last executing test programs: 57.393744659s ago: executing program 2 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000004c0)=""/160, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in6=@loopback, 0x4e22, 0x5, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x4}, {0xffff, 0x9, 0x2b, 0xfffffffffffffff9, 0xaf, 0xff, 0x99, 0x8}, {0x7fff, 0x2}, 0xa, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4d6, 0x3c}, 0xa, @in=@private=0xa010101, 0x3507, 0x0, 0x0, 0x49, 0x3, 0x8, 0x1}}, 0xe8) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) 57.391460924s ago: executing program 2 (id=82): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000180)="f30f5ff80f2161c4c2bddf9d00000f07f30f1efaf081990028c26ff0802a00660f3ace8c87009766b95408000066b80400000066ba000000000f30f6f1", 0x3d}], 0x1, 0x3c, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}}) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r9, 0x0, 0x0, 0x4000000) ioctl$KVM_RUN(r7, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000002201"]) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r10, 0x5608, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={0x0, 0xb0}, 0x1, 0x7}, 0x58010) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000081000040"]) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) 57.047828873s ago: executing program 2 (id=86): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, &(0x7f0000000140)={0x0, 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r2, 0x8b24, &(0x7f0000000040)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) write(r1, &(0x7f0000000180)="1f303566ba6ea54ac6d919ccdec0031ea8ac5abb1e37e7f2e001bf6e12e18be17bcf5d245a8f8df886bec15ee450827d5ea4b291f9e43004bbe829b6eea75d8e53b501f8f0c7ce923e64015fe6bfbc1397c65560a6d0f5ceef2eb3bbe3b72bac29631b05957320c5303d", 0x6a) ptrace$getregs(0xe, r3, 0x5, &(0x7f0000000080)=""/57) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, &(0x7f0000000140)={0x0, 0x0}) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) (async) ioctl(r2, 0x8b24, &(0x7f0000000040)) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) (async) write(r1, &(0x7f0000000180)="1f303566ba6ea54ac6d919ccdec0031ea8ac5abb1e37e7f2e001bf6e12e18be17bcf5d245a8f8df886bec15ee450827d5ea4b291f9e43004bbe829b6eea75d8e53b501f8f0c7ce923e64015fe6bfbc1397c65560a6d0f5ceef2eb3bbe3b72bac29631b05957320c5303d", 0x6a) (async) ptrace$getregs(0xe, r3, 0x5, &(0x7f0000000080)=""/57) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) (async) 57.045366545s ago: executing program 2 (id=88): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x23cdc43, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='+gpu '], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000200100"], 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100003040100000000000000000000002c8caadd5ae96a71c72e8df58109a0060b499f3eefb16e4db6c17804c7680bcecea27aef7a46642f8f0829ba", @ANYRES32=0x0, @ANYBLOB="00000300000000001c0012800b00010062726964676500000c0002800800030017000000"], 0x3c}}, 0x40840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffe5ab}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) preadv(r2, &(0x7f0000000180), 0x0, 0x0, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x32, 0x1, 0x0, "09e4ffb97e3b4c00152258011a9285a5df030008000000000000000000000500", 0x32315659}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) memfd_create(&(0x7f0000000180)='\x00', 0x2) preadv(r8, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x4c8}}, 0x0) 56.971500095s ago: executing program 2 (id=91): msgctl$MSG_INFO(0x0, 0xc, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82"]) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc004ae0a, &(0x7f0000000180)=""/13) setresgid(0xee00, 0xee01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @local}}}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r5 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x20d000, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d76697274696f2c76657273696f6e3d3970323030302c76657273696f6e3d3970323030302e4c2c706f73697861636c2c616e616d653daaaaaaaaaa2c6163636573733d616e792c657569643e", @ANYRESDEC=r6, @ANYBLOB=',fycontext%sysadm_u,\x00']) (async, rerun: 64) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, 0xee00, 0x0) (rerun: 64) 56.643318813s ago: executing program 2 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x5c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x377}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x50}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21f}]]}, 0x68}, 0x1, 0x0, 0x0, 0x50010}, 0x40) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80) 56.60795028s ago: executing program 32 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x5c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x377}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x50}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21f}]]}, 0x68}, 0x1, 0x0, 0x0, 0x50010}, 0x40) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80) 21.262725272s ago: executing program 0 (id=593): r0 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000180)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f000000ad00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="0d650983dd511816c4566d16f93a9859913c3439cd5b4a749a1d099d3a3b6dfcbb6d0df752e358a9", 0x28}, {0x0}], 0x2}}], 0x1, 0x400c0) 21.103339799s ago: executing program 0 (id=595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f00000000c0)="800009e9220800ce", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x40000020, &(0x7f00000001c0)={0xa, 0x4e24, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x5c}}, 0x0) 20.073133473s ago: executing program 0 (id=597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0xf, 0x3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) 19.932831788s ago: executing program 0 (id=599): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1000420, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20040, 0xaa, 0x4}, 0x18) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200a81, 0x141) move_mount(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x301) 19.76331047s ago: executing program 0 (id=601): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001"], 0x38}}, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000ac0)=[@request_death], 0x4, 0x0, &(0x7f00000001c0)="f2560d06"}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1ff}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40085}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fdd9df258800000008000300", @ANYRES32=r7, @ANYBLOB="98a0d95acdf834366fdb6a4fe7058b1818454de64b7a869731b074a071d38850ab5e8f3351138f742b42a884bb15e9510780d07128f7bec073558ce62e42cf5f08684d33d36cc9a02f916cddb741813474006d82775c5805531d6d000772b6821111115a0ab70b91c20211ebbc28dabb596bd29ffe491aa70a346c4e74f991eab15ad0d1abdb9f1eebff53dc2ae3b19d7fdd86fb50be273c0081e889d3ac74"], 0x1c}}, 0x4004810) chdir(&(0x7f0000000080)='./file1\x00') r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x40049366, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000003f000000aa0000000033000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400"], 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) 18.833388031s ago: executing program 0 (id=605): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="02aafeb00000717d"], 0x8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) 4.422375453s ago: executing program 4 (id=752): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r1, 0x1}}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000000)={0x84}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) listen(r2, 0x2000fff) accept(r2, 0xfffffffffffffffd, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}}, {0xa, 0x0, 0x0, @remote}, r1, 0xfffffffc}}, 0x48) 4.292847672s ago: executing program 4 (id=753): add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f0000000040)=""/31, 0x1f, &(0x7f0000000080)={&(0x7f0000000100)={'blake2s-224-arm\x00'}}) 3.79371962s ago: executing program 33 (id=605): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="02aafeb00000717d"], 0x8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) 3.420662853s ago: executing program 4 (id=760): arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:qemu_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0xb8}}, 0x8080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1100021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4048044}, 0x800) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r6, 0x101, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000006c0), r4) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x80d0) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x8c, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'NLBL_UNLBL\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\'\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x10}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000d40)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x2, 0x1, 0x5, 0x5, 0x4, 0xffff54bd, 0x7}, 0x9c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r9, {0xffffff80}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x38, 0x0, 0xc, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x800) 2.802125722s ago: executing program 4 (id=766): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) epoll_create1(0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r1, 0x3, r0, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x3c1b8e4a5aef69d5, 0x1ff) io_setup(0x9, &(0x7f0000000f40)=0x0) io_cancel(r3, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="7f454c4600010000000000000000000003003e0000000000ba020000000000004000001e000000000000000004000000000000000300380002"], 0xb0) close(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x7d, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x2a) lseek(r9, 0xfffffffffffffffc, 0x2) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x2000}}, "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", "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"}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2.173364231s ago: executing program 3 (id=769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095", @ANYRESDEC], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = userfaultfd(0x80001) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0xc4) r3 = socket$netlink(0x10, 0x3, 0xb) setuid(0xee01) (async) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xcdc}, 0x1, 0x0, 0x0, 0x40044}, 0x0) (rerun: 32) 2.102883713s ago: executing program 1 (id=770): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) rt_sigqueueinfo(r1, 0x1, &(0x7f00000000c0)={0x0, 0x4f, 0x1}) timer_delete(0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x13, 0x1}, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000200)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000240)) ptrace$setsig(0x4203, r1, 0x6, &(0x7f0000000280)={0x2f, 0x2, 0xd}) pidfd_send_signal(r0, 0x3b, &(0x7f0000000300)={0x3d, 0x3, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0xe6}, {0x9, "5b1a226cbdce88c866e6729f7353e2ad4787b7617a6755811bba2044c08e476ac5bba818dc3cd40c55a4eb0a05a6878878fd60a847f47ccac57d4b103f4181989d0fb8169b33f76aba12951f9f8b2acc60d77db010eef2370c96e2f0cfbe040730d8084f016a140ad7a4bd5804463947d3c981aa2601dfb10242306f9aa57cf5e6129c66d7d7392881de4a0c9f3c3ee677ed3db20dcfd9076e7b1e13ee9ab5170aad14f20f5c5f765639d8f932743a182686e5e85304c5215ba66d6c2643d977e7ea38aaf636433d7e0dca0e1262c8f6750d503d62de26decd99606cc974f3c0ae6e7de2"}}}, 0xe9) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000500)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000005c0)={0x28, 0x0, r5, r6, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000540)="1ab293a1101b7fbd9bc6d6e9337003b4136fddced1020201ae92c8026065d6fc7f2e8682766b52adde57b646b8b79878ab3403520e95300930171c525d821e0f78c926a142738f65d4214b78162c4992cfc5494cca335ef729"}) ptrace$getregs(0xe, r1, 0xffffffffffffff80, &(0x7f0000000600)=""/119) clock_gettime(0x0, &(0x7f0000001b80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000680)=""/85, 0x55}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001740)=""/249, 0xf9}, 0x1}, {{&(0x7f0000001840)=@isdn, 0x80, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/226, 0xe2}, {&(0x7f00000019c0)=""/65, 0x41}], 0x2, &(0x7f0000001a80)=""/86, 0x56}, 0x401}], 0x2, 0xe4d6e15dc96a1ddd, &(0x7f0000001bc0)={r7, r8+10000000}) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d0d, &(0x7f0000001c00)=0xd) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000001c40)) recvmmsg(r0, &(0x7f0000007040)=[{{&(0x7f0000001c80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001d00)=""/251, 0xfb}, {&(0x7f0000001e00)=""/209, 0xd1}], 0x2}, 0x9}, {{&(0x7f0000001f40)=@alg, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/250, 0xfa}], 0x2, &(0x7f0000003100)=""/163, 0xa3}, 0x1}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f00000031c0)=""/153, 0x99}, {&(0x7f0000003280)=""/159, 0x9f}, {&(0x7f0000003340)=""/218, 0xda}, {&(0x7f0000003440)=""/157, 0x9d}, {&(0x7f0000003500)=""/63, 0x3f}, {&(0x7f0000003540)=""/173, 0xad}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x7}, 0xf}, {{&(0x7f0000004680)=@alg, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004700)=""/138, 0x8a}, {&(0x7f00000047c0)=""/165, 0xa5}, {&(0x7f0000004880)=""/61, 0x3d}], 0x3, &(0x7f0000004900)=""/175, 0xaf}, 0x6}, {{&(0x7f00000049c0)=@ax25={{0x3, @default}, [@default, @default, @remote, @null, @netrom, @netrom, @remote, @rose]}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004a40)=""/249, 0xf9}, {&(0x7f0000004b40)=""/106, 0x6a}, {&(0x7f0000004bc0)=""/84, 0x54}, {&(0x7f0000004c40)=""/143, 0x8f}, {&(0x7f0000004d00)=""/16, 0x10}, {&(0x7f0000004d40)=""/8, 0x8}, {&(0x7f0000004d80)=""/99, 0x63}], 0x7}, 0x8}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/129, 0x81}, {&(0x7f0000005f40)=""/174, 0xae}], 0x3, &(0x7f0000006040)=""/4096, 0x1000}, 0x1}], 0x6, 0x10001, &(0x7f00000071c0)={0x0, 0x3938700}) clock_gettime(0x0, &(0x7f0000007200)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000007240)={{r9, r10+60000000}, {0x0, 0x989680}}, &(0x7f0000007280)) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x2000004, 0x12, r0, 0x8000000) r12 = syz_io_uring_setup(0x392b, &(0x7f00000072c0)={0x0, 0x22bf, 0x1000, 0x0, 0x2c8, 0x0, r0}, &(0x7f0000007340), &(0x7f0000007380)=0x0) syz_io_uring_submit(r11, r13, &(0x7f0000007400)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x5, &(0x7f00000073c0)={0x0, 0x989680}, 0x1, 0xc, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000007440)) fcntl$getownex(r0, 0x10, &(0x7f0000007480)={0x0, 0x0}) sched_rr_get_interval(r14, &(0x7f00000074c0)) sendmsg$nl_netfilter(r0, &(0x7f00000075c0)={&(0x7f0000007500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000007580)={&(0x7f0000007540)={0x1c, 0xd, 0x5, 0x5, 0x70bd2b, 0x25dfdbfc, {0x5, 0x0, 0x1}, [@typed={0x8, 0xba, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x24040010) ioctl$SOUND_OLD_MIXER_INFO(r12, 0x80304d65, &(0x7f0000007600)) 1.953470891s ago: executing program 1 (id=771): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x80000000, 0x4) 1.952766578s ago: executing program 3 (id=772): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000001300)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}], 0x1, 0x4000000) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x1, 0x1, 0x40, 0xca, 0x10001, r9}, 0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r9, 0x9}, 0x8) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r13 = getpgid(0x0) fcntl$setownex(r12, 0xf, &(0x7f0000000140)={0x2, r13}) sendmmsg$unix(r11, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) (async) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x7fff, 0x7, 0x60000000, 0x20004, r14, 0x93, '\x00', r4, r15, 0x3, 0x1, 0x0, 0xb, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) (async) r16 = socket$netlink(0x10, 0x3, 0x0) (async) r17 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r18, @ANYBLOB="01"], 0x20}}, 0x0) 1.83309848s ago: executing program 1 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) 1.830606532s ago: executing program 3 (id=774): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r3 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, 0x0, 0x0) close(r3) (async) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000340)="a212bed066c891902053ef59480064073ae05e9805f1914a9b23b5d5cf6efc4d81f9d877dd8111507a2cb336cf522ab92ff8bd2fd3380a66448228b2554aa643334e0b951f7a0fafcdd32c77b65edd51003c89b3727b0fd1666934598587c292dfae13555569bba08828bcd3a73d868a0bf5a2a173ec2905ef87011a9c1374f2f00487349e2921a0b90870857a7bd9503abcb4b0eddc3e074490c54855667f69db3acade3b4ef547eacad8e294eddf36bc302e2e6fab88e5516fad4a50c810becc1daa0787409117ef90bdde55a54ad83ae009d1228222653aa652eb50e8c0ff759106df4170a357734b831087403d7dc0f0d173060a903063db9c5411e52a49009efba3aaab99c91bf6f8c0da03f8d2f5eae575753178609693cb14b155c3b58c8c2b6b5d19701b848e7d637a34319753e7532b337f8718ad6a7546446927114dde1629b25f61a9793aee16f22f00c23552470eccc665188bbba0be85ddf76a31a02cc74e926d995e11a35629c13685f7ecbb3293e4e0237be1fc1791cb2c18cecc8cdecf2e1de99053b3cb338596594e582df40e584fdc29dab9083dda934f3ff245bddcc5f7e9236af1ebf8fc1f050f0829f3e4111a9e00e33be0fe2832e11d1abf69261da94af277b11d17c27db358605d475754bb6cfabcf0f09406f6f767b1767fa0e4c83f137375664e94808a9d9b3a383870aa5a94b8c24a58dc1496869be60bf826e4dab72c82046a6b18a0c0ba0421b2df874cffa38def78411066eaa13c5e28b9f72f481d25484300870e0aaeb4ad639fb2514c88daee871e52c1af459f809e77e65e2f574d8e413726bbbe43ca07074e18f2e1dc2c7cb46828a3d4f322add65d57866b7b15e8bfeae4314a903931b8dfdc09bc14e673c5260fb87fd06499b4a5345b4f2f17cb69bc855b108cfb6017d995616cb9050915d9c8caa85aed4c6f1e081daf555270661b2c938cc9a5b739eb975d5357c37672bb8ffeb3225d7f5c9fb1a2c6bcb6e31d85b33ed7c0bb32564f2399d2f3914d318cb46eb7e095fc7079f475756b426a6c6e5731b31c62645bdeec0ccfd8bbcacccdfe5cc4677976862db894256c9a56383812d1c6b5c955b6810b35496477d3cd7a29e5be6ac28c6244f777ddbc82e394c31a4b47f4725ee14a1f32d69b0875310400fc9f108ef61e06f6259cd098612fc59b12b280b9a58b2fa74a39ccab5e736b80275ab9e675b2a01834e8d99c077fac3b1e8eb96998de4fbeed1a378fc73e839f71bd76fb974a28fa6198397860a7f6bd63a0d3fc98183bbde2c5c5765b3491cdd33a27b6aebf78820f9c5bcff838169bfd1cef68b913d43693d84f14d84e5e865e34b890f449a785f66ef6aeec38a94087eb6f54f1643dc32d84c2d448ae4a9d820b639e8a617339b4ec85bfc4d2c8e503c6e5d4a454c0551e502f738045ffbd9623f8da3e2a52c70f76c1c4b4c7ecd30d64ee5a5e87a0cbb878604c997f6a1930eb861eef7360cbfeadfb818f964b2e82461cb219e01db0f233cdac16e98bba81fdbe741343a98932a54b015609b18e9d98d948c667c8618bde5e1af03e435c22ae988cb1cc6f095e76bcd115c98c0c41e25edb99543aec17d776c815488f1326bfca189152d57e070a3f7fd2c8c591a92072245f36fd7a46e97228007ffab86da840539a0fff99ed391353b7935b4c8b16052fbefdd86b63ebc9d7836161b970f13e9c3f176b5ba20eee38d4c2338fd0ee6de948d426b0410b556973134762bf57500908969898135c9b8d3d0434a6ae0e07c4b663f6d5a56df28fd59e9b928d5eb43243c25cde0474a29fda9c71924a5fc9b0132ac1b01a663937366f56ea862fc26eb7fd394392752f436a1e33a9f0f0a7b8753f96f99df13e49b31b4bb9e662db182392d593255d7637188540bc6e9e5f22cff130b5590b6115ce24080e53051250cff4205d87f778b55328511523d778ee4232d8a553c2ee909e90f371cbaca4eb3edd4cb1cad359595dd963da5a1a3229fadc710755a212b5b0d7c8c130baae6942652c23161681d457c61a0d6aee61e5dec9b649d3b9e571c7221483a645fd7ae15e150c543d88d056309c7f472a5ad77a8fd65875d99eb5765761a44d47ea043471ce88497b83b61069d0aa029253e82244537b5ed8d2f7c2cfd107e1d5c5b5842ee60572003cebc8eb3a98ae7cc66e4618f9f0b754887aee3822cfc702efbdf9bbafb81e1014266fe0b0ded6f684b3d2f4c166c8544977f2b5bbb5b4548f321ae8784be623b1031b7c004e7fcb377f6de4e8f4e354d0f67d1843d6e067789d4c21b83f2c1bcf15ddbaf71573426070d870c0d9d5e8441234bd428100a9f66862a3fed6524f447d26e9be76b7e75ebecc5b8e3ee597807042e894e5d8188e456da366a3ada0a469bf626566590a0375d00ac7b701753172139b223cbb037a12b24dd315c0908bfa3b542f5565052196cf1c4b2ce3cb059d19e643c23f1243eb29500edd63b558717e3be80bc4bf6b493b31eb1572bca383350b213e5243e6eef721de41b4712c898a1e1b5d1ee60483b35c9a4af13bd7bf4c29a5ab89ed190686b1749bffa58c5d3c21c8f3be35ec3892206cf1c3737a8839b742703526008d4a6b8dd4c363e2877c265b69c4bb19459610be1db8d9b386a1b70e8eac34fd7a41cac2ec6885f4aa93efaa8d36a9178cc80ed2d3a66652068533a57e4535b0176e11b4524e042caf3068673272a8626ba7f99d9cc89198f89871a3a5d893ff8251a1efb39b5bcf99f583a50283373b5e369d59c0af0eb6728ec770b96b6c5ad369f1684eaf7a2a849a64b0461434f2bd458af227d8ae20298b2fc6fa020af05f741bcd15003d2462767cc19edd723b3dc89a57637f766a094847fd19c57329adaf6855022cf391fa4950188c2cb429c4b8ae6ab1fb9ae3f4ac9ea1c2a21b60e6e2c868ee87790b2eefe8a9ecd5e4c494955c09e9759e5b02b49ec6153aa83a20a960a8b56d472a8bf10a614502890e22d19ee6ebac965ba5574e2e3c3f89719d747c16301ef4c47b72dc4fbd0b73a344933bba7941f100e2e3b6be728f2567114877c7f0e3bb8cc2e735127b75c9e9830b2f787ca6987c1e64ec1d1c8702da7c53204483c07994b47499c023700f126c663995d2086c524cb13859856afcd48880efdd85db7e24932c86dce3fbccdc324329ca3d37f48c5f42dce6b1ef0a9c5460446045761d2b47134aa57ee160c8bcbb025ab2ad81ad674b0a6199b76cb7a9e02e3e040323e0296baead5723c9e8fab8762056775e66a4956c8dd48fa7c7db128cc42a4186941f48dbf407c8c3b230022ef54cb98c16241433abe9ff19d0eee4a3396c9ece0fd93e9da98ad5a5f1755295761b7110cb5f961348b488e9780643afdf9b5dd91fe5c373ab4c23430c24f90fc6076bf6b410a51787d9aa247a29f507d7ba1fcd4e3d04aba97da77b5df932b4698b645d43c67929a548a2755733ef98043be08920f945c055e1d8a047708d113efc5c73ff366b83286d576e8a54362826fe58fc16e63b5cc58f2f81899d9752c283eb2e85a9c7d1042219ace34b44f87c194263a3bdc7aa0f58595275444dfde029d60f15c4b8b6ef7e11e1e3195eaab5f60e7c1aa3eaf10de4d0f2caee463aefed12ba966ef0db6819c37e9c51eb20c5cfd0a2e2010945b2a10882640c6505b39cd862b01f4f0ed5f611b922264ccf44f689deef8da1d6d1885b3b5698893b07b9e209d758203bb66ffdfe53a1dda797a20e030b15afae9f7568b1ad30b5ae61db3541cdcc8465354e68832aeeed61fe4e807624a4f94e045dbd6fb80f85fef04c587ad003dccac1e425e19c075adb6ad6d28ee834d0db6fa8d1b19729d2d684b1d13b2e774773fc956a493ebceda3425cf120ef7212bb4033e1fab21d8ff1a267ef58dffa9cface55b59793d1145e43a63e78f06cdfd94d79ec0230ef7bbc7423b2be8108a9e5c6975a33cfc9659281a0a26ac38a5d79d9608e244e4953f47cbe6261c8ccdc447777e1a57b4add23c0ca6c374ec2f4cdbf63e5a0b1df7bb55efdc45c0225deeff7a2aba5d6c450c64a2ab904a9c369f48db757da75de28a682f17737463b98026f89f412e437c7c7400bddc2324307ce92da39e5f90b17fdfd0f0175a7a0813d822f1c2f8dc0bd79d9a361ca6015a7786dfe121ab42d1ce3aeb8da979b39d7a43803768e5e9db3be6b8f1b68540ea08654978a1756ef9cd0f6dce79eee7e481990f79149b7dbd9b272e28af121f1eaf3c020d9766e37ccb3aaad52a63194899995eb585b23a82566acc1353d96e3a5457776d11391c5867eeaa703813e69968421efef43361f887ff854acd2b7c7c8ffc69e38a2a45cdba38fdd13a2a02e0d85e731ce1878857279f2d4ba79470428a2d4a6f96a42129da0a7acf8f1e01594f9f0d810c9ebf5d7f7cea0606819cacfee4850f421ea24c231ef2039cfc8627a59739e983af3d488de9d906e91db312da6e7407cbf012b72b6b552c57331231f6fe75558d537e42bddcdcdb2e376b1e634de8bb1803cf2c57116b20511eaaf247d6f7eb7354100fc60d93796ca253c0fa92d933ecd26e7d8ba784e98f3c1754957f55296ddb83497347305dff2b39e2de78ff8a93f7a6d8a3a8da82357bea557204128a403655b99ca022b24774a2ae38df7535b116ba8a616b3043c054072ae672a9d576e1aeba0f054bd36ecb60f45052df3a0866d08f60c31ca90da4aff3ac59431e8765f91001dff81fe0214b3e94eb9c82b8136087615e1e12d9a73e3fef7f8893e8d3b5771e046e525e95dbfefe173dcda40b866b24c1a815fe270c2af9685a383c3ea4fb643d1928bfd5a26db54b901c2e68446c9049cfff1375db775a41ec8e5f70adf4f32812189133626f1ded2cdf50ab5b39a8ada912ab40954a0ddd68a3088458db90f9bd0b6aed554a4b134c6592d136aa77f52506edd06be3e7f3322a62304eeaf18c65511cb36c843db312e388fe8d0319544747a879335dbaf16ac2836ff37e663deee72846d651ec41e53435830823e4782ddc2bfb122cf1b916ee1b9ae1e6712a5ce6d9113e1f803feb4b4ae5db7bc97cc3b5b246bfe29d5fdbe3d586246ba68eebbbcb1cc35f2fae56da756ae2b45aaca52272f979d4d7f3a11234f295c6e23d6161fc37e1928766dc99dcf52c2d55b884a676353f34411d0621f116040e6aba1c75317a939c27534be462720c6f24620e5342c2b67acc385881a3b6bf6c0bbd95779383b8659494b1733280aa77ff6df7a126a29ca20e1b6e396e1008daa692a3bf9437fd943e82ecbab1aac07bea930d59f7f1050ad1750cc014c019b484410c0e24a0e336426bfafe1a74f76a5646b8bc842ee56372b308a04707314adfe63f658f1387a69b93bc82c6529c4a8fc15e3005d3492e38d43d58984582de2177f19a7e8fcc1ccfdaed03b07a187d9df603ec12e065d38ee5594916ce2f5ec309cac2d0ec399e6b8cea6feb8c5ec81481012137a562355342389710db247f547d6eeca725a7a2b44d295238ef8d0722228131b60362c805313c538b7bbf3b22918be371d7398f9720571e98d1a564d177631a19e16e3fe56a71d34a5b920e3f2c71fe849df15b6658bb1095143e20ba19d07f2ed1c3a7d52d389a56e7f7b88c6dc0463702a18ac93bd91244f47b3d9c5ea8a1d6a062e6fc88cb28e966a634a903bbcd2faa6eca4661912b28593caa0e54402f7400183d783eea5a6ec879ea92686f59fff68df340af92694b9230d9e88908dab6246d8583f446b50") (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000019c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3b8, 0x138, 0x220, 0xffffffff, 0x220, 0x2c8, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff, 0xffffffff, 0xffffff00], 0x6, 0x2, {0x3}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x15, @multicast1, @multicast1, @port=0x4e22, @port=0x4e23}}}}, {{@ip={@remote, @loopback, 0x0, 0xffffffff, 'pimreg\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x67, 0x3, 0x46}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x3, 0x1, 0x4, 0x0, 0x2, 0x6], 0x3, 0x2}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x32, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x4e20, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @icmp_id=0x65, @icmp_id=0x68}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xc}, @remote, 0xff000000, 0xffffff00, 'bond_slave_1\x00', 'wg1\x00', {0xff}, {}, 0x21, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @loopback, @broadcast, @gre_key=0x4, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) (async) connect$pppl2tp(r1, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) (async) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000c40)="5ff419328b4b89cadd6ed84256b0d1a7ae3ace9a656587bec772812f0682495172602a5f602bf44a39a1436e97944f934150ce45b3154b57a7a37e00bb808c4b1ea6a2276040edc5e194b28eaecf159df5f85e20dc08bd222bba54232de9021e5e3a7080a11f3cedb2948a48138ba52eb7039c13fcb68393f6571645c2d86484c32752808d85eb1b8cefa097fcdf3aab0a053358e574a9838c725bfd4d29ed258aff70068b5db78d249407f2396c40182c099c26ea3bfab74e03e9f5334ca8afec9f8f048eae3025778a9768a8471aefb54be4c99fae5101e084bab661657a59acad1ebf144ce784f1f3914afd77ae1c24c22748586dc97d19d9880d34a9c9572d3805a3422f3a97e032da822ed4d97cb571e27744093d6f0d9d067044c8a8350d3773849779c3146ecce39dca9110755c99327d6cea964a394cc8a99711ae91d0c4d080ad5e1ce0b358af9dd5c345a97d8ff811b8d3763552d595a517a25f449d8aef55a2de69b1a62f831ff4c554930ed01de5fd36336a0a4fe4155cf23a471862a016080ac7d53c159b19a4e439a0bbe88940c43f4d28196a1fa9aaab28ee0e0c924784ad6ee23747b5aa0e0ef3585e3ae54c8adfe3c76de8d834b39049669e535a1c7074f5cbf020bb5ad1ad75826e986b9558373b14b7b8c977340b5ae6b2cd9a4b46ce9e4c5c143a59b727d8a0ebb47a7be9e87300f9212a5b94a1ae65ae029270a107e2634ba45f247f9683e31dfdc38144746e5ff4fec41e4e7020adfd9afebeb77f69b2e53251f1c569c6da786146826687bb0b69a8425e40ab43ca8d2603689865302ec8e9f631c4ff003fd4fc1731a0dbbf93dd1317a3b39d85a59e97c1845d419d53a32b18eb55e84a0e7e6c2455bb2a9d3123285e8aa23d16c6f339307e10f2816c0b4ebe7ca9ab857c97e7a7532c54626f79bb165699303057475e0fea80b2042ebccbf8cd79bf491ee66c2c6f5041d09a9d8c6ae394112d5192cebb876bc6cc965cf730ecbf58be006a3b6757d3f308eb2206667d32353239a9c118f91b4453c7045850c5576fb665ebe62580c0f0512abfb8118883a54c639f5bba05d8a0769794011464c7d5b9db6e4b287cab9bbf3066349a927128466f82ad01522f7599e6ea8c676c656960d6f9e2639d6d08814a37a0e9b3573fc3738797205acf4d0cadfefaf240d5eec7688db46f5cd561e24a0751f72bda8d572d77d99f5960da72a0c6b89546788c1a3a16810e068d9ab1aaf1a99c5cb4fd1d5746f2f1bbce7e3e0cfd07c5291bb2b2726025b79c68a73dbab9d4f7558d583c5641676855b2493515c82859eb1adedaaee63f70c7bdf6e757045171106fd803e7a8d6c2cf4ebaf377c920ab5ea8e8a43b22b0b3b9bd9f31d7e5410d8ddefa9fd7630b5270619ac94400bd1f0a626cd6ed213301dd38696c6c312301fa71805dc5717e2daa2d2ed289727562209676feab9d85a744e4bc68e3806d35c7f5103b582fc96799f0a066af51228f6b3fe7abb407ee435a8a6a8a519fb3049b78bf4f12a3942daa6c0c55de5e71faa0da2fdfae2702120a43424e05cf295586e18354756a1f241063b8c52eee667577c15e71752a3a5be4cdcf3a679e8ad6e4b6983a17d5143fc586f64d96dd429b61c67bd795b88c7557438a8aa8b4406505d45f7d3f99638e4f0299d605a4b005bb558e9711525899083072dd1328dfcb0c89a0847845a8c4cd095a498a821c3dc6f8b9e78253cc2b7dfaebeb179f28ab4d9bbeae9775532ec4ab3e0b3d25a3bdb739647636bf0b5e7ec4c40a42001714b93b92c31d4c311e818f3d9728382af17ab9ba9e43329eee7eecfec96f15dc58f732c3c89179590c130bb152c4dbb159f520b311a69397203a8df88c89b6b79fc1a07220557520e75e9fdd328ea9ef795c0a2e253bf8c914ee9abd3614966ffa7e4627927f0ae207ebaab9dae206e38e1c5b9b5fc3c0939cd0ac23e82c6388f9e79f07cdf3222c8d8a5a67b524f405f73b4e166e34fa39b2acce07408437c6f6f2a189ee5f2cd9e644a5503788a2a7803bf49cc70bf409bf63b1e4e3dd579bdbe049acbc0eebf2b2fae3a312a3cbbe264399a3db9af953af5168ba053a341f79f2c315112d744488fafc39f7e91e6451c7004e310fbd2cef976ce8f9c5111cf84b0f76bab89e276011c7f9d9d26a59022f981540aa5dbdf9db7876949c7aaa3a6153bda2471af56e3c38df759290c13a01dfd6ffea412d12cab33c883706e83f38efbf8b74b1e50782d5563d8c47d6c2022d7660428976fd20c80b4a63b2abeaeadc67f497ba2674421d6d46a88af89090f444d23004b227eca8129d5b4f3cab832d97f48e8c282c8c7013d33a4ef2f439ce4abbd5e1658717f5e4b854d8f8a16ffb9d2912c928e31eb824e59ef63267d021803716613fe32987f45506b2f72d62bf4911312a1919231b7713d244cc139c3eba21e64946d680ca1e0ab02da2a3dcdcd4bbb0af39193547b551e37dd0803f6d9babcab9e99ccc8586e1ac29846a25267d8eca724b7cf13142ee9e7516d84dd9a7870d1038309183a50c02b235668ccf1c8d8553218b0236c10117b9b870321a3a3ff6134673682723f714ba3c0ed6bf8e6e753d70f1bd08bf79addbc39f789d66f64a801064cb46df983da45c8ffd94f193ac73a7f88c5d5f34838da325a3a57aab2735a8a46040e6dd5c85e2f0c253bcd54c8911c6329efad7780da931cb373e3d8725ad62b985fc9c89f2eeb394abeea031f5c9c426f5277362445155ac9e21d922dcdd167edcef397b0ef0b0aef8b40042f8692a8ee361d65cea401489fe1e0cd2c4c7e9c64704a3765b3eb3b2a30cae4313d7d030e77f43feb625def1f34b08b5ea61e5e83d883989a973c221c95bfbd8a39f2e421cbd0f8353aabf5ec1ed8883d332af2dd61520453a51f621fa96b572ffc33313349648d7c1d879ff2faab687d90272f3bd3bfc363632aa34482c67b43a9c416fa11f0d15790b030e25f19d2ca12d085da602848acad40fafee571e9572e1212cc420b20397a68b2713d59bf06a6c827003f1fcaf2dc804796147c1c61ca3e4dd3fb6796e1dc0e3cf9953a717799bdb796e2632dd614ce2208bc2b3ef6d2c2f380fc289e460b4f0e10b0b3029a8f3e98c323f8b260d2e3b311492b89348502033ec2398c3749f80a5f2cbe405f42056d2a180bd269895c44221f2ad99faf0535ad91a3ef2684f7782fd5fe190a99beec615a0d41bf75894d98f1d5dd2ddce7f9e0d222730bb1144e4a200725c1787c9b53671c4c17b800d7ea8d31eb39ced55caa4eae865124ded35dc1b7dffb8d543fd323f47767964b555d4ea5b66c0f238baa80f1e7a06b77217d0f4f6219ed768c6f582cb3799e331298cb3bb10771e1f39a095a0faa0a222e95675642fcea272a5d1d0226439fd335b43a05bee11f56fb9320509b5679dfb1fb4a13dd50c8f0c0c0036cb33aa2c96a35d07c8e5876a59e438e7d40da100c47f87810c34ffd2f87518a8002d40efb285d29fb8a4d0a18046ec66c318ca33d2e1acc0b9ed3bedb0611ac97f1da66461d461c8176e16ba52f4cd78f9cad0ca61fb815e7ad2465daad95676a430e01ce423709d91d7596ec2e3ee8802196d4c0432fa683f3aaff34c5b8e469e36206cc03d98a2436bc64216ac170dceae028f0a0b9cb4a5e37a86b49ccf486043a3c6ff91418a5f90d689062a7d753dfe9b5856a9a0dda045c7a6db7542e298c8eec9d83b73cbcc9ac0cc1a848404051ee15942f31615368f42274bf64ec0dbda4b97c41c7f0ce763f201b6a73c1aa8e43db2fd6205fa2834f184e82cf52f3b3fe812d2444c1b5578724effad2b0e4c443fad3bbb94fb346a1290c800e6bc719ee2b0b0b3d6a5167f1521febc96caac97d4cc16c55b6e90221052118338e815f0e0ceac33286e86d69120caf01793379ddd8a34fa2809df910af133c01b00565a16b2eaecbe354de8ff7695ba9be05a04e5d1fdef2fa1c639ca42fbf42379ae1048a87e18c4b3fb888ad027387e270913d5a111b3087da7378b1c15b72dd4346744c7d22bfe494ea0d4cee08db60e3ac8931b48fdf1231a092cc54f1ccb529035562f31e5c6feaf7d134645e898691254da33ad7b3ce628e321898250f648c6809feed7eac635c9d37d97f2f0e03625ed2739cca037fc0ba03935ffe8e683902249f208d14d6060e827293e903b14a942f65a2aa238423cf450da15f42ff745e62871d6c76f500bac8832c9699587b71241049a06283bd5e42188c7d08db92fe59407275a66b65da2187f0c4489419e7d8edcee60d4664493659d2ccb27e2c7e2c9742e9202f0ee67fc63d66ca8ef0df75bdb32726dca694dbaf7ecad639c0e9bf39757d08fe74597da4a89e85ae69278431a8a2ad87ea137763b314102fe45b0783776737b20ecbdf2dd11e230269e0431a6c2538a781c95fd7ea737045b3f1be4783eb99b82fa7477eea83da4cd6bfd825a622c4e06385e7160a2d32e379f32c09a70461d7f51ee263836995dc5f6c910aafa749f6c1843593134c138417ac9b427ca0d2b978de22940607c5d24812c7a9f9ba9aeeda6278f029e8073d4dc980bcf969e6d04dcfdc16a5f99f93515263f6a65eddda5e04dd3d4291829706203a905201912109fc7e6d82f03ea369d6c98916a2c558eeb4e2600ac0173c481869060203a7c2adfb6e1644b58d97427078f0430c28d375a01f8c564bd29198defa80b8e081884497f6eb8b482780f33e2670a5cb33e1f0a56eaeccec2d170d67347ef4eb3995f543258412c48d53a9b233aac329e7c", 0xd4d}], 0x2}, 0x20000000) (async) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x105, 0x97e) 1.742375173s ago: executing program 4 (id=775): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000002580)=0x5, 0x6, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x149a82, 0x100) sendfile(r2, r2, 0x0, 0x5) 1.661084683s ago: executing program 3 (id=776): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') faccessat2(r0, &(0x7f0000000040)='\x00', 0x1, 0x1300) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) 1.560165646s ago: executing program 3 (id=777): r0 = io_uring_setup(0x177f, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0x4}) r1 = memfd_secret(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@empty, @broadcast, 0x1e, 0x12}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000000000)={0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x47bc, 0x20, 0x0, 0x0, 0x0) ftruncate(r0, 0x51a9497) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={0x0}, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 1.559763265s ago: executing program 1 (id=778): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async, rerun: 32) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = dup(r4) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="4280c239420f001f410f01c3c44272f7d3a100000000008000000f3526410f35c481fd6f5e38f20f00582f6766450f388200", 0x32}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = fcntl$dupfd(r2, 0x406, r4) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000240)={0x10004, 0x2, 0xeeef0000, 0x1000, &(0x7f0000000000/0x1000)=nil}) 1.343007179s ago: executing program 1 (id=779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48, 0x7a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x86) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="65400f3541a3bd00c0fe00000000c401905763b643f466b8dc000f00d80f01f88f4af81289562b00005ad8fec62e440f01d1420fa2b9800000c00f3235004000000f30", 0x43}], 0x1, 0x20, &(0x7f00000001c0), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES64=r1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08ed"], 0x38}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="0f08d5660f23d33e2d0000f466b9e00600000f3282bdeb9b3066b9360b00000f32ba4300ec1127", 0x27}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.084065ms ago: executing program 1 (id=780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x60}}, 0x4005) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 796.089µs ago: executing program 3 (id=781): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000c839000000000000000000000006000a", @ANYRES32=r4, @ANYBLOB="00000000300000000000000029000000360000006702000000000000c910fc000000000000000000000000000001000000000000"], 0x58}}], 0x1, 0x0) (async) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4d}, 0x1c) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x4, 0x9, 0x800, @vifc_lcl_ifindex=r4, @multicast1}, 0x10) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000c80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x10}}], 0x28}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000415000100000000000000000002000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) timer_gettime(0x0, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24020090) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 4 (id=782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x3, 0x12) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x24040084) kernel console output (not intermixed with test programs): .888165][ T6016] random: crng reseeded on system resumption [ 49.970755][ T6030] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11'. [ 50.019715][ T6021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6021 comm=syz.3.9 [ 50.129493][ T6054] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 50.138668][ T6054] CIFS mount error: No usable UNC path provided in device string! [ 50.138668][ T6054] [ 50.141867][ T6054] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 50.147156][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.189399][ T6062] SELinux: syz.3.20 (6062) set checkreqprot to 1. This is no longer supported. [ 50.209835][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 50.213436][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'. [ 50.233358][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 50.285423][ T6083] process 'syz.0.26' launched './file0' with NULL argv: empty string added [ 50.290528][ T6083] netlink: 244 bytes leftover after parsing attributes in process `syz.0.26'. [ 50.330415][ T6087] ufs: You didn't specify the type of your ufs filesystem [ 50.330415][ T6087] [ 50.330415][ T6087] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 50.330415][ T6087] [ 50.330415][ T6087] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 50.341850][ T6087] ufs: ufstype=old is supported read-only [ 50.344547][ T6087] syz.0.28: attempt to access beyond end of device [ 50.344547][ T6087] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 50.384433][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 50.387649][ T6093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.422093][ T6096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.31'. [ 50.425888][ T6096] netem: unknown loss type 13 [ 50.427691][ T6096] netem: change failed [ 50.454659][ T6100] netlink: 'syz.0.33': attribute type 20 has an invalid length. [ 50.496593][ T6101] block device autoloading is deprecated and will be removed. [ 50.555678][ T6098] md2: using deprecated bitmap file support [ 50.557879][ T6098] md2: error: bitmap file must be a regular file [ 50.620388][ T6108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=6108 comm=syz.0.36 [ 50.665025][ T6110] binder: 6109:6110 ioctl c0306201 200000000640 returned -22 [ 50.670977][ T6111] binder: 6109:6111 ioctl c0306201 200000000540 returned -22 [ 50.670979][ T6112] binder: 6109:6112 ioctl c0306201 200000000080 returned -22 [ 50.714243][ T67] Bluetooth: hci1: command tx timeout [ 50.723781][ T67] Bluetooth: hci0: command tx timeout [ 50.723795][ T5943] Bluetooth: hci3: command tx timeout [ 50.742683][ T6117] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.779371][ T6119] netlink: 'syz.0.40': attribute type 21 has an invalid length. [ 50.781848][ T6119] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 50.794588][ T5943] Bluetooth: hci2: command tx timeout [ 50.863639][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.973615][ T6124] Bluetooth: MGMT ver 1.23 [ 50.975423][ T6124] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 51.013890][ T9] usb 8-1: device descriptor read/64, error -71 [ 51.017070][ T6129] 9pnet_fd: Insufficient options for proto=fd [ 51.019227][ T6130] 9pnet_fd: Insufficient options for proto=fd [ 51.047185][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 51.236180][ T6148] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 51.251443][ T6148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.263679][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 51.330679][ T6159] ip6_vti0: entered promiscuous mode [ 51.394624][ T9] usb 8-1: device descriptor read/64, error -71 [ 51.514793][ T9] usb usb8-port1: attempt power cycle [ 51.599667][ T40] kauditd_printk_skb: 124 callbacks suppressed [ 51.599683][ T40] audit: type=1400 audit(1746987980.991:218): avc: denied { read append } for pid=6165 comm="syz.0.55" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 51.600760][ T6166] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 51.602308][ T40] audit: type=1400 audit(1746987980.991:219): avc: denied { open } for pid=6165 comm="syz.0.55" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 51.623844][ T40] audit: type=1400 audit(1746987981.001:220): avc: denied { relabelto } for pid=6165 comm="syz.0.55" name="31" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 51.632240][ T40] audit: type=1400 audit(1746987981.001:221): avc: denied { associate } for pid=6165 comm="syz.0.55" name="31" dev="tmpfs" ino=195 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 51.641168][ T40] audit: type=1400 audit(1746987981.011:222): avc: denied { write } for pid=5929 comm="syz-executor" name="31" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 51.649689][ T40] audit: type=1400 audit(1746987981.011:223): avc: denied { remove_name } for pid=5929 comm="syz-executor" name="binderfs" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 51.659396][ T40] audit: type=1400 audit(1746987981.011:224): avc: denied { rmdir } for pid=5929 comm="syz-executor" name="31" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 51.667940][ T40] audit: type=1400 audit(1746987981.041:225): avc: denied { write } for pid=6167 comm="syz.0.56" name="/" dev="9p" ino=35913800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.675150][ T40] audit: type=1400 audit(1746987981.041:226): avc: denied { remove_name } for pid=6167 comm="syz.0.56" name="file0" dev="9p" ino=35913923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.682365][ T40] audit: type=1400 audit(1746987981.041:227): avc: denied { unlink } for pid=6167 comm="syz.0.56" name="file0" dev="9p" ino=35913923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.853576][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 51.876583][ T9] usb 8-1: device descriptor read/8, error -71 [ 51.927187][ T6178] netlink: 'syz.0.61': attribute type 39 has an invalid length. [ 51.996758][ T6181] ISOFS: Unable to identify CD-ROM format. [ 52.115005][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 52.136326][ T9] usb 8-1: device descriptor read/8, error -71 [ 52.243926][ T9] usb usb8-port1: unable to enumerate USB device [ 52.715431][ T6190] mmap: syz.1.64 (6190) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.794130][ T5943] Bluetooth: hci3: command tx timeout [ 52.794533][ T5944] Bluetooth: hci1: command tx timeout [ 52.795770][ T67] Bluetooth: hci0: command tx timeout [ 52.822125][ T6201] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 52.873705][ T5944] Bluetooth: hci2: command tx timeout [ 52.915287][ T6214] dlm: no locking on control device [ 53.165872][ T6246] syz.2.80: attempt to access beyond end of device [ 53.165872][ T6246] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 53.171314][ T6246] FAT-fs (nbd2): unable to read boot sector [ 53.175653][ T6248] syz.2.80: attempt to access beyond end of device [ 53.175653][ T6248] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 53.180372][ T6248] FAT-fs (nbd2): unable to read boot sector [ 53.548722][ T6282] warning: `syz.2.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.585497][ T6292] binder: 6290:6292 ioctl 40046205 0 returned -22 [ 53.601081][ T6292] ======================================================= [ 53.601081][ T6292] WARNING: The mand mount option has been deprecated and [ 53.601081][ T6292] and is ignored by this kernel. Remove the mand [ 53.601081][ T6292] option from the mount to silence this warning. [ 53.601081][ T6292] ======================================================= [ 53.807698][ T6323] overlayfs: missing 'lowerdir' [ 53.814338][ T6318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10525 sclass=netlink_route_socket pid=6318 comm=syz.0.93 [ 53.879104][ T6339] bridge0: entered promiscuous mode [ 53.881126][ T6339] macvlan2: entered promiscuous mode [ 53.902769][ T6343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 53.935885][ T6349] overlay: Unknown parameter 'dont_hash' [ 54.014724][ T74] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.130937][ T74] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.139304][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.142434][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.146841][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.151278][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.156685][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.194634][ T1335] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.216234][ T6374] hpfs: hpfs_map_sector(): read error [ 54.236379][ T6377] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 54.271337][ T6385] netlink: 'syz.3.115': attribute type 10 has an invalid length. [ 54.320418][ T6385] veth0_vlan: left promiscuous mode [ 54.328771][ T6385] veth0_vlan: entered promiscuous mode [ 54.335348][ T6385] team0: Device veth0_vlan failed to register rx_handler [ 54.355733][ T1335] usb 5-1: Using ep0 maxpacket: 16 [ 54.363857][ T74] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.364069][ T1335] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1023 [ 54.371806][ T1335] usb 5-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 54.377142][ T1335] usb 5-1: config 1 interface 0 has no altsetting 0 [ 54.381147][ T6365] chnl_net:caif_netlink_parms(): no params data found [ 54.381425][ T1335] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.386525][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.389013][ T1335] usb 5-1: Product: syz [ 54.390315][ T1335] usb 5-1: Manufacturer: syz [ 54.391780][ T1335] usb 5-1: SerialNumber: syz [ 54.395973][ T6349] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 54.423181][ T74] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.477849][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.480842][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.484091][ T6365] bridge_slave_0: entered allmulticast mode [ 54.488902][ T6365] bridge_slave_0: entered promiscuous mode [ 54.493105][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.496262][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.499210][ T6365] bridge_slave_1: entered allmulticast mode [ 54.503130][ T6365] bridge_slave_1: entered promiscuous mode [ 54.564211][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.569587][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.605395][ T1335] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 54.613410][ T1335] usb 5-1: USB disconnect, device number 2 [ 54.638861][ T6365] team0: Port device team_slave_0 added [ 54.648452][ T6365] team0: Port device team_slave_1 added [ 54.680529][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.682779][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.690998][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.695990][ T74] bridge_slave_1: left allmulticast mode [ 54.698361][ T74] bridge_slave_1: left promiscuous mode [ 54.700889][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.708096][ T74] bridge_slave_0: left allmulticast mode [ 54.710629][ T74] bridge_slave_0: left promiscuous mode [ 54.713224][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.883977][ T5944] Bluetooth: hci0: command tx timeout [ 54.884035][ T5943] Bluetooth: hci1: command tx timeout [ 54.953247][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.958858][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.963560][ T74] bond0 (unregistering): Released all slaves [ 54.963670][ T5943] Bluetooth: hci2: command tx timeout [ 54.970286][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.972574][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.980969][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.029107][ T6365] hsr_slave_0: entered promiscuous mode [ 55.031391][ T6365] hsr_slave_1: entered promiscuous mode [ 55.033638][ T6365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.036116][ T6365] Cannot create hsr debugfs directory [ 55.142701][ T6407] __nla_validate_parse: 10 callbacks suppressed [ 55.142716][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 55.224951][ T6414] tmpfs: Unknown parameter 'q(' [ 55.233204][ T6414] tipc: Can't bind to reserved service type 0 [ 55.281622][ T6424] 9pnet_virtio: no channels available for device syz [ 55.292665][ T6417] 9pnet: Could not find request transport: xen [ 55.361202][ T6365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.371919][ T6365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.397254][ T6365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.404799][ T6365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.425934][ T74] hsr_slave_0: left promiscuous mode [ 55.429071][ T74] hsr_slave_1: left promiscuous mode [ 55.431793][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.435647][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.440308][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.442738][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.466008][ T74] veth1_macvtap: left promiscuous mode [ 55.468498][ T74] veth0_macvtap: left promiscuous mode [ 55.471272][ T74] veth1_vlan: left promiscuous mode [ 55.473735][ T74] veth0_vlan: left promiscuous mode [ 55.615775][ T6446] NILFS (loop0): device size too small [ 55.946054][ T74] team0 (unregistering): Port device team_slave_1 removed [ 56.010382][ T74] team0 (unregistering): Port device team_slave_0 removed [ 56.233928][ T5943] Bluetooth: hci3: command tx timeout [ 56.466958][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.474307][ T6453] netlink: 'syz.3.134': attribute type 2 has an invalid length. [ 56.475651][ T6365] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.482325][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.484639][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.485079][ T6453] capability: warning: `syz.3.134' uses 32-bit capabilities (legacy support in use) [ 56.491712][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.494075][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.505992][ T6458] lo speed is unknown, defaulting to 1000 [ 56.562678][ T6458] lo speed is unknown, defaulting to 1000 [ 56.577479][ T6458] lo speed is unknown, defaulting to 1000 [ 56.611588][ T6468] netlink: 'syz.3.137': attribute type 7 has an invalid length. [ 56.620369][ T6468] : entered promiscuous mode [ 56.626307][ T6468] trusted_key: syz.3.137 sent an empty control message without MSG_MORE. [ 56.647256][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 56.647267][ T40] audit: type=1400 audit(1746987986.041:314): avc: denied { create } for pid=6479 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.656908][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.660376][ T40] audit: type=1400 audit(1746987986.041:315): avc: denied { bind } for pid=6479 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.667752][ T40] audit: type=1400 audit(1746987986.051:316): avc: denied { write } for pid=6479 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.703932][ T6487] vivid-000: ================= START STATUS ================= [ 56.706501][ T6487] vivid-000: Radio HW Seek Mode: Bounded [ 56.708352][ T6487] vivid-000: Radio Programmable HW Seek: false [ 56.710864][ T6487] vivid-000: RDS Rx I/O Mode: Block I/O [ 56.712937][ T6487] vivid-000: Generate RBDS Instead of RDS: false [ 56.715246][ T6487] vivid-000: RDS Reception: true [ 56.716814][ T6487] vivid-000: RDS Program Type: 0 inactive [ 56.718649][ T6487] vivid-000: RDS PS Name: inactive [ 56.720289][ T6487] vivid-000: RDS Radio Text: inactive [ 56.722085][ T6487] vivid-000: RDS Traffic Announcement: false inactive [ 56.725194][ T6487] vivid-000: RDS Traffic Program: false inactive [ 56.727333][ T6487] vivid-000: RDS Music: false inactive [ 56.729086][ T6487] vivid-000: ================== END STATUS ================== [ 56.737688][ T40] audit: type=1400 audit(1746987986.131:317): avc: denied { connect } for pid=6485 comm="syz.0.139" lport=56 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.748525][ T40] audit: type=1400 audit(1746987986.131:318): avc: denied { read } for pid=6485 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.756226][ T40] audit: type=1400 audit(1746987986.141:319): avc: denied { getopt } for pid=6485 comm="syz.0.139" laddr=fe80::e lport=56 faddr=fe80::aa fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.765274][ T40] audit: type=1400 audit(1746987986.151:320): avc: denied { write } for pid=6485 comm="syz.0.139" path="socket:[9957]" dev="sockfs" ino=9957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.775869][ T5933] lo speed is unknown, defaulting to 1000 [ 56.778279][ T6458] infiniband syz0: set active [ 56.779925][ T6458] infiniband syz0: added lo [ 56.832872][ T6365] veth0_vlan: entered promiscuous mode [ 56.839600][ T6458] RDS/IB: syz0: added [ 56.840472][ T6365] veth1_vlan: entered promiscuous mode [ 56.841263][ T6458] smc: adding ib device syz0 with port count 1 [ 56.845352][ T6458] smc: ib device syz0 port 1 has pnetid [ 56.848701][ T5994] lo speed is unknown, defaulting to 1000 [ 56.855196][ T6365] veth0_macvtap: entered promiscuous mode [ 56.857835][ T6458] lo speed is unknown, defaulting to 1000 [ 56.859265][ T6365] veth1_macvtap: entered promiscuous mode [ 56.867840][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.871092][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.876088][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.881909][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.886039][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.890292][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.895854][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.927434][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.930802][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.934084][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.937305][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.939870][ T6508] netlink: 80 bytes leftover after parsing attributes in process `syz.0.143'. [ 56.940392][ T6365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.947495][ T6365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.951343][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.958298][ T6365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.961298][ T6365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.965560][ T6365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.968339][ T6365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.988049][ T40] audit: type=1400 audit(1746987986.381:321): avc: denied { setopt } for pid=6506 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.017671][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.020154][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.035585][ T6515] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 57.037743][ T6515] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.044756][ T6515] vhci_hcd vhci_hcd.0: Device attached [ 57.046614][ T6458] lo speed is unknown, defaulting to 1000 [ 57.050136][ T6516] vhci_hcd: cannot find the pending unlink 1023 [ 57.052318][ T40] audit: type=1400 audit(1746987986.441:322): avc: denied { execute } for pid=6514 comm="syz.0.144" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 57.064560][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.067458][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.067796][ T6516] vhci_hcd: connection closed [ 57.071420][ T46] vhci_hcd: stop threads [ 57.076547][ T46] vhci_hcd: release socket [ 57.078519][ T46] vhci_hcd: disconnect device [ 57.084715][ T40] audit: type=1400 audit(1746987986.481:323): avc: denied { mounton } for pid=6365 comm="syz-executor" path="/syzkaller.X2B8T6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.227816][ T6531] SELinux: policydb magic number 0xff8c does not match expected magic number 0xf97cff8c [ 57.231076][ T6531] SELinux: failed to load policy [ 57.263048][ T6458] lo speed is unknown, defaulting to 1000 [ 57.356096][ T6458] lo speed is unknown, defaulting to 1000 [ 57.418031][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 57.537389][ T5943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 57.540761][ T5943] CPU: 2 UID: 0 PID: 5943 Comm: kworker/u33:6 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 57.540776][ T5943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.540783][ T5943] Workqueue: hci2 hci_rx_work [ 57.540811][ T5943] Call Trace: [ 57.540815][ T5943] [ 57.540820][ T5943] dump_stack_lvl+0x16c/0x1f0 [ 57.540837][ T5943] sysfs_warn_dup+0x7f/0xa0 [ 57.540855][ T5943] sysfs_create_dir_ns+0x24b/0x2b0 [ 57.540872][ T5943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 57.540888][ T5943] ? find_held_lock+0x2b/0x80 [ 57.540904][ T5943] ? do_raw_spin_unlock+0x172/0x230 [ 57.540916][ T5943] kobject_add_internal+0x2c4/0x9b0 [ 57.540938][ T5943] kobject_add+0x16e/0x240 [ 57.540953][ T5943] ? __pfx_kobject_add+0x10/0x10 [ 57.540969][ T5943] ? do_raw_spin_unlock+0x172/0x230 [ 57.540980][ T5943] ? kobject_put+0xab/0x5a0 [ 57.540997][ T5943] device_add+0x288/0x1a70 [ 57.541016][ T5943] ? __pfx_dev_set_name+0x10/0x10 [ 57.541030][ T5943] ? __pfx_device_add+0x10/0x10 [ 57.541042][ T5943] ? mgmt_send_event_skb+0x2fb/0x460 [ 57.541060][ T5943] hci_conn_add_sysfs+0x17e/0x230 [ 57.541072][ T5943] le_conn_complete_evt+0x1075/0x1d70 [ 57.541091][ T5943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 57.541107][ T5943] ? hci_event_packet+0x43c/0x1190 [ 57.541125][ T5943] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 57.541141][ T5943] ? skb_pull_data+0x166/0x210 [ 57.541153][ T5943] hci_le_meta_evt+0x2f3/0x5e0 [ 57.541161][ T5943] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 57.541178][ T5943] hci_event_packet+0x669/0x1190 [ 57.541193][ T5943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 57.541202][ T5943] ? __pfx_hci_event_packet+0x10/0x10 [ 57.541218][ T5943] ? kcov_remote_start+0x3c9/0x6d0 [ 57.541228][ T5943] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.541244][ T5943] hci_rx_work+0x2c5/0x16b0 [ 57.541253][ T5943] ? rcu_is_watching+0x12/0xc0 [ 57.541267][ T5943] process_one_work+0x9cc/0x1b70 [ 57.541283][ T5943] ? __pfx_process_one_work+0x10/0x10 [ 57.541297][ T5943] ? assign_work+0x1a0/0x250 [ 57.541307][ T5943] worker_thread+0x6c8/0xf10 [ 57.541322][ T5943] ? __kthread_parkme+0x19e/0x250 [ 57.541336][ T5943] ? __pfx_worker_thread+0x10/0x10 [ 57.541346][ T5943] kthread+0x3c2/0x780 [ 57.541355][ T5943] ? __pfx_kthread+0x10/0x10 [ 57.541363][ T5943] ? __pfx_kthread+0x10/0x10 [ 57.541372][ T5943] ? __pfx_kthread+0x10/0x10 [ 57.541380][ T5943] ? __pfx_kthread+0x10/0x10 [ 57.541388][ T5943] ? rcu_is_watching+0x12/0xc0 [ 57.541399][ T5943] ? __pfx_kthread+0x10/0x10 [ 57.541408][ T5943] ret_from_fork+0x45/0x80 [ 57.541418][ T5943] ? __pfx_kthread+0x10/0x10 [ 57.541427][ T5943] ret_from_fork_asm+0x1a/0x30 [ 57.541448][ T5943] [ 57.541461][ T5943] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 57.631831][ T5943] Bluetooth: hci2: failed to register connection device [ 57.684657][ T6580] Bluetooth: MGMT ver 1.23 [ 57.747083][ T6592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.764448][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 57.766715][ T6592] binder: 6591:6592 ioctl 4018620d 2000000000c0 returned -16 [ 57.805286][ T6598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40464 sclass=netlink_route_socket pid=6598 comm=syz.1.163 [ 57.809088][ T6597] bridge0: port 3(syz_tun) entered blocking state [ 57.812425][ T6597] bridge0: port 3(syz_tun) entered disabled state [ 57.814673][ T6597] syz_tun: entered allmulticast mode [ 57.817419][ T6597] syz_tun: entered promiscuous mode [ 57.819340][ T6597] bridge0: port 3(syz_tun) entered blocking state [ 57.821462][ T6597] bridge0: port 3(syz_tun) entered forwarding state [ 57.856056][ T6600] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 57.859374][ T6600] netlink: 244 bytes leftover after parsing attributes in process `syz.3.161'. [ 57.968418][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 57.971368][ T6615] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 57.975073][ T6615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.315045][ T5944] Bluetooth: hci3: command tx timeout [ 58.826369][ T6657] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 58.834472][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 59.039644][ T6667] netem: incorrect gi model size [ 59.043332][ T6667] netem: change failed [ 59.126143][ T6670] kvm: MONITOR instruction emulated as NOP! [ 59.129234][ T6670] random: crng reseeded on system resumption [ 59.503704][ T65] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.663557][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 59.666520][ T65] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.669730][ T65] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.673403][ T65] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.679034][ T65] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.683767][ T65] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.687449][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.898299][ T65] usb 5-1: GET_CAPABILITIES returned 0 [ 59.900919][ T65] usbtmc 5-1:16.0: can't read capabilities [ 59.987274][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 60.021534][ T6694] netlink: 48 bytes leftover after parsing attributes in process `syz.1.184'. [ 60.048718][ T6696] netlink: 'syz.1.185': attribute type 12 has an invalid length. [ 60.104950][ T5994] usb 5-1: USB disconnect, device number 3 [ 60.393934][ T5944] Bluetooth: hci3: command tx timeout [ 60.426905][ T6724] netlink: 'syz.4.193': attribute type 2 has an invalid length. [ 60.429290][ T6724] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 60.450552][ T6726] SELinux: policydb string does not match my string SE Linux [ 60.453775][ T6726] SELinux: failed to load policy [ 60.581253][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 60.584695][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 60.910202][ T6754] could not allocate digest TFM handle crc32-pclmul [ 61.027271][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 61.044971][ T6772] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 61.048462][ T6772] netlink: 500 bytes leftover after parsing attributes in process `syz.0.204'. [ 61.135727][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 61.139330][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 61.147493][ T6776] overlayfs: failed to resolve './file0': -2 [ 61.152783][ T6776] ip6tnl0: entered promiscuous mode [ 61.157490][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 61.346974][ T6792] syzkaller1: entered promiscuous mode [ 61.348799][ T6792] syzkaller1: entered allmulticast mode [ 61.488791][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.214'. [ 61.493320][ T6807] netlink: 84 bytes leftover after parsing attributes in process `syz.4.215'. [ 61.542092][ T6807] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 61.720263][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 61.720274][ T40] audit: type=1400 audit(1746987991.111:453): avc: denied { write } for pid=6809 comm="syz.0.216" name="raw" dev="proc" ino=4026532945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.794568][ T40] audit: type=1400 audit(1746987991.191:454): avc: denied { read append } for pid=6822 comm="syz.4.220" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 61.801878][ T40] audit: type=1400 audit(1746987991.191:455): avc: denied { open } for pid=6822 comm="syz.4.220" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 61.809771][ T40] audit: type=1400 audit(1746987991.201:456): avc: denied { write } for pid=6822 comm="syz.4.220" name="cgroup.subtree_control" dev="cgroup2" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.817272][ T6823] autofs: Unknown parameter ' [ 61.817272][ T6823] AWª6gø ÃS³…oR¿ô¸…PP/-ª™oóbøBžíZ‘á¨tè>•M¥¨¿€í0óñX:º·«æHGíAªô ‚KWŸƒ †RþM¬¶BÃåV×5ü@×w÷ëÇ ƒ^8ëñ)O„Àú€' [ 61.822325][ T40] audit: type=1400 audit(1746987991.201:457): avc: denied { open } for pid=6822 comm="syz.4.220" path="" dev="cgroup2" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.830369][ T40] audit: type=1400 audit(1746987991.201:458): avc: denied { write } for pid=6822 comm="syz.4.220" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.852358][ T40] audit: type=1400 audit(1746987991.241:459): avc: denied { connect } for pid=6826 comm="syz.3.221" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.860644][ T40] audit: type=1400 audit(1746987991.241:460): avc: denied { setopt } for pid=6826 comm="syz.3.221" laddr=fe80::b lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.867567][ T40] audit: type=1400 audit(1746987991.241:461): avc: denied { write } for pid=6826 comm="syz.3.221" laddr=fe80::b lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.883194][ T40] audit: type=1400 audit(1746987991.271:462): avc: denied { setopt } for pid=6828 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.977387][ T6840] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 62.029481][ T6854] syz.0.230: attempt to access beyond end of device [ 62.029481][ T6854] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 62.034600][ T6854] syz.0.230: attempt to access beyond end of device [ 62.034600][ T6854] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 62.038715][ T6854] Mount JFS Failure: -5 [ 62.040056][ T6854] jfs_mount failed w/return code = -5 [ 62.099832][ T6868] program syz.4.234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.161255][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 62.196076][ T6886] random: crng reseeded on system resumption [ 62.321307][ T6908] netlink: 'syz.3.248': attribute type 10 has an invalid length. [ 62.338999][ T6908] team0: Port device wlan1 added [ 62.423681][ T5994] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.475603][ T5944] Bluetooth: hci3: command tx timeout [ 62.573935][ T5994] usb 6-1: Using ep0 maxpacket: 8 [ 62.580977][ T5994] usb 6-1: config 2 interface 0 has no altsetting 0 [ 62.586664][ T5994] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 62.590350][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.593263][ T5994] usb 6-1: Product: syz [ 62.596069][ T5994] usb 6-1: Manufacturer: syz [ 62.597781][ T5994] usb 6-1: SerialNumber: syz [ 62.810149][ T5994] usb 6-1: USB disconnect, device number 2 [ 63.015260][ T1021] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.163607][ T1021] usb 5-1: Using ep0 maxpacket: 32 [ 63.166478][ T1021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.169870][ T1021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.172904][ T1021] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 63.176298][ T1021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.181231][ T1021] usb 5-1: config 0 descriptor?? [ 63.414632][ T1021] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 63.476552][ T24] usb 5-1: USB disconnect, device number 4 [ 63.548300][ T6976] tmpfs: Cannot enable quota on remount [ 63.560932][ T6981] program syz.4.270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.680006][ T6990] fuse: Unknown parameter '0x000000000000000c' [ 63.680053][ T6988] fuse: Unknown parameter '0x000000000000000c' [ 63.954028][ T7013] program syz.4.278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.016100][ T7020] vivid-007: disconnect [ 64.019605][ T7020] vivid-007: reconnect [ 64.037866][ T7022] devtmpfs: Unknown parameter '00000000000000000004' [ 64.378936][ T7065] loop6: detected capacity change from 0 to 524287999 [ 64.446306][ T7065] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.448942][ T7065] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.451412][ T7065] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.455766][ T7065] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.458526][ T7065] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.461269][ T7065] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.464033][ T7078] 9pnet_virtio: no channels available for device syz [ 64.464200][ T7065] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.468870][ T7065] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.471342][ T7065] ldm_validate_partition_table(): Disk read failed. [ 64.473419][ T7065] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.476202][ T7065] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.478766][ T7065] Dev loop6: unable to read RDB block 0 [ 64.480974][ T7065] loop6: unable to read partition table [ 64.482898][ T7065] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 64.488208][ T6017] ldm_validate_partition_table(): Disk read failed. [ 64.490580][ T6017] Dev loop6: unable to read RDB block 0 [ 64.492579][ T6017] loop6: unable to read partition table [ 64.502219][ T7066] ldm_validate_partition_table(): Disk read failed. [ 64.504687][ T7066] Dev loop6: unable to read RDB block 0 [ 64.507145][ T7066] loop6: unable to read partition table [ 64.513565][ T7066] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 64.695996][ T58] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 64.815574][ T7112] 9pnet_virtio: no channels available for device syz [ 64.864686][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.868274][ T58] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.871701][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.877941][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 64.880873][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.883659][ T5933] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.883766][ T58] usb 5-1: Product: syz [ 64.887983][ T58] usb 5-1: Manufacturer: syz [ 64.889523][ T58] usb 5-1: SerialNumber: syz [ 65.033720][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 65.036702][ T5933] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 65.039834][ T5933] usb 6-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 65.043925][ T5933] usb 6-1: config 1 interface 0 has no altsetting 0 [ 65.047591][ T5933] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.050502][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.053219][ T5933] usb 6-1: Product: О [ 65.054877][ T5933] usb 6-1: Manufacturer: èŽç¸‰îªïœ“益쾸ä¡ë½‰ë³²ïš‹ã¨‡Õ„⬂뫦ಡ౬岌멨⅛꒷é•댜ᰠë•ꄌ뫙ﶸ쬨補妾 [ 65.058700][ T5933] usb 6-1: SerialNumber: Ъ [ 65.062816][ T7096] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 65.065476][ T7096] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 65.101944][ T58] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 65.133692][ T1021] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 65.285656][ T5933] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 65.290711][ T5933] usb 6-1: USB disconnect, device number 3 [ 65.297206][ T1021] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.307097][ T1021] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 65.311054][ T1021] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.318891][ T1021] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 65.322337][ T1021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.327961][ T1021] usb 8-1: Product: syz [ 65.329784][ T1021] usb 8-1: Manufacturer: syz [ 65.331778][ T1021] usb 8-1: SerialNumber: syz [ 65.374786][ T4366] usb 5-1: USB disconnect, device number 5 [ 65.383044][ T4366] usblp0: removed [ 65.431197][ T7139] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 65.547632][ T1021] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 65.760544][ T7156] syz.1.318: attempt to access beyond end of device [ 65.760544][ T7156] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 65.765721][ T1021] usb 8-1: USB disconnect, device number 6 [ 65.771022][ T1021] usblp0: removed [ 65.773225][ T7156] MINIX-fs: unable to read superblock [ 65.813301][ T7159] netlink: 'syz.1.319': attribute type 10 has an invalid length. [ 65.823554][ T7159] __nla_validate_parse: 11 callbacks suppressed [ 65.823569][ T7159] netlink: 2 bytes leftover after parsing attributes in process `syz.1.319'. [ 65.829925][ T7159] team0: entered promiscuous mode [ 65.831989][ T7159] team_slave_0: entered promiscuous mode [ 65.837454][ T7159] team_slave_1: entered promiscuous mode [ 65.839672][ T7159] bridge0: port 4(team0) entered blocking state [ 65.842832][ T7159] bridge0: port 4(team0) entered disabled state [ 65.845769][ T7159] team0: entered allmulticast mode [ 65.847957][ T7159] team_slave_0: entered allmulticast mode [ 65.850326][ T7159] team_slave_1: entered allmulticast mode [ 65.857321][ T7159] bridge0: port 4(team0) entered blocking state [ 65.860136][ T7159] bridge0: port 4(team0) entered forwarding state [ 65.904309][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 65.916150][ T7161] bridge0: port 4(team0) entered disabled state [ 65.993209][ T7161] team0 (unregistering): left allmulticast mode [ 65.996169][ T7161] team_slave_0: left allmulticast mode [ 65.997967][ T7161] team_slave_1: left allmulticast mode [ 65.999830][ T7161] bridge0: port 4(team0) entered disabled state [ 66.000678][ T7165] openvswitch: netlink: IP tunnel dst address not specified [ 66.006424][ T7161] team_slave_0: left promiscuous mode [ 66.016165][ T7161] team0 (unregistering): Port device team_slave_0 removed [ 66.018650][ T7161] team_slave_1: left promiscuous mode [ 66.025428][ T7161] team0 (unregistering): Port device team_slave_1 removed [ 66.137380][ T7176] overlay: filesystem on ./bus is read-only [ 66.160142][ T7180] netlink: 68 bytes leftover after parsing attributes in process `syz.0.321'. [ 66.285313][ T7188] ALSA: seq fatal error: cannot create timer (-22) [ 66.394002][ T7197] netlink: 244 bytes leftover after parsing attributes in process `syz.3.332'. [ 66.401112][ T7197] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.411292][ T7197] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 66.543259][ T7202] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 66.775578][ T7208] syz.3.335 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 66.849880][ T40] kauditd_printk_skb: 125 callbacks suppressed [ 66.849891][ T40] audit: type=1400 audit(1746987996.241:588): avc: denied { execute } for pid=7213 comm="syz.3.337" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 66.865321][ T40] audit: type=1400 audit(1746987996.261:589): avc: denied { getopt } for pid=7213 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.911067][ T40] audit: type=1400 audit(1746987996.301:590): avc: denied { create } for pid=7215 comm="syz.3.338" name="#25" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.917940][ T40] audit: type=1400 audit(1746987996.301:591): avc: denied { link } for pid=7215 comm="syz.3.338" name="#25" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.927049][ T40] audit: type=1400 audit(1746987996.301:592): avc: denied { rename } for pid=7215 comm="syz.3.338" name="#26" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.969572][ T7218] capability: warning: `syz.3.339' uses deprecated v2 capabilities in a way that may be insecure [ 67.004864][ T7220] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 67.128036][ T40] audit: type=1400 audit(1746987996.521:593): avc: denied { create } for pid=7228 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 67.137575][ T7229] netlink: 72 bytes leftover after parsing attributes in process `syz.0.344'. [ 67.172048][ T7232] overlay: Bad value for 'index' [ 67.196307][ T40] audit: type=1400 audit(1746987996.591:594): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.235655][ T7242] usb usb6: usbfs: process 7242 (syz.0.346) did not claim interface 0 before use [ 67.245476][ T40] audit: type=1400 audit(1746987996.641:595): avc: denied { write } for pid=7243 comm="syz.4.348" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.257229][ T7242] mkiss: ax0: crc mode is auto. [ 67.260746][ T40] audit: type=1400 audit(1746987996.651:596): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.278185][ T40] audit: type=1400 audit(1746987996.671:597): avc: denied { create } for pid=7245 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 67.283007][ T7246] syz_tun: left allmulticast mode [ 67.286635][ T7246] syz_tun: left promiscuous mode [ 67.288327][ T7246] bridge0: port 3(syz_tun) entered disabled state [ 67.301973][ T7246] bridge_slave_0: left allmulticast mode [ 67.305522][ T7246] bridge_slave_0: left promiscuous mode [ 67.308090][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.315329][ T7246] bridge_slave_1: left allmulticast mode [ 67.317855][ T7246] bridge_slave_1: left promiscuous mode [ 67.320296][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.328537][ T7246] bond0: (slave bond_slave_0): Releasing backup interface [ 67.334817][ T7246] bond0: (slave bond_slave_1): Releasing backup interface [ 67.340596][ T7246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.345279][ T7246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.349909][ T7246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.353013][ T7246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.361790][ T7245] delete_channel: no stack [ 67.362743][ T58] lo speed is unknown, defaulting to 1000 [ 67.381051][ T7249] netlink: 96 bytes leftover after parsing attributes in process `syz.4.350'. [ 67.404349][ T7251] No source specified [ 67.436087][ T7254] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 67.469356][ T7259] xt_hashlimit: overflow, try lower: 0/0 [ 67.515195][ T7263] ufs: You didn't specify the type of your ufs filesystem [ 67.515195][ T7263] [ 67.515195][ T7263] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 67.515195][ T7263] [ 67.515195][ T7263] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 67.526114][ T7263] ufs: ufstype=old is supported read-only [ 67.529471][ T7263] ufs: ufs_fill_super(): bad magic number [ 67.549850][ T7265] syz.0.356: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 67.556881][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.0.356 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 67.556907][ T7265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.556918][ T7265] Call Trace: [ 67.556924][ T7265] [ 67.556932][ T7265] dump_stack_lvl+0x16c/0x1f0 [ 67.556978][ T7265] warn_alloc+0x248/0x3a0 [ 67.557009][ T7265] ? __pfx_warn_alloc+0x10/0x10 [ 67.557034][ T7265] ? __pfx_stack_trace_save+0x10/0x10 [ 67.557055][ T7265] ? stack_depot_save_flags+0x28/0xa50 [ 67.557088][ T7265] ? kasan_save_stack+0x42/0x60 [ 67.557115][ T7265] ? kasan_save_stack+0x33/0x60 [ 67.557140][ T7265] ? kasan_save_track+0x14/0x30 [ 67.557163][ T7265] ? __kasan_kmalloc+0xaa/0xb0 [ 67.557187][ T7265] ? xskq_create+0x52/0x1d0 [ 67.557206][ T7265] ? do_sock_setsockopt+0x221/0x470 [ 67.557225][ T7265] ? __sys_setsockopt+0x1a0/0x230 [ 67.557240][ T7265] ? __x64_sys_setsockopt+0xbd/0x160 [ 67.557261][ T7265] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 67.557295][ T7265] ? xskq_create+0xfb/0x1d0 [ 67.557320][ T7265] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 67.557350][ T7265] ? xskq_create+0xfb/0x1d0 [ 67.557370][ T7265] vmalloc_user_noprof+0x6b/0x90 [ 67.557393][ T7265] ? xskq_create+0xfb/0x1d0 [ 67.557412][ T7265] xskq_create+0xfb/0x1d0 [ 67.557435][ T7265] xsk_setsockopt+0x684/0x840 [ 67.557456][ T7265] ? __pfx_xsk_setsockopt+0x10/0x10 [ 67.557483][ T7265] ? selinux_socket_setsockopt+0x6a/0x80 [ 67.557506][ T7265] ? __pfx_xsk_setsockopt+0x10/0x10 [ 67.557525][ T7265] do_sock_setsockopt+0x221/0x470 [ 67.557546][ T7265] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 67.557582][ T7265] __sys_setsockopt+0x1a0/0x230 [ 67.557637][ T7265] __x64_sys_setsockopt+0xbd/0x160 [ 67.557655][ T7265] ? do_syscall_64+0x91/0x260 [ 67.557680][ T7265] ? lockdep_hardirqs_on+0x7c/0x110 [ 67.557705][ T7265] do_syscall_64+0xcd/0x260 [ 67.557731][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.557749][ T7265] RIP: 0033:0x7f3c9ef8e969 [ 67.557763][ T7265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.557780][ T7265] RSP: 002b:00007f3c9fd1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.557797][ T7265] RAX: ffffffffffffffda RBX: 00007f3c9f1b5fa0 RCX: 00007f3c9ef8e969 [ 67.557810][ T7265] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 67.557820][ T7265] RBP: 00007f3c9f010ab1 R08: 0000000000000004 R09: 0000000000000000 [ 67.557830][ T7265] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 67.557845][ T7265] R13: 0000000000000000 R14: 00007f3c9f1b5fa0 R15: 00007fff53dbfaf8 [ 67.557868][ T7265] [ 67.557875][ T7265] Mem-Info: [ 67.575119][ T7269] netlink: 'syz.1.357': attribute type 15 has an invalid length. [ 67.578281][ T7265] active_anon:13320 inactive_anon:0 isolated_anon:0 [ 67.578281][ T7265] active_file:11867 inactive_file:40584 isolated_file:0 [ 67.578281][ T7265] unevictable:1768 dirty:1744 writeback:0 [ 67.578281][ T7265] slab_reclaimable:11797 slab_unreclaimable:72987 [ 67.578281][ T7265] mapped:24643 shmem:6410 pagetables:1152 [ 67.578281][ T7265] sec_pagetables:304 bounce:0 [ 67.578281][ T7265] kernel_misc_reclaimable:0 [ 67.578281][ T7265] free:463270 free_pcp:5235 free_cma:0 [ 67.679103][ T7265] Node 0 active_anon:41732kB inactive_anon:0kB active_file:47432kB inactive_file:162132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98476kB dirty:6972kB writeback:0kB shmem:10256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12464kB pagetables:4284kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB [ 67.695619][ T7265] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 67.707201][ T7265] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.715855][ T7265] lowmem_reserve[]: 0 1238 1238 1238 1238 [ 67.717720][ T7265] Node 0 DMA32 free:262468kB boost:0kB min:27576kB low:34468kB high:41360kB reserved_highatomic:0KB active_anon:41732kB inactive_anon:0kB active_file:47432kB inactive_file:162132kB unevictable:3536kB writepending:6972kB present:2080628kB managed:1268560kB mlocked:0kB bounce:0kB free_pcp:16580kB local_pcp:4068kB free_cma:0kB [ 67.730065][ T7265] lowmem_reserve[]: 0 0 0 0 0 [ 67.732173][ T7265] Node 1 Normal free:1578392kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:12096kB local_pcp:124kB free_cma:0kB [ 67.742052][ T7265] lowmem_reserve[]: 0 0 0 0 0 [ 67.743656][ T7265] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 67.747667][ T7265] Node 0 DMA32: 17*4kB (ME) 476*8kB (UME) 524*16kB (UME) 287*32kB (UME) 140*64kB (UME) 18*128kB (UME) 34*256kB (UME) 24*512kB (UM) 9*1024kB (UME) 5*2048kB (M) 46*4096kB (UM) = 261572kB [ 67.753383][ T7265] Node 1 Normal: 2*4kB (UE) 18*8kB (UME) 34*16kB (UE) 144*32kB (UE) 50*64kB (UE) 21*128kB (UE) 2*256kB (UE) 4*512kB (UME) 2*1024kB (UE) 3*2048kB (UE) 380*4096kB (M) = 1578424kB [ 67.760605][ T7265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.764865][ T7265] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 67.768855][ T7265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.772922][ T7265] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 67.776955][ T7265] 55895 total pagecache pages [ 67.779013][ T7265] 0 pages in swap cache [ 67.780824][ T7265] Free swap = 124996kB [ 67.783041][ T7265] Total swap = 124996kB [ 67.784938][ T7265] 1048443 pages RAM [ 67.786623][ T7265] 0 pages HighMem/MovableOnly [ 67.788674][ T7265] 281972 pages reserved [ 67.790499][ T7265] 0 pages cma reserved [ 67.830090][ T7283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.360'. [ 67.833318][ T7283] netem: unknown loss type 13 [ 67.838196][ T7283] netem: change failed [ 67.843644][ T7284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.360'. [ 67.846911][ T7284] netem: unknown loss type 13 [ 67.848700][ T7284] netem: change failed [ 67.886936][ T7287] syz.0.361 (7287): /proc/7285/oom_adj is deprecated, please use /proc/7285/oom_score_adj instead. [ 68.089149][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.142464][ T7319] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 68.146240][ T7319] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 68.451833][ T7340] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 7340 comm: syz.3.376) [ 68.519786][ T7350] program syz.4.380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.527569][ T7350] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 68.687512][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.384'. [ 68.695135][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.384'. [ 68.763826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.768439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.774704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.793813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.054728][ T7380] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 69.059258][ T7380] veth0_vlan: left promiscuous mode [ 69.062586][ T7380] veth0_vlan: entered promiscuous mode [ 69.067285][ T7380] team0: Device veth0_vlan failed to register rx_handler [ 69.462050][ T7401] netlink: 'syz.4.395': attribute type 10 has an invalid length. [ 69.478757][ T7401] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 69.878918][ T7414] overlayfs: overlapping lowerdir path [ 70.011071][ T7420] bond0: entered allmulticast mode [ 70.013112][ T7420] bond_slave_0: entered allmulticast mode [ 70.015443][ T7420] bond_slave_1: entered allmulticast mode [ 70.169621][ T7427] overlayfs: failed to resolve './file0': -2 [ 70.997220][ T7468] binder: 7467:7468 ioctl c0306201 200000000640 returned -22 [ 71.098807][ T5972] IPVS: starting estimator thread 0... [ 71.103699][ T7477] binder: 7475:7477 unknown command 0 [ 71.105592][ T7477] binder: 7475:7477 ioctl c0306201 200000000100 returned -22 [ 71.120229][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.123077][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.204620][ T7478] IPVS: using max 32 ests per chain, 76800 per kthread [ 71.286743][ T7488] overlayfs: failed to resolve './file0': -2 [ 71.644994][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 71.714848][ T7512] openvswitch: netlink: IPv6 tunnel dst address is zero [ 71.742308][ T7518] CUSE: DEVNAME unspecified [ 71.825150][ T7521] netlink: 200 bytes leftover after parsing attributes in process `syz.1.427'. [ 71.861675][ T40] kauditd_printk_skb: 1603 callbacks suppressed [ 71.861684][ T40] audit: type=1400 audit(1746988001.251:2201): avc: denied { ioctl } for pid=7522 comm="syz.4.429" path="socket:[15710]" dev="sockfs" ino=15710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.875748][ T40] audit: type=1400 audit(1746988001.261:2202): avc: denied { search } for pid=7501 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.891310][ T40] audit: type=1400 audit(1746988001.261:2203): avc: denied { search } for pid=7501 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.902565][ T40] audit: type=1400 audit(1746988001.261:2204): avc: denied { search } for pid=7501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.911490][ T40] audit: type=1400 audit(1746988001.261:2205): avc: denied { search } for pid=7501 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.920500][ T40] audit: type=1400 audit(1746988001.261:2206): avc: denied { search } for pid=7501 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.929607][ T40] audit: type=1400 audit(1746988001.261:2207): avc: denied { search } for pid=7501 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.938625][ T40] audit: type=1400 audit(1746988001.261:2208): avc: denied { search } for pid=7501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.947972][ T40] audit: type=1400 audit(1746988001.261:2209): avc: denied { read } for pid=7501 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.957057][ T40] audit: type=1400 audit(1746988001.261:2210): avc: denied { read open } for pid=7501 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.042876][ T7535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7535 comm=syz.1.431 [ 72.062130][ T7536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.080904][ T7537] ufs: Invalid option: "å Ÿ1Œ¡™;Ñ`â3ßJbœo0àeÍ[‘Í [ 72.080904][ T7537] á“—75³m[cÝ" or missing value [ 72.084548][ T7537] ufs: wrong mount options [ 72.297747][ T7547] libceph: resolve '4' (ret=-3): failed [ 72.302530][ T7548] netlink: 64 bytes leftover after parsing attributes in process `syz.1.436'. [ 72.306917][ T7548] netlink: 64 bytes leftover after parsing attributes in process `syz.1.436'. [ 72.314463][ T7547] netlink: 64 bytes leftover after parsing attributes in process `syz.1.436'. [ 72.386402][ T7548] netlink: 1904 bytes leftover after parsing attributes in process `syz.1.436'. [ 72.389473][ T7548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.436'. [ 72.402852][ T7555] tmpfs: Unknown parameter 'inode2' [ 73.084224][ T7586] netlink: 'syz.3.446': attribute type 16 has an invalid length. [ 73.097803][ T7586] netlink: 48 bytes leftover after parsing attributes in process `syz.3.446'. [ 73.102766][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.350915][ T7595] Failed to get privilege flags for destination (handle=0x2:0x0) [ 73.540726][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 73.689289][ T7607] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.692134][ T7607] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.695006][ T7607] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.697706][ T7607] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.043983][ T7619] Cannot find add_set index 0 as target [ 74.067331][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 74.207783][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.211305][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.243789][ T5933] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 75.410433][ T5933] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.414498][ T5933] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.422253][ T5933] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 75.431100][ T5933] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.440959][ T5933] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.447491][ T5933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.483476][ T5933] usb 9-1: config 0 descriptor?? [ 75.915842][ T5933] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 75.944158][ T5933] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 76.235763][ T5943] Bluetooth: hci0: command 0x1407 tx timeout [ 76.238279][ T5944] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 76.293609][ T1021] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 76.451281][ T1021] usb 8-1: config 1 interface 0 has no altsetting 0 [ 76.468109][ T1021] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.472698][ T1021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.478376][ T1021] usb 8-1: Product: syz [ 76.480049][ T1021] usb 8-1: Manufacturer: syz [ 76.481867][ T1021] usb 8-1: SerialNumber: syz [ 76.584087][ T7704] binder: 7699:7704 ioctl 8922 200000000100 returned -22 [ 76.597818][ T7701] overlayfs: missing 'lowerdir' [ 76.754039][ T58] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.847995][ T5933] usb 9-1: USB disconnect, device number 2 [ 76.893639][ T58] usb 5-1: device descriptor read/64, error -71 [ 76.931161][ T40] kauditd_printk_skb: 19676 callbacks suppressed [ 76.931175][ T40] audit: type=1400 audit(1746988006.321:21740): avc: denied { ioctl } for pid=7677 comm="syz.3.470" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.943616][ T40] audit: type=1400 audit(1746988006.321:21741): avc: denied { ioctl } for pid=7677 comm="syz.3.470" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.955855][ T40] audit: type=1400 audit(1746988006.351:21742): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.968922][ T40] audit: type=1400 audit(1746988006.351:21743): avc: denied { read write open } for pid=5934 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.978808][ T40] audit: type=1400 audit(1746988006.351:21744): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.001095][ T40] audit: type=1400 audit(1746988006.391:21745): avc: denied { allowed } for pid=7706 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.008754][ T40] audit: type=1400 audit(1746988006.391:21746): avc: denied { read write } for pid=7706 comm="syz.1.477" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.020498][ T40] audit: type=1400 audit(1746988006.401:21747): avc: denied { read write open } for pid=7706 comm="syz.1.477" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.030117][ T40] audit: type=1400 audit(1746988006.401:21748): avc: denied { ioctl } for pid=7706 comm="syz.1.477" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.039675][ T40] audit: type=1400 audit(1746988006.401:21749): avc: denied { ioctl } for pid=7706 comm="syz.1.477" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.139985][ T1021] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 77.153644][ T58] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 77.243636][ T6706] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 77.283648][ T58] usb 5-1: device descriptor read/64, error -71 [ 77.395027][ T58] usb usb5-port1: attempt power cycle [ 77.398826][ T6706] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 77.401481][ T6706] usb 6-1: config 0 has no interface number 0 [ 77.403444][ T6706] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 77.409067][ T6706] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 77.412236][ T6706] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 77.415251][ T6706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.421212][ T6706] usb 6-1: config 0 descriptor?? [ 77.440982][ T6706] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.120/input/input7 [ 77.505069][ T7682] __nla_validate_parse: 1 callbacks suppressed [ 77.505079][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.470'. [ 77.532570][ T1021] usb 8-1: USB disconnect, device number 7 [ 77.540203][ T1021] usblp0: removed [ 77.602315][ T7709] tipc: Started in network mode [ 77.613678][ T7709] tipc: Node identity 62028a87fab, cluster identity 4711 [ 77.616668][ T7709] tipc: Enabled bearer , priority 0 [ 77.638708][ T6706] usb 6-1: USB disconnect, device number 4 [ 77.645772][ T7708] tipc: Resetting bearer [ 77.754047][ T58] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 77.774795][ T58] usb 5-1: device descriptor read/8, error -71 [ 78.014021][ T58] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 78.037813][ T58] usb 5-1: device descriptor read/8, error -71 [ 78.154507][ T58] usb usb5-port1: unable to enumerate USB device [ 78.654791][ T34] tipc: Node number set to 2561837703 [ 78.842956][ T7708] tipc: Disabling bearer [ 79.033607][ T5933] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 79.204543][ T5933] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.208585][ T5933] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.212578][ T5933] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.217714][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.406146][ T7762] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 79.443045][ T5933] usb 8-1: usb_control_msg returned -32 [ 79.445532][ T5933] usbtmc 8-1:16.0: can't read capabilities [ 79.808707][ T5972] usb 8-1: USB disconnect, device number 8 [ 79.976725][ T7767] lo speed is unknown, defaulting to 1000 [ 80.364085][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 80.404492][ T7798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.407155][ T7798] IPv6: NLM_F_CREATE should be set when creating new route [ 80.409724][ T7802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.552601][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.558304][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.563196][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 80.568167][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.578577][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.582381][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.596450][ T24] usb 9-1: config 0 descriptor?? [ 80.656071][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 81.013681][ T34] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 81.015154][ T24] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 81.038798][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 81.053637][ T5972] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 81.182735][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.187129][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.191147][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.207028][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.233129][ T5972] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 81.250177][ T5972] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.252983][ T5972] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.265465][ T5972] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.280406][ T5972] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.284011][ T5972] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.287373][ T5972] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.293685][ T5972] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.296902][ T5972] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.300506][ T5972] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.325065][ T5972] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.327854][ T5972] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.331142][ T5972] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.347415][ T5972] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.350218][ T5972] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.360008][ T10] cfg80211: failed to load regulatory.db [ 81.364738][ T5972] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.374864][ T5972] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.377621][ T5972] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.380907][ T5972] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.396769][ T5972] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.399546][ T5972] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.403159][ T5972] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.422964][ T5972] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.427224][ T5972] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.430556][ T5972] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.434889][ T34] usb 6-1: usb_control_msg returned -32 [ 81.436735][ T34] usbtmc 6-1:16.0: can't read capabilities [ 81.450222][ T5972] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 81.453030][ T5972] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 81.457293][ T5972] usb 8-1: Product: syz [ 81.458631][ T5972] usb 8-1: Manufacturer: syz [ 81.460380][ T5972] usb 8-1: SerialNumber: syz [ 81.475138][ T5972] usb 8-1: config 0 descriptor?? [ 81.494288][ T7834] mkiss: ax0: crc mode is auto. [ 81.513255][ T5972] yurex 8-1:0.0: USB YUREX device now attached to Yurex #2 [ 81.777688][ T24] usb 9-1: USB disconnect, device number 3 [ 81.820579][ T34] usb 8-1: USB disconnect, device number 9 [ 81.825743][ T34] yurex 8-1:0.0: USB YUREX #2 now disconnected [ 81.956269][ T40] kauditd_printk_skb: 975 callbacks suppressed [ 81.956280][ T40] audit: type=1400 audit(1746988011.351:22725): avc: denied { create } for pid=7848 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.967730][ T40] audit: type=1400 audit(1746988011.351:22726): avc: denied { write } for pid=7848 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.971355][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 81.978249][ T40] audit: type=1400 audit(1746988011.351:22727): avc: denied { create } for pid=7848 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.979368][ T7851] netlink: 17 bytes leftover after parsing attributes in process `syz.0.519'. [ 81.986991][ T40] audit: type=1400 audit(1746988011.351:22728): avc: denied { create } for pid=7848 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.995568][ T40] audit: type=1400 audit(1746988011.351:22729): avc: denied { write } for pid=7848 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.002026][ T40] audit: type=1400 audit(1746988011.351:22730): avc: denied { read } for pid=7848 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.008571][ T40] audit: type=1400 audit(1746988011.361:22731): avc: denied { read } for pid=7848 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.014845][ T40] audit: type=1400 audit(1746988011.361:22732): avc: denied { write } for pid=7848 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.021194][ T40] audit: type=1400 audit(1746988011.361:22733): avc: denied { create } for pid=7848 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.028828][ T40] audit: type=1400 audit(1746988011.361:22734): avc: denied { ioctl } for pid=7848 comm="syz.0.519" path="socket:[19271]" dev="sockfs" ino=19271 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.075079][ T7855] tmpfs: Bad value for 'mpol' [ 82.189856][ T7862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.522'. [ 82.204443][ T7860] delete_channel: no stack [ 82.499379][ T7868] tipc: Started in network mode [ 82.501001][ T7868] tipc: Node identity , cluster identity 4711 [ 82.502915][ T7868] tipc: Failed to obtain node identity [ 82.504798][ T7868] tipc: Enabling of bearer rejected, failed to enable media [ 82.639508][ T7880] 9pnet_virtio: no channels available for device syz [ 82.899381][ T7891] overlay: ./file0 is not a directory [ 82.950618][ T7891] relay: one or more items not logged [item size (56) > sub-buffer size (13)] [ 83.062137][ T7893] nilfs2: Unknown parameter 'barrierÿÿÿÿÿÿbond_slave_1' [ 83.446352][ T7904] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 83.581701][ T7910] binder: Unknown parameter 'hash' [ 83.607125][ T7914] overlayfs: missing 'lowerdir' [ 83.697835][ T7916] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 83.709027][ T7916] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 83.731191][ T7916] netlink: 'syz.4.543': attribute type 16 has an invalid length. [ 83.734908][ T7916] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.543'. [ 83.779877][ T24] usb 6-1: USB disconnect, device number 5 [ 83.945777][ T7921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.546'. [ 84.105986][ T7931] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1538 sclass=netlink_xfrm_socket pid=7931 comm=syz.4.549 [ 84.237875][ T7939] syz.4.551: attempt to access beyond end of device [ 84.237875][ T7939] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 84.242590][ T7939] (syz.4.551,7939,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 84.245562][ T7939] (syz.4.551,7939,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 84.248714][ T7939] (syz.4.551,7939,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 84.252244][ T7939] (syz.4.551,7939,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 84.345434][ T7941] overlayfs: missing 'lowerdir' [ 84.763057][ T7950] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.773571][ T7950] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 84.791087][ T7950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.792991][ T7950] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 84.813195][ T7950] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.823591][ T7950] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 84.943144][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 84.951557][ T7966] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 85.026711][ T7963] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.100675][ T7967] evm: overlay not supported [ 85.120218][ T7950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.122572][ T7950] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 85.465960][ T7983] overlayfs: missing 'lowerdir' [ 85.603630][ T34] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 85.733817][ T34] usb 6-1: device descriptor read/64, error -71 [ 85.973943][ T34] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 85.989809][ T8001] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 86.113554][ T34] usb 6-1: device descriptor read/64, error -71 [ 86.224422][ T34] usb usb6-port1: attempt power cycle [ 86.296027][ T8010] lo speed is unknown, defaulting to 1000 [ 86.563592][ T34] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 86.587080][ T34] usb 6-1: device descriptor read/8, error -71 [ 86.823602][ T34] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 86.845305][ T34] usb 6-1: device descriptor read/8, error -71 [ 86.953668][ T34] usb usb6-port1: unable to enumerate USB device [ 86.964282][ T40] kauditd_printk_skb: 1569 callbacks suppressed [ 86.964297][ T40] audit: type=1400 audit(1746988016.361:24304): avc: denied { setopt } for pid=8033 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 86.989735][ T40] audit: type=1400 audit(1746988016.361:24305): avc: denied { setopt } for pid=8033 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.023611][ T40] audit: type=1400 audit(1746988016.361:24306): avc: denied { setopt } for pid=8033 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.030811][ T40] audit: type=1400 audit(1746988016.361:24307): avc: denied { setopt } for pid=8033 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.063672][ T40] audit: type=1400 audit(1746988016.361:24308): avc: denied { setopt } for pid=8033 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.071500][ T40] audit: type=1400 audit(1746988016.361:24309): avc: denied { setopt } for pid=8033 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.099348][ T40] audit: type=1400 audit(1746988016.361:24310): avc: denied { setopt } for pid=8033 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.109929][ T8044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.111989][ T8044] audit: audit_lost=50 audit_rate_limit=0 audit_backlog_limit=64 [ 87.119687][ T8044] audit: backlog limit exceeded [ 87.487208][ T8057] binder: BINDER_SET_CONTEXT_MGR already set [ 87.489110][ T8057] binder: 8056:8057 ioctl 4018620d 2000000000c0 returned -16 [ 87.521770][ T8058] binder: 8056:8058 ioctl c0306201 2000000003c0 returned -14 [ 87.525062][ T8057] binder: 8056:8057 ioctl c0306201 2000000003c0 returned -14 [ 87.550197][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.581'. [ 87.973556][ T58] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 88.141259][ T58] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 88.145239][ T58] usb 8-1: can't read configurations, error -22 [ 88.283573][ T58] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 88.474417][ T58] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 88.477069][ T58] usb 8-1: can't read configurations, error -22 [ 88.490454][ T58] usb usb8-port1: attempt power cycle [ 88.557210][ T8081] syz_tun: entered allmulticast mode [ 88.853575][ T58] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 88.895643][ T58] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 88.898288][ T58] usb 8-1: can't read configurations, error -22 [ 88.929599][ T8090] FAT-fs (nullb0): bogus number of reserved sectors [ 88.935139][ T8090] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 88.995087][ T8088] netlink: 36 bytes leftover after parsing attributes in process `syz.0.589'. [ 89.043649][ T58] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 89.093087][ T58] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 89.096554][ T58] usb 8-1: can't read configurations, error -22 [ 89.103658][ T58] usb usb8-port1: unable to enumerate USB device [ 89.288166][ T8097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=54 sclass=netlink_tcpdiag_socket pid=8097 comm=syz.0.592 [ 89.295378][ T8097] batadv_slave_1: entered promiscuous mode [ 89.300107][ T8096] batadv_slave_1: left promiscuous mode [ 89.333801][ T1021] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 89.377879][ T8081] syz_tun: left allmulticast mode [ 89.505898][ T1021] usb 9-1: Using ep0 maxpacket: 8 [ 89.521500][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 89.525717][ T1021] usb 9-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 89.528997][ T1021] usb 9-1: config 135 has 0 interfaces, different from the descriptor's value: 1 [ 89.536944][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.594'. [ 89.556327][ T1021] usb 9-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 89.559305][ T1021] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.561951][ T1021] usb 9-1: Product: syz [ 89.564465][ T1021] usb 9-1: Manufacturer: syz [ 89.566330][ T1021] usb 9-1: SerialNumber: syz [ 89.926814][ T8111] kvm: emulating exchange as write [ 90.908517][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.602'. [ 90.921037][ T8134] binder: BINDER_SET_CONTEXT_MGR already set [ 90.925141][ T8134] binder: 8133:8134 ioctl 4018620d 2000000000c0 returned -16 [ 91.010314][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 91.013084][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 91.049864][ T8142] netlink: 72 bytes leftover after parsing attributes in process `syz.0.601'. [ 91.193577][ T65] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 91.348186][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.351529][ T65] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.354488][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.360877][ T65] usb 6-1: config 0 descriptor?? [ 91.573222][ T65] usbhid 6-1:0.0: can't add hid device: -71 [ 91.575795][ T65] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 91.580603][ T65] usb 6-1: USB disconnect, device number 10 [ 92.013667][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 92.018903][ T40] kauditd_printk_skb: 1913 callbacks suppressed [ 92.018913][ T40] audit: type=1400 audit(1746988021.411:26218): avc: denied { ioctl } for pid=8139 comm="syz.1.603" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.031870][ T40] audit: type=1400 audit(1746988021.411:26219): avc: denied { ioctl } for pid=8139 comm="syz.1.603" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.041597][ T40] audit: type=1400 audit(1746988021.411:26220): avc: denied { ioctl } for pid=8139 comm="syz.1.603" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.052538][ T40] audit: type=1400 audit(1746988021.431:26221): avc: denied { read } for pid=8150 comm="syz.3.606" dev="nsfs" ino=4026533310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.054944][ T8151] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 92.061195][ T40] audit: type=1400 audit(1746988021.431:26222): avc: denied { read open } for pid=8150 comm="syz.3.606" path="net:[4026533310]" dev="nsfs" ino=4026533310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.061840][ T8151] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 92.063385][ T8151] vhci_hcd vhci_hcd.0: Device attached [ 92.072062][ T40] audit: type=1400 audit(1746988021.431:26223): avc: denied { create } for pid=8150 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.076451][ T8152] vhci_hcd: connection closed [ 92.090252][ T40] audit: type=1400 audit(1746988021.441:26224): avc: denied { bind } for pid=8150 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.100087][ T40] audit: type=1400 audit(1746988021.481:26225): avc: denied { ioctl } for pid=8139 comm="syz.1.603" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.100726][ T64] vhci_hcd: stop threads [ 92.112032][ T64] vhci_hcd: release socket [ 92.115390][ T64] vhci_hcd: disconnect device [ 92.165293][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 92.170389][ T40] audit: type=1400 audit(1746988021.561:26226): avc: denied { ioctl } for pid=8139 comm="syz.1.603" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.177827][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.181873][ T40] audit: type=1400 audit(1746988021.561:26227): avc: denied { ioctl } for pid=8139 comm="syz.1.603" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.186895][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 92.200942][ T5933] usb 9-1: USB disconnect, device number 4 [ 92.205964][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.217736][ T10] usb 6-1: config 0 descriptor?? [ 92.245777][ T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 92.254510][ T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 92.313269][ T8156] overlayfs: missing 'workdir' [ 92.522648][ T1021] usb 6-1: USB disconnect, device number 11 [ 92.527141][ T1021] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 92.609977][ T8161] support for the xor transformation has been removed. [ 92.612780][ T8160] support for the xor transformation has been removed. [ 92.870727][ T8175] gre0: entered promiscuous mode [ 92.876194][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 92.992602][ T8183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.007914][ T8185] overlayfs: missing 'workdir' [ 93.337706][ T8199] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 93.339802][ T8199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.343268][ T8199] vhci_hcd vhci_hcd.0: Device attached [ 93.347121][ T8201] vhci_hcd: connection closed [ 93.348373][ T1138] vhci_hcd: stop threads [ 93.351292][ T1138] vhci_hcd: release socket [ 93.352751][ T1138] vhci_hcd: disconnect device [ 93.645620][ T8213] netlink: 32 bytes leftover after parsing attributes in process `syz.4.625'. [ 93.648539][ T8213] netlink: 32 bytes leftover after parsing attributes in process `syz.4.625'. [ 94.436135][ T8251] netlink: 'syz.3.634': attribute type 16 has an invalid length. [ 94.439174][ T8251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.634'. [ 94.523151][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 94.527117][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 95.019049][ T8267] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.251256][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 95.276690][ T8276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.291404][ T8276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.295026][ T8276] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 95.300226][ T8276] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 95.633208][ T8292] ref_ctr_offset mismatch. inode: 0x300 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 96.629500][ T8327] tmpfs: Cannot change global quota limit on remount [ 96.635459][ T8327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=8327 comm=syz.1.657 [ 96.738338][ T8330] Restarting kernel threads ... done. [ 96.828511][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'. [ 97.024300][ T40] kauditd_printk_skb: 788 callbacks suppressed [ 97.024310][ T40] audit: type=1400 audit(1746988026.421:27016): avc: denied { create } for pid=8342 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.039729][ T40] audit: type=1400 audit(1746988026.431:27017): avc: denied { create } for pid=8342 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.046740][ T40] audit: type=1400 audit(1746988026.431:27018): avc: denied { write } for pid=8342 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.059287][ T40] audit: type=1400 audit(1746988026.431:27019): avc: denied { write } for pid=8342 comm="syz.3.664" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.069495][ T40] audit: type=1400 audit(1746988026.431:27020): avc: denied { read } for pid=8342 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.081034][ T40] audit: type=1400 audit(1746988026.431:27021): avc: denied { write open } for pid=8342 comm="syz.3.664" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.091290][ T40] audit: type=1400 audit(1746988026.431:27022): avc: denied { read } for pid=8342 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.100996][ T40] audit: type=1400 audit(1746988026.441:27023): avc: denied { module_request } for pid=8338 comm="syz.1.662" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 97.117428][ T40] audit: type=1400 audit(1746988026.511:27024): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.125166][ T40] audit: type=1400 audit(1746988026.511:27025): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.434211][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 97.588320][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.591425][ T34] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.594311][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.596879][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.609501][ T8347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.616384][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.873642][ T5972] usb 6-1: USB disconnect, device number 12 [ 98.151888][ T5944] block nbd1: Receive control failed (result -107) [ 98.274317][ T8347] nbd1: detected capacity change from 0 to 12 [ 98.313928][ T8354] nbd1: detected capacity change from 12 to 6 [ 98.314430][ T7661] block nbd1: Dead connection, failed to find a fallback [ 98.318935][ T7661] block nbd1: shutting down sockets [ 98.320742][ T7661] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 98.325275][ T8374] overlayfs: missing 'lowerdir' [ 98.326683][ T7661] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.330297][ T7661] buffer_io_error: 40 callbacks suppressed [ 98.330305][ T7661] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.335250][ T8373] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.335339][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 98.342845][ T7661] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.347009][ T7661] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.350476][ T7661] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.353357][ T7661] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.360113][ T7661] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.369132][ T7661] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.373038][ T7661] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.378753][ T7661] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.475137][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 98.486852][ T7664] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.489781][ T7664] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.492394][ T7664] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.499792][ T7664] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.502377][ T7664] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.509558][ T7664] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.512099][ T7664] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.523665][ T7664] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.526866][ T7664] Buffer I/O error on dev nbd1, logical block 0, async page read [ 98.530030][ T7664] ldm_validate_partition_table(): Disk read failed. [ 98.532316][ T7664] Dev nbd1: unable to read RDB block 0 [ 98.537792][ T7664] nbd1: unable to read partition table [ 98.540074][ T7664] nbd1: partition table beyond EOD, truncated [ 98.552586][ T7664] ldm_validate_partition_table(): Disk read failed. [ 98.556977][ T7664] Dev nbd1: unable to read RDB block 0 [ 98.560155][ T7664] nbd1: unable to read partition table [ 98.562442][ T7664] nbd1: partition table beyond EOD, truncated [ 98.591173][ T8381] ISOFS: Unable to identify CD-ROM format. [ 98.619084][ T7664] ldm_validate_partition_table(): Disk read failed. [ 98.621426][ T7664] Dev nbd1: unable to read RDB block 0 [ 98.623300][ T7664] nbd1: unable to read partition table [ 98.628221][ T7664] nbd1: partition table beyond EOD, truncated [ 98.649980][ T7664] ldm_validate_partition_table(): Disk read failed. [ 98.653147][ T7664] Dev nbd1: unable to read RDB block 0 [ 98.656647][ T7664] nbd1: unable to read partition table [ 98.658488][ T7664] nbd1: partition table beyond EOD, truncated [ 98.903359][ T8399] (syz.4.679,8399,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 98.907395][ T8399] (syz.4.679,8399,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 98.972949][ T8401] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 98.981905][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 99.007941][ T8403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12849 sclass=netlink_route_socket pid=8403 comm=syz.4.682 [ 99.095964][ T8408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8408 comm=syz.4.684 [ 99.194691][ T8411] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 99.226323][ T8413] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 99.441276][ T8419] loop6: detected capacity change from 0 to 63 [ 99.843650][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 99.849942][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 100.336497][ T8448] Bluetooth: hci0: unsupported parameter 8220 [ 100.339290][ T8448] Bluetooth: hci0: invalid len left 4, exp >= 117 [ 100.531854][ T8462] xt_hashlimit: size too large, truncated to 1048576 [ 100.600532][ T8464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=8464 comm=syz.1.701 [ 101.194821][ T8481] nvme_fabrics: missing parameter 'transport=%s' [ 101.197780][ T8481] nvme_fabrics: missing parameter 'nqn=%s' [ 101.369256][ T8492] netlink: 72 bytes leftover after parsing attributes in process `syz.4.709'. [ 101.743818][ T8503] 9pnet_fd: Insufficient options for proto=fd [ 101.817018][ T8508] netlink: 'syz.1.715': attribute type 8 has an invalid length. [ 101.820482][ T8507] netlink: 'syz.1.715': attribute type 8 has an invalid length. [ 101.822937][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.715'. [ 101.833750][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.715'. [ 102.073537][ T40] kauditd_printk_skb: 807 callbacks suppressed [ 102.073547][ T40] audit: type=1400 audit(1746988031.461:27833): avc: denied { read write } for pid=6365 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.113779][ T40] audit: type=1400 audit(1746988031.461:27834): avc: denied { read write open } for pid=6365 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.121895][ T40] audit: type=1400 audit(1746988031.461:27835): avc: denied { ioctl } for pid=6365 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.151738][ T40] audit: type=1400 audit(1746988031.491:27836): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.178679][ T40] audit: type=1400 audit(1746988031.491:27837): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.188565][ T40] audit: type=1400 audit(1746988031.491:27838): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.201653][ T40] audit: type=1400 audit(1746988031.521:27839): avc: denied { read } for pid=8525 comm="syz.1.718" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.210933][ T40] audit: type=1400 audit(1746988031.531:27840): avc: denied { read open } for pid=8525 comm="syz.1.718" path="/dev/v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.223127][ T40] audit: type=1400 audit(1746988031.541:27841): avc: denied { create } for pid=8525 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.231183][ T40] audit: type=1400 audit(1746988031.541:27842): avc: denied { bind } for pid=8525 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.524370][ T8551] cgroup: Need name or subsystem set [ 102.626783][ T8551] ptrace attach of "/syz-executor exec"[6365] was attempted by "/syz-executor exec"[8551] [ 102.638527][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 103.453730][ T58] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 103.593682][ T58] usb 9-1: device descriptor read/64, error -71 [ 103.807150][ T8583] kAFS: unable to lookup cell '/,c¾ûL' [ 103.834334][ T58] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 103.975630][ T58] usb 9-1: device descriptor read/64, error -71 [ 104.084256][ T58] usb usb9-port1: attempt power cycle [ 104.215688][ T8601] xt_hashlimit: size too large, truncated to 1048576 [ 104.223403][ T8601] syz.3.743: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 104.231986][ T8601] CPU: 0 UID: 0 PID: 8601 Comm: syz.3.743 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 104.232009][ T8601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.232019][ T8601] Call Trace: [ 104.232025][ T8601] [ 104.232031][ T8601] dump_stack_lvl+0x16c/0x1f0 [ 104.232075][ T8601] warn_alloc+0x248/0x3a0 [ 104.232103][ T8601] ? __pfx_warn_alloc+0x10/0x10 [ 104.232137][ T8601] ? __get_vm_area_node+0x1dc/0x330 [ 104.232158][ T8601] ? __get_vm_area_node+0x208/0x330 [ 104.232184][ T8601] __vmalloc_node_range_noprof+0x1110/0x1540 [ 104.232216][ T8601] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 104.232245][ T8601] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.232278][ T8601] __kvmalloc_node_noprof+0x2ff/0x600 [ 104.232303][ T8601] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 104.232326][ T8601] ? net_generic+0xea/0x2a0 [ 104.232344][ T8601] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 104.232370][ T8601] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 104.232391][ T8601] hashlimit_mt_check_common+0x8bb/0x1460 [ 104.232420][ T8601] hashlimit_mt_check+0x71/0x90 [ 104.232440][ T8601] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 104.232461][ T8601] xt_check_match+0x283/0xa50 [ 104.232481][ T8601] ? yield_to+0x2c2/0x7f0 [ 104.232502][ T8601] ? __pfx_xt_check_match+0x10/0x10 [ 104.232525][ T8601] ? xt_find_target+0x1f2/0x290 [ 104.232547][ T8601] ? xt_find_match+0x1f6/0x290 [ 104.232573][ T8601] find_check_entry.constprop.0+0x34e/0xa20 [ 104.232602][ T8601] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 104.232631][ T8601] ? kasan_quarantine_put+0x10a/0x240 [ 104.232654][ T8601] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.232679][ T8601] ? kfree+0x2b6/0x4d0 [ 104.232699][ T8601] ? translate_table+0xc0e/0x17b0 [ 104.232728][ T8601] translate_table+0xd0b/0x17b0 [ 104.232758][ T8601] ? __pfx_translate_table+0x10/0x10 [ 104.232777][ T8601] ? xt_alloc_table_info+0x3e/0xa0 [ 104.232803][ T8601] do_ip6t_set_ctl+0x570/0xb00 [ 104.232823][ T8601] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 104.232846][ T8601] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 104.232868][ T8601] ? avc_has_perm+0x196/0x1c0 [ 104.232889][ T8601] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.232924][ T8601] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 104.232946][ T8601] nf_setsockopt+0x8a/0xf0 [ 104.232967][ T8601] ipv6_setsockopt+0x135/0x170 [ 104.232989][ T8601] rawv6_setsockopt+0xc2/0x510 [ 104.233008][ T8601] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 104.233026][ T8601] ? selinux_socket_setsockopt+0x6a/0x80 [ 104.233045][ T8601] ? sock_common_setsockopt+0x2e/0xf0 [ 104.233067][ T8601] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 104.233088][ T8601] do_sock_setsockopt+0x221/0x470 [ 104.233109][ T8601] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 104.233145][ T8601] __sys_setsockopt+0x1a0/0x230 [ 104.233165][ T8601] __x64_sys_setsockopt+0xbd/0x160 [ 104.233180][ T8601] ? do_syscall_64+0x91/0x260 [ 104.233201][ T8601] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.233222][ T8601] do_syscall_64+0xcd/0x260 [ 104.233245][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.233283][ T8601] RIP: 0033:0x7f6b0d58e969 [ 104.233297][ T8601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.233313][ T8601] RSP: 002b:00007f6b0e339038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.233329][ T8601] RAX: ffffffffffffffda RBX: 00007f6b0d7b5fa0 RCX: 00007f6b0d58e969 [ 104.233339][ T8601] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 104.233348][ T8601] RBP: 00007f6b0d610ab1 R08: 00000000000005a0 R09: 0000000000000000 [ 104.233358][ T8601] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000000 [ 104.233367][ T8601] R13: 0000000000000000 R14: 00007f6b0d7b5fa0 R15: 00007ffec8135bc8 [ 104.233391][ T8601] [ 104.233396][ T8601] Mem-Info: [ 104.373046][ T8601] active_anon:13891 inactive_anon:0 isolated_anon:0 [ 104.373046][ T8601] active_file:14185 inactive_file:40620 isolated_file:0 [ 104.373046][ T8601] unevictable:1771 dirty:61 writeback:0 [ 104.373046][ T8601] slab_reclaimable:11966 slab_unreclaimable:74213 [ 104.373046][ T8601] mapped:25392 shmem:3963 pagetables:1150 [ 104.373046][ T8601] sec_pagetables:305 bounce:0 [ 104.373046][ T8601] kernel_misc_reclaimable:0 [ 104.373046][ T8601] free:456969 free_pcp:2119 free_cma:0 [ 104.391964][ T8601] Node 0 active_anon:55564kB inactive_anon:0kB active_file:56704kB inactive_file:162256kB unevictable:3548kB isolated(anon):0kB isolated(file):0kB mapped:101512kB dirty:220kB writeback:0kB shmem:12316kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12432kB pagetables:4600kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 104.406098][ T8601] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:224kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:24kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 104.418313][ T8601] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.428860][ T8601] lowmem_reserve[]: 0 1238 1238 1238 1238 [ 104.431323][ T8601] Node 0 DMA32 free:226096kB boost:0kB min:27576kB low:34468kB high:41360kB reserved_highatomic:0KB active_anon:55564kB inactive_anon:0kB active_file:56704kB inactive_file:162256kB unevictable:3548kB writepending:220kB present:2080628kB managed:1268560kB mlocked:12kB bounce:0kB free_pcp:3516kB local_pcp:708kB free_cma:0kB [ 104.433671][ T58] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 104.443268][ T8601] lowmem_reserve[]: 0 0 0 0 0 [ 104.447756][ T8601] Node 1 Normal free:1586292kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:224kB unevictable:3536kB writepending:24kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:4968kB local_pcp:0kB free_cma:0kB [ 104.459341][ T8601] lowmem_reserve[]: 0 0 0 0 0 [ 104.461331][ T8601] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.466534][ T8601] Node 0 DMA32: 127*4kB (UME) 132*8kB (ME) 214*16kB (UME) 531*32kB (UM) 383*64kB (UM) 68*128kB (UME) 60*256kB (UME) 23*512kB (M) 16*1024kB (UME) 10*2048kB (UM) 26*4096kB (UM) = 225692kB [ 104.474133][ T8601] Node 1 Normal: 16*4kB (UME) 23*8kB (UME) 38*16kB (UME) 153*32kB (UME) 56*64kB (UME) 30*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 5*2048kB (UME) 380*4096kB (M) = 1586296kB [ 104.475738][ T58] usb 9-1: device descriptor read/8, error -71 [ 104.481737][ T8601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.487723][ T8601] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 104.491566][ T8601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.495584][ T8601] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.499438][ T8601] 58747 total pagecache pages [ 104.501438][ T8601] 0 pages in swap cache [ 104.503213][ T8601] Free swap = 124996kB [ 104.505089][ T8601] Total swap = 124996kB [ 104.506876][ T8601] 1048443 pages RAM [ 104.508500][ T8601] 0 pages HighMem/MovableOnly [ 104.510488][ T8601] 281972 pages reserved [ 104.512234][ T8601] 0 pages cma reserved [ 104.666813][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.744'. [ 104.670522][ T8606] netlink: 31 bytes leftover after parsing attributes in process `syz.3.744'. [ 104.676001][ T8606] netlink: 'syz.3.744': attribute type 3 has an invalid length. [ 104.679345][ T8606] netlink: 'syz.3.744': attribute type 2 has an invalid length. [ 104.682489][ T8606] netlink: 31 bytes leftover after parsing attributes in process `syz.3.744'. [ 104.734172][ T58] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 104.775399][ T58] usb 9-1: device descriptor read/8, error -71 [ 104.885997][ T58] usb usb9-port1: unable to enumerate USB device [ 105.063417][ T8614] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 106.233726][ T5944] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 106.234674][ T5943] Bluetooth: hci4: command 0xfc11 tx timeout [ 106.261634][ T8599] sp0: Synchronizing with TNC [ 106.623071][ T8636] could not allocate digest TFM handle blake2s-224-arm [ 107.044292][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.056176][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.060954][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.064564][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.065517][ T1141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.072175][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.083288][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.086802][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.089722][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.101997][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.108162][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.112355][ T40] kauditd_printk_skb: 517 callbacks suppressed [ 107.112364][ T40] audit: type=1400 audit(1746988036.501:28360): avc: denied { ioctl } for pid=8650 comm="syz-executor" path="socket:[23616]" dev="sockfs" ino=23616 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.131759][ T40] audit: type=1400 audit(1746988036.521:28361): avc: denied { read } for pid=8650 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.138996][ T40] audit: type=1400 audit(1746988036.521:28362): avc: denied { read open } for pid=8650 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.150044][ T40] audit: type=1400 audit(1746988036.531:28363): avc: denied { mounton } for pid=8650 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 107.172745][ T8650] lo speed is unknown, defaulting to 1000 [ 107.190493][ T40] audit: type=1400 audit(1746988036.581:28364): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.203304][ T40] audit: type=1400 audit(1746988036.581:28365): avc: denied { read write open } for pid=5934 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.216858][ T40] audit: type=1400 audit(1746988036.581:28366): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.219305][ T1141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.231964][ T40] audit: type=1400 audit(1746988036.621:28367): avc: denied { create } for pid=8657 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.234479][ T8659] No source specified [ 107.242311][ T8659] No source specified [ 107.246457][ T40] audit: type=1400 audit(1746988036.631:28368): avc: denied { mounton } for pid=8657 comm="syz.1.759" path="/165/bus" dev="tmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.258044][ T40] audit: type=1400 audit(1746988036.631:28369): avc: denied { mounton } for pid=8657 comm="syz.1.759" path="/165/bus" dev="tmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.272494][ T8659] No source specified [ 107.330371][ T1141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.396731][ T1141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.419476][ T8673] openvswitch: netlink: Key type 128 is out of range max 32 [ 107.423382][ T8672] Unsupported ieee802154 address type: 0 [ 107.638675][ T8681] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.652964][ T8681] ip6erspan0: entered promiscuous mode [ 107.655927][ T1141] bridge_slave_1: left allmulticast mode [ 107.657749][ T1141] bridge_slave_1: left promiscuous mode [ 107.659649][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.683928][ T1141] bridge_slave_0: left allmulticast mode [ 107.685751][ T1141] bridge_slave_0: left promiscuous mode [ 107.687756][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.911202][ T8695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.765'. [ 108.283917][ T1141] bond0 (unregistering): left allmulticast mode [ 108.286039][ T1141] bond_slave_0: left allmulticast mode [ 108.287991][ T1141] bond_slave_1: left allmulticast mode [ 108.291409][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.298215][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.303171][ T1141] bond0 (unregistering): Released all slaves [ 108.371685][ T1141] bond1 (unregistering): Released all slaves [ 108.386933][ T8702] netlink: 96 bytes leftover after parsing attributes in process `syz.1.765'. [ 108.390349][ T8704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.768'. [ 108.403896][ T8650] chnl_net:caif_netlink_parms(): no params data found [ 108.719847][ T8722] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 108.760747][ T8650] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.763080][ T8650] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.766979][ T8650] bridge_slave_0: entered allmulticast mode [ 108.771982][ T8650] bridge_slave_0: entered promiscuous mode [ 108.774994][ T8722] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 108.785840][ T8650] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.791920][ T8650] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.798237][ T8650] bridge_slave_1: entered allmulticast mode [ 108.800850][ T8650] bridge_slave_1: entered promiscuous mode [ 108.949945][ T8650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.967088][ T8650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.008575][ T1141] hsr_slave_0: left promiscuous mode [ 109.013637][ T1141] hsr_slave_1: left promiscuous mode [ 109.023741][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.026974][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.032984][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.036435][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.090903][ T1141] veth1_macvtap: left promiscuous mode [ 109.092698][ T1141] veth0_macvtap: left promiscuous mode [ 109.099613][ T1141] veth1_vlan: left promiscuous mode [ 109.101341][ T1141] veth0_vlan: left promiscuous mode [ 109.193598][ T5943] Bluetooth: hci0: command tx timeout [ 109.388033][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 109.927463][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 109.990499][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 110.518769][ T8752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.779'. [ 110.538395][ T8650] team0: Port device team_slave_0 added [ 110.564517][ T8650] team0: Port device team_slave_1 added [ 110.682700][ T8650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.685564][ T8650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.696420][ T8650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.702787][ T8650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.706007][ T8650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.716725][ T8650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.736777][ T8758] ================================================================== [ 110.739345][ T8758] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 [ 110.741859][ T8758] Read of size 8 at addr ffffffff9af98570 by task syz.4.782/8758 [ 110.745538][ T8758] [ 110.747071][ T8758] CPU: 2 UID: 0 PID: 8758 Comm: syz.4.782 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 110.747084][ T8758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.747090][ T8758] Call Trace: [ 110.747094][ T8758] [ 110.747098][ T8758] dump_stack_lvl+0x116/0x1f0 [ 110.747114][ T8758] print_report+0xc3/0x670 [ 110.747125][ T8758] ? __virt_addr_valid+0x5e/0x590 [ 110.747138][ T8758] ? __phys_addr+0xc6/0x150 [ 110.747151][ T8758] ? fib6_ifdown+0x7f5/0x8f0 [ 110.747161][ T8758] kasan_report+0xe0/0x110 [ 110.747170][ T8758] ? fib6_ifdown+0x7f5/0x8f0 [ 110.747181][ T8758] fib6_ifdown+0x7f5/0x8f0 [ 110.747191][ T8758] ? __pfx_fib6_ifdown+0x10/0x10 [ 110.747201][ T8758] fib6_clean_node+0x2a4/0x5b0 [ 110.747211][ T8758] ? __pfx_fib6_clean_node+0x10/0x10 [ 110.747223][ T8758] fib6_walk_continue+0x44f/0x8d0 [ 110.747239][ T8758] fib6_walk+0x182/0x370 [ 110.747254][ T8758] ? __pfx_fib6_ifdown+0x10/0x10 [ 110.747263][ T8758] fib6_clean_tree+0xd4/0x110 [ 110.747278][ T8758] ? __pfx_fib6_clean_tree+0x10/0x10 [ 110.747294][ T8758] ? __pfx_fib6_clean_node+0x10/0x10 [ 110.747303][ T8758] ? __pfx_fib6_ifdown+0x10/0x10 [ 110.747314][ T8758] ? __pfx_fib6_ifdown+0x10/0x10 [ 110.747324][ T8758] __fib6_clean_all+0x107/0x2d0 [ 110.747333][ T8758] rt6_disable_ip+0x2ec/0x990 [ 110.747347][ T8758] ? __mutex_trylock_common+0xe9/0x250 [ 110.747363][ T8758] ? __pfx___mutex_trylock_common+0x10/0x10 [ 110.747378][ T8758] ? __pfx_rt6_disable_ip+0x10/0x10 [ 110.747392][ T8758] ? rcu_is_watching+0x12/0xc0 [ 110.747404][ T8758] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 110.747416][ T8758] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 110.747431][ T8758] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 110.747442][ T8758] ? tls_dev_event+0xfd/0x10b0 [ 110.747459][ T8758] addrconf_notify+0x220/0x19e0 [ 110.747471][ T8758] ? ip6mr_device_event+0x1bc/0x230 [ 110.747485][ T8758] notifier_call_chain+0xb9/0x410 [ 110.747499][ T8758] ? __pfx_addrconf_notify+0x10/0x10 [ 110.747512][ T8758] call_netdevice_notifiers_info+0xbe/0x140 [ 110.747527][ T8758] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 110.747541][ T8758] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 110.747552][ T8758] ? do_raw_spin_unlock+0x172/0x230 [ 110.747563][ T8758] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 110.747576][ T8758] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 110.747589][ T8758] ? linkwatch_fire_event+0x20c/0x270 [ 110.747602][ T8758] ? netif_carrier_off+0xa3/0xc0 [ 110.747617][ T8758] ? __tun_detach+0x1177/0x1540 [ 110.747633][ T8758] unregister_netdevice_queue+0x305/0x3f0 [ 110.747645][ T8758] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 110.747656][ T8758] ? linkwatch_schedule_work+0x181/0x1c0 [ 110.747669][ T8758] ? linkwatch_fire_event+0x6f/0x270 [ 110.747683][ T8758] __tun_detach+0x1249/0x1540 [ 110.747698][ T8758] ? __pfx_tun_chr_close+0x10/0x10 [ 110.747711][ T8758] tun_chr_close+0xc2/0x230 [ 110.747724][ T8758] __fput+0x3ff/0xb70 [ 110.747736][ T8758] task_work_run+0x14d/0x240 [ 110.747747][ T8758] ? __pfx_task_work_run+0x10/0x10 [ 110.747756][ T8758] ? __pfx___do_sys_close_range+0x10/0x10 [ 110.747766][ T8758] ? rcu_is_watching+0x12/0xc0 [ 110.747777][ T8758] syscall_exit_to_user_mode+0x27b/0x2a0 [ 110.747791][ T8758] do_syscall_64+0xda/0x260 [ 110.747806][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.747816][ T8758] RIP: 0033:0x7f2cd898e969 [ 110.747824][ T8758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.747834][ T8758] RSP: 002b:00007fff4f965f58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 110.747844][ T8758] RAX: 0000000000000000 RBX: 000000000001afc9 RCX: 00007f2cd898e969 [ 110.747850][ T8758] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 110.747855][ T8758] RBP: 00007f2cd8bb7ba0 R08: 0000000000000001 R09: 0000000f4f96624f [ 110.747861][ T8758] R10: 00007f2cd8800000 R11: 0000000000000246 R12: 00007f2cd8bb5fac [ 110.747867][ T8758] R13: 00007f2cd8bb5fa0 R14: ffffffffffffffff R15: 00007fff4f966070 [ 110.747876][ T8758] [ 110.747879][ T8758] [ 110.902270][ T8758] The buggy address belongs to the variable: [ 110.904604][ T8758] __key.0+0x30/0x40 [ 110.906162][ T8758] [ 110.907145][ T8758] The buggy address belongs to the physical page: [ 110.909674][ T8758] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af98 [ 110.913038][ T8758] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 110.916076][ T8758] raw: 00fff00000002000 ffffea00006be608 ffffea00006be608 0000000000000000 [ 110.919396][ T8758] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 110.922714][ T8758] page dumped because: kasan: bad access detected [ 110.925194][ T8758] page_owner info is not present (never set?) [ 110.927609][ T8758] [ 110.928558][ T8758] Memory state around the buggy address: [ 110.930743][ T8758] ffffffff9af98400: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 110.933885][ T8758] ffffffff9af98480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 110.937010][ T8758] >ffffffff9af98500: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 110.940108][ T8758] ^ [ 110.943126][ T8758] ffffffff9af98580: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 110.946201][ T8758] ffffffff9af98600: 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 00 00 f9 f9 [ 110.949376][ T8758] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 110.952579][ T8758] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 110.955243][ T8758] CPU: 2 UID: 0 PID: 8758 Comm: syz.4.782 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 110.958886][ T8758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.962192][ T8758] Call Trace: [ 110.963254][ T8758] [ 110.964200][ T8758] dump_stack_lvl+0x3d/0x1f0 [ 110.965798][ T8758] panic+0x71c/0x800 [ 110.967125][ T8758] ? __pfx_panic+0x10/0x10 [ 110.968601][ T8758] ? mark_held_locks+0x49/0x80 [ 110.970206][ T8758] ? fib6_ifdown+0x7f5/0x8f0 [ 110.971722][ T8758] ? check_panic_on_warn+0x1f/0xb0 [ 110.973346][ T8758] ? fib6_ifdown+0x7f5/0x8f0 [ 110.974804][ T8758] check_panic_on_warn+0xab/0xb0 [ 110.976360][ T8758] end_report+0x107/0x170 [ 110.977753][ T8758] kasan_report+0xee/0x110 [ 110.979158][ T8758] ? fib6_ifdown+0x7f5/0x8f0 [ 110.980610][ T8758] fib6_ifdown+0x7f5/0x8f0 [ 110.982025][ T8758] ? __pfx_fib6_ifdown+0x10/0x10 [ 110.983575][ T8758] fib6_clean_node+0x2a4/0x5b0 [ 110.985078][ T8758] ? __pfx_fib6_clean_node+0x10/0x10 [ 110.986767][ T8758] fib6_walk_continue+0x44f/0x8d0 [ 110.988351][ T8758] fib6_walk+0x182/0x370 [ 110.989716][ T8758] ? __pfx_fib6_ifdown+0x10/0x10 [ 110.991273][ T8758] fib6_clean_tree+0xd4/0x110 [ 110.992755][ T8758] ? __pfx_fib6_clean_tree+0x10/0x10 [ 110.994430][ T8758] ? __pfx_fib6_clean_node+0x10/0x10 [ 110.996109][ T8758] ? __pfx_fib6_ifdown+0x10/0x10 [ 110.997739][ T8758] ? __pfx_fib6_ifdown+0x10/0x10 [ 110.999292][ T8758] __fib6_clean_all+0x107/0x2d0 [ 111.000825][ T8758] rt6_disable_ip+0x2ec/0x990 [ 111.002326][ T8758] ? __mutex_trylock_common+0xe9/0x250 [ 111.004037][ T8758] ? __pfx___mutex_trylock_common+0x10/0x10 [ 111.005898][ T8758] ? __pfx_rt6_disable_ip+0x10/0x10 [ 111.007556][ T8758] ? rcu_is_watching+0x12/0xc0 [ 111.009053][ T8758] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 111.010761][ T8758] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 111.012509][ T8758] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 111.014359][ T8758] ? tls_dev_event+0xfd/0x10b0 [ 111.015871][ T8758] addrconf_notify+0x220/0x19e0 [ 111.017472][ T8758] ? ip6mr_device_event+0x1bc/0x230 [ 111.019185][ T8758] notifier_call_chain+0xb9/0x410 [ 111.021151][ T8758] ? __pfx_addrconf_notify+0x10/0x10 [ 111.023248][ T8758] call_netdevice_notifiers_info+0xbe/0x140 [ 111.025586][ T8758] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 111.028073][ T8758] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 111.030696][ T8758] ? do_raw_spin_unlock+0x172/0x230 [ 111.032729][ T8758] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.035025][ T8758] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 111.036917][ T8758] ? linkwatch_fire_event+0x20c/0x270 [ 111.038763][ T8758] ? netif_carrier_off+0xa3/0xc0 [ 111.040348][ T8758] ? __tun_detach+0x1177/0x1540 [ 111.041876][ T8758] unregister_netdevice_queue+0x305/0x3f0 [ 111.043653][ T8758] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 111.045606][ T8758] ? linkwatch_schedule_work+0x181/0x1c0 [ 111.047376][ T8758] ? linkwatch_fire_event+0x6f/0x270 [ 111.049027][ T8758] __tun_detach+0x1249/0x1540 [ 111.050517][ T8758] ? __pfx_tun_chr_close+0x10/0x10 [ 111.052123][ T8758] tun_chr_close+0xc2/0x230 [ 111.053577][ T8758] __fput+0x3ff/0xb70 [ 111.054889][ T8758] task_work_run+0x14d/0x240 [ 111.056400][ T8758] ? __pfx_task_work_run+0x10/0x10 [ 111.057996][ T8758] ? __pfx___do_sys_close_range+0x10/0x10 [ 111.059818][ T8758] ? rcu_is_watching+0x12/0xc0 [ 111.061357][ T8758] syscall_exit_to_user_mode+0x27b/0x2a0 [ 111.063090][ T8758] do_syscall_64+0xda/0x260 [ 111.064523][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.066447][ T8758] RIP: 0033:0x7f2cd898e969 [ 111.067863][ T8758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.073832][ T8758] RSP: 002b:00007fff4f965f58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 111.076465][ T8758] RAX: 0000000000000000 RBX: 000000000001afc9 RCX: 00007f2cd898e969 [ 111.079013][ T8758] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 111.081411][ T8758] RBP: 00007f2cd8bb7ba0 R08: 0000000000000001 R09: 0000000f4f96624f [ 111.083849][ T8758] R10: 00007f2cd8800000 R11: 0000000000000246 R12: 00007f2cd8bb5fac [ 111.086577][ T8758] R13: 00007f2cd8bb5fa0 R14: ffffffffffffffff R15: 00007fff4f966070 [ 111.089011][ T8758] [ 111.090485][ T8758] Kernel Offset: disabled [ 111.091835][ T8758] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:27:20 Registers: info registers vcpu 0 CPU#0 RAX=00000000fa60cc44 RBX=00000000bf26f2c2 RCX=000000005aef9b8b RDX=00000000e33acaaf RSI=0000000059b97f65 RDI=000000002453294b RBP=0000000037eb1bd3 RSP=ffffc90000b5f7d8 R8 =00000000510c7a8e R9 =000000005a0c1edd R10=000000001a9ca50c R11=00000000aeff5920 R12=00000000c9c6cc7a R13=0000000021061c8c R14=00000000ae4c6095 R15=00000000d58760f8 RIP=ffffffff84d1a995 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f227737d2d8 CR3=000000004baaa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000400 Opmask01=0000000000000000 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff29f01e50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000020 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00656b616873646e 6148006c61697469 6e4900656c676e61 6d006574756f7262 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff888054b50b40 RCX=0000000000020000 RDX=0000000000000000 RSI=ffff888054b50b18 RDI=ffff888054b50b40 RBP=ffff888054b50af0 RSP=ffffc900040775d8 R8 =0000000000080000 R9 =0000000000000001 R10=0000000000000000 R11=ffffffff8e3bf5c0 R12=0000000000000001 R13=00000000000a0007 R14=ffff888054b50000 R15=0000000000000000 RIP=ffffffff8197def1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f58f6a3cc80 ffffffff 00c00000 GS =0000 ffff8880d6ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055600a5da528 CR3=000000002a515000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffffe Opmask01=0000000000000000 Opmask02=00000000efffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0202020202020202 0202020202020202 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 00007f58f6b9dd48 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055600a5d8db0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58f6de76b0 00007ffd4a7f70d0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000003f 00007f58f6cd6ac0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4a7f75a0 ffffffffffffffc0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555fd86cbd98 00007f58f6de6000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58f6b17c58 00007f58f6b9ea32 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000000 000000000000002f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6974706f206c6167 656c6c6900732520 3a7265626d756e20 6c6167656c6c4900 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54494d521d515c5a 58515154004e181d 074f585f5048531d 515c5a5851514900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f5335 RDI=ffffffff9adf7520 RBP=ffffffff9adf74e0 RSP=ffffc900038f6f20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000035373854 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adf74e0 R15=ffffffff854f52d0 RIP=ffffffff854f535f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556e03b500 ffffffff 00c00000 GS =0000 ffff8880d6be1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555583cc75c8 CR3=0000000031d8d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000003 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff29f01e50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2277211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 00000000000001d4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffea0000e5b6c0 RBX=ffffea0000e5b688 RCX=ffffffff8206b0ef RDX=ffff88802696a440 RSI=ffffffff8206b116 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90005ce7830 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=ffff88802aaa73b8 R14=dffffc0000000000 R15=00000000000000d3 RIP=ffffffff81bb22f0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2a1cee7d60 CR3=000000002a3b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a1c3836a3 00007f2a1c3836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe70e537d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556863a76b 000055556863a250 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556862c490 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556862de29 000055556862db20 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffe50805d00302 040005cc03220400 05c8030210b88084 0005c6030010b080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01018080a2901000 0380040100000008 06060167b2000800 03e00300100003d0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100003c00302 100003b003781000 0490030210b88084 0005f6030010b080 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 840005f6030a01e0 8080840005f40308 040005f003006576 616c735f65676469 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726201ffffffffff ffffffe50805d003 02040005cc032204 0005c8030210b880 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000