last executing test programs: 1.230932517s ago: executing program 0 (id=795): socket$key(0xf, 0x3, 0x2) (async) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) pread64(r0, &(0x7f0000000000)=""/56, 0x38, 0x35) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x28) 1.230290784s ago: executing program 0 (id=797): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-ssse3)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003000)={0x2020}, 0x2020) 1.180636617s ago: executing program 0 (id=799): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xc, 0x3, &(0x7f00000009c0)="160000", 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1, 0xfff0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r4, 0x10000, 0x80000001, 0x5}, 0x10) 1.180266284s ago: executing program 0 (id=800): pipe2$watch_queue(0x0, 0x80) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 870.28653ms ago: executing program 3 (id=806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f00000001c0)='./file0\x00', &(0x7f0000002300), 0x10080, &(0x7f0000002240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}]}}) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) mount$fuseblk(&(0x7f0000002440), &(0x7f00000001c0)='./file0\x00', &(0x7f0000002300), 0x10080, &(0x7f0000002240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}]}}) (async) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) (async) 790.872306ms ago: executing program 3 (id=808): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) poll(&(0x7f0000000080)=[{r0, 0x2034}], 0x1, 0x5) (async) poll(&(0x7f0000000080)=[{r0, 0x2034}], 0x1, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x458a, r0}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x458a, r0}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xfff1, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f000054d000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00003af000/0x2000)=nil) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "061000", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "23926e0bf267dafbbb43f09c7000", "e13808ca72380641e5fff9620995b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "061000", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "23926e0bf267dafbbb43f09c7000", "e13808ca72380641e5fff9620995b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 640.913177ms ago: executing program 0 (id=813): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x800ac6e93aa2ed24, 0xa5, &(0x7f0000000600)=""/165}]}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x14}) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000040)=0x3) r6 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000004c0)={0x60000018}) 640.433446ms ago: executing program 2 (id=814): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @multicast, @local}}}}, 0x0) 633.033109ms ago: executing program 2 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0xfffff399, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x9, 0x0, 0x9}) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'pimreg0\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x37, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eabb5611b655e5f65991c3e1e6f89550928b713582f37d43e4b35a9f7a5b12d01438c9c419900b0e3001000"}, 0x48, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000640)='asymmetric\x00', &(0x7f0000000600)) keyctl$link(0x8, r6, r5) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) mknod(&(0x7f0000000280)='./bus\x00', 0x800, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 540.971812ms ago: executing program 0 (id=816): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3400000019000100000a56b018d36f122d"], 0x34}}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000280), r4) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[], 0x2c8}, 0x1, 0x0, 0x0, 0x44084}, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) 539.588796ms ago: executing program 2 (id=818): r0 = socket(0x2b, 0x80801, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000002380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x484, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xce1b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc1a3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff0001}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3be9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "45a886d0bc5ded7fa70a64525689b47f441735c6a53d50bf43ed959f3efc2a3283868a47"}}, @TIPC_NLA_NODE_ID={0xaa, 0x3, "ce0d91858535866d1d4188221e34419380174fdb4fd7d7d4b326e890a4eba7d8b8f7a93aea99dc6cab53d4e393e50345c6aae9016d416b0e3c735db6f6dcab60ec915ef0c45f6675364944422934ecd52ae48302770a8c2d9d754d137e3b821e132c9b5daf1a618a50ed75bac862be2cd57908578d149a8f81e5b1015c5b866ad76ed69049016dddea641b517ae080f6d0d6117212f22f6d06c81f645f4cb2136b13e72ca624"}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "62f8b78f78d485650e346a70fb59ecc20085bf8117"}}, @TIPC_NLA_NODE_ID={0x56, 0x3, "3d9c345fc61fad4d9520ad7f91d012f22497ce4f50b11ec242de1aaf175b683f815ec22ac70ecb51eb4dca5c347915be2150e577ee2639c8b2c9340a94355341b0e0022412e6cf5d0d5317f896438484679a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xeeae}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5096}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5be}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb5f9}]}]}, 0x484}, 0x1, 0x0, 0x0, 0x14}, 0x4000) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 460.991605ms ago: executing program 3 (id=819): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) 460.564672ms ago: executing program 3 (id=821): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r2], 0x44}}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x10004, 0x4) 400.279328ms ago: executing program 3 (id=823): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x80000001}, 0xf3, 0xa6, 0x6, 0x7, 0x11, 'syz1\x00', "b51956be98d0853f4d331cd5c59522266e515d836c37fe162ab4f747a6357064", "091959b594e1cc89f6aba81088a6c301b6c54b94743f636019fa3903456a4a17", [{0x2, 0x5a40, {0x2, 0xffffffff}}, {0x40, 0x1000, {0x2, 0x1000}}, {0xaca, 0x401, {0x0, 0x8}}, {0x6, 0x7fff, {0x3, 0x9}}, {0x5, 0x4, {0x2}}, {0x5319, 0x8, {0x2, 0x2}}, {0x52, 0xc508, {0x3, 0x1}}, {0xe, 0x25, {0x3, 0x9}}, {0x2, 0x6, {0x2, 0x6}}, {0x5, 0x793, {0x2, 0xa085}}, {0x40, 0x2, {0x0, 0x8001}}, {0x9, 0x6, {0x1, 0x4}}, {0x1, 0x3, {0x3, 0x1}}, {0xade8, 0x0, {0x1, 0xc2fd}}, {0x3, 0x5, {0x1, 0x2}}, {0xff7f, 0xfff4, {0x3, 0xccbc}}, {0x28, 0x3, {0x1, 0x4}}, {0x5, 0x6, {0x0, 0x81}}, {0x9, 0x8, {0x3, 0x1d75}}, {0x8, 0x9, {0x3, 0x8}}, {0x0, 0x35d, {0x1, 0x5}}, {0x3ff, 0x6, {0x1, 0xd}}, {0x4, 0x3, {0x2, 0xfff}}, {0x5, 0xb, {0x0, 0x80}}, {0x6, 0x8, {0x3, 0x1}}, {0x0, 0x3, {0x3, 0x1b6a}}, {0x9, 0x0, {0x3, 0x2}}, {0xfce, 0xfcb3, {0x0, 0x800}}, {0xff, 0x6, {0x1, 0x7fffffff}}, {0x6, 0x5, {0x2, 0x7}}, {0x7dc4, 0x57, {0x3, 0x6}}, {0xdfd, 0x1ff, {0x1, 0x9}}, {0x7, 0x7, {0x3, 0x4}}, {0x7, 0x3, {0x2}}, {0x2, 0x7665, {0x1, 0x6}}, {0x9, 0xef, {0x0, 0x1}}, {0x2cc, 0x1ec, {0x1, 0x81}}, {0x8, 0x5, {0x2, 0xd31e}}, {0x2, 0x9, {0x3, 0x7b64}}, {0x6, 0x4166, {0x2, 0xb}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0xff, 0x2, 0xd, 0x7, 0x11, 'syz1\x00', "1af01bf0d057e0f96956abe40f03180f12bd5941c618efd4fe0c910a52a6a21f", "83f7ebb1adaa42f4320fdb4bd0aee382ef0e354d1358b9e7161d1fbcf1ce07c5", [{0x8001, 0x8, {0x3, 0x1000}}, {0x1, 0x40, {0x0, 0x100}}, {0x4, 0x8, {0x3, 0x1}}, {0x7, 0x50ce, {0x0, 0xffffffff}}, {0x9, 0x2, {0x3, 0xd2b}}, {0x5, 0x1, {0x3}}, {0x4, 0x4, {0x0, 0x9}}, {0xedbf, 0x0, {0x1, 0xf}}, {0xc, 0x9b30, {0x0, 0x2}}, {0x3, 0xd694, {0x0, 0x9}}, {0x9, 0x7, {0x0, 0x5}}, {0x200, 0x7, {0x3, 0x2}}, {0xe, 0x8001, {0x1, 0xffff8001}}, {0xd6, 0x17c9, {0x1, 0x1ff}}, {0x401, 0x3, {0x3, 0x73a}}, {0x1ff, 0x0, {0x2, 0xa635}}, {0x17, 0x8, {0x3, 0x9}}, {0x1, 0x81, {0x3, 0x9}}, {0x4, 0x7}, {0x3, 0x800, {0x1, 0x20000}}, {0x1, 0x1000, {0x3, 0x4}}, {0x2, 0x6, {0x3, 0x8}}, {0xc0be, 0xfffc, {0x3, 0x5}}, {0x3, 0x1ff, {0x2, 0x3}}, {0x6, 0x40, {0x2, 0x13}}, {0x6, 0x3, {0x3, 0xfffffff8}}, {0xb3f5, 0x8, {0x3}}, {0x9c9, 0x6, {0x2, 0x40}}, {0x5, 0x7d, {0x2, 0x5}}, {0x88a, 0x5, {0x2, 0x1}}, {0x1000, 0x8, {0x3, 0x6}}, {0x400, 0xf847, {0x0, 0x4}}, {0x9, 0x57e, {0x2, 0x8}}, {0x5, 0x100, {0x2}}, {0x480, 0x2, {0x3, 0x1}}, {0x2, 0x2, {0x1, 0xd6}}, {0x7, 0x4, {0x2, 0x10001}}, {0x0, 0x1, {0x8ce7e0b1888e984d, 0x2}}, {0x40, 0x0, {0x0, 0x3}}, {0xff, 0x4, {0x2, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x2000c805}, 0x4011) (async) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x80000001}, 0xf3, 0xa6, 0x6, 0x7, 0x11, 'syz1\x00', "b51956be98d0853f4d331cd5c59522266e515d836c37fe162ab4f747a6357064", "091959b594e1cc89f6aba81088a6c301b6c54b94743f636019fa3903456a4a17", [{0x2, 0x5a40, {0x2, 0xffffffff}}, {0x40, 0x1000, {0x2, 0x1000}}, {0xaca, 0x401, {0x0, 0x8}}, {0x6, 0x7fff, {0x3, 0x9}}, {0x5, 0x4, {0x2}}, {0x5319, 0x8, {0x2, 0x2}}, {0x52, 0xc508, {0x3, 0x1}}, {0xe, 0x25, {0x3, 0x9}}, {0x2, 0x6, {0x2, 0x6}}, {0x5, 0x793, {0x2, 0xa085}}, {0x40, 0x2, {0x0, 0x8001}}, {0x9, 0x6, {0x1, 0x4}}, {0x1, 0x3, {0x3, 0x1}}, {0xade8, 0x0, {0x1, 0xc2fd}}, {0x3, 0x5, {0x1, 0x2}}, {0xff7f, 0xfff4, {0x3, 0xccbc}}, {0x28, 0x3, {0x1, 0x4}}, {0x5, 0x6, {0x0, 0x81}}, {0x9, 0x8, {0x3, 0x1d75}}, {0x8, 0x9, {0x3, 0x8}}, {0x0, 0x35d, {0x1, 0x5}}, {0x3ff, 0x6, {0x1, 0xd}}, {0x4, 0x3, {0x2, 0xfff}}, {0x5, 0xb, {0x0, 0x80}}, {0x6, 0x8, {0x3, 0x1}}, {0x0, 0x3, {0x3, 0x1b6a}}, {0x9, 0x0, {0x3, 0x2}}, {0xfce, 0xfcb3, {0x0, 0x800}}, {0xff, 0x6, {0x1, 0x7fffffff}}, {0x6, 0x5, {0x2, 0x7}}, {0x7dc4, 0x57, {0x3, 0x6}}, {0xdfd, 0x1ff, {0x1, 0x9}}, {0x7, 0x7, {0x3, 0x4}}, {0x7, 0x3, {0x2}}, {0x2, 0x7665, {0x1, 0x6}}, {0x9, 0xef, {0x0, 0x1}}, {0x2cc, 0x1ec, {0x1, 0x81}}, {0x8, 0x5, {0x2, 0xd31e}}, {0x2, 0x9, {0x3, 0x7b64}}, {0x6, 0x4166, {0x2, 0xb}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0xff, 0x2, 0xd, 0x7, 0x11, 'syz1\x00', "1af01bf0d057e0f96956abe40f03180f12bd5941c618efd4fe0c910a52a6a21f", "83f7ebb1adaa42f4320fdb4bd0aee382ef0e354d1358b9e7161d1fbcf1ce07c5", [{0x8001, 0x8, {0x3, 0x1000}}, {0x1, 0x40, {0x0, 0x100}}, {0x4, 0x8, {0x3, 0x1}}, {0x7, 0x50ce, {0x0, 0xffffffff}}, {0x9, 0x2, {0x3, 0xd2b}}, {0x5, 0x1, {0x3}}, {0x4, 0x4, {0x0, 0x9}}, {0xedbf, 0x0, {0x1, 0xf}}, {0xc, 0x9b30, {0x0, 0x2}}, {0x3, 0xd694, {0x0, 0x9}}, {0x9, 0x7, {0x0, 0x5}}, {0x200, 0x7, {0x3, 0x2}}, {0xe, 0x8001, {0x1, 0xffff8001}}, {0xd6, 0x17c9, {0x1, 0x1ff}}, {0x401, 0x3, {0x3, 0x73a}}, {0x1ff, 0x0, {0x2, 0xa635}}, {0x17, 0x8, {0x3, 0x9}}, {0x1, 0x81, {0x3, 0x9}}, {0x4, 0x7}, {0x3, 0x800, {0x1, 0x20000}}, {0x1, 0x1000, {0x3, 0x4}}, {0x2, 0x6, {0x3, 0x8}}, {0xc0be, 0xfffc, {0x3, 0x5}}, {0x3, 0x1ff, {0x2, 0x3}}, {0x6, 0x40, {0x2, 0x13}}, {0x6, 0x3, {0x3, 0xfffffff8}}, {0xb3f5, 0x8, {0x3}}, {0x9c9, 0x6, {0x2, 0x40}}, {0x5, 0x7d, {0x2, 0x5}}, {0x88a, 0x5, {0x2, 0x1}}, {0x1000, 0x8, {0x3, 0x6}}, {0x400, 0xf847, {0x0, 0x4}}, {0x9, 0x57e, {0x2, 0x8}}, {0x5, 0x100, {0x2}}, {0x480, 0x2, {0x3, 0x1}}, {0x2, 0x2, {0x1, 0xd6}}, {0x7, 0x4, {0x2, 0x10001}}, {0x0, 0x1, {0x8ce7e0b1888e984d, 0x2}}, {0x40, 0x0, {0x0, 0x3}}, {0xff, 0x4, {0x2, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x2000c805}, 0x4011) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff70}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff4d, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 399.983667ms ago: executing program 2 (id=824): socketpair(0x18, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'tunl0\x00', {0x259a}}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2001) (async) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000100)=0xfffffff7, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x154, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_ID={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x68, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x13}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x51}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x0, 0x1f5]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4040001}, 0x81) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000040)) (async) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000780)="d63e9ffb", 0x4}], 0x1) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}, 0x1, 0x0, 0x0, 0x90}, 0x0) (rerun: 32) 399.83426ms ago: executing program 3 (id=825): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001700010300000000ffdfdf250b000000"], 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) read$qrtrtun(r3, &(0x7f0000000240)=""/101, 0x65) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x6}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcd, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x300024) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x1c}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000e3fef9150001c0"]) ioctl$FS_IOC_GETFSLABEL(r10, 0x81009431, &(0x7f0000000380)) openat$cgroup_ro(r7, &(0x7f00000002c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x2, 0x7fff, @local, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000ff2e75777e99", 0x8}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1400"], 0x18}}], 0x1, 0x0) flock(r7, 0x0) 310.569511ms ago: executing program 1 (id=827): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) 159.984406ms ago: executing program 2 (id=828): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) write(0xffffffffffffffff, &(0x7f00000000c0)=')\x00\x00\x00', 0x4) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDENABIO(r1, 0x4b36) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) 159.449729ms ago: executing program 2 (id=829): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000100)="abc55d68f809bbe9183e70a55f253d938d3a6102da13a9a5e78c6ce8ee84125570074bfc9839ecb81351be37c6a7e32fb932a10dda20ff9f3ac76656589e27dddaafb597b1ca4687bb6522cbfeb14c0e1ded2dc69d67c0e4d7fd61de76f721c2430be45a2123143aa751c51580f8cf5c266605450f5bfe21375e111b352bbf80fd14a7f32cfcc3b0") syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f00000001c0)={{0x10b, 0xd, 0x2b, 0x1b0, 0x1f, 0x774d, 0x3d7, 0x8}, "b3623f52153f7e2f6a310bc618bc833a52d9a5ddb14df6036554fcf8f5d138deaf01fe6105d08a7ebcd47ba8b8d535bf9f7730aeef5b89be4d80b498a0be37214dd672f5896ab6dd265bdb6eda88889918e9d2266eb65da0386b1b256067519243b80216c40e5b7af8f245f068a9ddb37efda729f48058f78f122056ac3de5197edd2418f3b00ef429d5cba63f1e2a4314d8f5bac5a990c56ef26a5ba29c6edcff50bcdd8db24f8730798d7866ac0f0ac12c2db526b1de244a46a963243afe99b189ec6f1b5dd576d77243b89e0d985075e72c9db05268d2a4a0", ['\x00', '\x00']}, 0x2fa) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0xd0, "08142ac3a21bdf7d72aa44be7dac7a4012d7000d2ae9ac9396954c3c9b5dde16abee39b04ae087c0d64fdd075e430f99aaa17bb1cf9b7d894c3209bdfcc881cfab02f5119b8d7662aa8bc4d7fbe31c7badbf293f9cf43693a248326bfff1c7315987e2fa925e51890f788eed7b3800204f6c1e6d0121fd40df94a9a11cd5bd93927e99fcf09155d1f5a999fb462845acc4b90e76ed3290b4be7e8ed0a33a158848000a92a0819b0f432f0856ca8463124d95fe4c1f6965468bb86a47d168105c6e5852ecff6b46489eeca055f14fb1c9"}, &(0x7f00000005c0)=0xd8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000600)={r3, @in6={{0xa, 0x4e22, 0x7fffffff, @empty, 0x1000}}}, 0x84) r4 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xa0, 0x3, [{{0x9, 0x4, 0x0, 0x14, 0x2, 0x3, 0x1, 0x1, 0xba, {0x9, 0x21, 0x9, 0xa, 0x1, {0x22, 0xbca}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xdc, 0x80, 0x9}}]}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0xf4, 0x8, 0x70, 0x8, 0xfc}, 0x5d, &(0x7f0000000740)={0x5, 0xf, 0x5d, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x43, 0x3, 0xa, 0xff0f, 0xf30f, [0x0, 0x3f00, 0xf]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x21, 0x23, 0x7f, 0xbdd, 0x21}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x2, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "bacfe718a392939133577d9dbeda0e7f"}, @ss_container_id={0x14, 0x10, 0x4, 0x16, "6c67dc08861a497b8457a7f58d298229"}]}, 0x5, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x807}}, {0xe9, &(0x7f0000000800)=@string={0xe9, 0x3, "162dca006ba644020accfe1f5c662971db5c2ecb15b474e323b47c4809ba39197e1e3b50e59b631fe123ba7a66b800d528d5502e97384fb481ff1444a76b8cba75bf0616e71ed25011991b30afe52dd873f307d4825404c6caee33cb8f41ba3328085b43b36fb3179881a7ba0c21a033a15045b67405823d840feeea943f1712183ba43862980a88bf010c238375c3407355f1b79c207f4c4878c22c5e88cead70d3a706787870ea7e52cd2bf9efdd0470bdeaab330405984a624ce42001ceb7bdd2f383d5f31188a19aa8acb03b6bc79937741603117278d7908319b22c10ba354bffcb81cc22"}}, {0xa7, &(0x7f0000000900)=@string={0xa7, 0x3, "e942b7ecf88511d69d5e2e8a863f169aae947a9b150ce05ee35138a0c23152b7948075f88fe50964e9ee43fc1262d587cc3b19841910baec5355ad4c76751698d1feddca360cf7204752aadb1eab613cc973973fe1eb74e34a33aff8f52f20b2fcdcbf8fa59de76573c3b41b657d28e157957fa5aa89cc5e7889e8cc3e020020eef77dd52cdbe357ab6a37f3f8bb66fa270a9768efc3f897a0ffcb4372b81e16dec57f1959"}}, {0xd4, &(0x7f00000009c0)=@string={0xd4, 0x3, "4db6e122d443aefc3fc05c3fe59d4b82e4670751056648daa6f5bd9f76113ee54d901f2b60dfd70cd19a31dbc017b96140f5501565e58a6d8e30f80c1b16a1e3ec41dd5601329f8573001d6ae75b2afb990931a58f3f35fe72736952ad7e44e96ac8115f6d18ab4f34a6a60ed3ed15d14c2cf48ac0d6a19d312cce08c204fde6ad08702a0e6ea99f1349a4e9bc5e20d50675cbdbcc32bd9f6fcead154d673889112fbccba5a4b9cf8e87557aad686488245a30f66726e5937169246864141aa48cd757197524fc434ae990a6d368e8d11908"}}, {0xca, &(0x7f0000000ac0)=@string={0xca, 0x3, "483ebdbff18007b798732cfdccf0f27e492aa93196544a16343d47cd56d51b76e160df0a6c91c413262ed94f80c571cc62bd4a51398f1895fad7d71f06f3bcf0735ee16d99d033ec72ced7e82dd23f3931d71b6128e6a7d154f25501a7b7ad0799e32d72ced32b05ce2e67c233d52454cf1fada5421148c04f037cf7ca9c580d5622fa374090c0d912c61b1956791e526b93874020d9265584bd62dbb28fb23a44a43e12ab16cbbd9848d652c43fed0dbbc19fffe38bdab588d3dabf9112c4b61b59db7f103e2131"}}]}) syz_usb_control_io(r4, &(0x7f0000000e80)={0x2c, &(0x7f0000000c40)={0x0, 0xd, 0x18, {0x18, 0x31, "32b9563459f27e0f8efb877b80da8c8406c2b7afe16f"}}, &(0x7f0000000c80)={0x0, 0x3, 0x77, @string={0x77, 0x3, "0c7e3148c2f86cdc2c99886b2cb97db9427976af3751d615161a1afbb847845741d8013bf30aed21797441068b4f47077367a34c6b5e86e723eb0136584054f81fec5805a85d5addd144afe623c93f7cdaf6d7777e09bd8cf385841b9e4709de8617229d9164fbb6a3262fd360282955f18d04c9ff"}}, &(0x7f0000000d00)={0x0, 0xf, 0xe8, {0x5, 0xf, 0xe8, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x0, 0x4, 0x8000}, @generic={0x7f, 0x10, 0xb, "96e35776262e0b5bf72d236a5cdf662c128844e096ea643bd24d8106126e8946163f70ee6b2d841ed93d26672a24787b4af1980cffa27b997515b7159245633b8f59f8e9f8994b2c0e2d181e7de3a04ebee334d23761a5359d816794c70a295fc2a22d8953c8a15653eeac39a146ae9f07a6dd15403646a9a6754d56"}, @ext_cap={0x7, 0x10, 0x2, 0xb, 0x0, 0xc, 0x80}, @generic={0x4c, 0x10, 0x1, "b1bd1d88506c1f4de93235ebb9d4e36713280c80c93f5f5023c54419b60064dc05c9cf071ed9350591f9829418ae1c8ad15aec46d81bfd3cc48c7f1e15daff070eaee72626a4f2f17e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x7, 0x7ff}]}}, &(0x7f0000000e00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x9, 0x0, "90d3f539", "6d73880d"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0xeb, 0x4, 0xfc, 0x0, 0xf, 0x7fff}}}, &(0x7f0000001300)={0x84, &(0x7f0000000ec0)={0x40, 0xf, 0x63, "19836506601b5e136fa74bd79c4e6648f3f3d03b845e3699282337dce7b8729a2dd35176cfc32974bbe25a4f377a991273ab32c2872654fe95fabd3b4ed012658c2a16ccbe57e68d602155a1822f0191366539e05e146f48e83347a1d04212e422260b"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0xa0, 0x20}}, &(0x7f0000001040)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000001080)={0x40, 0x9, 0x1, 0xbd}, &(0x7f00000010c0)={0x40, 0xb, 0x2, "058b"}, &(0x7f0000001100)={0x40, 0xf, 0x2, 0x9e7}, &(0x7f0000001140)={0x40, 0x13, 0x6, @random="dacc59585a49"}, &(0x7f0000001180)={0x40, 0x17, 0x6}, &(0x7f00000011c0)={0x40, 0x19, 0x2, "16ca"}, &(0x7f0000001200)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000001240)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001280)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000012c0)={0x40, 0x21, 0x1, 0xf8}}) r5 = syz_open_dev$vcsu(&(0x7f00000013c0), 0x4, 0x101142) bind$ax25(r5, &(0x7f0000001400)={{0x3, @bcast, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000001480)={0x2, 0x3, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000001500)=0x4) r8 = open$dir(&(0x7f0000001540)='./file0\x00', 0x20800, 0x40) fchmodat(r8, &(0x7f0000001580)='./file0\x00', 0x42) r9 = fsopen(&(0x7f00000015c0)='v7\x00', 0x1) r10 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x10) fsconfig$FSCONFIG_SET_PATH_EMPTY(r9, 0x4, &(0x7f0000001600)='/dev/vcsu#\x00', &(0x7f0000001640)='./file0\x00', r10) stat(&(0x7f0000001700)='./file0/file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r10, &(0x7f00000016c0)='./file0/file0\x00', r11, r13, 0x0) getresuid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)=0x0) chown(&(0x7f0000001840)='./file0\x00', r14, r12) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r5, 0x21, &(0x7f0000001940)={0x0, 0x5dea, 0x10000, 0x1, 0x258, 0x0, r10}, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000001ac0)={&(0x7f00000019c0), 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x60, 0x1403, 0x400, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) mmap$KVM_VCPU(&(0x7f0000003000/0x2000)=nil, 0x0, 0x100000c, 0x1010, r5, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000001b00), &(0x7f0000001b40)=0x4) 60.544336ms ago: executing program 1 (id=830): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) 60.176711ms ago: executing program 1 (id=831): r0 = socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xffffffff}], 0x18}, 0x0) r1 = socket(0x9, 0x80000, 0x1) getpeername$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) 60.021335ms ago: executing program 1 (id=832): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x80, 0x3, 0x3, 0x3, 0xfffffff9}) 276.666µs ago: executing program 1 (id=833): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000160001"], 0x104}, 0x1, 0x0, 0x0, 0x4020004}, 0x4004) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x27, 0x0, 0x0, @binary="d847b0d44ca7ba9b542be6ce"}]}]}, 0x38}], 0x1}, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0xa) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000160001"], 0x104}, 0x1, 0x0, 0x0, 0x4020004}, 0x4004) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x27, 0x0, 0x0, @binary="d847b0d44ca7ba9b542be6ce"}]}]}, 0x38}], 0x1}, 0x4) (async) 0s ago: executing program 1 (id=834): ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB="3fb17d59c2761d599793452330a39cfb927b2e7b0715bc8d9533dc96eae2963344239ce6d81fc2de93cee084ff88cf85ca76f5a2b3ca891f09773758457672a40ed5467bd42c5ab67e0aa65021eca022eeab2aee376a0d0306a5b1b042"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_setup(0x3bac, 0x0) (async) io_uring_setup(0x3bac, 0x0) kernel console output (not intermixed with test programs): st_device_t tclass=chr_file permissive=1 [ 44.830494][ T40] audit: type=1400 audit(1747031634.481:87): avc: denied { open } for pid=5930 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.837886][ T40] audit: type=1400 audit(1747031634.481:88): avc: denied { ioctl } for pid=5930 comm="syz-executor" path="socket:[764]" dev="sockfs" ino=764 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.860157][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.863731][ T5932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.866322][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.869757][ T5932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.872451][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.874892][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.875324][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.877865][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.880278][ T5932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.882146][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.882508][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.882891][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.884674][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.887812][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.893083][ T40] audit: type=1400 audit(1747031634.551:89): avc: denied { read } for pid=5930 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.894211][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.900919][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.902035][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.903927][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.905863][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.908340][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.916634][ T40] audit: type=1400 audit(1747031634.551:90): avc: denied { open } for pid=5930 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.923800][ T40] audit: type=1400 audit(1747031634.551:91): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.056399][ T40] audit: type=1400 audit(1747031634.721:92): avc: denied { module_request } for pid=5930 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.106879][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 45.202411][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 45.232909][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.236628][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.239712][ T5930] bridge_slave_0: entered allmulticast mode [ 45.243717][ T5930] bridge_slave_0: entered promiscuous mode [ 45.249020][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 45.297579][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.299946][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.302212][ T5930] bridge_slave_1: entered allmulticast mode [ 45.304958][ T5930] bridge_slave_1: entered promiscuous mode [ 45.382824][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.425601][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 45.431826][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.481966][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.484272][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.486583][ T5929] bridge_slave_0: entered allmulticast mode [ 45.489310][ T5929] bridge_slave_0: entered promiscuous mode [ 45.539105][ T5930] team0: Port device team_slave_0 added [ 45.555447][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.557839][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.560135][ T5929] bridge_slave_1: entered allmulticast mode [ 45.562831][ T5929] bridge_slave_1: entered promiscuous mode [ 45.598332][ T5930] team0: Port device team_slave_1 added [ 45.600360][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.602621][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.606391][ T5938] bridge_slave_0: entered allmulticast mode [ 45.608969][ T5938] bridge_slave_0: entered promiscuous mode [ 45.626466][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.660919][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.663400][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.665671][ T5938] bridge_slave_1: entered allmulticast mode [ 45.668708][ T5938] bridge_slave_1: entered promiscuous mode [ 45.672254][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.692238][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.694592][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.702451][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.707934][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.710340][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.718931][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.805144][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.820530][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.822812][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.827428][ T5934] bridge_slave_0: entered allmulticast mode [ 45.830639][ T5934] bridge_slave_0: entered promiscuous mode [ 45.833769][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.836050][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.838334][ T5934] bridge_slave_1: entered allmulticast mode [ 45.840965][ T5934] bridge_slave_1: entered promiscuous mode [ 45.844694][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.849104][ T5929] team0: Port device team_slave_0 added [ 45.852879][ T5929] team0: Port device team_slave_1 added [ 45.933800][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.952121][ T5938] team0: Port device team_slave_0 added [ 45.956630][ T5930] hsr_slave_0: entered promiscuous mode [ 45.958907][ T5930] hsr_slave_1: entered promiscuous mode [ 45.976266][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.980355][ T5938] team0: Port device team_slave_1 added [ 46.004682][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.006944][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.014872][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.063072][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.065240][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.073234][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.093876][ T5934] team0: Port device team_slave_0 added [ 46.096390][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.098629][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.106958][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.128591][ T5934] team0: Port device team_slave_1 added [ 46.131226][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.133647][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.141599][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.218726][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.221648][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.233867][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.263638][ T5929] hsr_slave_0: entered promiscuous mode [ 46.265694][ T5929] hsr_slave_1: entered promiscuous mode [ 46.267756][ T5929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.270032][ T5929] Cannot create hsr debugfs directory [ 46.271990][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.274306][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.282011][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.319055][ T5938] hsr_slave_0: entered promiscuous mode [ 46.321373][ T5938] hsr_slave_1: entered promiscuous mode [ 46.323320][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.325540][ T5938] Cannot create hsr debugfs directory [ 46.445517][ T5934] hsr_slave_0: entered promiscuous mode [ 46.448349][ T5934] hsr_slave_1: entered promiscuous mode [ 46.451267][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.454566][ T5934] Cannot create hsr debugfs directory [ 46.651877][ T5930] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.670288][ T5930] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.678391][ T5930] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.688115][ T5930] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.727265][ T5929] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.733718][ T5929] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.739095][ T5929] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.744845][ T5929] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.791507][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.798658][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.803857][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.813852][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.857284][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.861337][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.868220][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.872155][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.878683][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.911922][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.918624][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.920997][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.928360][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.939384][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.941720][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.944001][ T5944] Bluetooth: hci3: command tx timeout [ 46.944131][ T5944] Bluetooth: hci1: command tx timeout [ 46.948083][ T5944] Bluetooth: hci0: command tx timeout [ 46.949723][ T5932] Bluetooth: hci2: command tx timeout [ 46.953940][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.967053][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.969331][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.981251][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.984124][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.010618][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.038298][ T40] audit: type=1400 audit(1747031636.701:93): avc: denied { sys_module } for pid=5930 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.042788][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.052972][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.066868][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.069730][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.078978][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.084531][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.086803][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.092227][ T5929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.098885][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.101121][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.110965][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.113223][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.157434][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.196163][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.205442][ T5930] veth0_vlan: entered promiscuous mode [ 47.213928][ T5930] veth1_vlan: entered promiscuous mode [ 47.232948][ T5929] veth0_vlan: entered promiscuous mode [ 47.242188][ T5929] veth1_vlan: entered promiscuous mode [ 47.249578][ T5930] veth0_macvtap: entered promiscuous mode [ 47.255872][ T5930] veth1_macvtap: entered promiscuous mode [ 47.273078][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.278661][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.288517][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.291164][ T5929] veth0_macvtap: entered promiscuous mode [ 47.295570][ T5929] veth1_macvtap: entered promiscuous mode [ 47.301763][ T5930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.304794][ T5930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.307541][ T5930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.310227][ T5930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.315969][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.321933][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.326004][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.329766][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.338411][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.341636][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.345865][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.368027][ T5929] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370785][ T5929] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.374136][ T5929] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.376893][ T5929] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.419214][ T5938] veth0_vlan: entered promiscuous mode [ 47.424534][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.425044][ T5934] veth0_vlan: entered promiscuous mode [ 47.427066][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.439681][ T5938] veth1_vlan: entered promiscuous mode [ 47.446605][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.449067][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.460488][ T5934] veth1_vlan: entered promiscuous mode [ 47.463980][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.470041][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.479226][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.482210][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.482286][ T5938] veth0_macvtap: entered promiscuous mode [ 47.490727][ T5938] veth1_macvtap: entered promiscuous mode [ 47.502218][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.505849][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.509076][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.512345][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.517399][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.520914][ T5929] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.522747][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.528980][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.532012][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.537233][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.541116][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.544681][ T5934] veth0_macvtap: entered promiscuous mode [ 47.549560][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.552394][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.555549][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.558653][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.565186][ T5934] veth1_macvtap: entered promiscuous mode [ 47.581583][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.585610][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.588798][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.592026][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.594397][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.595129][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.597769][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.597855][ T5993] netlink: 'syz.3.4': attribute type 20 has an invalid length. [ 47.601014][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.602313][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.622409][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.626782][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.631982][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.636269][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.639313][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.642537][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.646790][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.653860][ T5934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.657702][ T5934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.661860][ T5934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.665821][ T5934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.682877][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.686132][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.708487][ T6007] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.712579][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.716956][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.728800][ T6007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.731848][ T6007] bond0: (slave bond1): Enslaving as an active interface with an up link [ 47.754383][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 47.770423][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.777439][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.786295][ T1197] Bluetooth: hci4: Frame reassembly failed (-84) [ 47.794182][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.796877][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.852271][ T6021] evm: overlay not supported [ 47.859157][ T6024] xt_recent: Unsupported userspace flags (000000c7) [ 47.918328][ T6030] 9pnet_fd: Insufficient options for proto=fd [ 47.925678][ T6030] sctp: [Deprecated]: syz.0.11 (pid 6030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.925678][ T6030] Use struct sctp_sack_info instead [ 47.931044][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 48.039877][ T6034] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 48.049962][ T6034] team0: Port device gretap1 added [ 48.401655][ T6042] kvm: user requested TSC rate below hardware speed [ 48.898299][ T6054] process 'syz.0.19' launched './file0' with NULL argv: empty string added [ 48.932670][ T6062] gfs2: gfs2 mount does not exist [ 49.023395][ T5932] Bluetooth: hci0: command tx timeout [ 49.023651][ T5944] Bluetooth: hci2: command tx timeout [ 49.025479][ T5937] Bluetooth: hci3: command tx timeout [ 49.025688][ T5946] Bluetooth: hci1: command tx timeout [ 49.185799][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 49.604232][ T835] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.763348][ T835] usb 7-1: Using ep0 maxpacket: 16 [ 49.770947][ T835] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.774615][ T835] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.780048][ T835] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 49.783460][ T835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.786658][ T835] usb 7-1: Product: syz [ 49.788027][ T835] usb 7-1: Manufacturer: syz [ 49.789500][ T835] usb 7-1: SerialNumber: syz [ 49.833298][ T5942] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 49.835020][ T5937] Bluetooth: hci4: command 0xfc11 tx timeout [ 49.855347][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 49.855364][ T40] audit: type=1400 audit(3494063788.504:223): avc: denied { create } for pid=6094 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.861079][ T6014] sp0: Synchronizing with TNC [ 49.887424][ T40] audit: type=1400 audit(3494063788.524:224): avc: denied { setopt } for pid=6094 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.907383][ T40] audit: type=1400 audit(3494063788.554:225): avc: denied { mount } for pid=6096 comm="syz.0.28" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.918278][ T40] audit: type=1400 audit(3494063788.564:226): avc: denied { setopt } for pid=6096 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.924989][ T40] audit: type=1400 audit(3494063788.584:227): avc: denied { remount } for pid=6096 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.941458][ T40] audit: type=1400 audit(3494063788.594:228): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.953905][ T40] audit: type=1400 audit(3494063788.614:229): avc: denied { ioctl } for pid=6102 comm="syz.1.29" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9508 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.969866][ T40] audit: type=1400 audit(3494063788.624:230): avc: denied { create } for pid=6104 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.975961][ T40] audit: type=1400 audit(3494063788.634:231): avc: denied { ioctl } for pid=6104 comm="syz.0.30" path="socket:[7066]" dev="sockfs" ino=7066 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.987535][ T40] audit: type=1400 audit(3494063788.634:232): avc: denied { connect } for pid=6104 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.999612][ T835] usb 7-1: 0:2 : does not exist [ 50.009721][ T1021] IPVS: starting estimator thread 0... [ 50.033852][ T835] usb 7-1: USB disconnect, device number 2 [ 50.043349][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 50.048177][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 50.113700][ T6108] IPVS: using max 45 ests per chain, 108000 per kthread [ 50.278431][ T6120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6120 comm=syz.0.33 [ 50.417923][ T6093] tipc: Subscription rejected, illegal request [ 50.421102][ T6126] netlink: 68 bytes leftover after parsing attributes in process `syz.1.35'. [ 50.509447][ T6131] ipvlan2: entered allmulticast mode [ 50.511166][ T6131] macvlan0: entered allmulticast mode [ 50.513217][ T6131] veth1_vlan: entered allmulticast mode [ 50.557172][ T6141] input: syz1 as /devices/virtual/input/input5 [ 50.609403][ T6144] warning: `syz.1.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.757850][ T9] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 50.914528][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 50.916330][ T6170] netlink: 'syz.1.47': attribute type 10 has an invalid length. [ 50.916681][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 50.922526][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.926655][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 50.929735][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 50.934273][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 50.935920][ T6170] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 50.936397][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 50.936412][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.936424][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 50.948944][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 50.952798][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 50.955591][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 50.958607][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.961876][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 50.965033][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 50.970785][ T9] usb 8-1: string descriptor 0 read error: -22 [ 50.972610][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 50.975260][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.983796][ T9] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 51.058101][ T6175] Bluetooth: MGMT ver 1.23 [ 51.103722][ T5942] Bluetooth: hci1: command tx timeout [ 51.103747][ T5937] Bluetooth: hci2: command tx timeout [ 51.104035][ T5932] Bluetooth: hci3: command tx timeout [ 51.104056][ T5932] Bluetooth: hci0: command tx timeout [ 51.170784][ T6184] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 51.174203][ T6184] overlayfs: missing 'lowerdir' [ 51.185089][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.188690][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.203320][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 51.240921][ T6189] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.258586][ T6189] SELinux: failed to load policy [ 51.326101][ T1021] usb 8-1: USB disconnect, device number 2 [ 51.363175][ T5900] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.472770][ T6201] tmpfs: Group quota inode hardlimit too large. [ 51.533128][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 51.536198][ T5900] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 51.538727][ T5900] usb 6-1: config 0 has no interface number 0 [ 51.540649][ T5900] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 51.545716][ T5900] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 51.548778][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.556521][ T5900] usb 6-1: config 0 descriptor?? [ 51.561290][ T5900] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 51.637319][ T6218] mmap: syz.2.62 (6218) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.662525][ T6222] bridge_slave_0: left allmulticast mode [ 51.665126][ T6222] bridge_slave_0: left promiscuous mode [ 51.667627][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 51.667672][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.669921][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 51.676493][ T6222] bridge_slave_1: left allmulticast mode [ 51.678554][ T6222] bridge_slave_1: left promiscuous mode [ 51.680734][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.686817][ T6222] bond0: (slave bond_slave_0): Releasing backup interface [ 51.690812][ T6222] bond0: (slave bond_slave_1): Releasing backup interface [ 51.699255][ T6222] team0: Port device team_slave_0 removed [ 51.705055][ T6222] team0: Port device team_slave_1 removed [ 51.707246][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.709554][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.712934][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.715834][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.934100][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 51.936081][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 51.960125][ T6248] cgroup: none used incorrectly [ 52.019853][ T6251] openvswitch: netlink: Key type 2832 is out of range max 32 [ 52.283079][ T5972] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 52.434333][ T5972] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.437538][ T5972] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 52.440891][ T5972] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 52.444306][ T5972] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 52.449184][ T5972] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 52.452381][ T5972] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 52.454624][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 52.455208][ T5972] usb 8-1: Manufacturer: syz [ 52.457818][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 52.460643][ T5972] usb 8-1: config 0 descriptor?? [ 52.469611][ T6218] ceph: No mds server is up or the cluster is laggy [ 52.522669][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 52.525990][ T6256] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 52.529730][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 52.584741][ T6260] x_tables: duplicate underflow at hook 3 [ 52.713153][ T5972] rc_core: IR keymap rc-hauppauge not found [ 52.715578][ T5972] Registered IR keymap rc-empty [ 52.717813][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.733250][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.754293][ T5972] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 52.758844][ T5972] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input7 [ 52.766004][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.785093][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.803103][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.805720][ T5900] usb 6-1: USB disconnect, device number 2 [ 52.823135][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.843354][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.863317][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.883202][ T6254] netlink: 666 bytes leftover after parsing attributes in process `syz.3.70'. [ 52.884220][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.903105][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.924357][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.943479][ T5972] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 52.964275][ T5972] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 52.967262][ T5972] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 52.971034][ T5972] usb 8-1: USB disconnect, device number 3 [ 53.183275][ T5937] Bluetooth: hci2: command tx timeout [ 53.183783][ T5944] Bluetooth: hci1: command tx timeout [ 53.185002][ T5937] Bluetooth: hci0: command tx timeout [ 53.185020][ T5937] Bluetooth: hci3: command tx timeout [ 53.352404][ T6278] vivid-000: ================= START STATUS ================= [ 53.355961][ T6278] vivid-000: Radio HW Seek Mode: Bounded [ 53.359796][ T6278] vivid-000: Radio Programmable HW Seek: false [ 53.362528][ T6278] vivid-000: RDS Rx I/O Mode: Block I/O [ 53.365154][ T6278] vivid-000: Generate RBDS Instead of RDS: false [ 53.367940][ T6278] vivid-000: RDS Reception: true [ 53.370194][ T6278] vivid-000: RDS Program Type: 0 inactive [ 53.372755][ T6278] vivid-000: RDS PS Name: inactive [ 53.375393][ T6278] vivid-000: RDS Radio Text: inactive [ 53.377956][ T6278] vivid-000: RDS Traffic Announcement: false inactive [ 53.380860][ T6278] vivid-000: RDS Traffic Program: false inactive [ 53.383927][ T6278] vivid-000: RDS Music: false inactive [ 53.386287][ T6278] vivid-000: ================== END STATUS ================== [ 53.390397][ T6278] netlink: 'syz.0.78': attribute type 10 has an invalid length. [ 53.397464][ T6278] team0: Device ipvlan1 failed to register rx_handler [ 53.510882][ T6287] syz.0.82: attempt to access beyond end of device [ 53.510882][ T6287] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 53.515215][ T6287] efs: cannot read volume header [ 53.656941][ T6300] netlink: 'syz.0.86': attribute type 29 has an invalid length. [ 53.671373][ T6300] netlink: 'syz.0.86': attribute type 29 has an invalid length. [ 53.675463][ T6300] xt_hashlimit: max too large, truncated to 1048576 [ 53.678442][ T6300] xt_bpf: check failed: parse error [ 53.971006][ T6331] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 53.977406][ T6331] overlayfs: overlapping lowerdir path [ 53.989740][ T835] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.008292][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'. [ 54.015621][ T6329] xfrm1: entered promiscuous mode [ 54.017278][ T6329] xfrm1: entered allmulticast mode [ 54.033388][ T6336] 9p filesystem being mounted at /22/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 54.077025][ T6338] 9pnet: Could not find request transport: fd.rfdno=0x0000000000000006 [ 54.147656][ T6343] netlink: 'syz.3.99': attribute type 10 has an invalid length. [ 54.150770][ T6343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.99'. [ 54.155056][ T835] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 54.158187][ T835] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 54.161461][ T835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 54.163949][ T6343] team0: Port device geneve0 added [ 54.165134][ T835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 54.169828][ T835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 54.177884][ T835] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 54.180710][ T835] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 54.184211][ T835] usb 5-1: Product: syz [ 54.185542][ T835] usb 5-1: Manufacturer: syz [ 54.210079][ T835] cdc_wdm 5-1:1.0: skipping garbage [ 54.211755][ T835] cdc_wdm 5-1:1.0: skipping garbage [ 54.224923][ T835] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 54.227055][ T835] cdc_wdm 5-1:1.0: Unknown control protocol [ 54.228330][ T6347] netlink: 'syz.1.97': attribute type 4 has an invalid length. [ 54.299980][ T6358] overlayfs: conflicting options: userxattr,redirect_dir=on [ 54.402139][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 54.437029][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 54.562084][ T6376] netlink: 64 bytes leftover after parsing attributes in process `syz.2.109'. [ 54.596469][ T6378] fuse: Unknown parameter '00000000000000000005000000000000000000050x000000000000000500000000000000000000' [ 54.617127][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 54.667585][ T6380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.111'. [ 54.670409][ T6380] netlink: 92 bytes leftover after parsing attributes in process `syz.2.111'. [ 54.671992][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 54.675330][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 54.678080][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 54.680144][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 54.682269][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 54.684321][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 54.686433][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 54.688479][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 54.691012][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 54.693051][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 54.695209][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 54.697310][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 54.699693][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 54.701902][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 54.704389][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 54.706471][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 54.708568][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 54.710609][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 54.712682][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 54.714758][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 54.717654][ T834] usb 5-1: USB disconnect, device number 2 [ 54.717697][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 54.824665][ T6394] futex_wake_op: syz.0.115 tries to shift op by -1; fix this program [ 54.874333][ T40] kauditd_printk_skb: 116 callbacks suppressed [ 54.874347][ T40] audit: type=1400 audit(3494063793.534:349): avc: denied { mount } for pid=6397 comm="syz.0.117" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 54.886565][ T40] audit: type=1400 audit(3494063793.534:350): avc: denied { mount } for pid=6402 comm="syz.2.119" name="/" dev="ramfs" ino=11495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.888282][ T6403] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 54.894506][ T40] audit: type=1400 audit(3494063793.544:351): avc: denied { mounton } for pid=6402 comm="syz.2.119" path="/bus" dev="ramfs" ino=9181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 54.897559][ T6403] overlayfs: failed to set xattr on upper [ 54.905239][ T6403] overlayfs: ...falling back to redirect_dir=nofollow. [ 54.907412][ T6403] overlayfs: ...falling back to metacopy=off. [ 54.909417][ T6403] overlayfs: ...falling back to index=off. [ 54.911287][ T6403] overlayfs: ...falling back to uuid=null. [ 54.939759][ T40] audit: type=1400 audit(3494063793.594:352): avc: denied { write } for pid=6404 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.940158][ T6406] netlink: 'syz.2.120': attribute type 4 has an invalid length. [ 54.951030][ T40] audit: type=1400 audit(3494063793.614:353): avc: denied { block_suspend } for pid=6397 comm="syz.0.117" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.972135][ T40] audit: type=1400 audit(3494063793.624:354): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 54.991832][ T40] audit: type=1400 audit(3494063793.644:355): avc: denied { write } for pid=6412 comm="syz.0.121" name="swradio0" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.200742][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.125'. [ 55.222331][ T40] audit: type=1400 audit(3494063793.874:356): avc: denied { setattr } for pid=6425 comm="syz.1.123" path="/dev/mixer" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 55.242866][ T6434] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 55.243626][ T6433] IPVS: stopping backup sync thread 6434 ... [ 55.245815][ T40] audit: type=1400 audit(3494063793.904:357): avc: denied { getopt } for pid=6432 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.329957][ T40] audit: type=1400 audit(3494063793.984:358): avc: denied { bind } for pid=6440 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.383256][ T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 55.555944][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.559056][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.563413][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 55.566201][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.775141][ T24] usb 7-1: usb_control_msg returned -32 [ 55.777036][ T24] usbtmc 7-1:16.0: can't read capabilities [ 56.448164][ T6502] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.565529][ T6502] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.591232][ T6506] syzkaller0: entered promiscuous mode [ 56.593718][ T6506] syzkaller0: entered allmulticast mode [ 56.597443][ T6506] netlink: 36 bytes leftover after parsing attributes in process `syz.0.147'. [ 56.659487][ T6511] capability: warning: `syz.1.148' uses deprecated v2 capabilities in a way that may be insecure [ 57.327753][ T6502] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.466177][ T6502] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.473856][ T6534] block nbd1: shutting down sockets [ 57.478083][ T6534] block nbd1: NBD_DISCONNECT [ 57.479657][ T6534] block nbd1: Send disconnect failed -32 [ 57.511101][ T6542] nbd: nbd1 already in use [ 57.533753][ T6502] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.537269][ T6544] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 57.541219][ T6502] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.549099][ T6502] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.557242][ T6502] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.599203][ T6549] Zero length message leads to an empty skb [ 57.616477][ T5944] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 57.775275][ T6569] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 58.013095][ T58] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.142917][ T834] usb 7-1: USB disconnect, device number 3 [ 58.163052][ T58] usb 6-1: Using ep0 maxpacket: 32 [ 58.166084][ T58] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 58.172973][ T58] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 58.176299][ T58] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 58.179353][ T58] usb 6-1: Product: syz [ 58.180779][ T58] usb 6-1: Manufacturer: syz [ 58.181036][ T6575] fuse: Bad value for 'group_id' [ 58.182312][ T58] usb 6-1: SerialNumber: syz [ 58.185227][ T6575] fuse: Bad value for 'group_id' [ 58.187629][ T58] usb 6-1: config 0 descriptor?? [ 58.189739][ T6569] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 58.416268][ T6593] vxcan1: entered allmulticast mode [ 58.418118][ T6593] vxcan1: left allmulticast mode [ 58.502778][ T6601] __nla_validate_parse: 1 callbacks suppressed [ 58.502792][ T6601] netlink: 36 bytes leftover after parsing attributes in process `syz.0.173'. [ 58.828837][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 58.864722][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 58.935665][ T6646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6646 comm=syz.3.188 [ 58.940299][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.188'. [ 59.289841][ T6670] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 59.292894][ T6670] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 59.392978][ T6686] ALSA: mixer_oss: invalid OSS volume '' [ 59.394309][ T6688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=6688 comm=syz.0.200 [ 59.594507][ T1021] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.615494][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 59.618231][ T6706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 59.621061][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 59.624022][ T6706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 59.695494][ T6708] netlink: 104 bytes leftover after parsing attributes in process `syz.0.205'. [ 59.773142][ T1021] usb 7-1: Using ep0 maxpacket: 8 [ 59.784287][ T1021] usb 7-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.787286][ T1021] usb 7-1: config 1 interface 0 has no altsetting 0 [ 59.793269][ T1021] usb 7-1: New USB device found, idVendor=0eef, idProduct=7207, bcdDevice= 0.40 [ 59.796006][ T1021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.798499][ T1021] usb 7-1: Product: ≑樔䁿彧액搪 [ 59.800287][ T1021] usb 7-1: Manufacturer: ࠊ [ 59.801724][ T1021] usb 7-1: SerialNumber: 莅뫉䥋켔됌夺햚㺅ࡈ뀍镾ਃ汬銴毥臩䈑ݯ꺴䒹Ԝ赭⢛㺻﷟ᵾ倾锦愰᧚뼰澰鸗뾎艀휏꩓ؤᗬ쉚꣩杊훬臏懃듮囆䴚э [ 60.016558][ T1021] usbhid 7-1:1.0: can't add hid device: -71 [ 60.018772][ T1021] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 60.025660][ T1021] usb 7-1: USB disconnect, device number 4 [ 60.298258][ T6735] syz.0.217(6735): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 60.548521][ T6743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.219'. [ 60.664673][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 60.664692][ T40] audit: type=1400 audit(3494063799.324:410): avc: denied { ioctl } for pid=6756 comm="syz.3.223" path="socket:[10952]" dev="sockfs" ino=10952 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.674153][ T40] audit: type=1400 audit(3494063799.324:411): avc: denied { accept } for pid=6756 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 60.737374][ T6759] sp0: Synchronizing with TNC [ 60.739901][ T6759] [U] [ 60.761764][ T6763] netlink: 'syz.2.226': attribute type 2 has an invalid length. [ 60.764349][ T6762] TCP: TCP_TX_DELAY enabled [ 60.765845][ T6763] xt_hashlimit: max too large, truncated to 1048576 [ 60.769211][ T6763] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 60.786666][ T58] usb 6-1: USB disconnect, device number 3 [ 60.796220][ T6763] syz.2.226: attempt to access beyond end of device [ 60.796220][ T6763] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 60.800522][ T6763] EXT4-fs (nbd2): unable to read superblock [ 60.849539][ T40] audit: type=1400 audit(3494063799.504:412): avc: denied { bind } for pid=6770 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.858001][ T40] audit: type=1400 audit(3494063799.504:413): avc: denied { write } for pid=6770 comm="syz.0.229" path="socket:[12768]" dev="sockfs" ino=12768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.867388][ T6775] IPv6: sit1: Disabled Multicast RS [ 60.871411][ T40] audit: type=1400 audit(3494063799.514:414): avc: denied { create } for pid=6770 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.877826][ T40] audit: type=1400 audit(3494063799.514:415): avc: denied { setopt } for pid=6770 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.884209][ T40] audit: type=1400 audit(3494063799.514:416): avc: denied { bind } for pid=6770 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.890259][ T40] audit: type=1400 audit(3494063799.514:417): avc: denied { write } for pid=6770 comm="syz.0.229" path="socket:[12769]" dev="sockfs" ino=12769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.903214][ T6780] bridge1: entered promiscuous mode [ 60.907631][ T6774] kvm: pic: non byte read [ 60.910361][ T6774] kvm: pic: non byte read [ 60.914323][ T6774] kvm: pic: non byte read [ 60.916917][ T6774] kvm: pic: level sensitive irq not supported [ 60.917172][ T6774] kvm: pic: non byte read [ 60.922886][ T6774] kvm: pic: non byte read [ 60.927549][ T6774] kvm: pic: non byte read [ 60.929430][ T6787] netlink: 'syz.0.234': attribute type 25 has an invalid length. [ 60.930450][ T6774] kvm: pic: single mode not supported [ 60.931996][ T6774] kvm: pic: level sensitive irq not supported [ 60.936516][ T6774] kvm: pic: non byte read [ 60.940969][ T6774] kvm: pic: non byte read [ 60.943858][ T6774] kvm: pic: single mode not supported [ 60.944086][ T6774] kvm: pic: non byte read [ 60.996131][ T40] audit: type=1400 audit(3494063799.654:418): avc: denied { setopt } for pid=6788 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.002086][ T40] audit: type=1400 audit(3494063799.654:419): avc: denied { connect } for pid=6788 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.143209][ T6191] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 61.214363][ T6803] input: syz1 as /devices/virtual/input/input8 [ 61.260208][ T6805] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20004 [ 61.293058][ T6191] usb 7-1: Using ep0 maxpacket: 8 [ 61.298994][ T6191] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.304521][ T6191] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 61.307423][ T6191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.311624][ T6191] usb 7-1: config 0 descriptor?? [ 61.415786][ T6821] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20001 [ 61.442323][ T6826] ======================================================= [ 61.442323][ T6826] WARNING: The mand mount option has been deprecated and [ 61.442323][ T6826] and is ignored by this kernel. Remove the mand [ 61.442323][ T6826] option from the mount to silence this warning. [ 61.442323][ T6826] ======================================================= [ 61.519195][ T6191] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 61.623780][ T6843] 9pnet: Unknown protocol version 9p2000.u]_ [ 61.916948][ T6884] input: syz1 as /devices/virtual/input/input9 [ 61.931909][ T5936] udevd[5936]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 61.935392][ T5936] udevd[5936]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 61.967407][ T6891] Bluetooth: MGMT ver 1.23 [ 61.976009][ T6191] usb 7-1: USB disconnect, device number 5 [ 62.003159][ T1021] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.046180][ T6901] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 62.051890][ T6901] bond0: (slave wlan1): Releasing backup interface [ 62.056697][ T6901] team0: Port device wlan1 added [ 62.106589][ T6911] fuse: Bad value for 'rootmode' [ 62.109780][ T6913] fuse: Bad value for 'rootmode' [ 62.136614][ T6918] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 62.146590][ T6918] CIFS: Unable to determine destination address [ 62.151568][ T6918] sctp: [Deprecated]: syz.1.275 (pid 6918) Use of int in maxseg socket option. [ 62.151568][ T6918] Use struct sctp_assoc_value instead [ 62.173078][ T1021] usb 5-1: Using ep0 maxpacket: 16 [ 62.176009][ T1021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 62.179436][ T1021] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 62.183632][ T1021] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 62.186569][ T1021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.190284][ T1021] usb 5-1: config 0 descriptor?? [ 62.271532][ T6937] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 62.317547][ T6941] syz.1.282 uses obsolete (PF_INET,SOCK_PACKET) [ 62.404357][ T1021] usbhid 5-1:0.0: can't add hid device: -71 [ 62.406412][ T1021] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 62.409977][ T1021] usb 5-1: USB disconnect, device number 3 [ 62.479207][ T5942] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 62.593136][ T6191] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 62.763401][ T6191] usb 8-1: Using ep0 maxpacket: 8 [ 62.766221][ T6191] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 62.769086][ T6191] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 62.771866][ T6191] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 62.774755][ T6191] usb 8-1: config 250 has no interface number 0 [ 62.777313][ T6191] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 62.781348][ T6191] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 62.784901][ T6191] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 62.789418][ T6191] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 62.794297][ T6191] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 62.798847][ T6191] usb 8-1: config 250 interface 228 has no altsetting 0 [ 62.802396][ T6191] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 62.805264][ T6191] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 62.808437][ T6191] usb 8-1: Product: syz [ 62.809867][ T6191] usb 8-1: SerialNumber: syz [ 62.815272][ T6191] hub 8-1:250.228: bad descriptor, ignoring hub [ 62.817363][ T6191] hub 8-1:250.228: probe with driver hub failed with error -5 [ 63.019270][ T6191] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 63.033152][ T5942] Bluetooth: hci0: command tx timeout [ 63.303161][ T58] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.465004][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.468493][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.471515][ T58] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.475585][ T58] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.478366][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.482819][ T58] usb 6-1: config 0 descriptor?? [ 63.611836][ T7002] fuse: Bad value for 'fd' [ 63.891196][ T58] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 63.926584][ T834] usb 8-1: USB disconnect, device number 4 [ 63.933545][ T834] usblp0: removed [ 63.937795][ T58] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 64.073094][ T834] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 64.139375][ T10] usb 6-1: USB disconnect, device number 4 [ 64.215336][ T7006] __nla_validate_parse: 19 callbacks suppressed [ 64.215347][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 64.231903][ T7006] fuse: Unknown parameter '000000000000000000000040xffffffffffffffff' [ 64.245364][ T834] usb 8-1: config 0 has no interfaces? [ 64.247204][ T834] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 64.250164][ T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.255273][ T834] usb 8-1: config 0 descriptor?? [ 64.383146][ T5942] Bluetooth: hci3: command 0x0405 tx timeout [ 64.466749][ T7010] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 64.843424][ T6986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.846453][ T6986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.859418][ T58] usb 8-1: USB disconnect, device number 5 [ 64.999245][ T7024] tipc: Started in network mode [ 65.001003][ T7024] tipc: Node identity ac141417, cluster identity 4711 [ 65.005405][ T7024] tipc: Enabled bearer , priority 10 [ 65.008947][ T7024] erofs (device loop3): cannot find valid erofs superblock [ 65.091596][ T7031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58480 sclass=netlink_route_socket pid=7031 comm=syz.3.307 [ 65.113152][ T5944] Bluetooth: hci0: command tx timeout [ 65.377127][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 65.382427][ T7043] bond0: entered promiscuous mode [ 65.385771][ T7043] bond_slave_0: entered promiscuous mode [ 65.387672][ T7043] bond_slave_1: entered promiscuous mode [ 65.389512][ T7043] bond1: entered promiscuous mode [ 65.394518][ T7043] batadv0: entered promiscuous mode [ 65.397057][ T7043] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 65.816262][ T7065] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.317'. [ 65.822712][ T7067] veth3: entered promiscuous mode [ 65.861067][ T7069] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 65.867504][ T7069] netlink: 'syz.3.319': attribute type 3 has an invalid length. [ 65.870015][ T7069] netlink: 224 bytes leftover after parsing attributes in process `syz.3.319'. [ 66.123938][ T833] tipc: Node number set to 2886997015 [ 66.202408][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 66.202418][ T40] audit: type=1400 audit(3494063804.854:461): avc: denied { watch_mount } for pid=7092 comm="syz.3.323" path="/74" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.409439][ T40] audit: type=1400 audit(3494063805.064:462): avc: denied { bind } for pid=7124 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.441462][ T5944] Bluetooth: hci1: adv larger than maximum supported [ 66.574580][ T40] audit: type=1400 audit(3494063805.224:463): avc: denied { watch } for pid=7147 comm="syz.1.336" path="/90" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.585743][ T40] audit: type=1400 audit(3494063805.224:464): avc: denied { watch_sb } for pid=7147 comm="syz.1.336" path="/90" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.703636][ T40] audit: type=1400 audit(3494063805.354:465): avc: denied { override_creds } for pid=7160 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.748488][ T40] audit: type=1400 audit(3494063805.404:466): avc: denied { create } for pid=7164 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 66.809671][ T7167] netlink: 32 bytes leftover after parsing attributes in process `syz.1.340'. [ 66.940784][ T7182] kvm: pic: level sensitive irq not supported [ 66.941059][ T7182] kvm: pic: single mode not supported [ 66.943867][ T7182] kvm: pic: level sensitive irq not supported [ 66.945953][ T7182] kvm: pic: single mode not supported [ 66.947887][ T7182] kvm: pic: level sensitive irq not supported [ 67.037809][ T40] audit: type=1400 audit(3494063805.694:467): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.423272][ T58] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.553587][ T29] cfg80211: failed to load regulatory.db [ 67.586083][ T58] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.589349][ T58] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.598598][ T58] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.615927][ T58] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 67.618937][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.621414][ T58] usb 6-1: Product: syz [ 67.622726][ T58] usb 6-1: Manufacturer: syz [ 67.624674][ T58] usb 6-1: SerialNumber: syz [ 67.691354][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.695360][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.756964][ T7210] netlink: 164 bytes leftover after parsing attributes in process `syz.0.356'. [ 67.760635][ T7210] netlink: 164 bytes leftover after parsing attributes in process `syz.0.356'. [ 67.766062][ T7210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.356'. [ 67.834623][ T58] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 67.879334][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 67.882240][ T7223] ip6_vti0: entered promiscuous mode [ 67.887168][ T7223] ip6_vti0: entered allmulticast mode [ 67.943168][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 68.043489][ T24] usb 6-1: USB disconnect, device number 5 [ 68.049706][ T24] usblp0: removed [ 68.179524][ T29] hid-generic 0005:10CF:0007.0003: unknown main item tag 0x0 [ 68.185623][ T29] hid-generic 0005:10CF:0007.0003: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 68.310262][ T40] audit: type=1400 audit(3494063806.964:468): avc: denied { write } for pid=7263 comm="syz.1.368" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 68.345642][ T7266] netlink: 'syz.1.369': attribute type 30 has an invalid length. [ 68.555560][ T7278] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 68.558404][ T7278] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (5) [ 68.591033][ T40] audit: type=1400 audit(3494063807.244:469): avc: denied { create } for pid=7279 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.597353][ T40] audit: type=1400 audit(3494063807.254:470): avc: denied { read } for pid=7279 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.702529][ T7288] 9pnet: Found fid 0 not clunked [ 68.772617][ T7292] tipc: Started in network mode [ 68.779017][ T7292] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 68.781806][ T7292] tipc: Enabling of bearer rejected, failed to enable media [ 68.809501][ T7290] kvm: pic: non byte write [ 68.933947][ T7301] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 68.935929][ T7301] PKCS7: Only support pkcs7_signedData type [ 69.011313][ T7310] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 69.013504][ T7310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 69.016786][ T7310] vhci_hcd vhci_hcd.0: Device attached [ 69.221430][ T7330] fuse: Unknown parameter 'rootZode' [ 69.223410][ T7329] fuse: Unknown parameter 'rootZode' [ 69.254498][ T833] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 69.257779][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.406160][ T10] usb 5-1: config index 0 descriptor too short (expected 2608, got 18) [ 69.408752][ T10] usb 5-1: config 110 has too many interfaces: 109, using maximum allowed: 32 [ 69.411493][ T10] usb 5-1: config 110 has an invalid descriptor of length 100, skipping remainder of the config [ 69.415048][ T10] usb 5-1: config 110 has 0 interfaces, different from the descriptor's value: 109 [ 69.418007][ T10] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 69.420861][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.516752][ T7339] overlayfs: failed to get inode (-116) [ 69.519654][ T7339] overlayfs: failed to get inode (-116) [ 69.522884][ T7339] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 69.527507][ T7339] __nla_validate_parse: 6 callbacks suppressed [ 69.527516][ T7339] netlink: 1 bytes leftover after parsing attributes in process `syz.2.391'. [ 69.627152][ T7314] usb 37-1: recv xbuf, 0 [ 69.631178][ T1140] vhci_hcd: stop threads [ 69.632910][ T10] usb 5-1: string descriptor 0 read error: -71 [ 69.633268][ T1140] vhci_hcd: release socket [ 69.636997][ T1140] vhci_hcd: disconnect device [ 69.643493][ T10] usb 5-1: USB disconnect, device number 4 [ 69.694094][ T833] vhci_hcd: vhci_device speed not set [ 69.843235][ T24] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 69.853141][ T7351] Unknown options in mask 5 [ 70.005215][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 70.007742][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 70.011131][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.015773][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 70.019300][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 70.029984][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 70.033104][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 70.037242][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.041715][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 70.048962][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 70.054204][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 70.054703][ T7363] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.057179][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 70.057199][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.057214][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 70.057230][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 70.059695][ T24] usb 7-1: string descriptor 0 read error: -22 [ 70.060808][ T7363] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.065950][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 70.070426][ T7363] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.074265][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.078432][ T7363] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.086809][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 70.088992][ T7363] geneve2: entered promiscuous mode [ 70.099757][ T7363] geneve2: entered allmulticast mode [ 70.265667][ T7374] [U] v3f"S/4:XTzWtlW= [ 70.267694][ T7374] [U] J"e:" [ 70.298625][ T7343] vivid-007: ================= START STATUS ================= [ 70.300062][ T7380] loop6: detected capacity change from 0 to 524287999 [ 70.301122][ T7343] vivid-007: Enable Output Cropping: true grabbed [ 70.307057][ T7343] vivid-007: Enable Output Composing: [ 70.307057][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.308928][ T7343] true grabbed [ 70.312065][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.312697][ T7343] vivid-007: Enable Output Scaler: [ 70.315814][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.316062][ T7343] true [ 70.318233][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.320660][ T7343] grabbed [ 70.321508][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.325418][ T7343] [ 70.325426][ T7343] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 70.325478][ T7343] vivid-007: Transmit Mode: HDMI grabbed [ 70.325496][ T7343] vivid-007: Hotplug Present: 0x00000000 [ 70.328234][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.328914][ T7343] [ 70.331139][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.334979][ T7343] vivid-007: RxSense Present: [ 70.335429][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.338153][ T7343] 0x00000000 [ 70.338166][ T7343] vivid-007: EDID Present: 0x00000000 [ 70.339014][ T5936] ldm_validate_partition_table(): Disk read failed. [ 70.343060][ T7343] [ 70.345411][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.346933][ T7343] vivid-007: ================== END STATUS ================== [ 70.348061][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.359287][ T5936] Dev loop6: unable to read RDB block 0 [ 70.361270][ T5936] loop6: unable to read partition table [ 70.367747][ T7380] ldm_validate_partition_table(): Disk read failed. [ 70.369999][ T7380] Dev loop6: unable to read RDB block 0 [ 70.372152][ T7380] loop6: unable to read partition table [ 70.374158][ T7380] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 70.535430][ T7414] delete_channel: no stack [ 70.561143][ T7418] xt_hashlimit: size too large, truncated to 1048576 [ 70.638476][ T7413] binfmt_misc: register: failed to install interpreter file ./file0 [ 70.796846][ T7433] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 70.799312][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 70.889409][ T7441] sd 0:0:0:0: PR command failed: 1026 [ 70.891281][ T7441] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 70.894420][ T7441] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 70.956384][ T7456] netlink: 'syz.2.425': attribute type 3 has an invalid length. [ 70.958822][ T7456] netlink: 132 bytes leftover after parsing attributes in process `syz.2.425'. [ 70.961975][ T7458] xt_hashlimit: size too large, truncated to 1048576 [ 70.964295][ T7456] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 70.995785][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.997619][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.001583][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.002786][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.426'. [ 71.013987][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 71.099795][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 71.106935][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.109480][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.131642][ T7472] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 71.168334][ T7474] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 71.211288][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.214392][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.231396][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 71.711033][ T7493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7493 comm=syz.0.436 [ 71.717426][ T7494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 72.100235][ T7504] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 72.130722][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 72.130731][ T40] audit: type=1400 audit(3494063810.784:500): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 72.453150][ T24] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 72.577564][ T40] audit: type=1400 audit(3494063811.234:501): avc: denied { ioctl } for pid=7523 comm="syz.0.444" path="socket:[14987]" dev="sockfs" ino=14987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.591857][ T40] audit: type=1400 audit(3494063811.244:502): avc: denied { connect } for pid=7523 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.625275][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.628365][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.632557][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.635450][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.835150][ T7528] syz.2.445: attempt to access beyond end of device [ 72.835150][ T7528] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 72.840375][ T7528] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 72.845526][ T24] usb 6-1: usb_control_msg returned -32 [ 72.847395][ T24] usbtmc 6-1:16.0: can't read capabilities [ 72.892352][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 72.896951][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 72.948823][ T7541] openvswitch: netlink: Duplicate or invalid key (type 0). [ 72.951251][ T7541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.038302][ T7550] netlink: 'syz.0.450': attribute type 3 has an invalid length. [ 73.039751][ T7551] overlayfs: failed to resolve './file1': -2 [ 73.044536][ T7553] overlayfs: failed to resolve './file1': -2 [ 73.075098][ T7555] 9p filesystem being mounted at /130/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 73.093147][ T40] audit: type=1400 audit(3494063811.744:503): avc: denied { write } for pid=7554 comm="syz.0.452" name="memory.events.local" dev="9p" ino=35913971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.094779][ T7562] ERROR: device name not specified. [ 73.105494][ T7555] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.114462][ T40] audit: type=1400 audit(3494063811.774:504): avc: denied { ioctl } for pid=7554 comm="syz.0.452" path="/130/file0/memory.events.local" dev="9p" ino=35913971 ioctlcmd=0x5519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.127228][ T7564] geneve3: entered allmulticast mode [ 73.194019][ T7569] 9pnet: Could not find request transport: [ 73.199688][ T40] audit: type=1400 audit(3494063811.854:505): avc: denied { append } for pid=7568 comm="syz.3.457" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 73.283782][ T7583] netlink: 'syz.2.461': attribute type 30 has an invalid length. [ 73.288448][ T7583] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 73.291943][ T7583] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 73.297432][ T7583] SELinux: security policydb version 18 (MLS) not backwards compatible [ 73.300710][ T7583] SELinux: failed to load policy [ 73.339297][ T7585] 9p filesystem being mounted at /93/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 73.351333][ T40] audit: type=1400 audit(3494063812.004:506): avc: denied { create } for pid=7584 comm="syz.2.463" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.359208][ T40] audit: type=1400 audit(3494063812.004:507): avc: denied { mounton } for pid=7584 comm="syz.2.463" path="/93/file0/file0" dev="9p" ino=35913899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.366850][ T40] audit: type=1400 audit(3494063812.004:508): avc: denied { mount } for pid=7584 comm="syz.2.463" name="/" dev="rpc_pipefs" ino=16322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 73.415724][ T40] audit: type=1400 audit(3494063812.074:509): avc: denied { read } for pid=5327 comm="acpid" name="mouse6" dev="devtmpfs" ino=2923 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 73.690109][ T7616] syz.3.471: attempt to access beyond end of device [ 73.690109][ T7616] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 73.694615][ T7616] XFS (nbd3): SB validate failed with error -5. [ 73.837485][ T7625] netlink: 'syz.3.473': attribute type 10 has an invalid length. [ 73.850592][ T7625] team0: Port device wlan1 added [ 73.883533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.902097][ T7628] macsec0: entered promiscuous mode [ 74.076985][ T7638] QAT: Stopping all acceleration devices. [ 74.119452][ T7640] kvm: user requested TSC rate below hardware speed [ 74.320112][ T7644] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 74.612980][ T7657] __nla_validate_parse: 9 callbacks suppressed [ 74.614988][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 74.617771][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 74.683062][ T833] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 74.707934][ T7660] netlink: zone id is out of range [ 74.709732][ T7660] netlink: zone id is out of range [ 74.711466][ T7660] netlink: zone id is out of range [ 74.713197][ T7660] netlink: zone id is out of range [ 74.717296][ T7660] tmpfs: Bad value for 'mpol' [ 74.834795][ T833] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 74.838027][ T833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.842203][ T833] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 74.845414][ T833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.848006][ T833] usb 5-1: Product: syz [ 74.849453][ T833] usb 5-1: Manufacturer: syz [ 74.851000][ T833] usb 5-1: SerialNumber: syz [ 74.854264][ T833] usb 5-1: config 0 descriptor?? [ 74.858977][ T833] usb 5-1: selecting invalid altsetting 0 [ 75.060765][ T58] usb 5-1: USB disconnect, device number 5 [ 75.232032][ T833] usb 6-1: USB disconnect, device number 6 [ 75.340582][ T7673] netlink: 'syz.3.489': attribute type 5 has an invalid length. [ 75.571531][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 75.760050][ T7708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.501'. [ 75.781762][ T7718] syz.2.503: attempt to access beyond end of device [ 75.781762][ T7718] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 75.787701][ T7718] gfs2: error -5 reading superblock [ 75.822045][ T7721] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 75.828792][ T7721] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 75.830891][ T7721] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.833842][ T7721] vhci_hcd vhci_hcd.0: Device attached [ 75.837474][ T7721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.840277][ T7721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.842875][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.845982][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.848952][ T7725] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 75.851425][ T7097] vhci_hcd: stop threads [ 75.852799][ T7097] vhci_hcd: release socket [ 75.852864][ T7728] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 75.854289][ T7097] vhci_hcd: disconnect device [ 75.859163][ T7728] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 75.865226][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.505'. [ 75.939792][ T7735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7735 comm=syz.0.507 [ 75.948752][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 75.964290][ T7735] ?H: renamed from lo (while UP) [ 75.989206][ T7739] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 76.051689][ T7748] netlink: 'syz.1.510': attribute type 2 has an invalid length. [ 76.097024][ T7752] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 76.105419][ T7752] kvm: pic: non byte read [ 76.107886][ T7752] kvm: pic: non byte read [ 76.110349][ T7752] kvm: pic: non byte read [ 76.112899][ T7752] kvm: pic: non byte read [ 76.115414][ T7752] kvm: pic: non byte read [ 76.118487][ T7752] kvm: pic: non byte read [ 76.121298][ T7752] kvm: pic: non byte read [ 76.124102][ T7752] kvm: pic: non byte read [ 76.126705][ T7752] kvm: pic: non byte read [ 76.129299][ T7752] kvm: pic: non byte read [ 76.153278][ T7756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65498 sclass=netlink_route_socket pid=7756 comm=syz.0.512 [ 76.154149][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 76.160027][ T7759] openvswitch: netlink: nsh attribute has 34300 unknown bytes. [ 76.162426][ T7759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.277620][ T7761] xt_hashlimit: size too large, truncated to 1048576 [ 76.371107][ T7773] netlink: 224 bytes leftover after parsing attributes in process `syz.1.517'. [ 76.457654][ T7788] program syz.3.520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.509914][ T7797] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 76.543259][ T5937] Bluetooth: hci0: command 0x0406 tx timeout [ 76.622011][ T7818] futex_wake_op: syz.1.530 tries to shift op by 32; fix this program [ 76.775133][ T7831] program syz.1.534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.781419][ T7831] syz.1.534: attempt to access beyond end of device [ 76.781419][ T7831] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 76.786287][ T7831] SQUASHFS error: Failed to read block 0x0: -5 [ 76.788239][ T7831] unable to read squashfs_super_block [ 77.224498][ T5900] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.393228][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 77.396239][ T5900] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 77.399436][ T5900] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.402701][ T5900] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.406763][ T5900] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.409867][ T5900] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.413993][ T5900] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.418589][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.484180][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 77.484195][ T40] audit: type=1400 audit(3494063816.144:530): avc: denied { read append } for pid=7863 comm="syz.3.546" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.493836][ T40] audit: type=1400 audit(3494063816.144:531): avc: denied { open } for pid=7863 comm="syz.3.546" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.501056][ T7864] netlink: 728 bytes leftover after parsing attributes in process `syz.3.546'. [ 77.532932][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 77.538390][ T7866] bond0: entered promiscuous mode [ 77.540027][ T7866] bond_slave_0: entered promiscuous mode [ 77.541895][ T7866] bond_slave_1: entered promiscuous mode [ 77.545377][ T7866] batadv0: entered promiscuous mode [ 77.547381][ T7866] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 77.549900][ T7866] Cannot create hsr debugfs directory [ 77.551836][ T7866] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 77.557282][ T40] audit: type=1400 audit(3494063816.214:532): avc: denied { ioctl } for pid=7867 comm="syz.2.547" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.593118][ T40] audit: type=1400 audit(3494063816.244:533): avc: denied { create } for pid=7871 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.607989][ T40] audit: type=1400 audit(3494063816.264:534): avc: denied { ioctl } for pid=7871 comm="syz.3.550" path="socket:[19672]" dev="sockfs" ino=19672 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.632633][ T5900] usb 6-1: usb_control_msg returned -32 [ 77.634761][ T5900] usbtmc 6-1:16.0: can't read capabilities [ 77.638051][ T7877] netlink: 'syz.2.549': attribute type 4 has an invalid length. [ 77.644193][ T7877] : renamed from bond0 (while UP) [ 77.672057][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.674988][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.680037][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.684961][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.688077][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.690957][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.694100][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.700119][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.704431][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.707925][ T40] audit: type=1400 audit(3494063816.364:535): avc: denied { bind } for pid=7883 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.707986][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.945239][ T40] audit: type=1400 audit(3494063816.604:536): avc: denied { ioctl } for pid=7890 comm="syz.3.554" path="socket:[20543]" dev="sockfs" ino=20543 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.035107][ T7899] netlink: 'syz.3.556': attribute type 1 has an invalid length. [ 78.246679][ T7909] program syz.2.560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.302595][ T40] audit: type=1400 audit(3494063816.954:537): avc: denied { write } for pid=7915 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.353380][ T58] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 78.504306][ T58] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 78.507153][ T58] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 78.511392][ T58] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.516151][ T58] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 78.520453][ T58] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 78.525837][ T58] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 78.528838][ T58] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 78.533099][ T58] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.537716][ T58] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 78.541957][ T58] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 78.546303][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 78.550396][ T58] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 78.553359][ T58] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 78.557667][ T58] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.562402][ T58] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 78.566866][ T58] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 78.574207][ T58] usb 8-1: string descriptor 0 read error: -22 [ 78.576673][ T58] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 78.580068][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.588711][ T58] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 78.794213][ T7907] vivid-007: ================= START STATUS ================= [ 78.796731][ T7907] vivid-007: Enable Output Cropping: true grabbed [ 78.798764][ T7907] vivid-007: Enable Output Composing: true grabbed [ 78.800867][ T7907] vivid-007: Enable Output Scaler: true grabbed [ 78.802852][ T7907] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 78.805583][ T7907] vivid-007: Transmit Mode: HDMI grabbed [ 78.807662][ T7907] vivid-007: Hotplug Present: 0x00000000 [ 78.809454][ T7907] vivid-007: RxSense Present: 0x00000000 [ 78.811274][ T7907] vivid-007: EDID Present: 0x00000000 [ 78.813052][ T7907] vivid-007: ================== END STATUS ================== [ 78.857171][ T40] audit: type=1400 audit(3494063817.514:538): avc: denied { read write } for pid=7939 comm="syz.2.568" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 78.870268][ T40] audit: type=1400 audit(3494063817.514:539): avc: denied { open } for pid=7939 comm="syz.2.568" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.014094][ T7949] netlink: 'syz.0.571': attribute type 4 has an invalid length. [ 79.024428][ T7949] netlink: 'syz.0.571': attribute type 4 has an invalid length. [ 79.178029][ T7951] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 79.357725][ T7955] usb usb8: usbfs: process 7955 (syz.0.573) did not claim interface 0 before use [ 79.545169][ T7958] syzkaller1: entered promiscuous mode [ 79.547089][ T7958] syzkaller1: entered allmulticast mode [ 79.809314][ T7973] __nla_validate_parse: 2 callbacks suppressed [ 79.809329][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 79.817062][ T7973] bridge_slave_1: left allmulticast mode [ 79.819214][ T7973] bridge_slave_1: left promiscuous mode [ 79.821236][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.826055][ T7973] bridge_slave_0: left allmulticast mode [ 79.827884][ T7973] bridge_slave_0: left promiscuous mode [ 79.829752][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.979538][ T1021] usb 6-1: USB disconnect, device number 7 [ 80.076136][ T7985] trusted_key: syz.2.581 sent an empty control message without MSG_MORE. [ 80.177961][ T8008] fuseblk: Bad value for 'fd' [ 80.194769][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 80.200182][ T8007] loop6: detected capacity change from 0 to 524287999 [ 80.394034][ T8038] netlink: 'syz.2.598': attribute type 29 has an invalid length. [ 80.397101][ T8038] netlink: 'syz.2.598': attribute type 29 has an invalid length. [ 80.400099][ T8038] netlink: 500 bytes leftover after parsing attributes in process `syz.2.598'. [ 80.404491][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.424258][ T8036] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.597'. [ 80.436500][ T5944] Bluetooth: hci1: Malformed Event: 0x13 [ 80.439183][ T8041] overlayfs: conflicting options: userxattr,redirect_dir=on [ 80.532811][ T8045] 9pnet_fd: Insufficient options for proto=fd [ 80.557485][ T29] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 80.560780][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.567847][ T29] usb 5-1: Product: syz [ 80.569215][ T29] usb 5-1: Manufacturer: syz [ 80.570681][ T29] usb 5-1: SerialNumber: syz [ 80.583872][ T29] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 80.607670][ T29] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 80.612388][ T8055] 9pnet_virtio: no channels available for device 127.0.0.1 [ 80.885612][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 80.888472][ T8071] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 80.890734][ T8071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.947883][ T8075] Invalid source name [ 80.949625][ T8075] UBIFS error (pid: 8075): cannot open "/dev/sg0", error -22 [ 80.954968][ T8075] NILFS (nullb0): couldn't find nilfs on the device [ 80.992869][ T8077] binder_alloc: 8076: binder_alloc_buf, no vma [ 81.230279][ T8087] netlink: 'syz.3.618': attribute type 2 has an invalid length. [ 81.233105][ T8087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.283553][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 81.373856][ T8085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.378627][ T8085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.392143][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'. [ 81.405237][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 81.664574][ T29] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 81.669687][ T29] ath9k_htc: Failed to initialize the device [ 81.691871][ T29] usb 5-1: ath9k_htc: USB layer deinitialized [ 81.703423][ T9] usb 5-1: USB disconnect, device number 6 [ 81.783277][ T8121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.788124][ T8121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.183123][ T58] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 82.349019][ T58] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.353592][ T58] usb 6-1: no configurations [ 82.355167][ T58] usb 6-1: can't read configurations, error -22 [ 82.469902][ T8141] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 82.523484][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.634'. [ 82.526438][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.634'. [ 82.557651][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 82.557660][ T40] audit: type=1400 audit(3494063821.214:562): avc: denied { append } for pid=8152 comm="syz.0.635" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.653099][ T40] audit: type=1400 audit(3494063821.304:563): avc: denied { read } for pid=8161 comm="syz.0.638" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 82.660545][ T40] audit: type=1400 audit(3494063821.314:564): avc: denied { open } for pid=8161 comm="syz.0.638" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 82.668233][ T40] audit: type=1400 audit(3494063821.314:565): avc: denied { mount } for pid=8161 comm="syz.0.638" name="/" dev="autofs" ino=20855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 82.764676][ T40] audit: type=1400 audit(3494063821.424:566): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 82.899635][ T40] audit: type=1400 audit(3494063821.554:567): avc: denied { mounton } for pid=8166 comm="syz.0.640" path="/163/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 82.960375][ T8181] overlay: Unknown parameter 'fowner' [ 82.967189][ T8180] 9pnet_fd: Insufficient options for proto=fd [ 82.994800][ T8184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8184 comm=syz.1.643 [ 83.038612][ T8186] tun0: tun_chr_ioctl cmd 1074025675 [ 83.040373][ T8186] tun0: persist disabled [ 84.164170][ T8218] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 84.271361][ T8195] mkiss: ax0: crc mode is auto. [ 84.354815][ T8223] pim6reg1: entered promiscuous mode [ 84.356613][ T8223] pim6reg1: entered allmulticast mode [ 84.360342][ T8220] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 84.453209][ T8229] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.458003][ T8229] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.474030][ T5944] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 84.476799][ T5944] Bluetooth: hci1: Injecting HCI hardware error event [ 84.480121][ T5944] Bluetooth: hci1: hardware error 0x00 [ 84.558707][ T40] audit: type=1400 audit(3494063823.214:568): avc: denied { shutdown } for pid=8240 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.647264][ T40] audit: type=1400 audit(3494063823.304:569): avc: denied { mounton } for pid=8250 comm="syz.1.666" path="/proc/541/task" dev="proc" ino=21054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 84.659938][ T8253] Invalid source name [ 84.661301][ T8253] UBIFS error (pid: 8253): cannot open "/dev/sg0", error -22 [ 84.664612][ T8248] trusted_key: encrypted_key: master key parameter '' is invalid [ 84.705660][ T40] audit: type=1400 audit(3494063823.364:570): avc: denied { create } for pid=8254 comm="syz.3.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.796712][ T40] audit: type=1400 audit(3494063823.454:571): avc: denied { getopt } for pid=8265 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.836313][ T8282] __nla_validate_parse: 4 callbacks suppressed [ 84.836325][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 84.855788][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 84.858575][ T8284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.676'. [ 84.927853][ T8299] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 85.223071][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 85.343080][ T6704] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 85.353229][ T24] usb 6-1: device descriptor read/64, error -71 [ 85.494791][ T6704] usb 5-1: not running at top speed; connect to a high speed hub [ 85.498041][ T6704] usb 5-1: config 86 has an invalid interface number: 103 but max is 1 [ 85.500685][ T6704] usb 5-1: config 86 contains an unexpected descriptor of type 0x2, skipping [ 85.503661][ T6704] usb 5-1: config 86 has an invalid descriptor of length 1, skipping remainder of the config [ 85.506778][ T6704] usb 5-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 85.509830][ T6704] usb 5-1: config 86 has no interface number 0 [ 85.511787][ T6704] usb 5-1: config 86 interface 103 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.516200][ T6704] usb 5-1: config 86 interface 103 has no altsetting 0 [ 85.520509][ T6704] usb 5-1: New USB device found, idVendor=1901, idProduct=0197, bcdDevice=bd.1e [ 85.523318][ T6704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.525775][ T6704] usb 5-1: Product: 㱫គ썼顔⾩蒸⚦粺輑톉ᧉ㭓᛽䫦水笨奎彑ꢌ氧뵟쇳ꔡ洐붪ퟮ쎼诫髏䥞竔쯊ᡠʋꕀ诸 [ 85.530479][ T6704] usb 5-1: Manufacturer: 磼ᵐꞢ竡ꫣ숩巑穊⋌␵圐ꋂ湬ణ [ 85.533406][ T6704] usb 5-1: SerialNumber: ꖇﰐ픈䗁塣理얢懺ꦇ䳸ؤ룎㸔鳭 [ 85.593161][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 85.733053][ T24] usb 6-1: device descriptor read/64, error -71 [ 85.754101][ T6704] cp210x 5-1:86.103: cp210x converter detected [ 85.756489][ T6704] cp210x 5-1:86.103: failed to get vendor val 0x370b size 1: -71 [ 85.759060][ T6704] cp210x 5-1:86.103: querying part number failed [ 85.766174][ T6704] usb 5-1: cp210x converter now attached to ttyUSB0 [ 85.773846][ T6704] usb 5-1: USB disconnect, device number 7 [ 85.787024][ T6704] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 85.790178][ T6704] cp210x 5-1:86.103: device disconnected [ 85.843341][ T24] usb usb6-port1: attempt power cycle [ 85.897094][ T8331] tmpfs: Bad value for 'mpol' [ 85.974061][ T8338] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'. [ 86.068535][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.694'. [ 86.203076][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 86.224334][ T24] usb 6-1: device descriptor read/8, error -71 [ 86.235800][ T58] IPVS: starting estimator thread 0... [ 86.324386][ T8349] IPVS: using max 45 ests per chain, 108000 per kthread [ 86.357457][ T8362] binder: BINDER_SET_CONTEXT_MGR already set [ 86.359953][ T8362] binder: 8361:8362 ioctl 4018620d 200000000040 returned -16 [ 86.368978][ T8362] binder: 8361:8362 ioctl c0306201 2000000003c0 returned -14 [ 86.372238][ T8362] binder: BINDER_SET_CONTEXT_MGR already set [ 86.376088][ T8362] binder: 8361:8362 ioctl 4018620d 200000000300 returned -16 [ 86.378731][ T8362] binder: 8361:8362 ioctl c0306201 200000000700 returned -11 [ 86.436450][ T8370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.449571][ T8365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.477727][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 86.503446][ T24] usb 6-1: device descriptor read/8, error -71 [ 86.543193][ T5944] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 86.598642][ T8389] rpc_pipefs: Unknown parameter 'uname' [ 86.600586][ T8390] rpc_pipefs: Unknown parameter 'uname' [ 86.615888][ T24] usb usb6-port1: unable to enumerate USB device [ 86.685290][ T8404] nullb0: AHDI p1 [ 86.777901][ T8417] netlink: 88 bytes leftover after parsing attributes in process `syz.0.710'. [ 86.905837][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 86.970322][ T8423] netlink: 'syz.3.711': attribute type 10 has an invalid length. [ 86.973227][ T8423] hsr0: entered promiscuous mode [ 86.976616][ T8423] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 86.979824][ T8423] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 86.984103][ T8423] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 87.071223][ T8444] netlink: 'syz.3.715': attribute type 21 has an invalid length. [ 87.104252][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.716'. [ 87.198960][ T8455] openvswitch: netlink: Missing valid actions attribute. [ 87.201190][ T8455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.247534][ T8463] netlink: 148 bytes leftover after parsing attributes in process `syz.2.720'. [ 87.315143][ T8468] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 87.317302][ T8468] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.320465][ T8468] vhci_hcd vhci_hcd.0: Device attached [ 87.324566][ T8471] vhci_hcd: connection closed [ 87.325432][ T1197] vhci_hcd: stop threads [ 87.328972][ T1197] vhci_hcd: release socket [ 87.330400][ T1197] vhci_hcd: disconnect device [ 87.407205][ T8479] netlink: 'syz.3.722': attribute type 1 has an invalid length. [ 87.419761][ T8479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.500160][ T8479] netlink: 44 bytes leftover after parsing attributes in process `syz.3.722'. [ 87.676165][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8488 comm=syz.3.724 [ 87.681337][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8488 comm=syz.3.724 [ 87.686790][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8488 comm=syz.3.724 [ 87.691005][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8488 comm=syz.3.724 [ 87.696086][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8488 comm=syz.3.724 [ 87.700784][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8488 comm=syz.3.724 [ 87.705113][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8488 comm=syz.3.724 [ 87.780532][ T8495] mkiss: ax0: crc mode is auto. [ 87.890748][ T8505] syz.2.730: attempt to access beyond end of device [ 87.890748][ T8505] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 87.895633][ T8505] (syz.2.730,8505,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 87.898133][ T8505] (syz.2.730,8505,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 87.900968][ T8505] (syz.2.730,8505,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 87.904652][ T8505] (syz.2.730,8505,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 87.909392][ T8507] tmpfs: Bad value for 'mpol' [ 87.933521][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 87.933531][ T40] audit: type=1400 audit(3494063826.594:584): avc: denied { append } for pid=8508 comm="syz.3.732" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.955761][ T40] audit: type=1400 audit(3494063826.614:585): avc: denied { getopt } for pid=8508 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.961703][ T40] audit: type=1400 audit(3494063826.614:586): avc: denied { accept } for pid=8508 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.013396][ T40] audit: type=1400 audit(3494063826.674:587): avc: denied { remount } for pid=8519 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.032149][ T8522] lo speed is unknown, defaulting to 1000 [ 88.036595][ T8522] lo speed is unknown, defaulting to 1000 [ 88.039536][ T8522] lo speed is unknown, defaulting to 1000 [ 88.065157][ T40] audit: type=1400 audit(3494063826.724:588): avc: denied { getopt } for pid=8524 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.173222][ T8522] infiniband syz0: set active [ 88.173697][ T9] lo speed is unknown, defaulting to 1000 [ 88.175756][ T8522] infiniband syz0: added lo [ 88.218714][ T8522] RDS/IB: syz0: added [ 88.220996][ T8522] smc: adding ib device syz0 with port count 1 [ 88.223261][ T8522] smc: ib device syz0 port 1 has pnetid [ 88.226805][ T835] lo speed is unknown, defaulting to 1000 [ 88.230469][ T8522] lo speed is unknown, defaulting to 1000 [ 88.318798][ T8522] lo speed is unknown, defaulting to 1000 [ 88.323420][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.407392][ T8522] lo speed is unknown, defaulting to 1000 [ 88.486162][ T8522] lo speed is unknown, defaulting to 1000 [ 88.494504][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.498863][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 88.514706][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.517525][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.519972][ T10] usb 5-1: Product: syz [ 88.521287][ T10] usb 5-1: Manufacturer: syz [ 88.522736][ T10] usb 5-1: SerialNumber: syz [ 88.527810][ T10] cdc_mbim 5-1:1.0: skipping garbage [ 88.729277][ T8528] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.740826][ T10] cdc_mbim 5-1:1.0: bind() failure [ 88.745352][ T10] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 88.748246][ T10] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 88.751225][ T10] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 88.755394][ T10] usb 5-1: USB disconnect, device number 8 [ 88.764423][ T8548] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 88.808745][ T8551] 9p filesystem being mounted at /187/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 88.827992][ T8551] 9pnet_virtio: no channels available for device syz [ 89.030744][ T8557] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.197198][ T8579] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 89.222525][ T8581] xt_hashlimit: max too large, truncated to 1048576 [ 89.273147][ T5942] Bluetooth: hci3: command 0x0405 tx timeout [ 89.408336][ T40] audit: type=1326 audit(3494063828.064:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.2.757" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ab7b8e969 code=0x0 [ 89.423377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.503151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.677067][ T40] audit: type=1400 audit(3494063828.334:590): avc: denied { mount } for pid=8626 comm="syz.3.760" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 89.842334][ T40] audit: type=1400 audit(3494063828.494:591): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 89.854164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.951300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.971299][ T8635] __nla_validate_parse: 8 callbacks suppressed [ 89.971317][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 90.056096][ T8651] fuse: Unknown parameter '0x0000000000000003000000000000000000000030000000000000000000300000000000000000000' [ 90.085315][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 90.088156][ T8653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.766'. [ 90.093788][ T8653] geneve2: entered promiscuous mode [ 90.095465][ T8653] geneve2: entered allmulticast mode [ 90.104348][ T8653] xfrm1: entered allmulticast mode [ 90.273674][ T8661] 9p filesystem being mounted at /164/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 90.281636][ T40] audit: type=1400 audit(3494063828.934:592): avc: denied { write } for pid=8660 comm="syz.2.769" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.290393][ T40] audit: type=1400 audit(3494063828.934:593): avc: denied { read append } for pid=8660 comm="syz.2.769" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.293870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.385553][ T5942] Bluetooth: hci3: link tx timeout [ 90.387409][ T5942] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 90.544624][ T5942] Bluetooth: hci3: link tx timeout [ 90.546349][ T5942] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 90.613296][ T5942] Bluetooth: hci3: link tx timeout [ 90.615796][ T5942] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 90.659747][ T8688] sctp: [Deprecated]: syz.0.774 (pid 8688) Use of int in max_burst socket option deprecated. [ 90.659747][ T8688] Use struct sctp_assoc_value instead [ 90.700436][ T8694] xt_hashlimit: size too large, truncated to 1048576 [ 90.954328][ T8715] xt_hashlimit: size too large, truncated to 1048576 [ 90.977849][ T8717] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.780'. [ 90.981305][ T8717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.780'. [ 91.007349][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 91.036433][ T8722] xt_socket: unknown flags 0xc [ 91.187536][ T8729] batadv_slave_1: entered promiscuous mode [ 91.199089][ T8729] batadv_slave_1: left promiscuous mode [ 91.313397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.341910][ T8740] openvswitch: netlink: IPv6 tunnel dst address is zero [ 91.385567][ T8738] ?H: entered promiscuous mode [ 91.415738][ T8748] binder: BINDER_SET_CONTEXT_MGR already set [ 91.417516][ T8748] binder: 8746:8748 ioctl 4018620d 200000000040 returned -16 [ 91.423529][ T5942] Bluetooth: hci3: link tx timeout [ 91.425851][ T5942] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 91.491009][ T5942] Bluetooth: hci3: link tx timeout [ 91.493170][ T5942] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 91.569716][ T8760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8760 comm=syz.0.794 [ 91.615928][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 91.672961][ T58] hid-generic 0005:16C0:5505.0004: hidraw1: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 91.699584][ T8774] fido_id[8774]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 91.728468][ T8777] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.738344][ T5942] Bluetooth: hci3: link tx timeout [ 91.740546][ T5942] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 91.838224][ T8777] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.847002][ T8788] 9p filesystem being mounted at /174/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 91.918047][ T8777] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.977797][ T8790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8790 comm=syz.3.805 [ 92.009735][ T8794] nft_compat: unsupported protocol 1 [ 92.013128][ T8796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.807'. [ 92.014286][ T8794] nft_compat: unsupported protocol 1 [ 92.022316][ T8777] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.026498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.055518][ T8802] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 92.113340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.129886][ T8777] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.137833][ T8777] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.149363][ T8777] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.152559][ T8802] lo speed is unknown, defaulting to 1000 [ 92.157553][ T8777] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.160597][ T8824] tipc: Enabled bearer , priority 0 [ 92.164459][ T8824] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 92.170724][ T8824] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 92.337503][ T8842] syz_tun: entered allmulticast mode [ 92.340049][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 92.347209][ T8846] vlan2: entered promiscuous mode [ 92.348866][ T8846] syz_tun: entered promiscuous mode [ 92.363632][ T8842] syz_tun: left allmulticast mode [ 92.370229][ T8842] netlink: 48 bytes leftover after parsing attributes in process `syz.1.817'. [ 92.405363][ T8852] ipvlan2: entered allmulticast mode [ 92.407196][ T8852] veth0_vlan: entered allmulticast mode [ 92.411969][ T8854] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 92.415132][ T8854] UDF-fs: Scanning with blocksize 2048 failed [ 92.419035][ T8854] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 92.421292][ T8854] UDF-fs: Scanning with blocksize 4096 failed [ 92.454303][ T8860] netlink: del zone limit has 8 unknown bytes [ 92.463247][ T5942] Bluetooth: hci3: command 0x0405 tx timeout [ 92.603971][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.607096][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.660426][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.666690][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.697278][ T8875] veth1_vlan: left allmulticast mode [ 92.715017][ T8875] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.718009][ T8875] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.720767][ T8875] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.723729][ T8875] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.746016][ T8875] ipvlan2: left allmulticast mode [ 92.747643][ T8875] macvlan0: left allmulticast mode [ 92.874966][ T8897] [ 92.875833][ T8897] ====================================================== [ 92.878049][ T8897] WARNING: possible circular locking dependency detected [ 92.880237][ T8897] 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 Not tainted [ 92.883557][ T8897] ------------------------------------------------------ [ 92.886210][ T8897] syz.1.834/8897 is trying to acquire lock: [ 92.888085][ T8897] ffff888037c34e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_del_slave+0x31/0x1b0 [ 92.891728][ T8897] [ 92.891728][ T8897] but task is already holding lock: [ 92.894331][ T8897] ffff888050f78768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0xfb/0x190 [ 92.897393][ T8897] [ 92.897393][ T8897] which lock already depends on the new lock. [ 92.897393][ T8897] [ 92.900614][ T8897] [ 92.900614][ T8897] the existing dependency chain (in reverse order) is: [ 92.903452][ T8897] [ 92.903452][ T8897] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 92.905912][ T8897] __mutex_lock+0x199/0xb90 [ 92.907549][ T8897] ieee80211_open+0x132/0x210 [ 92.909218][ T8897] __dev_open+0x2e4/0x7d0 [ 92.910769][ T8897] netif_open+0xf2/0x160 [ 92.912341][ T8897] dev_open+0xb2/0x260 [ 92.913877][ T8897] team_add_slave+0xaf0/0x21a0 [ 92.915578][ T8897] do_set_master+0x40c/0x730 [ 92.917234][ T8897] do_setlink.constprop.0+0xe66/0x44b0 [ 92.919183][ T8897] rtnl_newlink+0x1446/0x2000 [ 92.920868][ T8897] rtnetlink_rcv_msg+0x95b/0xe90 [ 92.922595][ T8897] netlink_rcv_skb+0x16a/0x440 [ 92.924330][ T8897] netlink_unicast+0x53a/0x7f0 [ 92.926020][ T8897] netlink_sendmsg+0x8d1/0xdd0 [ 92.927695][ T8897] ____sys_sendmsg+0xa95/0xc70 [ 92.929383][ T8897] ___sys_sendmsg+0x134/0x1d0 [ 92.931029][ T8897] __sys_sendmsg+0x16d/0x220 [ 92.932654][ T8897] do_syscall_64+0xcd/0x260 [ 92.934275][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.936314][ T8897] [ 92.936314][ T8897] -> #0 (team->team_lock_key#4){+.+.}-{4:4}: [ 92.938882][ T8897] __lock_acquire+0x1173/0x1ba0 [ 92.940589][ T8897] lock_acquire+0x179/0x350 [ 92.942207][ T8897] __mutex_lock+0x199/0xb90 [ 92.943814][ T8897] team_del_slave+0x31/0x1b0 [ 92.945453][ T8897] team_device_event+0xd0/0x770 [ 92.947151][ T8897] notifier_call_chain+0xb9/0x410 [ 92.948909][ T8897] call_netdevice_notifiers_info+0xbe/0x140 [ 92.951062][ T8897] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 92.953271][ T8897] unregister_netdevice_queue+0x305/0x3f0 [ 92.955251][ T8897] _cfg80211_unregister_wdev+0x64b/0x830 [ 92.957200][ T8897] ieee80211_if_remove+0x250/0x400 [ 92.958981][ T8897] ieee80211_del_iface+0x16/0x20 [ 92.960710][ T8897] cfg80211_remove_virtual_intf+0xda/0x2a0 [ 92.962685][ T8897] nl80211_del_interface+0x106/0x190 [ 92.964490][ T8897] genl_family_rcv_msg_doit+0x206/0x2f0 [ 92.966402][ T8897] genl_rcv_msg+0x55c/0x800 [ 92.968006][ T8897] netlink_rcv_skb+0x16a/0x440 [ 92.969694][ T8897] genl_rcv+0x28/0x40 [ 92.971139][ T8897] netlink_unicast+0x53a/0x7f0 [ 92.972814][ T8897] netlink_sendmsg+0x8d1/0xdd0 [ 92.974503][ T8897] ____sys_sendmsg+0xa95/0xc70 [ 92.976190][ T8897] ___sys_sendmsg+0x134/0x1d0 [ 92.977850][ T8897] __sys_sendmsg+0x16d/0x220 [ 92.979478][ T8897] do_syscall_64+0xcd/0x260 [ 92.981085][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.983102][ T8897] [ 92.983102][ T8897] other info that might help us debug this: [ 92.983102][ T8897] [ 92.986300][ T8897] Possible unsafe locking scenario: [ 92.986300][ T8897] [ 92.988649][ T8897] CPU0 CPU1 [ 92.990348][ T8897] ---- ---- [ 92.992044][ T8897] lock(&rdev->wiphy.mtx); [ 92.993509][ T8897] lock(team->team_lock_key#4); [ 92.995857][ T8897] lock(&rdev->wiphy.mtx); [ 92.998061][ T8897] lock(team->team_lock_key#4); [ 92.999643][ T8897] [ 92.999643][ T8897] *** DEADLOCK *** [ 92.999643][ T8897] [ 93.002271][ T8897] 3 locks held by syz.1.834/8897: [ 93.003884][ T8897] #0: ffffffff901c7590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 93.006482][ T8897] #1: ffffffff901254e8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xb10 [ 93.009374][ T8897] #2: ffff888050f78768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0xfb/0x190 [ 93.012529][ T8897] [ 93.012529][ T8897] stack backtrace: [ 93.014390][ T8897] CPU: 3 UID: 0 PID: 8897 Comm: syz.1.834 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) [ 93.014403][ T8897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.014409][ T8897] Call Trace: [ 93.014413][ T8897] [ 93.014417][ T8897] dump_stack_lvl+0x116/0x1f0 [ 93.014431][ T8897] print_circular_bug+0x275/0x350 [ 93.014447][ T8897] check_noncircular+0x14c/0x170 [ 93.014462][ T8897] __lock_acquire+0x1173/0x1ba0 [ 93.014478][ T8897] lock_acquire+0x179/0x350 [ 93.014492][ T8897] ? team_del_slave+0x31/0x1b0 [ 93.014502][ T8897] ? __pfx___might_resched+0x10/0x10 [ 93.014514][ T8897] ? __pfx___mutex_trylock_common+0x10/0x10 [ 93.014531][ T8897] __mutex_lock+0x199/0xb90 [ 93.014544][ T8897] ? team_del_slave+0x31/0x1b0 [ 93.014552][ T8897] ? find_held_lock+0x2b/0x80 [ 93.014563][ T8897] ? team_del_slave+0x31/0x1b0 [ 93.014571][ T8897] ? __pfx___mutex_lock+0x10/0x10 [ 93.014587][ T8897] ? team_del_slave+0x31/0x1b0 [ 93.014595][ T8897] team_del_slave+0x31/0x1b0 [ 93.014604][ T8897] team_device_event+0xd0/0x770 [ 93.014614][ T8897] notifier_call_chain+0xb9/0x410 [ 93.014627][ T8897] ? __pfx_team_device_event+0x10/0x10 [ 93.014637][ T8897] call_netdevice_notifiers_info+0xbe/0x140 [ 93.014651][ T8897] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 93.014665][ T8897] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 93.014680][ T8897] ? find_held_lock+0x2b/0x80 [ 93.014691][ T8897] unregister_netdevice_queue+0x305/0x3f0 [ 93.014703][ T8897] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 93.014716][ T8897] _cfg80211_unregister_wdev+0x64b/0x830 [ 93.014728][ T8897] ieee80211_if_remove+0x250/0x400 [ 93.014741][ T8897] ieee80211_del_iface+0x16/0x20 [ 93.014752][ T8897] cfg80211_remove_virtual_intf+0xda/0x2a0 [ 93.014767][ T8897] nl80211_del_interface+0x106/0x190 [ 93.014777][ T8897] genl_family_rcv_msg_doit+0x206/0x2f0 [ 93.014791][ T8897] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.014806][ T8897] ? bpf_lsm_capable+0x9/0x10 [ 93.014815][ T8897] ? security_capable+0x7e/0x260 [ 93.014826][ T8897] ? ns_capable+0xd7/0x110 [ 93.014837][ T8897] genl_rcv_msg+0x55c/0x800 [ 93.014851][ T8897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.014864][ T8897] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 93.014876][ T8897] ? __pfx_nl80211_del_interface+0x10/0x10 [ 93.014885][ T8897] ? __pfx_nl80211_post_doit+0x10/0x10 [ 93.014898][ T8897] ? __lock_acquire+0xaa4/0x1ba0 [ 93.014913][ T8897] netlink_rcv_skb+0x16a/0x440 [ 93.014924][ T8897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.014937][ T8897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.014951][ T8897] ? __pfx_down_read+0x10/0x10 [ 93.014966][ T8897] ? netlink_deliver_tap+0x1ae/0xd30 [ 93.014977][ T8897] genl_rcv+0x28/0x40 [ 93.014988][ T8897] netlink_unicast+0x53a/0x7f0 [ 93.015000][ T8897] ? __pfx_netlink_unicast+0x10/0x10 [ 93.015013][ T8897] netlink_sendmsg+0x8d1/0xdd0 [ 93.015025][ T8897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.015038][ T8897] ____sys_sendmsg+0xa95/0xc70 [ 93.015051][ T8897] ? copy_msghdr_from_user+0x10a/0x160 [ 93.015061][ T8897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.015074][ T8897] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 93.015087][ T8897] ___sys_sendmsg+0x134/0x1d0 [ 93.015097][ T8897] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.015113][ T8897] __sys_sendmsg+0x16d/0x220 [ 93.015123][ T8897] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.015132][ T8897] ? __x64_sys_futex+0x1e0/0x4c0 [ 93.015147][ T8897] ? rcu_is_watching+0x12/0xc0 [ 93.015159][ T8897] do_syscall_64+0xcd/0x260 [ 93.015173][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.015183][ T8897] RIP: 0033:0x7fc786d8e969 [ 93.015192][ T8897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.015202][ T8897] RSP: 002b:00007fc787b3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.015211][ T8897] RAX: ffffffffffffffda RBX: 00007fc786fb5fa0 RCX: 00007fc786d8e969 [ 93.015217][ T8897] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 93.015223][ T8897] RBP: 00007fc786e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 93.015228][ T8897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.015233][ T8897] R13: 0000000000000000 R14: 00007fc786fb5fa0 R15: 00007fff885c0388 [ 93.015242][ T8897] [ 93.019261][ T8897] team0: Port device wlan1 removed [ 93.153591][ T835] tipc: Node number set to 4278255617 VM DIAGNOSIS: 06:34:42 Registers: info registers vcpu 0 CPU#0 RAX=00000000000b4a64 RBX=0000000000000000 RCX=ffffffff8b6ce419 RDX=ffffed100d4865be RSI=ffffffff8bf483a0 RDI=ffffffff819198f1 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff9084f710 R15=0000000000000000 RIP=ffffffff8b6cccaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000040 CR3=000000004a08b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee039b360 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ab7c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ab7c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ab7c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ab7c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ab7c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ab7c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000084b44 RBX=0000000000000001 RCX=ffffffff8b6ce419 RDX=ffffed100d4a65be RSI=ffffffff8bf483a0 RDI=ffffffff819198f1 RBP=ffffed1003ad0488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d682440 R14=ffffffff9084f710 R15=0000000000000000 RIP=ffffffff8b6cccaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc784bf6d58 CR3=0000000023e30000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a53411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a53411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a53411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a53411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a53411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a53411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a53583488 00007f2a53583480 00007f2a53583478 00007f2a53583450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a540ed100 00007f2a53583440 00007f2a53580004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a53583498 00007f2a53583490 00007f2a53583488 00007f2a53583480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000b4a44 RBX=0000000000000002 RCX=ffffffff8b6ce419 RDX=ffffed100d4c65be RSI=ffffffff8bf483a0 RDI=ffffffff819198f1 RBP=ffffed1003ad0910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d684880 R14=ffffffff9084f710 R15=0000000000000000 RIP=ffffffff8b6cccaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6be1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc787b1afb8 CR3=000000004bc23000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000004c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff885c0710 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f60f5 RDI=ffffffff9adf7520 RBP=ffffffff9adf74e0 RSP=ffffc900041ee918 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002e R14=ffffffff9adf74e0 R15=ffffffff854f6090 RIP=ffffffff854f611f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc787b3d6c0 ffffffff 00c00000 GS =0000 ffff8880d6ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000064eeb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffeff80 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc786e11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 746e6576652f7475 706e692f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000013 574d4655460c5756 534d4a0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000