693] tpg field: 1 [ 85.279650][ T6693] tpg crop: (0,0)/320x240 [ 85.279662][ T6693] tpg compose: (0,0)/320x240 [ 85.279674][ T6693] tpg colorspace: 8 [ 85.279681][ T6693] tpg transfer function: 0/0 [ 85.279691][ T6693] tpg Y'CbCr encoding: 0/0 [ 85.279700][ T6693] tpg quantization: 0/0 [ 85.279708][ T6693] tpg RGB range: 0/2 [ 85.279716][ T6693] vivid-007: ================== END STATUS ================== [ 85.295298][ T5950] Bluetooth: hci2: Malformed Event: 0x13 [ 85.342266][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 85.342289][ T24] dvb-usb: error while querying for an remote control event. [ 85.379011][ T1116] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 85.383504][ T1116] ata1.00: configured for UDMA/100 [ 85.523855][ T142] dvb-usb: bulk message failed: -22 (1/0) [ 85.523874][ T142] dvb-usb: error while querying for an remote control event. [ 85.705639][ T142] dvb-usb: bulk message failed: -22 (1/0) [ 85.705668][ T142] dvb-usb: error while querying for an remote control event. [ 85.887453][ T142] dvb-usb: bulk message failed: -22 (1/0) [ 85.887481][ T142] dvb-usb: error while querying for an remote control event. [ 85.955560][ T10] usb 8-1: USB disconnect, device number 3 [ 85.975043][ T6727] syz_tun: entered allmulticast mode [ 85.988340][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 86.020406][ T6725] netlink: 380 bytes leftover after parsing attributes in process `syz.4.183'. [ 86.052856][ T6738] bridge_slave_0: left allmulticast mode [ 86.054786][ T6738] bridge_slave_0: left promiscuous mode [ 86.056924][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.063114][ T6738] bridge_slave_1: left allmulticast mode [ 86.065123][ T6738] bridge_slave_1: left promiscuous mode [ 86.067045][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.087028][ T6738] bond0: (slave bond_slave_0): Releasing backup interface [ 86.095361][ T6738] bond0: (slave bond_slave_1): Releasing backup interface [ 86.102981][ T6738] team0: Port device team_slave_0 removed [ 86.111827][ T6738] team0: Port device team_slave_1 removed [ 86.115789][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.119127][ T6738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.124393][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.127749][ T6738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.134159][ T6738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.180528][ T6748] batadv_slave_1: entered promiscuous mode [ 86.185396][ T6746] batadv_slave_1: left promiscuous mode [ 86.278848][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 86.946081][ T5950] Bluetooth: hci2: command 0x0419 tx timeout [ 87.073807][ T6825] tmpfs: Bad value for 'mpol' [ 87.114303][ T6810] mmap: syz.1.205 (6810) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.129590][ T34] cfg80211: failed to load regulatory.db [ 87.202576][ T6827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6827 comm=syz.0.210 [ 87.442259][ T6866] libceph: resolve '4' (ret=-3): failed [ 87.451780][ T6866] program syz.4.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.455210][ T6866] ata1.00: non-matching transfer count (842019896/0) [ 87.621396][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 87.624878][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 87.691329][ T6882] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 87.781160][ T6891] usb usb8: check_ctrlrecip: process 6891 (syz.0.231) requesting ep 01 but needs 81 [ 87.785461][ T6891] usb usb8: usbfs: process 6891 (syz.0.231) did not claim interface 0 before use [ 87.789820][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 87.864426][ T6900] evm: overlay not supported [ 88.013299][ T6914] tmpfs: Unknown parameter '/dev/snd/controlC#' [ 88.378921][ T5977] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.549941][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 88.574232][ T5977] usb 5-1: config 1 interface 0 altsetting 11 bulk endpoint 0x1 has invalid maxpacket 64 [ 88.578775][ T5977] usb 5-1: config 1 interface 0 has no altsetting 0 [ 88.583800][ T5977] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 88.588211][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.591698][ T5977] usb 5-1: Product: syz [ 88.593731][ T5977] usb 5-1: Manufacturer: à  [ 88.595763][ T5977] usb 5-1: SerialNumber: syz [ 88.600515][ T6921] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.722470][ T34] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.726402][ T34] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.730345][ T34] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.733547][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.742969][ T6922] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 88.759454][ T34] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.824898][ T6921] vlan2: entered promiscuous mode [ 88.827386][ T6921] vlan2: entered allmulticast mode [ 88.830206][ T6921] hsr_slave_1: entered allmulticast mode [ 88.856301][ T5977] usb 5-1: USB disconnect, device number 5 [ 88.973319][ T34] usb 9-1: USB disconnect, device number 2 [ 89.069838][ T6937] bond1: option xmit_hash_policy: invalid value (6) [ 89.075163][ T6937] bond1 (unregistering): Released all slaves [ 89.115384][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 89.119340][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 89.135277][ T6939] Context (ID=0x1) not attached to queue pair (handle=0x1:0x3) [ 89.170540][ T5950] Bluetooth: hci2: command 0x0419 tx timeout [ 89.345261][ T6943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.249'. [ 89.349326][ T6943] netlink: 35 bytes leftover after parsing attributes in process `syz.1.249'. [ 89.353256][ T6943] netlink: 'syz.1.249': attribute type 5 has an invalid length. [ 89.357469][ T6943] netlink: 'syz.1.249': attribute type 6 has an invalid length. [ 89.361503][ T6943] netlink: 35 bytes leftover after parsing attributes in process `syz.1.249'. [ 89.442464][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 89.442475][ T40] audit: type=1400 audit(1766822189.458:399): avc: denied { create } for pid=6947 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 89.443363][ T6948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=6948 comm=syz.0.251 [ 89.444666][ T40] audit: type=1400 audit(1766822189.458:400): avc: denied { write } for pid=6947 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 89.456631][ T6948] openvswitch: netlink: Flow actions attr not present in new flow. [ 89.559096][ T40] audit: type=1326 audit(1766822189.570:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6952 comm="syz.3.253" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x0 [ 89.597109][ T6956] openvswitch: netlink: IP tunnel TTL not specified. [ 89.607193][ T6957] usb usb9: usbfs: process 6957 (syz.0.255) did not claim interface 49 before use [ 89.635180][ T40] audit: type=1400 audit(1766822189.635:402): avc: denied { relabelfrom } for pid=6958 comm="syz.1.257" name="MPTCPv6" dev="sockfs" ino=16549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 89.635273][ T6959] SELinux: Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped). [ 89.652985][ T40] audit: type=1400 audit(1766822189.645:403): avc: denied { relabelto } for pid=6958 comm="syz.1.257" name="MPTCPv6" dev="sockfs" ino=16549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:crypt_device_t:s0" [ 89.692465][ T40] audit: type=1400 audit(1766822189.682:404): avc: denied { mounton } for pid=6952 comm="syz.3.253" path="/65/file0" dev="9p" ino=75497545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.757131][ T6979] macvlan2: entered promiscuous mode [ 89.759091][ T6979] macvlan2: entered allmulticast mode [ 89.761571][ T6979] bond2: entered promiscuous mode [ 89.763670][ T6979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.769586][ T6979] bond2: left promiscuous mode [ 89.900325][ T40] audit: type=1400 audit(1766822189.888:405): avc: denied { ioctl } for pid=6988 comm="syz.4.263" path="socket:[14213]" dev="sockfs" ino=14213 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.932510][ T6993] openvswitch: netlink: Flow actions attr not present in new flow. [ 89.995769][ T40] audit: type=1400 audit(1766822189.972:406): avc: denied { bind } for pid=6996 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.006088][ T40] audit: type=1400 audit(1766822189.972:407): avc: denied { node_bind } for pid=6996 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 90.014330][ T40] audit: type=1400 audit(1766822189.972:408): avc: denied { read } for pid=6996 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.061682][ T6999] syzkaller0: entered promiscuous mode [ 90.064118][ T6999] syzkaller0: entered allmulticast mode [ 90.425066][ T7018] MTD: Couldn't look up './bus': -15 [ 90.428184][ T7018] netlink: 'syz.0.272': attribute type 4 has an invalid length. [ 90.590392][ T7014] comedi comedi3: pcl812: I/O port conflict (0x3e650253,16) [ 90.664585][ T7036] 9p: Bad value for 'afid' [ 90.756920][ T7041] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µ [ 90.859536][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.083968][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 91.256906][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.260776][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.264112][ T24] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 91.267708][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.271832][ T24] usb 9-1: config 0 descriptor?? [ 91.404929][ T5950] Bluetooth: hci2: command 0x0419 tx timeout [ 91.472382][ T7095] __nla_validate_parse: 10 callbacks suppressed [ 91.472394][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 91.495571][ T24] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 91.498386][ T24] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 91.511678][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.0004/input/input10 [ 91.530959][ T24] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 91.545677][ T24] usb 9-1: USB disconnect, device number 3 [ 91.613537][ T7102] fido_id[7102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/9-1/report_descriptor': No such file or directory [ 91.627943][ T7108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=7108 comm=syz.0.293 [ 91.631359][ T7111] netlink: 'syz.4.292': attribute type 21 has an invalid length. [ 91.636440][ T7108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7108 comm=syz.0.293 [ 91.640186][ T7111] netlink: 128 bytes leftover after parsing attributes in process `syz.4.292'. [ 91.646134][ T7111] netlink: 'syz.4.292': attribute type 4 has an invalid length. [ 91.649410][ T7111] netlink: 'syz.4.292': attribute type 5 has an invalid length. [ 91.670778][ T7111] netlink: 3 bytes leftover after parsing attributes in process `syz.4.292'. [ 91.685990][ T7115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.294'. [ 91.937545][ T6820] nci: nci_rsp_packet: unsupported rsp opcode 0xf03 [ 92.969394][ T7184] netlink: 'syz.0.308': attribute type 10 has an invalid length. [ 92.973830][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.977015][ T7184] bridge_slave_1: left allmulticast mode [ 92.978950][ T7184] bridge_slave_1: left promiscuous mode [ 92.980997][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.987792][ T7184] bridge_slave_1: entered promiscuous mode [ 92.990150][ T7184] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 93.126467][ T29] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 93.136929][ T6005] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 93.172442][ T55] Process accounting resumed [ 93.316834][ T6005] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.327005][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 93.332152][ T6005] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.339171][ T6005] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 93.344145][ T6005] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.350174][ T6005] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.355142][ T29] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 93.359207][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.363655][ T6005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.370277][ T6005] usb 9-1: config 0 descriptor?? [ 93.373228][ T29] usb 6-1: Product: syz [ 93.375338][ T29] usb 6-1: Manufacturer: syz [ 93.377481][ T29] usb 6-1: SerialNumber: syz [ 93.396600][ T29] usb 6-1: config 0 descriptor?? [ 93.407539][ T29] hub 6-1:0.0: bad descriptor, ignoring hub [ 93.410447][ T29] hub 6-1:0.0: probe with driver hub failed with error -5 [ 93.422403][ T29] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input12 [ 93.808544][ T7214] netlink: 328 bytes leftover after parsing attributes in process `syz.3.320'. [ 93.815967][ T6005] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 93.830107][ T6005] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 93.896305][ T6384] usb 6-1: USB disconnect, device number 7 [ 94.892948][ T7269] netlink: 'syz.3.334': attribute type 13 has an invalid length. [ 95.089181][ T7273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.092763][ T7273] batadv_slave_0: entered promiscuous mode [ 95.096230][ T7273] batadv_slave_0: entered allmulticast mode [ 95.200721][ T142] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 95.339496][ T142] usb 8-1: device descriptor read/64, error -71 [ 95.360887][ T6084] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.499894][ T6084] usb 5-1: device descriptor read/64, error -71 [ 95.607001][ T142] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 95.645090][ T7277] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 95.646986][ T7277] dvmrp1: persist enabled [ 95.651710][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 95.651724][ T40] audit: type=1400 audit(1766822195.265:446): avc: denied { read } for pid=7276 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.716054][ T40] audit: type=1400 audit(1766822195.331:447): avc: denied { read write } for pid=7278 comm="syz.1.338" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 95.724393][ T40] audit: type=1400 audit(1766822195.331:448): avc: denied { open } for pid=7278 comm="syz.1.338" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 95.756659][ T142] usb 8-1: device descriptor read/64, error -71 [ 95.780459][ T6084] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.875279][ T142] usb usb8-port1: attempt power cycle [ 95.924001][ T6084] usb 5-1: device descriptor read/64, error -71 [ 95.965745][ T7291] netlink: 248 bytes leftover after parsing attributes in process `syz.1.342'. [ 95.974029][ T40] audit: type=1400 audit(1766822195.565:449): avc: denied { watch } for pid=7290 comm="syz.1.342" path="/76/file1" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.981633][ T55] usb 9-1: USB disconnect, device number 4 [ 96.032610][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 96.035316][ T6084] usb usb5-port1: attempt power cycle [ 96.166670][ T40] audit: type=1400 audit(1766822195.742:450): avc: denied { relabelfrom } for pid=7293 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.177512][ T40] audit: type=1400 audit(1766822195.752:451): avc: denied { relabelto } for pid=7293 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.193398][ T40] audit: type=1400 audit(1766822195.752:452): avc: denied { write } for pid=7293 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.200865][ T40] audit: type=1400 audit(1766822195.752:453): avc: denied { read } for pid=7293 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.237746][ T142] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 96.259674][ T142] usb 8-1: device descriptor read/8, error -71 [ 96.288965][ T7299] 9p: Could not find request transport: v [ 96.292703][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 96.295695][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 96.328597][ T7302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.345'. [ 96.338459][ T7302] tipc: Started in network mode [ 96.340306][ T7302] tipc: Node identity 32e7594eb61a, cluster identity 4711 [ 96.342790][ T7302] tipc: Enabled bearer , priority 0 [ 96.347520][ T7302] tipc: Disabling bearer [ 96.398137][ T6084] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 96.419854][ T6084] usb 5-1: device descriptor read/8, error -71 [ 96.500612][ T7306] fuse: Unknown parameter '0x0000000000000004' [ 96.537112][ T142] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 96.538966][ T7306] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.569673][ T142] usb 8-1: device descriptor read/8, error -71 [ 96.697875][ T6084] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.701194][ T142] usb usb8-port1: unable to enumerate USB device [ 96.727863][ T6084] usb 5-1: device descriptor read/8, error -71 [ 96.794002][ T7316] syz.4.349 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 96.847371][ T6084] usb usb5-port1: unable to enumerate USB device [ 96.961825][ T7318] FAULT_INJECTION: forcing a failure. [ 96.961825][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.967600][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.1.351 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.967619][ T7318] Tainted: [L]=SOFTLOCKUP [ 96.967622][ T7318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.967629][ T7318] Call Trace: [ 96.967633][ T7318] [ 96.967637][ T7318] dump_stack_lvl+0x16c/0x1f0 [ 96.967671][ T7318] should_fail_ex+0x512/0x640 [ 96.967695][ T7318] _copy_from_user+0x2e/0xd0 [ 96.967712][ T7318] kstrtouint_from_user+0xd6/0x1d0 [ 96.967741][ T7318] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 96.967753][ T7318] ? __lock_acquire+0x436/0x2890 [ 96.967769][ T7318] ? lock_acquire+0x179/0x330 [ 96.967784][ T7318] proc_fail_nth_write+0x83/0x220 [ 96.967797][ T7318] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.967812][ T7318] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.967823][ T7318] vfs_write+0x2a0/0x11d0 [ 96.967838][ T7318] ? __pfx___mutex_lock+0x10/0x10 [ 96.967854][ T7318] ? __pfx_vfs_write+0x10/0x10 [ 96.967872][ T7318] ? __fget_files+0x20e/0x3c0 [ 96.967969][ T7318] ksys_write+0x12a/0x250 [ 96.967988][ T7318] ? __pfx_ksys_write+0x10/0x10 [ 96.968006][ T7318] ? fput+0x70/0xf0 [ 96.968017][ T7318] do_syscall_64+0xcd/0xf80 [ 96.968035][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.968049][ T7318] RIP: 0033:0x7f1d3bb8e27f [ 96.968059][ T7318] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 96.968070][ T7318] RSP: 002b:00007f1d39df6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 96.968082][ T7318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1d3bb8e27f [ 96.968089][ T7318] RDX: 0000000000000001 RSI: 00007f1d39df60a0 RDI: 0000000000000006 [ 96.968095][ T7318] RBP: 00007f1d39df6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.968101][ T7318] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 96.968107][ T7318] R13: 00007f1d3bde6038 R14: 00007f1d3bde5fa0 R15: 00007ffc9cd452a8 [ 96.968122][ T7318] [ 97.170423][ T7321] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.177303][ T7321] __nla_validate_parse: 5 callbacks suppressed [ 97.177316][ T7321] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.352'. [ 97.341688][ T7328] netlink: 'syz.4.354': attribute type 9 has an invalid length. [ 97.361526][ T7330] ip6erspan0: entered promiscuous mode [ 97.363779][ T7328] xt_NFQUEUE: number of total queues is 0 [ 97.367605][ T7328] netlink: 'syz.4.354': attribute type 9 has an invalid length. [ 97.736544][ T7346] "syz.4.359" (7346) uses obsolete ecb(arc4) skcipher [ 97.747415][ T7346] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 97.750168][ T7346] syzkaller0: linktype set to 823 [ 97.765350][ T7352] syzkaller0: entered promiscuous mode [ 97.768930][ T7352] syzkaller0: entered allmulticast mode [ 97.776234][ T7352] TC_ACT_REPEAT abuse ? [ 97.797856][ T7352] netlink: 168 bytes leftover after parsing attributes in process `syz.1.360'. [ 97.959204][ T7356] tmpfs: Bad value for 'mpol' [ 97.962803][ T40] audit: type=1400 audit(1766822197.426:454): avc: denied { lock } for pid=7355 comm="syz.1.362" path="socket:[17216]" dev="sockfs" ino=17216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.980775][ T40] audit: type=1400 audit(1766822197.435:455): avc: denied { add_name } for pid=7355 comm="syz.1.362" name="cpuacct.usage_percpu_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.091953][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 98.131394][ T7359] Bluetooth: MGMT ver 1.23 [ 98.268092][ T7373] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.355231][ T7379] sp0: Synchronizing with TNC [ 98.391234][ T7390] (syz.0.373,7390,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 98.392314][ T7384] [U] è [ 98.393978][ T7390] (syz.0.373,7390,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 98.398239][ T7390] (syz.0.373,7390,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 98.401064][ T7390] (syz.0.373,7390,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 98.446487][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 98.450253][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 98.453877][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 98.556337][ T6005] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 98.563917][ T6005] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 98.567371][ T6005] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 98.571573][ T6005] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 98.574986][ T6005] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 98.578377][ T6005] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 98.583496][ T6005] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 98.587315][ T6005] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 98.589960][ T7406] sp0: Synchronizing with TNC [ 98.591520][ T6005] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 98.596452][ T6005] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 98.605639][ T6005] hid-generic 0004:FFFFFFFF:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 98.687289][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 98.749383][ T7417] 9pnet_virtio: no channels available for device syz [ 98.814827][ T5984] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.836120][ T10] usb 8-1: device descriptor read/64, error -71 [ 98.868674][ T7419] netlink: 60 bytes leftover after parsing attributes in process `syz.4.381'. [ 98.873042][ T7419] unsupported nlmsg_type 40 [ 98.876503][ T7419] netlink: 'syz.4.381': attribute type 1 has an invalid length. [ 98.987757][ T5984] usb 5-1: config 0 has no interfaces? [ 98.990271][ T5984] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 98.994078][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.004716][ T5984] usb 5-1: config 0 descriptor?? [ 99.092813][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 99.231735][ T10] usb 8-1: device descriptor read/64, error -71 [ 99.241101][ T5984] usb 5-1: USB disconnect, device number 10 [ 99.351990][ T10] usb usb8-port1: attempt power cycle [ 99.452938][ T7443] ubi0: attaching mtd0 [ 99.454957][ T7443] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042) [ 99.585232][ T6005] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 99.713126][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 99.734903][ T10] usb 8-1: device descriptor read/8, error -71 [ 99.866910][ T7463] overlayfs: failed lookup in lower (newroot/110, name='file0', err=-40): overlapping layers [ 99.874719][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'. [ 99.908933][ T7463] overlayfs: failed lookup in lower (newroot/110, name='file0', err=-40): overlapping layers [ 99.991119][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 100.013307][ T10] usb 8-1: device descriptor read/8, error -71 [ 100.116045][ T7488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7488 comm=syz.1.396 [ 100.122597][ T7488] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 100.131019][ T10] usb usb8-port1: unable to enumerate USB device [ 100.176588][ T7488] bond1: (slave bridge1): making interface the new active one [ 100.180837][ T7488] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 108.881226][ T7516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.893189][ T7516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'. [ 108.944870][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'. [ 109.104640][ T7554] Cannot find del_set index 4 as target [ 109.116806][ T7553] sctp: [Deprecated]: syz.0.405 (pid 7553) Use of int in max_burst socket option. [ 109.116806][ T7553] Use struct sctp_assoc_value instead [ 109.234478][ T7561] netlink: 'syz.3.408': attribute type 15 has an invalid length. [ 109.237374][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.408'. [ 109.294086][ T7566] netlink: 'syz.0.410': attribute type 39 has an invalid length. [ 109.428053][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 109.428063][ T40] audit: type=1400 audit(1766822208.150:476): avc: denied { map } for pid=7575 comm="syz.4.411" path="socket:[19827]" dev="sockfs" ino=19827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 109.487097][ T7564] netlink: 'syz.3.409': attribute type 4 has an invalid length. [ 109.490104][ T7568] netlink: 'syz.3.409': attribute type 4 has an invalid length. [ 109.567470][ T40] audit: type=1400 audit(1766822208.272:477): avc: denied { create } for pid=7586 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 109.575323][ T40] audit: type=1400 audit(1766822208.291:478): avc: denied { read } for pid=7586 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 109.594412][ T7585] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.597908][ T7585] block device autoloading is deprecated and will be removed. [ 109.602004][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 109.775154][ T7595] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 110.162164][ T5977] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 110.249027][ T7650] netlink: 72 bytes leftover after parsing attributes in process `syz.3.425'. [ 110.253001][ T40] audit: type=1400 audit(1766822208.917:479): avc: denied { write } for pid=7642 comm="syz.3.425" path="socket:[21995]" dev="sockfs" ino=21995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 110.260203][ T7643] netlink: 72 bytes leftover after parsing attributes in process `syz.3.425'. [ 110.344019][ T5977] usb 5-1: Using ep0 maxpacket: 8 [ 110.351448][ T5977] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 110.354702][ T5977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.358170][ T5977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.361468][ T5977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.364805][ T5977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.369608][ T5977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.372684][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.604458][ T5977] usb 5-1: usb_control_msg returned -32 [ 110.606932][ T5977] usbtmc 5-1:16.0: can't read capabilities [ 110.686639][ T40] audit: type=1400 audit(1766822209.328:480): avc: denied { create } for pid=7683 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 110.729385][ T40] audit: type=1400 audit(1766822209.366:481): avc: denied { setopt } for pid=7683 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 110.747656][ T40] audit: type=1400 audit(1766822209.375:482): avc: denied { setopt } for pid=7686 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.802589][ T7687] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 110.812579][ T40] audit: type=1400 audit(1766822209.441:483): avc: denied { bind } for pid=7686 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.864614][ T7684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=7684 comm=syz.3.434 [ 110.870377][ T40] audit: type=1400 audit(1766822209.497:484): avc: denied { setattr } for pid=7686 comm="syz.4.435" name="SCTPv6" dev="sockfs" ino=19887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.969342][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 111.000708][ T7697] usbtmc 5-1:16.0: control status returned 65 [ 111.057899][ T6084] IPVS: starting estimator thread 0... [ 111.167831][ T7702] IPVS: using max 47 ests per chain, 112800 per kthread [ 111.217937][ T6084] usb 5-1: USB disconnect, device number 11 [ 111.280393][ T40] audit: type=1400 audit(1766822209.880:485): avc: denied { map } for pid=7710 comm="syz.4.444" path="socket:[22070]" dev="sockfs" ino=22070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.393273][ T7719] netlink: 'syz.4.445': attribute type 10 has an invalid length. [ 111.397604][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.401266][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.417296][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.421006][ T7719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.425338][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.428452][ T7719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.436299][ T7719] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 111.803863][ T7724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7724 comm=syz.0.446 [ 111.811259][ T7724] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 111.844261][ T7724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.863541][ T7724] bond3: (slave dummy0): making interface the new active one [ 111.867140][ T7724] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 112.229027][ T7742] block nbd0: NBD_DISCONNECT [ 112.301330][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 112.315736][ T7748] snd_dummy snd_dummy.0: control 0:0:-1:syz0:0 is already present [ 112.370744][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.456'. [ 112.419589][ T7754] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 112.428983][ T378] Bluetooth: hci4: Frame reassembly failed (-84) [ 112.432695][ T378] Bluetooth: hci4: Frame reassembly failed (-84) [ 112.452690][ T75] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 112.456975][ T7756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.456'. [ 112.460846][ T7756] nbd: nbd64 already in use [ 112.510469][ T5347] udevd[5347]: worker [7600] terminated by signal 33 (Unknown signal 33) [ 112.513918][ T5347] udevd[5347]: worker [7600] failed while handling '/devices/virtual/block/nbd64' [ 112.646485][ T75] usb 8-1: Using ep0 maxpacket: 32 [ 112.650657][ T75] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 112.655444][ T75] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 112.664972][ T75] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 112.668965][ T75] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.673236][ T75] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.684820][ T7771] bond0: entered promiscuous mode [ 112.688724][ T7771] bond_slave_0: entered promiscuous mode [ 112.691285][ T75] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 112.691387][ T7771] bond_slave_1: entered promiscuous mode [ 112.695705][ T75] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 112.695721][ T75] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.707210][ T7771] bridge_slave_1: entered promiscuous mode [ 112.708009][ T75] usb 8-1: config 0 descriptor?? [ 112.728058][ T5347] udevd[5347]: worker [7508] terminated by signal 33 (Unknown signal 33) [ 112.731781][ T5347] udevd[5347]: worker [7508] failed while handling '/devices/platform/dummy_hcd.3/usb8/8-1' [ 112.931690][ T75] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 112.948298][ T75] usb 8-1: USB disconnect, device number 12 [ 112.957801][ T75] usblp0: removed [ 113.413642][ T6084] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 113.573963][ T6084] usb 8-1: Using ep0 maxpacket: 32 [ 113.590235][ T6084] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.593859][ T6084] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.598069][ T6084] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.602160][ T6084] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.606934][ T6084] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.611247][ T6084] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.617547][ T6084] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.621762][ T6084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.638783][ T6084] usb 8-1: config 0 descriptor?? [ 113.862358][ T6084] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 113.948127][ T7805] syzkaller0: entered promiscuous mode [ 113.950130][ T7805] syzkaller0: entered allmulticast mode [ 114.468228][ T5977] usb 8-1: USB disconnect, device number 13 [ 114.475131][ T5977] usblp0: removed [ 114.579383][ T5298] Bluetooth: hci4: command 0x1003 tx timeout [ 114.582434][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.627739][ T7833] comedi comedi3: comedi_config --init_data is deprecated [ 114.631837][ T7828] No such timeout policy "syz1" [ 114.803008][ T7851] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 114.807947][ T7851] __nla_validate_parse: 3 callbacks suppressed [ 114.807958][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 114.910969][ T5977] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 115.043165][ T7857] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.059287][ T7858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.080764][ T7857] team0: Mode changed to "loadbalance" [ 115.082023][ T5977] usb 6-1: Using ep0 maxpacket: 32 [ 115.086256][ T6384] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 115.086903][ T5977] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.090937][ T7857] overlayfs: failed to clone upperpath [ 115.092465][ T5977] usb 6-1: config 0 has no interface number 0 [ 115.100189][ T7857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.105804][ T5977] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 115.109807][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.113822][ T5977] usb 6-1: Product: syz [ 115.116307][ T5977] usb 6-1: Manufacturer: syz [ 115.118324][ T5977] usb 6-1: SerialNumber: syz [ 115.122958][ T5977] usb 6-1: config 0 descriptor?? [ 115.128099][ T5977] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 115.131834][ T5977] usb 6-1: selecting invalid altsetting 1 [ 115.134367][ T5977] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 115.142848][ T5977] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.147897][ T5977] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 115.151651][ T5977] usb 6-1: media controller created [ 115.163057][ T5977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.266141][ T6384] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.269242][ T6384] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 115.272275][ T6384] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.275834][ T6384] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 115.279385][ T6384] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 115.284896][ T6384] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.288336][ T6384] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.291016][ T6384] usb 5-1: Product: syz [ 115.292301][ T6384] usb 5-1: Manufacturer: syz [ 115.300293][ T6384] cdc_wdm 5-1:1.0: skipping garbage [ 115.302319][ T6384] cdc_wdm 5-1:1.0: skipping garbage [ 115.307526][ T6384] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 115.310128][ T6384] cdc_wdm 5-1:1.0: Unknown control protocol [ 115.341101][ T7833] program syz.1.481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.653642][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 115.653653][ T40] audit: type=1400 audit(1766822213.966:498): avc: denied { write } for pid=7864 comm="syz.4.492" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.664379][ T40] audit: type=1400 audit(1766822213.966:499): avc: denied { open } for pid=7864 comm="syz.4.492" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.692451][ T6384] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 115.794112][ T40] audit: type=1400 audit(1766822214.097:500): avc: denied { accept } for pid=7877 comm="syz.3.497" lport=43699 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.804197][ T40] audit: type=1400 audit(1766822214.097:501): avc: denied { setopt } for pid=7877 comm="syz.3.497" lport=43699 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 115.814639][ T40] audit: type=1400 audit(1766822214.097:502): avc: denied { read } for pid=7877 comm="syz.3.497" lport=43699 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 115.894579][ T7876] bond0: (slave wlan1): Releasing backup interface [ 115.929946][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 116.104719][ T40] audit: type=1400 audit(1766822214.387:503): avc: denied { read write } for pid=7849 comm="syz.0.487" name="cdc-wdm0" dev="devtmpfs" ino=2991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 116.116743][ T40] audit: type=1400 audit(1766822214.387:504): avc: denied { open } for pid=7849 comm="syz.0.487" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 116.293414][ T5977] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 116.296635][ T5977] zl10353_read_register: readreg error (reg=127, ret==-110) [ 116.313776][ T40] audit: type=1400 audit(1766822214.583:505): avc: denied { mounton } for pid=7891 comm="syz.4.500" path="/116/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 116.323171][ T5977] usb 6-1: USB disconnect, device number 8 [ 116.331872][ T142] usb 5-1: USB disconnect, device number 12 [ 116.371962][ T7898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.374967][ T7898] overlayfs: missing 'lowerdir' [ 116.437242][ T7906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.503'. [ 116.548008][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.505'. [ 116.552120][ T7912] gre0: Master is either lo or non-ether device [ 116.568219][ T7912] netlink: 'syz.3.505': attribute type 21 has an invalid length. [ 116.571475][ T7912] netlink: 156 bytes leftover after parsing attributes in process `syz.3.505'. [ 116.640811][ T7921] fuse: Bad value for 'fd' [ 116.695884][ T40] audit: type=1400 audit(1766822214.938:506): avc: denied { create } for pid=7922 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 116.813880][ T7928] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 116.936245][ T7939] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.514'. [ 116.976472][ T40] audit: type=1400 audit(1766822215.210:507): avc: denied { write } for pid=7941 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.989364][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 116.993101][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 117.067769][ T7955] netlink: 64 bytes leftover after parsing attributes in process `syz.1.518'. [ 117.090442][ T7953] x_tables: duplicate underflow at hook 3 [ 117.136321][ T7900] overlayfs: statfs failed on './file0' [ 117.298371][ T7973] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 117.477718][ T5977] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 117.604288][ T7987] usb usb8: check_ctrlrecip: process 7987 (syz.4.529) requesting ep 01 but needs 81 [ 117.608531][ T7987] usb usb8: usbfs: process 7987 (syz.4.529) did not claim interface 0 before use [ 117.627442][ T5977] usb 5-1: device descriptor read/64, error -71 [ 117.650453][ T7989] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 117.654133][ T7989] netlink: 16142 bytes leftover after parsing attributes in process `syz.1.527'. [ 117.884096][ T5977] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 118.006025][ T8026] 9p: Could not find request transport: virti [ 118.008406][ T8025] 9p: Could not find request transport: virti [ 118.023406][ T5977] usb 5-1: device descriptor read/64, error -71 [ 118.088819][ T8031] bridge0: port 3(gretap0) entered blocking state [ 118.092257][ T8031] bridge0: port 3(gretap0) entered disabled state [ 118.095439][ T8031] gretap0: entered allmulticast mode [ 118.100802][ T8031] gretap0: entered promiscuous mode [ 118.103827][ T8031] bridge0: port 3(gretap0) entered blocking state [ 118.107192][ T8031] bridge0: port 3(gretap0) entered forwarding state [ 118.151742][ T5977] usb usb5-port1: attempt power cycle [ 118.192527][ T8043] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 118.322683][ T8046] Bluetooth: MGMT ver 1.23 [ 118.547485][ T5977] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 118.579931][ T5977] usb 5-1: device descriptor read/8, error -71 [ 118.734437][ T8077] Bluetooth: MGMT ver 1.23 [ 118.846710][ T5977] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 118.879427][ T5977] usb 5-1: device descriptor read/8, error -71 [ 118.880616][ T8092] virtio-fs: tag not found [ 118.996913][ T5977] usb usb5-port1: unable to enumerate USB device [ 119.484357][ T8126] erofs (device loop1): cannot find valid erofs superblock [ 119.489616][ T5977] IPVS: starting estimator thread 0... [ 119.584669][ T8127] IPVS: using max 48 ests per chain, 115200 per kthread [ 119.846880][ T8138] netlink: 'syz.4.576': attribute type 10 has an invalid length. [ 119.846935][ T8139] netlink: 'syz.4.576': attribute type 10 has an invalid length. [ 120.027750][ T8160] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 120.042112][ T8160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.069938][ T8160] veth3: entered promiscuous mode [ 120.075337][ T8160] bond1: (slave veth3): Enslaving as an active interface with a down link [ 120.083321][ T8159] bond1: entered allmulticast mode [ 120.205642][ T8168] sd 0:0:0:0: PR command failed: 1026 [ 120.207716][ T8168] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 120.210645][ T8168] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 120.483813][ T5977] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 120.607715][ T8181] __nla_validate_parse: 4 callbacks suppressed [ 120.607732][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 120.645180][ T5977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.650011][ T5977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.656785][ T5977] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.661672][ T8190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 120.661733][ T5977] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.668217][ T5977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.672520][ T5977] usb 9-1: config 0 descriptor?? [ 120.733543][ T8185] cgroup: Need name or subsystem set [ 120.768957][ T8193] 9p: Bad value for 'wfdno' [ 120.813637][ T8201] netlink: 2 bytes leftover after parsing attributes in process `syz.3.593'. [ 120.916297][ T8212] veth0_to_team: entered promiscuous mode [ 121.092651][ T142] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 121.108992][ T5977] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 121.125141][ T5977] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 121.275566][ T8231] loop9: detected capacity change from 0 to 7 [ 121.281860][ T7787] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.285646][ T7787] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.289134][ T7787] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.292777][ T7787] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.296960][ T7787] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.300699][ T7787] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.304353][ T7787] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.308013][ T7787] ldm_validate_partition_table(): Disk read failed. [ 121.311261][ T7787] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.314654][ T7787] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.327992][ T7787] Buffer I/O error on dev loop9, logical block 0, async page read [ 121.331824][ T7787] Dev loop9: unable to read RDB block 0 [ 121.334357][ T7787] loop9: unable to read partition table [ 121.337168][ T7787] loop9: partition table beyond EOD, truncated [ 121.339687][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.343842][ T5950] Bluetooth: hci2: command 0x0419 tx timeout [ 121.350197][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.354245][ T8231] ldm_validate_partition_table(): Disk read failed. [ 121.360508][ T8231] Dev loop9: unable to read RDB block 0 [ 121.361002][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.362866][ T8231] loop9: unable to read partition table [ 121.367855][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.368527][ T8231] loop9: partition table beyond EOD, truncated [ 121.373963][ T8231] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 121.373963][ T8231] ) failed (rc=-5) [ 121.380079][ T8235] ldm_validate_partition_table(): Disk read failed. [ 121.390439][ T8235] Dev loop9: unable to read RDB block 0 [ 121.392699][ T8235] loop9: unable to read partition table [ 121.394727][ T8235] loop9: partition table beyond EOD, truncated [ 121.404743][ T6084] usb 9-1: USB disconnect, device number 5 [ 121.716834][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 121.716846][ T40] audit: type=1400 audit(1766822219.632:524): avc: denied { watch watch_reads } for pid=8245 comm="syz.0.606" path="pipe:[7014]" dev="pipefs" ino=7014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 121.742097][ T8246] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.779450][ T8249] Invalid logical block size (-3) [ 121.909399][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 121.999015][ T40] audit: type=1400 audit(1766822219.894:525): avc: denied { bind } for pid=8264 comm="syz.0.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.012113][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.613'. [ 122.020948][ T40] audit: type=1400 audit(1766822219.894:526): avc: denied { listen } for pid=8264 comm="syz.0.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.093683][ T8280] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 122.131290][ T40] audit: type=1400 audit(1766822220.025:527): avc: denied { connect } for pid=8262 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 122.184615][ T8280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.187606][ T8284] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 122.238328][ T8281] bond4: (slave veth5): Enslaving as an active interface with a down link [ 122.272821][ T8285] bond4: (slave veth7): Enslaving as an active interface with a down link [ 122.276814][ T8263] netlink: 'syz.1.611': attribute type 10 has an invalid length. [ 122.279619][ T8263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.611'. [ 122.286522][ T8280] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 122.289038][ T8280] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 122.319155][ T8263] team0: Port device geneve0 added [ 122.486821][ T8300] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 122.488998][ T40] audit: type=1400 audit(1766822220.352:528): avc: denied { ioctl } for pid=8297 comm="syz.1.619" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.572411][ T40] audit: type=1400 audit(1766822220.436:529): avc: denied { write } for pid=8297 comm="syz.1.619" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 122.586588][ T8298] 0x000000002f70-0x000000020000 : "" [ 122.597190][ T40] audit: type=1400 audit(1766822220.446:530): avc: denied { open } for pid=8297 comm="syz.1.619" path="/165/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 122.602462][ T8298] ftl_cs: FTL header corrupt! [ 122.608359][ T40] audit: type=1400 audit(1766822220.446:531): avc: denied { ioctl } for pid=8297 comm="syz.1.619" path="/165/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 122.702721][ T8313] overlayfs: failed to clone upperpath [ 122.712835][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 122.897191][ T40] audit: type=1400 audit(1766822220.735:532): avc: denied { bind } for pid=8334 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.938406][ T8337] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 122.944172][ T8337] netlink: 'syz.3.634': attribute type 4 has an invalid length. [ 122.949064][ T8337] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.634'. [ 122.952714][ T8337] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 122.956544][ T8337] netlink: 'syz.3.634': attribute type 4 has an invalid length. [ 122.959270][ T8337] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.634'. [ 122.963874][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 123.014828][ T8344] overlayfs: failed to clone upperpath [ 123.210306][ T75] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 123.306922][ T8342] syz.4.636 (8342): /proc/8340/oom_adj is deprecated, please use /proc/8340/oom_score_adj instead. [ 123.373318][ T75] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.378093][ T75] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.382314][ T75] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.387551][ T75] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.391291][ T75] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.401042][ T75] usb 5-1: config 0 descriptor?? [ 123.425780][ T8341] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 123.429153][ T8341] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 123.432873][ T8341] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 123.436827][ T8341] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 123.840497][ T75] hid_parser_main: 22 callbacks suppressed [ 123.840512][ T75] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x1 [ 123.845241][ T75] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 123.847966][ T75] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 123.854274][ T75] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 124.053072][ T40] audit: type=1400 audit(1766822221.820:533): avc: denied { write } for pid=8338 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 124.069283][ T142] usb 5-1: USB disconnect, device number 17 [ 124.172916][ T5298] Bluetooth: hci2: command 0x0419 tx timeout [ 124.173113][ T5977] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 124.177721][ T5977] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 124.205111][ T75] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 124.378858][ T75] usb 9-1: Using ep0 maxpacket: 16 [ 124.382195][ T75] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 124.385503][ T75] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 124.390618][ T75] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.397586][ T75] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.401789][ T75] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.405509][ T75] usb 9-1: Product: syz [ 124.408289][ T75] usb 9-1: Manufacturer: syz [ 124.410345][ T75] usb 9-1: SerialNumber: syz [ 124.786180][ T8403] veth1_to_bond: Caught tx_queue_len zero misconfig [ 124.805000][ T8403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8403 comm=syz.3.652 [ 124.826760][ T8400] team0: No ports can be present during mode change [ 125.179398][ T8413] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 125.653541][ T8432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.073301][ T40] kauditd_printk_skb: 17289 callbacks suppressed [ 127.073314][ T40] audit: type=1326 audit(1766822224.634:17823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.3.653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ff00000 [ 127.084688][ T40] audit: type=1326 audit(1766822224.644:17824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.3.653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ff00000 [ 127.092302][ T40] audit: type=1326 audit(1766822224.644:17825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.3.653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ff00000 [ 127.101528][ T40] audit: type=1326 audit(1766822224.644:17826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.3.653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ff00000 [ 127.109606][ T40] audit: type=1326 audit(1766822224.644:17827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.3.653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ff00000 [ 127.118696][ T40] audit: type=1326 audit(1766822224.644:17828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.3.653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ff00000 [ 127.126948][ T40] audit: type=1326 audit(1766822224.644:17829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.3.653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ff00000 [ 127.137871][ T40] audit: type=1326 audit(1766822224.644:17830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.3.653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ff00000 [ 127.147651][ T40] audit: type=1326 audit(1766822224.644:17831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.3.653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ff00000 [ 127.156324][ T40] audit: type=1326 audit(1766822224.644:17832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.3.653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ff00000 [ 127.236110][ T75] usb 9-1: 0:2 : does not exist [ 127.259756][ T75] usb 9-1: USB disconnect, device number 6 [ 127.268206][ T8449] tmpfs: Unknown parameter 'usrq}otõ¤:›aÙ§œhardlimit' [ 127.272463][ T8449] overlayfs: failed to resolve './file0': -2 [ 127.297292][ T7787] udevd[7787]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.293173][ T8474] ip6t_srh: unknown srh match flags 4000 [ 128.376863][ T8477] __nla_validate_parse: 1 callbacks suppressed [ 128.376876][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'. [ 128.382690][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'. [ 128.745861][ T8498] netlink: 'syz.4.679': attribute type 5 has an invalid length. [ 128.874448][ T8506] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 129.040476][ T8518] futex_wake_op: syz.3.686 tries to shift op by 32; fix this program [ 129.172286][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 129.206996][ T8526] bond2: Invalid ad_actor_system MAC address. [ 129.209138][ T8526] bond2: option ad_actor_system: invalid value (255) [ 129.223332][ T8526] bond2 (unregistering): Released all slaves [ 129.444850][ T8539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.482099][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 130.263343][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 130.759987][ T8587] : entered promiscuous mode [ 131.035975][ T8599] Process accounting resumed [ 131.287055][ T8614] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 131.313849][ T8614] netlink: 32 bytes leftover after parsing attributes in process `syz.4.715'. [ 131.325862][ T8614] bond1: (slave bridge4): making interface the new active one [ 131.329268][ T8614] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 131.335376][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.715'. [ 131.340453][ T8614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.380675][ T8617] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 131.384323][ T8617] netlink: 232 bytes leftover after parsing attributes in process `syz.4.716'. [ 131.475838][ T8633] lo: Caught tx_queue_len zero misconfig [ 131.644793][ T8643] bridge_slave_0: left allmulticast mode [ 131.647340][ T8643] bridge_slave_0: left promiscuous mode [ 131.650521][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.660588][ T8643] bond0: (slave bridge_slave_1): Releasing backup interface [ 131.664422][ T8643] bridge_slave_1: left promiscuous mode [ 131.674359][ T8643] bond0: (slave bond_slave_0): Releasing backup interface [ 131.677966][ T8643] bond_slave_0: left promiscuous mode [ 131.685369][ T8643] bond0: (slave bond_slave_1): Releasing backup interface [ 131.689430][ T8643] bond_slave_1: left promiscuous mode [ 131.706177][ T8643] team0: Port device team_slave_0 removed [ 131.719531][ T8643] team0: Port device team_slave_1 removed [ 131.724503][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.727888][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.732906][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.737056][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.742079][ T8643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.762329][ T8643] vlan0: entered promiscuous mode [ 131.776654][ T8643] team0: Port device vlan0 added [ 131.783928][ T8643] tipc: Enabled bearer , priority 0 [ 131.864163][ T29] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 131.876111][ T8651] kvm: user requested TSC rate below hardware speed [ 131.879631][ T8652] kvm: user requested TSC rate below hardware speed [ 131.883273][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 131.944595][ T8652] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 132.012498][ T29] usb 9-1: device descriptor read/64, error -71 [ 132.281908][ T29] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 132.431713][ T29] usb 9-1: device descriptor read/64, error -71 [ 132.547329][ T29] usb usb9-port1: attempt power cycle [ 132.859695][ T10] tipc: Node number set to 2231195982 [ 132.871762][ T8663] syzkaller1: entered promiscuous mode [ 132.873748][ T8663] syzkaller1: entered allmulticast mode [ 132.921611][ T29] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 132.943482][ T29] usb 9-1: device descriptor read/8, error -71 [ 133.040467][ T8667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.135457][ T40] kauditd_printk_skb: 8665 callbacks suppressed [ 133.135473][ T40] audit: type=1400 audit(1766822230.310:26498): avc: denied { name_bind } for pid=8671 comm="syz.1.733" path="socket:[27858]" dev="sockfs" ino=27858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 133.199711][ T29] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 133.221519][ T29] usb 9-1: device descriptor read/8, error -71 [ 133.360595][ T29] usb usb9-port1: unable to enumerate USB device [ 133.681852][ T8712] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 133.726451][ T40] audit: type=1400 audit(1766822230.871:26499): avc: denied { mounton } for pid=8711 comm="syz.1.743" path="/file0" dev="ramfs" ino=27221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 133.734757][ T8712] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 133.737267][ T8712] overlayfs: failed to set xattr on upper [ 133.739160][ T8712] overlayfs: ...falling back to redirect_dir=nofollow. [ 133.741463][ T8712] overlayfs: ...falling back to index=off. [ 133.744275][ T8712] overlayfs: ...falling back to uuid=null. [ 133.749371][ T8712] overlayfs: cleanup of 'bus/work' failed (-13) [ 133.751646][ T8712] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 133.754747][ T8712] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.761945][ T8712] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 134.584489][ T40] audit: type=1326 audit(1766822231.666:26500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8726 comm="syz.3.748" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ffc0000 [ 134.592381][ T40] audit: type=1326 audit(1766822231.666:26501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8726 comm="syz.3.748" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ffc0000 [ 134.602318][ T40] audit: type=1326 audit(1766822231.675:26502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8726 comm="syz.3.748" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fea0fd8f7c9 code=0x7ffc0000 [ 134.614580][ T40] audit: type=1326 audit(1766822231.675:26503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8726 comm="syz.3.748" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ffc0000 [ 134.623133][ T40] audit: type=1326 audit(1766822231.675:26504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8726 comm="syz.3.748" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea0fd8f7c9 code=0x7ffc0000 [ 134.630858][ T40] audit: type=1326 audit(1766822231.675:26505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8726 comm="syz.3.748" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea0fd916e7 code=0x7ffc0000 [ 134.638781][ T40] audit: type=1326 audit(1766822231.675:26506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8726 comm="syz.3.748" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fea0fd9165c code=0x7ffc0000 [ 134.649082][ T40] audit: type=1326 audit(1766822231.675:26507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8726 comm="syz.3.748" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fea0fd91594 code=0x7ffc0000 [ 134.844907][ T8745] binder: binder_mmap: 8744 200000000000-200000003000 bad vm_flags failed -1 [ 134.986536][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.758'. [ 135.147012][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 135.315411][ T8795] Cannot find add_set index 0 as target [ 135.707527][ T8815] netlink: 'syz.3.773': attribute type 1 has an invalid length. [ 135.750445][ T8815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.773'. [ 135.847138][ T8821] overlay: Unknown parameter '/' [ 135.888453][ T8826] binder: 8825:8826 ioctl 4018620d 0 returned -22 [ 136.241557][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 136.244626][ T8832] netlink: 'syz.4.778': attribute type 30 has an invalid length. [ 136.247299][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 136.682890][ T8853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.785'. [ 136.943274][ T6005] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 136.956363][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.790'. [ 137.082020][ T6005] usb 9-1: device descriptor read/64, error -71 [ 137.250960][ T8882] xt_CT: No such helper "pptp" [ 137.338930][ T6005] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 137.452982][ T8895] netlink: 348 bytes leftover after parsing attributes in process `syz.3.800'. [ 137.477891][ T6005] usb 9-1: device descriptor read/64, error -71 [ 137.502876][ T8897] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 137.515467][ T8897] netlink: 'syz.3.801': attribute type 10 has an invalid length. [ 137.527943][ T8897] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 137.532432][ T8897] team0: Failed to send options change via netlink (err -105) [ 137.535662][ T8897] team0: Port device dummy0 added [ 137.540397][ T8897] netlink: 'syz.3.801': attribute type 5 has an invalid length. [ 137.595928][ T6005] usb usb9-port1: attempt power cycle [ 137.959228][ T6005] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 137.981727][ T6005] usb 9-1: device descriptor read/8, error -71 [ 138.000109][ T8918] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 138.032756][ T8918] bond3: entered promiscuous mode [ 138.035632][ T8918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.050851][ T8918] bond3: (slave bridge3): making interface the new active one [ 138.053346][ T8918] bridge3: entered promiscuous mode [ 138.055935][ T8918] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 138.118902][ T8926] tipc: Can't bind to reserved service type 2 [ 138.207929][ T8936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.813'. [ 138.212255][ T8935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.813'. [ 138.237458][ T6005] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 138.260040][ T6005] usb 9-1: device descriptor read/8, error -71 [ 138.271173][ T8935] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8935 comm=syz.3.813 [ 138.376582][ T6005] usb usb9-port1: unable to enumerate USB device [ 138.409566][ T8940] 0·: renamed from hsr0 (while UP) [ 138.416110][ T8940] 0·: entered allmulticast mode [ 138.418446][ T8940] hsr_slave_0: entered allmulticast mode [ 138.421974][ T8940] hsr_slave_1: entered allmulticast mode [ 138.424287][ T8940] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 138.711816][ T8961] team0: Device gtp0 is up. Set it down before adding it as a team port [ 138.828145][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 138.828155][ T40] audit: type=1326 audit(1767346523.632:26539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.3.822" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea0fd8f7c9 code=0x0 [ 139.058051][ T40] audit: type=1326 audit(1767346523.847:26540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.1.823" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d3bb8f7c9 code=0x0 [ 139.148485][ T40] audit: type=1400 audit(1767346523.940:26541): avc: denied { mount } for pid=8967 comm="syz.1.824" name="/" dev="pstore" ino=6624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 139.156309][ T40] audit: type=1400 audit(1767346523.940:26542): avc: denied { remount } for pid=8967 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 139.167071][ T40] audit: type=1400 audit(1767346523.950:26543): avc: denied { mounton } for pid=8967 comm="syz.1.824" path="/229/file0" dev="pstore" ino=6624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 139.178933][ T40] audit: type=1400 audit(1767346523.959:26544): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 139.213824][ T8972] netlink: 'syz.1.825': attribute type 4 has an invalid length. [ 139.674739][ T40] audit: type=1400 audit(1767346524.426:26545): avc: denied { execute } for pid=8981 comm="syz.1.829" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 139.990967][ T9007] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 139.993641][ T9007] netlink: 'syz.1.832': attribute type 2 has an invalid length. [ 140.026708][ T5977] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 140.030252][ T5977] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 140.036580][ T5977] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 140.045719][ T5977] hid-generic 0003:0004:0000.0009: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 140.151640][ T40] audit: type=1400 audit(1767346524.866:26546): avc: denied { ioctl } for pid=9008 comm="syz.4.833" path="socket:[29078]" dev="sockfs" ino=29078 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.160364][ T40] audit: type=1400 audit(1767346524.866:26547): avc: denied { ioctl } for pid=9008 comm="syz.4.833" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 140.433631][ T9023] openvswitch: netlink: Multiple metadata blocks provided [ 140.533085][ T9030] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28441 sclass=netlink_xfrm_socket pid=9030 comm=syz.1.839 [ 140.602092][ T9032] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.605813][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.608834][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.774468][ T9040] __nla_validate_parse: 3 callbacks suppressed [ 140.774484][ T9040] netlink: 1 bytes leftover after parsing attributes in process `syz.3.843'. [ 140.792343][ T5947] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.795859][ T5947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.799194][ T5947] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.802597][ T5947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.806199][ T5947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.817608][ T5950] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.821184][ T5950] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.823597][ T5950] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.827699][ T5950] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.830412][ T5950] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.950038][ T9052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.962638][ T9055] xt_nfacct: accounting object `syz0' does not exist [ 141.040080][ T9042] chnl_net:caif_netlink_parms(): no params data found [ 141.121895][ T9042] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.124339][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.126943][ T9042] bridge_slave_0: entered allmulticast mode [ 141.129835][ T9042] bridge_slave_0: entered promiscuous mode [ 141.133337][ T9042] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.135754][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.138966][ T9042] bridge_slave_1: entered allmulticast mode [ 141.141849][ T9042] bridge_slave_1: entered promiscuous mode [ 141.173530][ T9042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.178119][ T9042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.204533][ T9042] team0: Port device team_slave_0 added [ 141.209513][ T9042] team0: Port device team_slave_1 added [ 141.226753][ T9042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.229172][ T9042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.241842][ T9042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.248920][ T9042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.251946][ T9042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.263811][ T9042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.305167][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.310684][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.340071][ T9042] hsr_slave_0: entered promiscuous mode [ 141.342927][ T9042] hsr_slave_1: entered promiscuous mode [ 141.345245][ T9042] debugfs: 'hsr0' already exists in 'hsr' [ 141.347375][ T9042] Cannot create hsr debugfs directory [ 141.413052][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.417977][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.490793][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.494353][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.526250][ T9042] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.534036][ T9042] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.540642][ T9042] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.547505][ T9042] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.587617][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.590959][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.648009][ T9042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.685113][ T9042] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.693811][ T4101] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.697030][ T4101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.701320][ T40] audit: type=1400 audit(1767346526.314:26548): avc: denied { mount } for pid=9081 comm="syz.4.852" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 141.720560][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.723818][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.803486][ T9042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.861903][ T13] bridge_slave_0: left allmulticast mode [ 141.866241][ T13] bridge_slave_0: left promiscuous mode [ 141.869046][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.879175][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.893891][ T9093] xt_hashlimit: size too large, truncated to 1048576 [ 141.946947][ T9095] Illegal XDP return value 2410920438 on prog (id 226) dev N/A, expect packet loss! [ 142.827471][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 142.998534][ T5947] Bluetooth: hci5: command tx timeout [ 144.671329][ T9106] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.857'. [ 144.675683][ T9106] overlayfs: failed to resolve 'sync': -2 [ 145.223603][ T5947] Bluetooth: hci5: command tx timeout [ 147.438301][ T5947] Bluetooth: hci5: command tx timeout [ 149.663474][ T5947] Bluetooth: hci5: command tx timeout [ 157.393300][ T1422] ================================================================== [ 157.395975][ T1422] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 157.398375][ T1422] Read of size 1 at addr ffff8880389dc490 by task aoe_tx0/1422 [ 157.403614][ T1422] [ 157.405144][ T1422] CPU: 1 UID: 0 PID: 1422 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.405173][ T1422] Tainted: [L]=SOFTLOCKUP [ 157.405179][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.405190][ T1422] Call Trace: [ 157.405197][ T1422] [ 157.405203][ T1422] dump_stack_lvl+0x116/0x1f0 [ 157.405223][ T1422] print_report+0xcd/0x630 [ 157.405238][ T1422] ? __virt_addr_valid+0x81/0x610 [ 157.405250][ T1422] ? __phys_addr+0xe8/0x180 [ 157.405260][ T1422] ? handle_tx+0x5dc/0x630 [ 157.405277][ T1422] kasan_report+0xe0/0x110 [ 157.405292][ T1422] ? handle_tx+0x5dc/0x630 [ 157.405310][ T1422] handle_tx+0x5dc/0x630 [ 157.405327][ T1422] dev_hard_start_xmit+0x97/0x6e0 [ 157.405346][ T1422] __dev_queue_xmit+0x6d7/0x4650 [ 157.405365][ T1422] ? rcu_is_watching+0x12/0xc0 [ 157.405378][ T1422] ? finish_task_switch.isra.0+0x207/0xbd0 [ 157.405397][ T1422] ? __pfx___dev_queue_xmit+0x10/0x10 [ 157.405416][ T1422] ? __lock_acquire+0x436/0x2890 [ 157.405430][ T1422] ? ref_tracker_free+0x37c/0x830 [ 157.405450][ T1422] ? do_raw_spin_lock+0x12c/0x2b0 [ 157.405468][ T1422] ? rcu_is_watching+0x12/0xc0 [ 157.405479][ T1422] tx+0xcc/0x190 [ 157.405494][ T1422] ? __pfx_tx+0x10/0x10 [ 157.405507][ T1422] kthread+0x1e4/0x3e0 [ 157.405519][ T1422] ? find_held_lock+0x2b/0x80 [ 157.405536][ T1422] ? __pfx_kthread+0x10/0x10 [ 157.405548][ T1422] ? __pfx_default_wake_function+0x10/0x10 [ 157.405567][ T1422] ? lockdep_hardirqs_on+0x7c/0x110 [ 157.405582][ T1422] ? __kthread_parkme+0x19e/0x250 [ 157.405594][ T1422] ? __pfx_kthread+0x10/0x10 [ 157.405605][ T1422] kthread+0x3c5/0x780 [ 157.405619][ T1422] ? __pfx_kthread+0x10/0x10 [ 157.405632][ T1422] ? rcu_is_watching+0x12/0xc0 [ 157.405642][ T1422] ? __pfx_kthread+0x10/0x10 [ 157.405656][ T1422] ret_from_fork+0x983/0xb10 [ 157.405669][ T1422] ? __pfx_ret_from_fork+0x10/0x10 [ 157.405682][ T1422] ? __switch_to+0x7af/0x10d0 [ 157.405696][ T1422] ? __pfx_kthread+0x10/0x10 [ 157.405710][ T1422] ret_from_fork_asm+0x1a/0x30 [ 157.405731][ T1422] [ 157.405735][ T1422] [ 157.481130][ T1422] Allocated by task 8982: [ 157.482819][ T1422] kasan_save_stack+0x33/0x60 [ 157.484909][ T1422] kasan_save_track+0x14/0x30 [ 157.485003][ T5298] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.486411][ T1422] __kasan_kmalloc+0xaa/0xb0 [ 157.486428][ T1422] alloc_tty_struct+0x96/0x8c0 [ 157.490047][ T5298] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.490715][ T1422] tty_init_dev.part.0+0x1e/0x500 [ 157.495629][ T5298] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.496931][ T1422] tty_open+0xa4f/0xf90 [ 157.500751][ T1422] chrdev_open+0x234/0x6a0 [ 157.500936][ T5298] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.502191][ T1422] do_dentry_open+0x748/0x1590 [ 157.505654][ T5298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.506110][ T1422] vfs_open+0x82/0x3f0 [ 157.510510][ T1422] path_openat+0x2078/0x3140 [ 157.512054][ T1422] do_filp_open+0x20b/0x470 [ 157.513540][ T1422] do_sys_openat2+0x121/0x290 [ 157.515080][ T1422] __x64_sys_openat+0x174/0x210 [ 157.516671][ T1422] do_syscall_64+0xcd/0xf80 [ 157.518107][ T1422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.520039][ T1422] [ 157.520991][ T1422] Freed by task 55: [ 157.522203][ T1422] kasan_save_stack+0x33/0x60 [ 157.523745][ T1422] kasan_save_track+0x14/0x30 [ 157.525297][ T1422] kasan_save_free_info+0x3b/0x60 [ 157.526931][ T1422] __kasan_slab_free+0x5f/0x80 [ 157.528504][ T1422] kfree+0x2f8/0x6e0 [ 157.529774][ T1422] process_one_work+0x9ba/0x1b20 [ 157.531612][ T1422] worker_thread+0x6c8/0xf10 [ 157.533133][ T1422] kthread+0x3c5/0x780 [ 157.534548][ T1422] ret_from_fork+0x983/0xb10 [ 157.536024][ T1422] ret_from_fork_asm+0x1a/0x30 [ 157.537562][ T1422] [ 157.538358][ T1422] Last potentially related work creation: [ 157.540180][ T1422] kasan_save_stack+0x33/0x60 [ 157.541724][ T1422] kasan_record_aux_stack+0xa7/0xc0 [ 157.543383][ T1422] insert_work+0x36/0x230 [ 157.544842][ T1422] __queue_work+0x94f/0x10e0 [ 157.546337][ T1422] queue_work_on+0x1a4/0x1f0 [ 157.547823][ T1422] release_tty+0x4de/0x5d0 [ 157.549289][ T1422] tty_release_struct+0xb7/0xe0 [ 157.551012][ T1422] tty_release+0xe2d/0x1470 [ 157.552506][ T1422] __fput+0x402/0xb70 [ 157.553801][ T1422] task_work_run+0x150/0x240 [ 157.555394][ T1422] do_exit+0x87f/0x2bd0 [ 157.556893][ T1422] do_group_exit+0xd3/0x2a0 [ 157.558390][ T1422] get_signal+0x2671/0x26d0 [ 157.559846][ T1422] arch_do_signal_or_restart+0x8f/0x7e0 [ 157.561685][ T1422] exit_to_user_mode_loop+0x8c/0x540 [ 157.563393][ T1422] do_syscall_64+0x4ee/0xf80 [ 157.564988][ T1422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.566847][ T1422] [ 157.567636][ T1422] The buggy address belongs to the object at ffff8880389dc000 [ 157.567636][ T1422] which belongs to the cache kmalloc-cg-2k of size 2048 [ 157.572192][ T1422] The buggy address is located 1168 bytes inside of [ 157.572192][ T1422] freed 2048-byte region [ffff8880389dc000, ffff8880389dc800) [ 157.576573][ T1422] [ 157.577454][ T1422] The buggy address belongs to the physical page: [ 157.580147][ T1422] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x389d8 [ 157.583717][ T1422] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.587182][ T1422] memcg:ffff88802a53f081 [ 157.588970][ T1422] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 157.592104][ T1422] page_type: f5(slab) [ 157.593817][ T1422] raw: 00fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 157.597470][ T1422] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88802a53f081 [ 157.601149][ T1422] head: 00fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 157.604921][ T1422] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88802a53f081 [ 157.608828][ T1422] head: 00fff00000000003 ffffea0000e27601 00000000ffffffff 00000000ffffffff [ 157.612583][ T1422] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 157.616405][ T1422] page dumped because: kasan: bad access detected [ 157.619232][ T1422] page_owner tracks the page as allocated [ 157.621755][ T1422] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5937, tgid 5937 (syz-executor), ts 62891468857, free_ts 60506712425 [ 157.630121][ T1422] post_alloc_hook+0x1af/0x220 [ 157.631725][ T1422] get_page_from_freelist+0xd0b/0x31a0 [ 157.633514][ T1422] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 157.635596][ T1422] alloc_pages_mpol+0x1fb/0x550 [ 157.637640][ T1422] new_slab+0x2c3/0x430 [ 157.639410][ T1422] ___slab_alloc+0xe18/0x1c90 [ 157.641323][ T1422] __slab_alloc.constprop.0+0x63/0x110 [ 157.643229][ T1422] __kmalloc_noprof+0x4fc/0x910 [ 157.644854][ T1422] __register_sysctl_table+0xb3/0x1900 [ 157.646648][ T1422] __devinet_sysctl_register+0x1b9/0x360 [ 157.648592][ T1422] devinet_sysctl_register+0x17b/0x200 [ 157.650419][ T1422] inetdev_init+0x2b8/0x580 [ 157.651915][ T1422] inetdev_event+0xc32/0x1870 [ 157.653465][ T1422] notifier_call_chain+0xbc/0x3e0 [ 157.655538][ T1422] call_netdevice_notifiers_info+0xbe/0x110 [ 157.658054][ T1422] register_netdevice+0x1792/0x21d0 [ 157.659796][ T1422] page last free pid 5923 tgid 5923 stack trace: [ 157.661886][ T1422] __free_frozen_pages+0x7df/0x1170 [ 157.663573][ T1422] __folio_put+0x329/0x450 [ 157.665133][ T1422] skb_release_data+0x81a/0x9e0 [ 157.667176][ T1422] napi_consume_skb+0x20a/0x300 [ 157.669232][ T1422] skb_defer_free_flush+0x1ec/0x280 [ 157.671444][ T1422] net_rx_action+0x39f/0xfa0 [ 157.673403][ T1422] handle_softirqs+0x219/0x950 [ 157.675457][ T1422] do_softirq+0xb2/0xf0 [ 157.676980][ T1422] __local_bh_enable_ip+0x100/0x120 [ 157.679123][ T1422] __dev_queue_xmit+0x797/0x4650 [ 157.680888][ T1422] ip_finish_output2+0xc38/0x21a0 [ 157.682710][ T1422] __ip_finish_output.part.0+0x1b4/0x350 [ 157.685034][ T1422] ip_output+0x35f/0xa90 [ 157.686761][ T1422] __ip_queue_xmit+0x1bee/0x2330 [ 157.688761][ T1422] __tcp_transmit_skb+0x2cae/0x48b0 [ 157.690726][ T1422] __tcp_send_ack.part.0+0x4ca/0x910 [ 157.692477][ T1422] [ 157.693278][ T1422] Memory state around the buggy address: [ 157.695285][ T1422] ffff8880389dc380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.698049][ T1422] ffff8880389dc400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.700747][ T1422] >ffff8880389dc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.703377][ T1422] ^ [ 157.704999][ T1422] ffff8880389dc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.707628][ T1422] ffff8880389dc580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.710249][ T1422] ================================================================== [ 157.712958][ T1422] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.715357][ T1422] CPU: 1 UID: 0 PID: 1422 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.718812][ T1422] Tainted: [L]=SOFTLOCKUP [ 157.720252][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.723864][ T1422] Call Trace: [ 157.725141][ T1422] [ 157.726150][ T1422] dump_stack_lvl+0x3d/0x1f0 [ 157.727700][ T1422] vpanic+0x640/0x6f0 [ 157.729072][ T1422] panic+0xca/0xd0 [ 157.730337][ T1422] ? __pfx_panic+0x10/0x10 [ 157.731903][ T1422] ? check_panic_on_warn+0x1f/0xb0 [ 157.733633][ T1422] check_panic_on_warn+0xab/0xb0 [ 157.735303][ T1422] end_report+0x107/0x160 [ 157.736763][ T1422] kasan_report+0xee/0x110 [ 157.738256][ T1422] ? handle_tx+0x5dc/0x630 [ 157.739759][ T1422] handle_tx+0x5dc/0x630 [ 157.741380][ T1422] dev_hard_start_xmit+0x97/0x6e0 [ 157.743077][ T1422] __dev_queue_xmit+0x6d7/0x4650 [ 157.745438][ T1422] ? rcu_is_watching+0x12/0xc0 [ 157.747516][ T1422] ? finish_task_switch.isra.0+0x207/0xbd0 [ 157.750002][ T1422] ? __pfx___dev_queue_xmit+0x10/0x10 [ 157.752716][ T1422] ? __lock_acquire+0x436/0x2890 [ 157.754962][ T1422] ? ref_tracker_free+0x37c/0x830 [ 157.757161][ T1422] ? do_raw_spin_lock+0x12c/0x2b0 [ 157.759330][ T1422] ? rcu_is_watching+0x12/0xc0 [ 157.761393][ T1422] tx+0xcc/0x190 [ 157.762951][ T1422] ? __pfx_tx+0x10/0x10 [ 157.764782][ T1422] kthread+0x1e4/0x3e0 [ 157.766530][ T1422] ? find_held_lock+0x2b/0x80 [ 157.768568][ T1422] ? __pfx_kthread+0x10/0x10 [ 157.770596][ T1422] ? __pfx_default_wake_function+0x10/0x10 [ 157.773104][ T1422] ? lockdep_hardirqs_on+0x7c/0x110 [ 157.775329][ T1422] ? __kthread_parkme+0x19e/0x250 [ 157.777416][ T1422] ? __pfx_kthread+0x10/0x10 [ 157.779352][ T1422] kthread+0x3c5/0x780 [ 157.781071][ T1422] ? __pfx_kthread+0x10/0x10 [ 157.782965][ T1422] ? rcu_is_watching+0x12/0xc0 [ 157.785076][ T1422] ? __pfx_kthread+0x10/0x10 [ 157.787072][ T1422] ret_from_fork+0x983/0xb10 [ 157.789086][ T1422] ? __pfx_ret_from_fork+0x10/0x10 [ 157.791172][ T1422] ? __switch_to+0x7af/0x10d0 [ 157.793317][ T1422] ? __pfx_kthread+0x10/0x10 [ 157.795410][ T1422] ret_from_fork_asm+0x1a/0x30 [ 157.797552][ T1422] [ 157.799565][ T1422] Kernel Offset: disabled [ 157.801433][ T1422] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:57:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000146cf7 RBX=0000000000000000 RCX=ffffffff8b7816d9 RDX=0000000000000000 RSI=ffffffff8dacdf23 RDI=ffffffff8bf2b400 RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100d48673d R10=ffff88806a4339eb R11=ffffffff8e098670 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088b4d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056251297bbe0 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008896acb1c89d58 14b59e5e3431c531 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ab51282a7a420a89 784d751e5ea79563 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c170038d1fd517c2 a94c92f4542c3662 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 65cb1d62a50a0356 db653bc11510db99 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000b880 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ded36473c73d4082 78e644f3d5eecdc2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 68e24e94b6114735 3ebba259a7f13a2e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f6b55d536f4aee2 94a51bf69cdec1a7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 df2c9f3ba4cb203a 26a8b7ae43037d77 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 042f8df43bd68a38 3cbb4286e1feb739 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8bab397914a1ccb1 eea8608bbe06a194 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000178 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000178 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85326565 RDI=ffffffff9aeedc00 RBP=ffffffff9aeedbc0 RSP=ffffc9000720f3d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9aeedbc0 R15=ffffffff85326500 RIP=ffffffff8532658f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f33519bae9c CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000125853 RBX=0000000000000002 RCX=ffffffff8b7816d9 RDX=0000000000000000 RSI=ffffffff8dacdf23 RDI=ffffffff8bf2b400 RBP=ffffed1003bda930 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=ffff88801ded54b0 R12=0000000000000002 R13=ffff88801ded4980 R14=ffffffff9088b4d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb39b5156e8 CR3=000000002d82f000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000007 DR2=0000000000000004 DR3=0000000000000008 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 62f583857caf0aaa ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb39b51d100 00007fb39a9ba460 00007fb39a9ba478 00007fb39a9ba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000009 RCX=ffffffff8234f3ae RDX=1ffff1102fffde80 RSI=ffffffff8234f3e8 RDI=0000000000000006 RBP=ffff88807ffd6400 RSP=ffffc9000479f490 R8 =0000000000000006 R9 =0000000000000000 R10=0000000000001000 R11=ffff888028aa2ff0 R12=ffff88817ffef400 R13=0000000000000001 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8234f407 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556abd4500 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb39a9e6038 CR3=000000002d82f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb39b51d100 00007fb39a9ba460 00007fb39a9ba478 00007fb39a9ba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000