last executing test programs: 1m46.155017574s ago: executing program 3 (id=4): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "b6acd7b8f7f0a0ae8c5d910c3378"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m46.147288416s ago: executing program 3 (id=11): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x200}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0x1, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000500000000000000852000000000000018600000000000000000000000000000bf91000000000000b7020000000000008500000001000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRESOCT, @ANYRESOCT=r0], 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x4000081) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000280)={0x18, r4, 0x1, 0x0, &(0x7f0000000500)=[{0x8, 0x8001}]}) r6 = socket$kcm(0x29, 0x5, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x14, 0x1a, &(0x7f00000009c0)=ANY=[@ANYBLOB="18470000fbffffff00000000000000001832000004000000000000000000000095000000000000001832000004000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000005e172810000030000dd7a8af8ff00000000bfa200000000000007000000f8ffffffb703000008000000b70400000100000085000000820000001867000003000000000000000800000018530000010001000000000000000000185100000100000000000000000000008510000001000000185200000c000000000000000000000085100000feffffff41362c12ab37f2614f6522a06ebba7ed9c3749d38b97b6f6d3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x43d2bd10b2ad9063, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x626, @void, @value}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000880)=0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000800)={0x0, @qipcrtr={0x2a, 0xffffffff, 0x8000}, @isdn={0x22, 0x0, 0x68, 0x2, 0x78}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)='ipvlan0\x00', 0x9, 0xfffffffffffffffd, 0x3}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0) ioctl$PPPIOCGFLAGS1(r10, 0x8004745a, &(0x7f0000000980)) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRESOCT=r3, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) setrlimit(0x6, &(0x7f0000000200)={0x9, 0x3}) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) rmdir(&(0x7f0000000000)='./file1\x00') connect$tipc(r9, &(0x7f0000000900)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x10) tee(r7, r7, 0x9a0, 0x1) ioctl$IOMMU_IOAS_UNMAP(r9, 0x3b86, &(0x7f00000008c0)={0x18, r4, 0x100000001, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m45.39738665s ago: executing program 3 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) (async) close(0x3) socket(0x15, 0x5, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000600)={@val, @void, @eth={@broadcast, @random="cbdaeb0fed32", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x20, 0x2b, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"0048e5"}}}}}}}, 0x3d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e657665000050000280050008000000000004000600050009000100"], 0x88}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x801, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414800c"], 0x528}}, 0xc000) 51.698317124s ago: executing program 32 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) (async) close(0x3) socket(0x15, 0x5, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000600)={@val, @void, @eth={@broadcast, @random="cbdaeb0fed32", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x20, 0x2b, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"0048e5"}}}}}}}, 0x3d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e657665000050000280050008000000000004000600050009000100"], 0x88}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x801, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414800c"], 0x528}}, 0xc000) 3.076008859s ago: executing program 0 (id=586): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x1000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) setxattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) getsockopt$sock_int(r1, 0x1, 0x1e, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000300)) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb81000000000000000000c39fec1417d994000020000000907800000000ffffffff4495c6dba9b8fad96dd48d6b076c6f58f559f6"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="cc000000000000005a"]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d", 0xc6}], 0x1}}], 0x1, 0x10) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r8, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xefd4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xeeb1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x54}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x58, &(0x7f0000000080)}, 0x10) 3.068558077s ago: executing program 0 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='gid_map\x00') ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000040)="a7f1", 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x560, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc8c20bb23dbde13}, 0x50) write$binfmt_aout(r5, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES64], 0x28) recvmsg(r5, &(0x7f0000000080)={0x0, 0xfffffdf4, 0x0}, 0x40002000) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)={r2}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10144}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) 2.969660004s ago: executing program 0 (id=596): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000000)=0x7) syz_open_dev$dri(0xfffffffffffffffe, 0x400, 0x8000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000780)={0xb236, [0x5, 0x7, 0x0, 0xfff8, 0x8, 0x100, 0xfff8, 0x40, 0x400, 0xbf13, 0x40, 0xac2, 0x2, 0x7, 0x1, 0xa34, 0x7, 0x3, 0x4, 0x9, 0xff7a, 0x4, 0x1, 0x4, 0x0, 0x80, 0xd89, 0xfff, 0x400, 0x3dfe, 0x1, 0x101, 0x74, 0xd, 0x0, 0x100, 0x3, 0x1, 0x52c, 0x9, 0x838e, 0x3, 0x8, 0x2, 0x8, 0x1, 0x0, 0x5], 0x7}) 2.912580868s ago: executing program 0 (id=599): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc0505510, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x0, 'syz1\x00'}) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x20040000) timerfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 1.466121641s ago: executing program 1 (id=621): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x48200, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x8000) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f00000001c0)={0x1f, 0x4}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbfb, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x48200, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000180), 0x8, 0x8000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f00000001c0)={0x1f, 0x4}, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbfb, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x28}}, 0x0) (async) 1.369427274s ago: executing program 1 (id=625): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) bind$inet(r1, &(0x7f0000e15000)={0x2, 0xce20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x7, 0x8000}, 0x4}, 0x20, 0x0, 0x0) 979.60655ms ago: executing program 4 (id=636): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x810001, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x810001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r6, 0x0, r6) (async) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"93d9d789ea796fb017690c9e"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0x8}, {}, {}, @ext={0x0, 0x0}}], 0x38) syz_emit_ethernet(0x8a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, r8, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, r8, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x4}, 0x38) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050001000000000000000600000008fe4f00", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) accept4(r2, 0x0, &(0x7f00000002c0), 0x40000) (async) accept4(r2, 0x0, &(0x7f00000002c0), 0x40000) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x24, r3, 0x535, 0x70bd2d, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, r3, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40050) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1696d5a09f23f64e76c9d05ccd7b3a3c3e90f19698cd06f9e54046f8607b4fc8f8367e4c4bbec57e0326a2bcd48388418640884862d44fb3b0b15bb6b6b2851d98d36dcbae19ac3560123c3b5e8f708247fd98c322f95c21757d16d797b424a8c1d375605aefc300557dac5b8332fd62b8c4755f3c4e1a1b1c8a2a5fd56d4e85987a5f16bd23d8b09e6203874cba979171756990cc51f80e6fc07b1af956216f404ecd69584db8dd600f006d6c6fae3223d3ecfd35e8ccf92ea7b4daf03256f3904ca4fdf9e12c80e53c978500030841d9648f478504863d31b6225631da2ef56bc60a", @ANYRES16=r3, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1696d5a09f23f64e76c9d05ccd7b3a3c3e90f19698cd06f9e54046f8607b4fc8f8367e4c4bbec57e0326a2bcd48388418640884862d44fb3b0b15bb6b6b2851d98d36dcbae19ac3560123c3b5e8f708247fd98c322f95c21757d16d797b424a8c1d375605aefc300557dac5b8332fd62b8c4755f3c4e1a1b1c8a2a5fd56d4e85987a5f16bd23d8b09e6203874cba979171756990cc51f80e6fc07b1af956216f404ecd69584db8dd600f006d6c6fae3223d3ecfd35e8ccf92ea7b4daf03256f3904ca4fdf9e12c80e53c978500030841d9648f478504863d31b6225631da2ef56bc60a", @ANYRES16=r3, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) r10 = open$dir(&(0x7f0000000600)='./file0\x00', 0x480, 0x4) openat(r10, &(0x7f0000000640)='./file0\x00', 0x40000, 0x16) 883.537866ms ago: executing program 4 (id=637): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r0, 0x0, 0x0, @val=@tracing={0x0, 0x2}}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) r7 = socket(0x1d, 0x2, 0x6) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r9, 0x3, {}, 0x1}, 0x18) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@volatile={0xe, 0x0, 0x0, 0x9, 0x5}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x3}]}, {0x0, [0x61, 0x2e, 0x0, 0x2e, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000080)=""/27, 0x3d, 0x1b, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', r9, r10, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 762.17138ms ago: executing program 4 (id=638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @void, @x25={0x1, 0x4, 0x27, "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"}}, 0x101) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @void, @x25={0x1, 0x4, 0x27, "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"}}, 0x101) (async) 761.253675ms ago: executing program 0 (id=639): pipe(&(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r1 = epoll_create1(0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) epoll_pwait2(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = add_key$user(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="d32aa231e118a43b7fdf3eb3e3f707d1cdb694bfa5346f23f78760cb164f876a4f37a04906c18ad675ed95d41b6b49a32dea597021498a95113968453c32c000e2c5991f7692ac3f64ee20dcc390559846994a84c1835e50f06e259f186a03197464cf63849f0ac083dba39ccade596c26e00506949bb8e03f3d0a2c4eee2c8c84a4fba703d39ac9cd9f612584c71c6c1004448126481506564105197aff6170eb9aa992269fe75fd9198425c0c3fadcacaabbb1fd155bebcd27fc", 0xbb, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x8000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x2, 0x9, @l2={'ib', 0x3a, 'geneve0\x00'}}}}}, 0x34}}, 0x24008080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffff3092, 0x0, 0x54}, 0x9c) r11 = dup(r4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20, 0xfff9}, 0x0, 0x0, 0x1, 0x8, 0x966, 0x1, 0x3, 0x800, 0x1, 0xa03e}) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xe501, 0x3, 0x4a8, 0x338, 0x6affffff, 0x3403000b, 0x338, 0x7, 0x410, 0x230, 0x230, 0x410, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x338, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x4}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0xa, 0x7, 0x2, 0x6, 0x4], 0x3, 0x2}, {0x2, [0x1, 0x3, 0x5, 0x7, 0x0, 0x2], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x508) keyctl$instantiate(0xc, r3, &(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRESHEX, @ANYRES8=r1, @ANYRESOCT=r11, @ANYRES8=r1, @ANYRESDEC=0x0], 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x20000011}) 647.040193ms ago: executing program 0 (id=640): r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008", @ANYBLOB="49dd1f9e6d426f86d2df83e81a5f4b4bddc1603b95a30b5255"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r4, 0x2def, 0x0, 0xe, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) recvmsg$kcm(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/179}, {}, {&(0x7f00000003c0)=""/117}], 0xf, 0x0, 0x11}, 0x0) recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000080), 0x10) bind$can_raw(r6, &(0x7f0000000140), 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)=[r3, r3, r5, r6, r3, r7, r1, r3, r1, r2]}, 0xa) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_SECUREBITS(0x1b, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e92341328db0049d90491ceaeb58dbb8a190523400"/52, 0x2c}, {&(0x7f0000000040)="c6870d7df974", 0x6}], 0x2) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000080)) 646.7143ms ago: executing program 4 (id=641): set_mempolicy(0x1, 0x0, 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) set_mempolicy(0x8000, 0x0, 0x7) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r2, 0xffff8000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r3}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000001c0), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r5, 0x5402) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x5}) ioctl$EVIOCGLED(r4, 0x80044501, &(0x7f0000000000)=""/85) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 646.389111ms ago: executing program 1 (id=642): mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) r0 = io_uring_setup(0x1a70, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0) timerfd_create(0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xa42, 0x0, 0x100}, {0x343}]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0, 0x80, 0x5, 0x9, 0x0, {0xa, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) close_range(r0, 0xffffffffffffffff, 0x0) 429.093073ms ago: executing program 1 (id=643): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @random="e19d74de7dc1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0400", 0x28, 0x6, 0x0, @remote, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6, {[@md5sig={0x1d, 0x12, "fb6ba0cd8f4e22c7624e2ada29619d18"}]}}}}}}}}, 0x0) fcntl$setpipe(r3, 0x407, 0x100000) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xffffffff) 428.296256ms ago: executing program 1 (id=644): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000280)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000240)=0x6}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000a80)="3dfeb167f3ccc51b8ec0ba896a6d39292279e90f7abfdaee0f52b8a3554c9122ce1f6ed327282ad8c2d74bb1a770183e755b9f37cc301f5392a0e4831635410fe4b2a8e6bdb04d5d", 0x1f00, 0x48) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_open_procfs$namespace(r5, &(0x7f0000000200)='ns/ipc\x00') ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r6) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="23020010000000030000000800010000000000000000000000ffffffe1e9c0e15db04d44f14d225f99168f000006"], 0x28}}, 0x0) syz_clone(0x4801000, &(0x7f0000000b00)="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", 0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="94471677b6a17d77e05d8b6edf64c06811c0bd570d3d6bdff7aa3c5d366e8605b002a1380282e8da1d77748bab62a83ca2367811de86b706ed9b904e6e9d419d92bb51a6295daa80e7983ec97980f26a0b43a711ee3459b17239f5be612729bd17815c71cf3e0d5245c6e34aa2eb9e13c01ddf01918a36c81ac04a4ea080d327be26e50d5bf59ffee91a089ce75f65cc23c2f41505f5c4ae57ec0bbd6184fa1f49de724f9d664abc7cc2376c7db1c341a62cd377") r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) syz_clone(0x7080100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_rx_abort\x00', r1, 0x0, 0x7}, 0x18) 305.127802ms ago: executing program 2 (id=645): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_delete(r0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000100)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000002800048024000180080001006c6f6700180002800a00024021237d5d5d0000000800054000000eb70900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) mount$9p_unix(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000980), 0x1000000, &(0x7f0000000a40)) 304.028815ms ago: executing program 2 (id=646): msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000001340)=""/136) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = msgget$private(0x0, 0x10) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000001400)=""/4096) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000786c6c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51764b5750db1af8, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) msgget(0x0, 0x20) 238.498285ms ago: executing program 1 (id=647): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc0505510, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x0, 'syz1\x00'}) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x20040000) timerfd_create(0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 237.978485ms ago: executing program 2 (id=648): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10040}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}]]}}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 153.421905ms ago: executing program 2 (id=649): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd27, 0x25dfdbfe, {0x1c, 0x10, 0x14, 0x2, 0xff, 0x0, 0xc8, 0x3, 0x1600}, [@RTA_DST={0x8, 0x1, {0x200, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x2) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004040)={'team_slave_1\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0xa6}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x101882, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057", 0x4c}, {&(0x7f0000001240)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7e54d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb9098e6db801cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664a1f2e932493b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2615bb7401f6c23e08ff0ddb488b9d504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06646fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67cacfd0fe0132bd94261410f8d8d7eb819bc783b8e66a1786285e1e429b71ccc22f7f4c216001375c7a816719e29abc98652b6752923132256cb5f0470223e2c685c9ebf635e316a12b35a42916ef68cc04", 0xf0e}], 0x2}, 0x9cdc2384056b48b8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) 86.117524ms ago: executing program 4 (id=650): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x16, r1, 0x1, 0x7c, 0x6, @broadcast}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1e, r1}) (async) sendto$inet6(r0, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000850000001800000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 85.686731ms ago: executing program 2 (id=651): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = socket(0x1a, 0xa, 0x2) (rerun: 64) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) (async) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000100), 0x20000000}, 0x20) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r2 = getpid() syz_clone3(&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r2], 0x1}, 0x58) 85.204181ms ago: executing program 4 (id=652): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0x31) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d985de78af5aebd16d8681c1a8baec4d9c2e531a1a0fe97f866a352638a5b3e01f0493a38fedd582594c0796c427da7841d5b68b936ca840404e0feae14961075223b5c0b0b9dae08a10ef4dd9121ea733c69adbcc9ff9af0c6ab208f4a6fa32d7def542f2351ad706db7f3300"/119, @ANYRESHEX=r2, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="1500030001000080070000000093ea46371f4c9fcd9a51b65faa3f0eb91d22b3aad7c4a5615db669bb86e9b37284ace2103fa3e9b2b2d3dc8af3c278a8a97dee0b1a5187e3dfd5a4933b26b45b24a42dfd20102fc79f3f390436b3fc3811a9e793450ca13a02bb50594ff6a42555ed039df19503760287a6e6079ca94bba6acbeaa92f70cb15945b11db488f45b84d29c17ac0b56fed6698079150c2637227d9a832a968a291827a949e55c900000000000000", @ANYBLOB="4b56ec4cb48cfa31c14e715e1cbd573ec014c5e4101fcce83d24", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xde50a965918756bc}, 0x40000c0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0xffff, 0x1, 0x7, 0xfffe, 0xb, "dd299b1fb5ead794"}) r4 = socket(0x32, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000000)=@id, 0x10) recvfrom$phonet(r4, &(0x7f0000000080)=""/60, 0x3c, 0x100, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)={0x0, 0x20, 0x1, 0x9, 0x10007, 0xff}) bind$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r8, 0xc1205531, &(0x7f0000002680)=""/4104) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r9, 0x114, 0x5, &(0x7f0000002240), 0x4) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=653): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f0000000300)="33321afb7ae51b96f6df642fe13f09410434c87fee4ccd7fcb49e7d0188ea87b6e76adfe6ac948eaad7ad2e05707805875e6aa1f51cbf8b8888a8acfea92919dd3c11b37f5ea8dec4c355f17b96739bc3dbacff08d67", &(0x7f0000000380)=""/129}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r5 = socket(0x2, 0x80000, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x1407, 0x2, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c5}, 0x4040050) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendmmsg(r3, &(0x7f0000002980), 0x400000000000239, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$KVM_NMI(r4, 0xae9a) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x88a008, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x2}}, {}, {@stats}, {@stats}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) kernel console output (not intermixed with test programs): 46.763363][ T5945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.765817][ T5945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.770155][ T5937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.772651][ T5937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.775642][ T5937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.778001][ T5937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.837131][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.837325][ T4752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.839115][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.841071][ T4752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.861628][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.864466][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.869907][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.871816][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.935980][ T6028] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 47.007572][ T6047] process 'syz.0.15' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 47.101908][ T6051] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 47.105891][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 47.313707][ T6016] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 47.463683][ T6016] usb 5-1: Invalid ep0 maxpacket: 16 [ 47.603848][ T6016] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 47.753726][ T6016] usb 5-1: Invalid ep0 maxpacket: 16 [ 47.755276][ T6016] usb usb5-port1: attempt power cycle [ 48.073808][ T5996] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.093731][ T6016] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 48.114742][ T6016] usb 5-1: Invalid ep0 maxpacket: 16 [ 48.160595][ T6072] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET) [ 48.223736][ T5996] usb 7-1: Using ep0 maxpacket: 16 [ 48.228952][ T5996] usb 7-1: config 160 has an invalid interface number: 169 but max is 0 [ 48.231819][ T5996] usb 7-1: config 160 contains an unexpected descriptor of type 0x1, skipping [ 48.236303][ T5996] usb 7-1: config 160 has no interface number 0 [ 48.238667][ T5996] usb 7-1: config 160 interface 169 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 48.242590][ T5996] usb 7-1: config 160 interface 169 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 48.247425][ T6016] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 48.250908][ T5996] usb 7-1: config 160 interface 169 altsetting 3 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 48.254535][ T5996] usb 7-1: config 160 interface 169 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 48.257407][ T5996] usb 7-1: config 160 interface 169 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 48.264036][ T6016] usb 5-1: Invalid ep0 maxpacket: 16 [ 48.265758][ T6016] usb usb5-port1: unable to enumerate USB device [ 48.268329][ T5996] usb 7-1: config 160 interface 169 has no altsetting 0 [ 48.271721][ T5996] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a01, bcdDevice=3c.1c [ 48.275890][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.278696][ T5996] usb 7-1: Product: 〉 [ 48.280228][ T5996] usb 7-1: Manufacturer: à°‰ [ 48.281938][ T5996] usb 7-1: SerialNumber: 닮᳟ⱛ已ãœêª±â¤¼ï‰¹â®®ç´‘ꈒ [ 48.654211][ T5941] Bluetooth: hci1: command tx timeout [ 48.654279][ T65] Bluetooth: hci0: command tx timeout [ 48.733853][ T5941] Bluetooth: hci3: command tx timeout [ 48.734010][ T65] Bluetooth: hci2: command tx timeout [ 49.127733][ T6079] Zero length message leads to an empty skb [ 49.209809][ T6082] autofs4:pid:6082:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2863311530.2147592874), cmd(0xc0189374) [ 49.214039][ T6082] autofs4:pid:6082:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 49.399267][ T39] kauditd_printk_skb: 86 callbacks suppressed [ 49.399277][ T39] audit: type=1400 audit(1734538481.037:201): avc: denied { append } for pid=6092 comm="syz.1.27" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.451691][ T39] audit: type=1400 audit(1734538481.087:202): avc: denied { setattr } for pid=6097 comm="syz.1.28" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.477942][ T39] audit: type=1400 audit(1734538481.117:203): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.631107][ T39] audit: type=1400 audit(1734538481.267:204): avc: denied { create } for pid=6100 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 50.171892][ T39] audit: type=1400 audit(1734538481.807:205): avc: denied { create } for pid=6109 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.179577][ T39] audit: type=1400 audit(1734538481.817:206): avc: denied { read } for pid=6109 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.323284][ T6120] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.324489][ T39] audit: type=1400 audit(1734538481.957:207): avc: denied { map_read map_write } for pid=6119 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.365869][ T39] audit: type=1400 audit(1734538482.007:208): avc: denied { write } for pid=6122 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.372714][ T39] audit: type=1400 audit(1734538482.007:209): avc: denied { nlmsg_write } for pid=6122 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.390938][ T6123] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 50.497280][ T6129] netlink: 36 bytes leftover after parsing attributes in process `syz.1.39'. [ 50.506360][ T6129] IPv6: Can't replace route, no match found [ 50.509221][ T39] audit: type=1400 audit(1734538482.147:210): avc: denied { getopt } for pid=6128 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.574158][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.723817][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 50.725826][ T65] Bluetooth: hci1: command tx timeout [ 50.728180][ T8] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 50.730643][ T8] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 50.732837][ T8] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 50.733673][ T65] Bluetooth: hci0: command tx timeout [ 50.735890][ T8] usb 5-1: config 250 has no interface number 0 [ 50.738663][ T8] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 50.741766][ T8] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 50.746757][ T8] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 50.749434][ T8] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 50.752294][ T8] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 50.756066][ T8] usb 5-1: config 250 interface 228 has no altsetting 0 [ 50.759130][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 50.761653][ T8] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 50.764006][ T8] usb 5-1: Product: syz [ 50.765114][ T8] usb 5-1: SerialNumber: syz [ 50.769063][ T8] hub 5-1:250.228: bad descriptor, ignoring hub [ 50.770832][ T8] hub 5-1:250.228: probe with driver hub failed with error -5 [ 50.803767][ T65] Bluetooth: hci2: command tx timeout [ 50.846654][ T30] usb 7-1: USB disconnect, device number 2 [ 50.973730][ T1020] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.973848][ T8] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 51.134592][ T1020] usb 6-1: Using ep0 maxpacket: 8 [ 51.137469][ T1020] usb 6-1: config index 0 descriptor too short (expected 28277, got 45) [ 51.139839][ T1020] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.142569][ T1020] usb 6-1: config 0 has no interfaces? [ 51.146383][ T1020] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 51.148793][ T1020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.160527][ T1020] usb 6-1: config 0 descriptor?? [ 51.405221][ T1020] usb 6-1: USB disconnect, device number 2 [ 51.490387][ T6147] netlink: 'syz.2.44': attribute type 33 has an invalid length. [ 51.492513][ T6147] netlink: 152 bytes leftover after parsing attributes in process `syz.2.44'. [ 51.793693][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 51.943686][ T58] usb 7-1: Using ep0 maxpacket: 16 [ 51.947404][ T58] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.951438][ T58] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.955106][ T58] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 51.959393][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 51.961832][ T58] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 51.965493][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.973381][ T58] usb 7-1: config 0 descriptor?? [ 52.026896][ T75] usb 5-1: USB disconnect, device number 6 [ 52.030607][ T75] usblp0: removed [ 52.388704][ T58] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5010.0002/input/input6 [ 52.416083][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.52'. [ 52.425396][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 52.463246][ T58] kye 0003:0458:5010.0002: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 52.485787][ T65] Bluetooth: hci3: command tx timeout [ 52.491854][ T58] usb 7-1: USB disconnect, device number 3 [ 52.596778][ T6190] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 52.631382][ T6181] kvm: emulating exchange as write [ 52.641022][ T6195] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 52.758489][ T6205] program syz.2.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.803893][ T65] Bluetooth: hci0: command tx timeout [ 52.805334][ T65] Bluetooth: hci1: command tx timeout [ 52.884462][ T5941] Bluetooth: hci2: command tx timeout [ 52.969081][ T6245] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 53.081651][ T6258] netlink: set zone limit has 8 unknown bytes [ 53.121922][ T6262] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 53.126371][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.131812][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.136741][ T6262] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 53.141311][ T6266] team0: Device gtp0 is of different type [ 53.172899][ T6273] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.182847][ T6273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.183873][ C0] Illegal XDP return value 16128 on prog (id 75) dev batadv_slave_0, expect packet loss! [ 53.185585][ T6273] bond0: (slave bond1): Enslaving as an active interface with an up link [ 53.383992][ T6294] »»»»»»: renamed from lo (while UP) [ 53.941236][ T6261] TCP: out of memory -- consider tuning tcp_mem [ 63.243029][ T6213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.323197][ T6213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.402224][ T6213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.493989][ T6213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.576741][ T6213] bridge_slave_1: left allmulticast mode [ 63.578427][ T6213] bridge_slave_1: left promiscuous mode [ 63.580729][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.587803][ T6213] bridge_slave_0: left allmulticast mode [ 63.589300][ T6213] bridge_slave_0: left promiscuous mode [ 63.590840][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.838723][ T6213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.842618][ T6213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.845851][ T6213] bond0 (unregistering): Released all slaves [ 63.854788][ T39] kauditd_printk_skb: 80 callbacks suppressed [ 63.854798][ T39] audit: type=1400 audit(1734538495.497:291): avc: denied { search } for pid=5653 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.862164][ T39] audit: type=1400 audit(1734538495.497:292): avc: denied { read } for pid=5653 comm="dhcpcd" name="n103" dev="tmpfs" ino=2207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.868671][ T39] audit: type=1400 audit(1734538495.497:293): avc: denied { open } for pid=5653 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.874985][ T39] audit: type=1400 audit(1734538495.497:294): avc: denied { getattr } for pid=5653 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.885366][ T39] audit: type=1400 audit(1734538495.527:295): avc: denied { read } for pid=6306 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.893174][ T39] audit: type=1400 audit(1734538495.527:296): avc: denied { open } for pid=6306 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.901817][ T39] audit: type=1400 audit(1734538495.527:297): avc: denied { getattr } for pid=6306 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.910610][ T39] audit: type=1400 audit(1734538495.527:298): avc: denied { write } for pid=6305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.922153][ T39] audit: type=1400 audit(1734538495.527:299): avc: denied { add_name } for pid=6305 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.927984][ T39] audit: type=1400 audit(1734538495.527:300): avc: denied { create } for pid=6305 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.187032][ T6213] hsr_slave_0: left promiscuous mode [ 64.188959][ T6213] hsr_slave_1: left promiscuous mode [ 64.190829][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.192774][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.196789][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.198695][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.213072][ T6213] veth1_macvtap: left promiscuous mode [ 64.215381][ T6213] veth0_macvtap: left promiscuous mode [ 64.217500][ T6213] veth1_vlan: left promiscuous mode [ 64.219146][ T6213] veth0_vlan: left promiscuous mode [ 64.652125][ T6213] team0 (unregistering): Port device team_slave_1 removed [ 64.702083][ T6213] team0 (unregistering): Port device team_slave_0 removed [ 71.047756][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.049392][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.173902][ T834] cfg80211: failed to load regulatory.db [ 101.414601][ T6445] ipip0: entered promiscuous mode [ 101.419861][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 101.419872][ T39] audit: type=1400 audit(1734538533.057:305): avc: denied { accept } for pid=6443 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.440100][ T39] audit: type=1404 audit(1734538533.077:306): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 101.446378][ T39] audit: type=1400 audit(1734538533.087:307): avc: denied { read write } for pid=5945 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.456359][ T39] audit: type=1400 audit(1734538533.097:308): avc: denied { module_request } for pid=6448 comm="syz.2.88" kmod="crypto-kw(seed-generic)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 101.462222][ T39] audit: type=1400 audit(1734538533.097:309): avc: denied { create } for pid=6448 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 101.477122][ T39] audit: type=1400 audit(1734538533.097:310): avc: denied { create } for pid=6448 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 101.484890][ T39] audit: type=1400 audit(1734538533.097:311): avc: denied { setopt } for pid=6448 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 101.491520][ T39] audit: type=1400 audit(1734538533.097:312): avc: denied { accept } for pid=6448 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 101.499406][ T39] audit: type=1404 audit(1734538533.097:313): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 101.504795][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.506563][ T39] audit: type=1400 audit(1734538533.107:314): avc: denied { read write } for pid=5936 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.508667][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.516563][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.522152][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.524967][ T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 101.527508][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.555543][ T6468] input: syz1 as /devices/virtual/input/input7 [ 101.610068][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.612572][ T6476] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 101.641596][ T6459] chnl_net:caif_netlink_parms(): no params data found [ 101.703762][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.705948][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.708323][ T6459] bridge_slave_0: entered allmulticast mode [ 101.711136][ T6459] bridge_slave_0: entered promiscuous mode [ 101.716743][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.718759][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.720698][ T6459] bridge_slave_1: entered allmulticast mode [ 101.722756][ T6459] bridge_slave_1: entered promiscuous mode [ 101.746530][ T6459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.750004][ T6459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.771961][ T6459] team0: Port device team_slave_0 added [ 101.774554][ T6459] team0: Port device team_slave_1 added [ 101.797144][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.799266][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.807920][ T6459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.812390][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.815183][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.821837][ T6459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.844790][ T6459] hsr_slave_0: entered promiscuous mode [ 101.846744][ T6459] hsr_slave_1: entered promiscuous mode [ 101.848737][ T6459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.850927][ T6459] Cannot create hsr debugfs directory [ 101.915335][ T6459] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.918689][ T6459] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.921714][ T6459] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.926461][ T6459] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.936045][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.938552][ T6459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.940734][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.943121][ T6459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.964068][ T6459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.971181][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.975968][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.987499][ T6459] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.992710][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.995161][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.000175][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.002555][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.087413][ T6459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.178691][ T6459] veth0_vlan: entered promiscuous mode [ 102.183482][ T6459] veth1_vlan: entered promiscuous mode [ 102.195752][ T6459] veth0_macvtap: entered promiscuous mode [ 102.198907][ T6459] veth1_macvtap: entered promiscuous mode [ 102.205666][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.208351][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.210867][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.213559][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.216933][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.221882][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.225466][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.228062][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.230801][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.233366][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.236200][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.239971][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.244030][ T6459] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.246387][ T6459] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.248553][ T6459] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.250813][ T6459] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.280037][ T6228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.282106][ T6228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.298210][ T6228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.300266][ T6228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.512509][ T6530] warning: `syz.2.109' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.582582][ T6542] bridge_slave_0: left allmulticast mode [ 102.584363][ T6542] bridge_slave_0: left promiscuous mode [ 102.585947][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.590536][ T6542] bridge_slave_1: left allmulticast mode [ 102.592022][ T6542] bridge_slave_1: left promiscuous mode [ 102.593550][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.598745][ T6542] bond0: (slave bond_slave_0): Releasing backup interface [ 102.602207][ T6542] bond0: (slave bond_slave_1): Releasing backup interface [ 102.616082][ T6542] team0: Port device team_slave_0 removed [ 102.619863][ T6542] team0: Port device team_slave_1 removed [ 102.622028][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.625081][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.628002][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.630396][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.638289][ T6543] batman_adv: batadv0: Adding interface: erspan1 [ 102.640129][ T6543] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 102.921656][ T6575] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 103.005535][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 103.159685][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 103.161811][ T9] usb 7-1: config 0 has no interface number 0 [ 103.164877][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 103.168486][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 103.172416][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 103.180058][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 103.183771][ T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.187139][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 103.189484][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.196321][ T9] usb 7-1: config 0 descriptor?? [ 103.198933][ T6563] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.219407][ T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 103.472971][ T5969] usb 7-1: USB disconnect, device number 4 [ 103.474461][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 103.474559][ T6563] ldusb 7-1:0.55: Couldn't submit interrupt_out_urb -19 [ 103.480204][ T5969] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 103.537463][ T6563] netlink: 48 bytes leftover after parsing attributes in process `syz.2.118'. [ 103.616116][ T65] Bluetooth: hci1: command tx timeout [ 104.084523][ T6615] netlink: 'syz.1.134': attribute type 29 has an invalid length. [ 104.087241][ T6615] netlink: 'syz.1.134': attribute type 29 has an invalid length. [ 104.090152][ T6615] netlink: 'syz.1.134': attribute type 29 has an invalid length. [ 104.095979][ T6615] netlink: 'syz.1.134': attribute type 29 has an invalid length. [ 104.101668][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 104.182178][ T6615] hsr_slave_1 (unregistering): left promiscuous mode [ 104.270492][ T6626] capability: warning: `syz.1.137' uses 32-bit capabilities (legacy support in use) [ 104.789628][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 104.793063][ T6659] gfs2: gfs2 mount does not exist [ 104.837690][ T6661] Process accounting resumed [ 104.856514][ T6668] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 104.888332][ T6673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=6673 comm=syz.0.153 [ 104.902188][ T6673] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 105.111682][ T6708] Bluetooth: MGMT ver 1.23 [ 105.160408][ T6714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.208167][ T6720] Falling back ldisc for ttyS3. [ 105.211971][ T6721] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.212775][ T6724] program syz.1.171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.216450][ T6721] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.264005][ T1109] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 105.266845][ T1109] ata1.00: irq_stat 0x40000000 [ 105.268590][ T1109] ata1.00: failed command: ZAC MANAGEMENT OUT [ 105.270802][ T1109] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 15 [ 105.270802][ T1109] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 105.276740][ T1109] ata1.00: status: { DRDY ERR } [ 105.278507][ T1109] ata1.00: error: { ABRT } [ 105.280180][ T1109] ata1.00: device reported invalid CHS sector 0 [ 105.336318][ T6740] loop7: detected capacity change from 0 to 16384 [ 105.588820][ T6788] syzkaller0: entered promiscuous mode [ 105.590333][ T6788] syzkaller0: entered allmulticast mode [ 105.643678][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 105.683714][ T65] Bluetooth: hci1: command tx timeout [ 105.753786][ T5996] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 105.793688][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 105.797172][ T8] usb 6-1: config 0 has no interfaces? [ 105.800893][ T8] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.804015][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.806111][ T8] usb 6-1: Product: syz [ 105.807214][ T8] usb 6-1: Manufacturer: syz [ 105.808417][ T8] usb 6-1: SerialNumber: syz [ 105.811277][ T8] usb 6-1: config 0 descriptor?? [ 105.833796][ T5969] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.923779][ T5996] usb 9-1: Invalid ep0 maxpacket: 32 [ 105.963733][ T5969] usb 5-1: device descriptor read/64, error -71 [ 106.025774][ T1020] usb 6-1: USB disconnect, device number 3 [ 106.063833][ T5996] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 106.205465][ T5969] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.223656][ T5996] usb 9-1: Invalid ep0 maxpacket: 32 [ 106.225253][ T5996] usb usb9-port1: attempt power cycle [ 106.333690][ T5969] usb 5-1: device descriptor read/64, error -71 [ 106.443980][ T5969] usb usb5-port1: attempt power cycle [ 106.454439][ T1109] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 106.456353][ T1109] ata1: failed to read log page 10h (errno=-5) [ 106.458547][ T1109] ata1.00: exception Emask 0x1 SAct 0x80 SErr 0x0 action 0x0 [ 106.461085][ T1109] ata1.00: irq_stat 0x40000000 [ 106.462659][ T1109] ata1.00: failed command: WRITE FPDMA QUEUED [ 106.464302][ T1109] ata1.00: cmd 61/48:38:a2:05:10/00:00:00:00:00/40 tag 7 ncq dma 36864 out [ 106.464302][ T1109] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 106.469907][ T1109] ata1.00: status: { DRDY } [ 106.471254][ T1109] ata1.00: error: { ABRT } [ 106.476378][ T1109] ata1.00: configured for UDMA/100 [ 106.478034][ T1109] ata1: EH complete [ 106.573771][ T5996] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 106.582589][ T39] kauditd_printk_skb: 252 callbacks suppressed [ 106.582604][ T39] audit: type=1400 audit(1734538538.217:567): avc: denied { mount } for pid=6796 comm="syz.1.195" name="/" dev="pstore" ino=5998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 106.609175][ T5996] usb 9-1: Invalid ep0 maxpacket: 32 [ 106.614324][ T39] audit: type=1400 audit(1734538538.257:568): avc: denied { write } for pid=6796 comm="syz.1.195" name="cgroup.subtree_control" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.620364][ T39] audit: type=1400 audit(1734538538.257:569): avc: denied { open } for pid=6796 comm="syz.1.195" path="" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.743728][ T5996] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 106.764119][ T5996] usb 9-1: Invalid ep0 maxpacket: 32 [ 106.766146][ T5996] usb usb9-port1: unable to enumerate USB device [ 106.793708][ T5969] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 106.814204][ T5969] usb 5-1: device descriptor read/8, error -71 [ 106.884158][ T65] Bluetooth: hci3: command tx timeout [ 107.053707][ T5969] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 107.074145][ T5969] usb 5-1: device descriptor read/8, error -71 [ 107.184679][ T5969] usb usb5-port1: unable to enumerate USB device [ 107.493664][ T5969] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 107.541455][ T39] audit: type=1400 audit(1734538539.177:570): avc: denied { append } for pid=6802 comm="syz.1.197" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 107.623752][ T5969] usb 7-1: device descriptor read/64, error -71 [ 107.764855][ T65] Bluetooth: hci1: command tx timeout [ 107.863679][ T5969] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 107.993672][ T5969] usb 7-1: device descriptor read/64, error -71 [ 108.103873][ T5969] usb usb7-port1: attempt power cycle [ 108.441844][ T39] audit: type=1400 audit(1734538540.077:571): avc: denied { unlink } for pid=6811 comm="syz.1.200" name="#5" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 108.443806][ T6812] overlay: filesystem on ./bus not supported as upperdir [ 108.447796][ T39] audit: type=1400 audit(1734538540.077:572): avc: denied { mount } for pid=6811 comm="syz.1.200" name="/" dev="overlay" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.454997][ T5969] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 108.474864][ T5969] usb 7-1: device descriptor read/8, error -71 [ 108.529492][ T6816] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 108.532688][ T6819] FAULT_INJECTION: forcing a failure. [ 108.532688][ T6819] name failslab, interval 1, probability 0, space 0, times 1 [ 108.536109][ T6819] CPU: 0 UID: 0 PID: 6819 Comm: syz.4.201 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 108.538822][ T6819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.541445][ T6819] Call Trace: [ 108.542328][ T6819] [ 108.543105][ T6819] dump_stack_lvl+0x16c/0x1f0 [ 108.544487][ T6819] should_fail_ex+0x497/0x5b0 [ 108.545706][ T6819] ? lock_acquire.part.0+0x11b/0x380 [ 108.547089][ T6819] should_failslab+0xc2/0x120 [ 108.548321][ T6819] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 108.549748][ T6819] ? dst_alloc+0x99/0x1a0 [ 108.550888][ T6819] ? __pfx_ip6_dst_gc+0x10/0x10 [ 108.552082][ T6819] dst_alloc+0x99/0x1a0 [ 108.553132][ T6819] ip6_dst_alloc+0x2c/0x90 [ 108.554282][ T6819] ip6_pol_route+0x956/0x1120 [ 108.555475][ T6819] ? __pfx_ip6_pol_route+0x10/0x10 [ 108.556776][ T6819] ? __pfx_lock_release+0x10/0x10 [ 108.558018][ T6819] ? trace_lock_acquire+0x14e/0x1f0 [ 108.559347][ T6819] ? fib6_get_table+0x5c/0x3b0 [ 108.560551][ T6819] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 108.561960][ T6819] fib6_rule_action+0x777/0x910 [ 108.563172][ T6819] ? __pfx_fib6_rule_action+0x10/0x10 [ 108.564495][ T6819] fib_rules_lookup+0x379/0xda0 [ 108.565718][ T6819] ? __pfx_fib_rules_lookup+0x10/0x10 [ 108.567100][ T6819] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 108.568486][ T6819] fib6_rule_lookup+0x18a/0x720 [ 108.569697][ T6819] ? ip6t_do_table+0xd50/0x1d40 [ 108.571052][ T6819] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 108.572382][ T6819] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 108.573854][ T6819] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 108.574122][ T39] audit: type=1400 audit(1734538540.217:573): avc: denied { read } for pid=6815 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.575284][ T6819] ip6_route_input+0x663/0xc10 [ 108.581387][ T6819] ? __pfx_ip6_route_input+0x10/0x10 [ 108.582774][ T6819] ? __pfx_lock_release+0x10/0x10 [ 108.584103][ T6819] ? trace_lock_acquire+0x14e/0x1f0 [ 108.585535][ T6819] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 108.586938][ T6819] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 108.588551][ T6819] ipv6_rcv+0x1e4/0x680 [ 108.589641][ T6819] ? __pfx_ipv6_rcv+0x10/0x10 [ 108.590844][ T6819] __netif_receive_skb_one_core+0x12e/0x1e0 [ 108.592377][ T6819] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 108.594039][ T6819] ? rcu_is_watching+0x12/0xc0 [ 108.595271][ T6819] ? ktime_get_with_offset+0x273/0x3a0 [ 108.596725][ T6819] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.598080][ T6819] ? netif_receive_skb+0x109/0x7b0 [ 108.599333][ T6819] __netif_receive_skb+0x1d/0x160 [ 108.600619][ T6819] netif_receive_skb+0x13f/0x7b0 [ 108.601909][ T6819] ? __pfx_netif_receive_skb+0x10/0x10 [ 108.603272][ T6819] ? __pfx___lock_acquire+0x10/0x10 [ 108.604563][ T6819] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 108.606122][ T6819] tun_rx_batched.isra.0+0x3eb/0x730 [ 108.607400][ T6819] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 108.608816][ T6819] ? tun_get_user+0x13e6/0x3e40 [ 108.610181][ T6819] ? lock_acquire+0x2f/0xb0 [ 108.611398][ T6819] ? tun_get_user+0x13e6/0x3e40 [ 108.612738][ T6819] tun_get_user+0x2a16/0x3e40 [ 108.613947][ T6819] ? find_held_lock+0x2d/0x110 [ 108.615172][ T6819] ? __pfx_tun_get_user+0x10/0x10 [ 108.616496][ T6819] ? find_held_lock+0x2d/0x110 [ 108.617691][ T6819] ? __pfx_lock_release+0x10/0x10 [ 108.618981][ T6819] tun_chr_write_iter+0xdc/0x210 [ 108.620290][ T6819] vfs_write+0x5ae/0x1150 [ 108.621394][ T6819] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 108.622781][ T6819] ? __pfx_vfs_write+0x10/0x10 [ 108.623958][ T6819] ? __fget_files+0x40/0x3a0 [ 108.625174][ T6819] ksys_write+0x12b/0x250 [ 108.626361][ T6819] ? __pfx_ksys_write+0x10/0x10 [ 108.627642][ T6819] do_syscall_64+0xcd/0x250 [ 108.628776][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.630566][ T6819] RIP: 0033:0x7f416e9847df [ 108.631733][ T6819] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 108.636561][ T6819] RSP: 002b:00007f416f72f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 108.638648][ T6819] RAX: ffffffffffffffda RBX: 00007f416eb75fa0 RCX: 00007f416e9847df [ 108.640636][ T6819] RDX: 0000000000000046 RSI: 0000000020000140 RDI: 00000000000000c8 [ 108.642604][ T6819] RBP: 00007f416f72f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.644591][ T6819] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 108.646660][ T6819] R13: 0000000000000000 R14: 00007f416eb75fa0 R15: 00007ffce33f08b8 [ 108.648673][ T6819] [ 108.651078][ T39] audit: type=1400 audit(1734538540.287:574): avc: denied { connect } for pid=6815 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.773983][ T5969] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 108.795636][ T5969] usb 7-1: device descriptor read/8, error -71 [ 108.904743][ T5969] usb usb7-port1: unable to enumerate USB device [ 109.628114][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.208'. [ 109.668180][ T39] audit: type=1400 audit(1734538541.307:575): avc: denied { setopt } for pid=6850 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.706939][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 109.735625][ T6867] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 1, id = 0 [ 109.745328][ T6869] netlink: 124 bytes leftover after parsing attributes in process `syz.1.213'. [ 109.749601][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 109.854091][ T65] Bluetooth: hci1: command tx timeout [ 109.931868][ T6882] fuse: Bad value for 'fd' [ 109.997834][ T39] audit: type=1400 audit(1734538541.637:576): avc: denied { bind } for pid=6890 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.005276][ T6893] netlink: 'syz.4.220': attribute type 10 has an invalid length. [ 110.005598][ T6891] netlink: 'syz.4.220': attribute type 10 has an invalid length. [ 110.007386][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.011211][ T6897] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.013002][ T6897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.099837][ T6906] SELinux: Context system_u:object_r:unconfined_exec_t:s0 is not valid (left unmapped). [ 110.118212][ T6908] netlink: 'syz.4.224': attribute type 10 has an invalid length. [ 110.121617][ T6908] macvlan0: entered promiscuous mode [ 110.123290][ T6908] macvlan0: entered allmulticast mode [ 110.129275][ T6908] veth1_vlan: entered allmulticast mode [ 110.132785][ T6908] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 110.207367][ T6917] syz.0.225: attempt to access beyond end of device [ 110.207367][ T6917] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 110.212114][ T6917] syz.0.225: attempt to access beyond end of device [ 110.212114][ T6917] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 110.474668][ T6939] bond0: Unable to set down delay as MII monitoring is disabled [ 110.539542][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.233'. [ 110.639261][ T6949] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.727787][ T6912] dccp_close: ABORT with 34 bytes unread [ 110.793932][ T6956] capability: warning: `syz.0.239' uses deprecated v2 capabilities in a way that may be insecure [ 110.975547][ T6977] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 110.975897][ T6978] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 111.630161][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 111.630170][ T39] audit: type=1400 audit(1734538543.267:609): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 111.656872][ T39] audit: type=1400 audit(1734538543.297:610): avc: denied { connect } for pid=7021 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.662111][ T39] audit: type=1400 audit(1734538543.297:611): avc: denied { read write } for pid=7021 comm="syz.0.257" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.669550][ T39] audit: type=1400 audit(1734538543.297:612): avc: denied { open } for pid=7021 comm="syz.0.257" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.675946][ T39] audit: type=1400 audit(1734538543.307:613): avc: denied { ioctl } for pid=7021 comm="syz.0.257" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.726924][ T39] audit: type=1400 audit(1734538543.367:614): avc: denied { listen } for pid=7025 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.731681][ T39] audit: type=1400 audit(1734538543.367:615): avc: denied { accept } for pid=7025 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.784953][ T7027] mmap: syz.0.259 (7027) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.335333][ T7046] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 112.388912][ T39] audit: type=1400 audit(1734538544.027:616): avc: denied { setattr } for pid=7048 comm="syz.2.265" name="/" dev="9p" ino=37617951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.397672][ T39] audit: type=1400 audit(1734538544.037:617): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 112.561645][ T7057] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 112.564388][ T5969] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 112.564396][ T7057] netlink: 'syz.1.267': attribute type 3 has an invalid length. [ 112.568487][ T7057] netlink: 224 bytes leftover after parsing attributes in process `syz.1.267'. [ 112.590590][ T39] audit: type=1400 audit(1734538544.227:618): avc: denied { create } for pid=7059 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.753655][ T5969] usb 9-1: Using ep0 maxpacket: 8 [ 112.757711][ T5969] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 112.760180][ T5969] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 112.763001][ T5969] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 112.766177][ T5969] usb 9-1: config 250 has no interface number 0 [ 112.768321][ T5969] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 112.771286][ T5969] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 112.774030][ T5969] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.776527][ T5969] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 112.779076][ T5969] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 112.782897][ T5969] usb 9-1: config 250 interface 228 has no altsetting 0 [ 112.786915][ T5969] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 112.789684][ T5969] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 112.792037][ T5969] usb 9-1: Product: syz [ 112.793297][ T5969] usb 9-1: SerialNumber: syz [ 112.801338][ T5969] hub 9-1:250.228: bad descriptor, ignoring hub [ 112.803640][ T5969] hub 9-1:250.228: probe with driver hub failed with error -5 [ 112.875644][ T7093] netlink: 96 bytes leftover after parsing attributes in process `syz.2.276'. [ 112.968705][ T7101] evm: overlay not supported [ 113.003287][ T5969] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 113.271189][ T7124] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 113.278507][ T7124] FAULT_INJECTION: forcing a failure. [ 113.278507][ T7124] name failslab, interval 1, probability 0, space 0, times 0 [ 113.282677][ T7124] CPU: 0 UID: 0 PID: 7124 Comm: syz.1.285 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 113.286178][ T7124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.290254][ T7124] Call Trace: [ 113.291065][ T7124] [ 113.291836][ T7124] dump_stack_lvl+0x16c/0x1f0 [ 113.293152][ T7124] should_fail_ex+0x497/0x5b0 [ 113.294334][ T7124] ? fs_reclaim_acquire+0xae/0x150 [ 113.295620][ T7124] should_failslab+0xc2/0x120 [ 113.296848][ T7124] __kmalloc_noprof+0xcb/0x510 [ 113.298070][ T7124] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 113.299463][ T7124] tomoyo_realpath_from_path+0xb9/0x720 [ 113.300874][ T7124] ? tomoyo_path_number_perm+0x235/0x590 [ 113.302276][ T7124] ? tomoyo_path_number_perm+0x235/0x590 [ 113.303659][ T7124] tomoyo_path_number_perm+0x248/0x590 [ 113.305083][ T7124] ? tomoyo_path_number_perm+0x235/0x590 [ 113.306506][ T7124] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.307987][ T7124] ? __pfx_lock_release+0x10/0x10 [ 113.309249][ T7124] ? trace_lock_acquire+0x14e/0x1f0 [ 113.310569][ T7124] ? lock_acquire+0x2f/0xb0 [ 113.311731][ T7124] ? __fget_files+0x40/0x3a0 [ 113.312892][ T7124] ? __fget_files+0x206/0x3a0 [ 113.314078][ T7124] security_file_ioctl+0x9b/0x240 [ 113.315422][ T7124] __x64_sys_ioctl+0xb7/0x200 [ 113.316617][ T7124] do_syscall_64+0xcd/0x250 [ 113.317820][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.320766][ T7124] RIP: 0033:0x7f9b27385d29 [ 113.320784][ T7124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.320793][ T7124] RSP: 002b:00007f9b28213038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.329277][ T7124] RAX: ffffffffffffffda RBX: 00007f9b27575fa0 RCX: 00007f9b27385d29 [ 113.329288][ T7124] RDX: 0000000020000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 113.329294][ T7124] RBP: 00007f9b28213090 R08: 0000000000000000 R09: 0000000000000000 [ 113.329300][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.329307][ T7124] R13: 0000000000000000 R14: 00007f9b27575fa0 R15: 00007fffc1e7c438 [ 113.329320][ T7124] [ 113.329411][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.331673][ T7124] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.393021][ T7129] kvm: kvm [7128]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000005) = 0x0 [ 113.394702][ T7132] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 113.543468][ T7143] team0: Port device vlan2 added [ 113.599201][ T5941] Bluetooth: Unexpected continuation frame (len 12) [ 113.617448][ T7158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 113.626967][ T7157] FAULT_INJECTION: forcing a failure. [ 113.626967][ T7157] name failslab, interval 1, probability 0, space 0, times 0 [ 113.630129][ T7157] CPU: 3 UID: 0 PID: 7157 Comm: syz.2.297 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 113.633344][ T7157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.636213][ T7157] Call Trace: [ 113.637049][ T7157] [ 113.637778][ T7157] dump_stack_lvl+0x16c/0x1f0 [ 113.638939][ T7157] should_fail_ex+0x497/0x5b0 [ 113.640108][ T7157] ? fs_reclaim_acquire+0xae/0x150 [ 113.641429][ T7157] should_failslab+0xc2/0x120 [ 113.642594][ T7157] __kmalloc_noprof+0xcb/0x510 [ 113.643799][ T7157] ? rcu_is_watching+0x12/0xc0 [ 113.644974][ T7157] tomoyo_encode2+0x100/0x3e0 [ 113.646232][ T7157] tomoyo_encode+0x29/0x50 [ 113.647367][ T7157] tomoyo_realpath_from_path+0x19d/0x720 [ 113.648787][ T7157] ? tomoyo_path_number_perm+0x235/0x590 [ 113.650224][ T7157] tomoyo_path_number_perm+0x248/0x590 [ 113.651785][ T7157] ? tomoyo_path_number_perm+0x235/0x590 [ 113.653723][ T7157] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.655348][ T7157] ? __pfx_lock_release+0x10/0x10 [ 113.656714][ T7157] ? trace_lock_acquire+0x14e/0x1f0 [ 113.658013][ T7157] ? lock_acquire+0x2f/0xb0 [ 113.659122][ T7157] ? __fget_files+0x40/0x3a0 [ 113.660311][ T7157] ? __fget_files+0x206/0x3a0 [ 113.661548][ T7157] security_file_ioctl+0x9b/0x240 [ 113.662792][ T7157] __x64_sys_ioctl+0xb7/0x200 [ 113.663972][ T7157] do_syscall_64+0xcd/0x250 [ 113.665107][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.666612][ T7157] RIP: 0033:0x7f3916b85d29 [ 113.667707][ T7157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.673025][ T7157] RSP: 002b:00007f3917a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.675300][ T7157] RAX: ffffffffffffffda RBX: 00007f3916d75fa0 RCX: 00007f3916b85d29 [ 113.677293][ T7157] RDX: 0000000020000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 113.679269][ T7157] RBP: 00007f3917a19090 R08: 0000000000000000 R09: 0000000000000000 [ 113.681369][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.683307][ T7157] R13: 0000000000000000 R14: 00007f3916d75fa0 R15: 00007ffe1e87fd88 [ 113.685312][ T7157] [ 113.687853][ T7157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.797532][ T7180] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.799854][ T7180] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.802062][ T7180] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.804399][ T7180] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.807845][ T7180] vxlan0: entered promiscuous mode [ 113.809230][ T7180] vxlan0: entered allmulticast mode [ 113.816929][ T7180] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.819205][ T7180] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.821464][ T7180] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.823844][ T7180] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.933078][ T7193] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 113.950306][ T7193] FAULT_INJECTION: forcing a failure. [ 113.950306][ T7193] name failslab, interval 1, probability 0, space 0, times 0 [ 113.954605][ T7193] CPU: 3 UID: 0 PID: 7193 Comm: syz.2.308 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 113.957377][ T7193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.960032][ T7193] Call Trace: [ 113.960882][ T7193] [ 113.961638][ T7193] dump_stack_lvl+0x16c/0x1f0 [ 113.962848][ T7193] should_fail_ex+0x497/0x5b0 [ 113.964045][ T7193] ? fs_reclaim_acquire+0xae/0x150 [ 113.965353][ T7193] should_failslab+0xc2/0x120 [ 113.966514][ T7193] __kmalloc_noprof+0xcb/0x510 [ 113.967690][ T7193] ? rcu_is_watching+0x12/0xc0 [ 113.968883][ T7193] tomoyo_encode2+0x100/0x3e0 [ 113.970080][ T7193] tomoyo_encode+0x29/0x50 [ 113.971206][ T7193] tomoyo_realpath_from_path+0x19d/0x720 [ 113.972599][ T7193] ? tomoyo_path_number_perm+0x235/0x590 [ 113.974021][ T7193] tomoyo_path_number_perm+0x248/0x590 [ 113.975395][ T7193] ? tomoyo_path_number_perm+0x235/0x590 [ 113.975409][ T7193] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.978379][ T7193] ? __pfx_lock_release+0x10/0x10 [ 113.979666][ T7193] ? trace_lock_acquire+0x14e/0x1f0 [ 113.981009][ T7193] ? lock_acquire+0x2f/0xb0 [ 113.982167][ T7193] ? __fget_files+0x40/0x3a0 [ 113.983335][ T7193] ? __fget_files+0x206/0x3a0 [ 113.984510][ T7193] security_file_ioctl+0x9b/0x240 [ 113.985850][ T7193] __x64_sys_ioctl+0xb7/0x200 [ 113.987038][ T7193] do_syscall_64+0xcd/0x250 [ 113.988172][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.989624][ T7193] RIP: 0033:0x7f3916b85d29 [ 113.990756][ T7193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.995465][ T7193] RSP: 002b:00007f3917a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.997531][ T7193] RAX: ffffffffffffffda RBX: 00007f3916d75fa0 RCX: 00007f3916b85d29 [ 113.999540][ T7193] RDX: 0000000020000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 114.001535][ T7193] RBP: 00007f3917a19090 R08: 0000000000000000 R09: 0000000000000000 [ 114.003494][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.005710][ T7193] R13: 0000000000000000 R14: 00007f3916d75fa0 R15: 00007ffe1e87fd88 [ 114.007694][ T7193] [ 114.008805][ T7193] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.056889][ T7201] xt_NFQUEUE: number of total queues is 0 [ 114.062684][ T7203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 114.130293][ T7213] input: syz1 as /devices/virtual/input/input15 [ 114.228749][ T7220] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 114.324964][ T7232] block nbd1: NBD_DISCONNECT [ 114.326668][ T7232] block nbd1: Disconnected due to user request. [ 114.329034][ T7232] block nbd1: shutting down sockets [ 114.352797][ T7234] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16 [ 114.367305][ T7234] FAULT_INJECTION: forcing a failure. [ 114.367305][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 114.373224][ T7234] CPU: 3 UID: 0 PID: 7234 Comm: syz.2.320 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 114.376023][ T7234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.378706][ T7234] Call Trace: [ 114.379609][ T7234] [ 114.380380][ T7234] dump_stack_lvl+0x16c/0x1f0 [ 114.381593][ T7234] should_fail_ex+0x497/0x5b0 [ 114.382798][ T7234] ? fs_reclaim_acquire+0xae/0x150 [ 114.384593][ T7234] should_failslab+0xc2/0x120 [ 114.386416][ T7234] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 114.388647][ T7234] ? __pfx_mark_lock+0x10/0x10 [ 114.390295][ T7234] ? kasprintf+0xc8/0x100 [ 114.391407][ T7234] kvasprintf+0xbd/0x160 [ 114.392493][ T7234] ? __pfx_kvasprintf+0x10/0x10 [ 114.393916][ T7234] ? kernfs_put+0x47/0x50 [ 114.395015][ T7234] ? hlock_class+0x4e/0x130 [ 114.396182][ T7234] ? __lock_acquire+0x15a9/0x3c40 [ 114.397554][ T7234] kasprintf+0xc8/0x100 [ 114.398620][ T7234] ? __pfx_kasprintf+0x10/0x10 [ 114.399855][ T7234] ? __pfx___lock_acquire+0x10/0x10 [ 114.401179][ T7234] ? __pfx_input_devnode+0x10/0x10 [ 114.402487][ T7234] device_get_devnode+0x163/0x2c0 [ 114.403957][ T7234] devtmpfs_delete_node+0xc6/0x160 [ 114.405262][ T7234] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 114.406704][ T7234] ? find_held_lock+0x2d/0x110 [ 114.407983][ T7234] ? kobject_put+0xab/0x5a0 [ 114.409147][ T7234] ? __pfx_klist_children_put+0x10/0x10 [ 114.410527][ T7234] ? klist_children_put+0x44/0x60 [ 114.411789][ T7234] ? klist_put+0xf9/0x1b0 [ 114.412902][ T7234] device_del+0x735/0x9f0 [ 114.414066][ T7234] ? __pfx_device_del+0x10/0x10 [ 114.415310][ T7234] ? lockdep_hardirqs_on+0x7c/0x110 [ 114.416670][ T7234] cdev_device_del+0x1d/0x110 [ 114.417855][ T7234] mousedev_disconnect+0x1c2/0x380 [ 114.419147][ T7234] __input_unregister_device+0x1d5/0x450 [ 114.420596][ T7234] input_unregister_device+0xb9/0x100 [ 114.421989][ T7234] hidp_session_remove+0x26e/0x360 [ 114.423326][ T7234] l2cap_unregister_user+0x1ab/0x240 [ 114.424673][ T7234] hidp_connection_del+0xf3/0x250 [ 114.426109][ T7234] do_hidp_sock_ioctl.constprop.0+0x198/0x520 [ 114.427884][ T7234] ? __pfx_do_hidp_sock_ioctl.constprop.0+0x10/0x10 [ 114.429828][ T7234] ? find_held_lock+0x2d/0x110 [ 114.431089][ T7234] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 114.432620][ T7234] sock_do_ioctl+0x116/0x280 [ 114.433872][ T7234] ? __pfx_sock_do_ioctl+0x10/0x10 [ 114.435245][ T7234] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 114.436899][ T7234] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 114.438547][ T7234] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 114.440309][ T7234] sock_ioctl+0x228/0x6c0 [ 114.441487][ T7234] ? __pfx_sock_ioctl+0x10/0x10 [ 114.442742][ T7234] ? selinux_file_ioctl+0x180/0x270 [ 114.444101][ T7234] ? selinux_file_ioctl+0xb4/0x270 [ 114.445424][ T7234] ? __pfx_sock_ioctl+0x10/0x10 [ 114.446646][ T7234] __x64_sys_ioctl+0x190/0x200 [ 114.447931][ T7234] do_syscall_64+0xcd/0x250 [ 114.449099][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.450622][ T7234] RIP: 0033:0x7f3916b85d29 [ 114.451762][ T7234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.456620][ T7234] RSP: 002b:00007f3917a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.458732][ T7234] RAX: ffffffffffffffda RBX: 00007f3916d75fa0 RCX: 00007f3916b85d29 [ 114.460784][ T7234] RDX: 0000000020000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 114.462765][ T7234] RBP: 00007f3917a19090 R08: 0000000000000000 R09: 0000000000000000 [ 114.464951][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.467598][ T7234] R13: 0000000000000000 R14: 00007f3916d75fa0 R15: 00007ffe1e87fd88 [ 114.469612][ T7234] [ 114.476204][ T7236] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17 [ 114.504438][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'. [ 115.043709][ T5941] Bluetooth: hci1: command 0x0405 tx timeout [ 115.882261][ T7266] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input18 [ 115.893128][ T7266] FAULT_INJECTION: forcing a failure. [ 115.893128][ T7266] name failslab, interval 1, probability 0, space 0, times 0 [ 115.898990][ T7266] CPU: 1 UID: 0 PID: 7266 Comm: syz.1.330 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 115.902640][ T7266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.906239][ T7266] Call Trace: [ 115.907412][ T7266] [ 115.908456][ T7266] dump_stack_lvl+0x16c/0x1f0 [ 115.910128][ T7266] should_fail_ex+0x497/0x5b0 [ 115.911753][ T7266] ? fs_reclaim_acquire+0xae/0x150 [ 115.913533][ T7266] should_failslab+0xc2/0x120 [ 115.915023][ T7266] __kmalloc_cache_noprof+0x68/0x410 [ 115.916486][ T7266] ? devres_release_all+0x71/0x190 [ 115.918241][ T7266] kobject_uevent_env+0x265/0x1870 [ 115.920002][ T7266] ? __pfx_dev_uevent_name+0x10/0x10 [ 115.921865][ T7266] ? bus_to_subsys+0x12d/0x160 [ 115.923510][ T7266] device_del+0x623/0x9f0 [ 115.925036][ T7266] ? __pfx_device_del+0x10/0x10 [ 115.926645][ T7266] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.928516][ T7266] cdev_device_del+0x1d/0x110 [ 115.930208][ T7266] mousedev_disconnect+0x1c2/0x380 [ 115.931953][ T7266] __input_unregister_device+0x1d5/0x450 [ 115.933676][ T7266] input_unregister_device+0xb9/0x100 [ 115.935498][ T7266] hidp_session_remove+0x26e/0x360 [ 115.937281][ T7266] l2cap_unregister_user+0x1ab/0x240 [ 115.939152][ T7266] hidp_connection_del+0xf3/0x250 [ 115.940912][ T7266] do_hidp_sock_ioctl.constprop.0+0x198/0x520 [ 115.943025][ T7266] ? __pfx_do_hidp_sock_ioctl.constprop.0+0x10/0x10 [ 115.945316][ T7266] ? find_held_lock+0x2d/0x110 [ 115.946907][ T7266] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 115.948888][ T7266] sock_do_ioctl+0x116/0x280 [ 115.950500][ T7266] ? __pfx_sock_do_ioctl+0x10/0x10 [ 115.952250][ T7266] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 115.954527][ T7266] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 115.956710][ T7266] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 115.959011][ T7266] sock_ioctl+0x228/0x6c0 [ 115.960528][ T7266] ? __pfx_sock_ioctl+0x10/0x10 [ 115.962206][ T7266] ? selinux_file_ioctl+0x180/0x270 [ 115.964006][ T7266] ? selinux_file_ioctl+0xb4/0x270 [ 115.965769][ T7266] ? __pfx_sock_ioctl+0x10/0x10 [ 115.967408][ T7266] __x64_sys_ioctl+0x190/0x200 [ 115.969033][ T7266] do_syscall_64+0xcd/0x250 [ 115.970600][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.972588][ T7266] RIP: 0033:0x7f9b27385d29 [ 115.974104][ T7266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.980514][ T7266] RSP: 002b:00007f9b28213038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.983387][ T7266] RAX: ffffffffffffffda RBX: 00007f9b27575fa0 RCX: 00007f9b27385d29 [ 115.986141][ T7266] RDX: 0000000020000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 115.988776][ T7266] RBP: 00007f9b28213090 R08: 0000000000000000 R09: 0000000000000000 [ 115.991423][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.994074][ T7266] R13: 0000000000000000 R14: 00007f9b27575fa0 R15: 00007fffc1e7c438 [ 115.996744][ T7266] [ 116.032164][ T7273] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input19 [ 116.242575][ T7299] vivid-003: disconnect [ 116.247892][ T7298] vivid-003: reconnect [ 116.308380][ T7303] FAULT_INJECTION: forcing a failure. [ 116.308380][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 116.311500][ T7303] CPU: 1 UID: 0 PID: 7303 Comm: syz.1.342 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 116.314114][ T7303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.316860][ T7303] Call Trace: [ 116.317754][ T7303] [ 116.318527][ T7303] dump_stack_lvl+0x16c/0x1f0 [ 116.319750][ T7303] should_fail_ex+0x497/0x5b0 [ 116.320985][ T7303] ? fs_reclaim_acquire+0xae/0x150 [ 116.322283][ T7303] should_failslab+0xc2/0x120 [ 116.323547][ T7303] __kmalloc_noprof+0xcb/0x510 [ 116.324776][ T7303] kobject_get_path+0xd9/0x2b0 [ 116.326033][ T7303] kobject_uevent_env+0x289/0x1870 [ 116.327343][ T7303] ? __pfx_dev_uevent_name+0x10/0x10 [ 116.328707][ T7303] ? bus_to_subsys+0x12d/0x160 [ 116.329935][ T7303] device_del+0x623/0x9f0 [ 116.331063][ T7303] ? __pfx_device_del+0x10/0x10 [ 116.332320][ T7303] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.333657][ T7303] cdev_device_del+0x1d/0x110 [ 116.334865][ T7303] mousedev_disconnect+0x1c2/0x380 [ 116.336163][ T7303] __input_unregister_device+0x1d5/0x450 [ 116.337613][ T7303] input_unregister_device+0xb9/0x100 [ 116.338968][ T7303] hidp_session_remove+0x26e/0x360 [ 116.340263][ T7303] l2cap_unregister_user+0x1ab/0x240 [ 116.341605][ T7303] hidp_connection_del+0xf3/0x250 [ 116.342860][ T7303] do_hidp_sock_ioctl.constprop.0+0x198/0x520 [ 116.344368][ T7303] ? __pfx_do_hidp_sock_ioctl.constprop.0+0x10/0x10 [ 116.346101][ T7303] ? find_held_lock+0x2d/0x110 [ 116.347326][ T7303] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 116.348844][ T7303] sock_do_ioctl+0x116/0x280 [ 116.350050][ T7303] ? __pfx_sock_do_ioctl+0x10/0x10 [ 116.351365][ T7303] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 116.353001][ T7303] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 116.354646][ T7303] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.356369][ T7303] sock_ioctl+0x228/0x6c0 [ 116.357489][ T7303] ? __pfx_sock_ioctl+0x10/0x10 [ 116.358733][ T7303] ? selinux_file_ioctl+0x180/0x270 [ 116.360054][ T7303] ? selinux_file_ioctl+0xb4/0x270 [ 116.361350][ T7303] ? __pfx_sock_ioctl+0x10/0x10 [ 116.362568][ T7303] __x64_sys_ioctl+0x190/0x200 [ 116.363778][ T7303] do_syscall_64+0xcd/0x250 [ 116.364974][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.366505][ T7303] RIP: 0033:0x7f9b27385d29 [ 116.367670][ T7303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.372445][ T7303] RSP: 002b:00007f9b28213038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.374562][ T7303] RAX: ffffffffffffffda RBX: 00007f9b27575fa0 RCX: 00007f9b27385d29 [ 116.376501][ T7303] RDX: 0000000020000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 116.378494][ T7303] RBP: 00007f9b28213090 R08: 0000000000000000 R09: 0000000000000000 [ 116.380431][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.382395][ T7303] R13: 0000000000000000 R14: 00007f9b27575fa0 R15: 00007fffc1e7c438 [ 116.384397][ T7303] [ 116.397636][ T1454] usb 9-1: USB disconnect, device number 6 [ 116.404224][ T1454] usblp0: removed [ 116.423683][ T7305] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input20 [ 116.555344][ T7308] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 116.560422][ T7321] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 116.567316][ T7319] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 116.570502][ T7319] overlayfs: missing 'lowerdir' [ 116.654282][ T39] kauditd_printk_skb: 49 callbacks suppressed [ 116.654293][ T39] audit: type=1400 audit(1734538542.293:668): avc: denied { lock } for pid=7322 comm="syz.1.351" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.661862][ T39] audit: type=1400 audit(1734538542.293:669): avc: denied { map } for pid=7322 comm="syz.1.351" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.662036][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 116.724517][ T7327] FAULT_INJECTION: forcing a failure. [ 116.724517][ T7327] name failslab, interval 1, probability 0, space 0, times 0 [ 116.728786][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: syz.4.352 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 116.732452][ T7327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.736072][ T7327] Call Trace: [ 116.737219][ T7327] [ 116.738225][ T7327] dump_stack_lvl+0x16c/0x1f0 [ 116.739919][ T7327] should_fail_ex+0x497/0x5b0 [ 116.741541][ T7327] ? fs_reclaim_acquire+0xae/0x150 [ 116.743322][ T7327] should_failslab+0xc2/0x120 [ 116.744940][ T7327] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 116.747094][ T7327] ? __pfx_widen_string+0x10/0x10 [ 116.748780][ T7327] ? __kmalloc_noprof+0x21c/0x510 [ 116.750514][ T7327] ? kasprintf+0xc8/0x100 [ 116.751995][ T7327] kvasprintf+0xbd/0x160 [ 116.753432][ T7327] ? __pfx_kvasprintf+0x10/0x10 [ 116.755072][ T7327] ? __pfx_vsnprintf+0x10/0x10 [ 116.756725][ T7327] kasprintf+0xc8/0x100 [ 116.758172][ T7327] ? __pfx_kasprintf+0x10/0x10 [ 116.759846][ T7327] ? __pfx_add_uevent_var+0x10/0x10 [ 116.761613][ T7327] ? __pfx_vsnprintf+0x10/0x10 [ 116.763253][ T7327] ? __pfx_input_devnode+0x10/0x10 [ 116.764994][ T7327] device_get_devnode+0x163/0x2c0 [ 116.766723][ T7327] dev_uevent+0x416/0x770 [ 116.768162][ T7327] ? __pfx_dev_uevent+0x10/0x10 [ 116.769847][ T7327] ? __asan_memcpy+0x3c/0x60 [ 116.771421][ T7327] ? kobject_get_path+0x94/0x2b0 [ 116.773092][ T7327] ? kobject_uevent_env+0x454/0x1870 [ 116.774886][ T7327] ? __pfx_dev_uevent+0x10/0x10 [ 116.776585][ T7327] kobject_uevent_env+0x656/0x1870 [ 116.778316][ T7327] ? bus_to_subsys+0x12d/0x160 [ 116.779935][ T7327] device_del+0x623/0x9f0 [ 116.781406][ T7327] ? __pfx_device_del+0x10/0x10 [ 116.783041][ T7327] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.784501][ T7327] cdev_device_del+0x1d/0x110 [ 116.785801][ T7327] mousedev_disconnect+0x1c2/0x380 [ 116.787117][ T7327] __input_unregister_device+0x1d5/0x450 [ 116.788529][ T7327] input_unregister_device+0xb9/0x100 [ 116.789878][ T7327] hidp_session_remove+0x26e/0x360 [ 116.791220][ T7327] l2cap_unregister_user+0x1ab/0x240 [ 116.793072][ T7327] hidp_connection_del+0xf3/0x250 [ 116.794922][ T7327] do_hidp_sock_ioctl.constprop.0+0x198/0x520 [ 116.797045][ T7327] ? __pfx_do_hidp_sock_ioctl.constprop.0+0x10/0x10 [ 116.799279][ T7327] ? find_held_lock+0x2d/0x110 [ 116.800930][ T7327] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 116.802981][ T7327] sock_do_ioctl+0x116/0x280 [ 116.804544][ T7327] ? __pfx_sock_do_ioctl+0x10/0x10 [ 116.806288][ T7327] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 116.808449][ T7327] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 116.810671][ T7327] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.812983][ T7327] sock_ioctl+0x228/0x6c0 [ 116.814473][ T7327] ? __pfx_sock_ioctl+0x10/0x10 [ 116.816168][ T7327] ? selinux_file_ioctl+0x180/0x270 [ 116.817922][ T7327] ? selinux_file_ioctl+0xb4/0x270 [ 116.819707][ T7327] ? __pfx_sock_ioctl+0x10/0x10 [ 116.821383][ T7327] __x64_sys_ioctl+0x190/0x200 [ 116.823036][ T7327] do_syscall_64+0xcd/0x250 [ 116.824582][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.826612][ T7327] RIP: 0033:0x7f416e985d29 [ 116.828130][ T7327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.834520][ T7327] RSP: 002b:00007f416f72f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.837319][ T7327] RAX: ffffffffffffffda RBX: 00007f416eb75fa0 RCX: 00007f416e985d29 [ 116.839958][ T7327] RDX: 0000000020000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 116.842612][ T7327] RBP: 00007f416f72f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.845271][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.847921][ T7327] R13: 0000000000000000 R14: 00007f416eb75fa0 R15: 00007ffce33f08b8 [ 116.850572][ T7327] [ 116.851693][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.139739][ T30] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 117.283527][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 117.288385][ T30] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 117.291306][ T30] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 117.295968][ T30] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 117.299139][ T30] usb 9-1: config 250 has no interface number 0 [ 117.301477][ T30] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 117.305677][ T30] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.309344][ T30] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.313282][ T30] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 117.316906][ T30] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.322081][ T30] usb 9-1: config 250 interface 228 has no altsetting 0 [ 117.324965][ T30] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 117.327281][ T30] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 117.329354][ T30] usb 9-1: Product: syz [ 117.331286][ T30] usb 9-1: SerialNumber: syz [ 117.337149][ T30] hub 9-1:250.228: bad descriptor, ignoring hub [ 117.339586][ T30] hub 9-1:250.228: probe with driver hub failed with error -5 [ 117.530651][ T39] audit: type=1400 audit(1734538543.217:670): avc: denied { map } for pid=7330 comm="syz.1.354" path="socket:[14955]" dev="sockfs" ino=14955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.535938][ T30] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 117.536388][ T39] audit: type=1400 audit(1734538543.217:671): avc: denied { read } for pid=7330 comm="syz.1.354" path="socket:[14955]" dev="sockfs" ino=14955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.568724][ T39] audit: type=1400 audit(1734538543.217:672): avc: denied { connect } for pid=7330 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.958413][ T7337] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input21 [ 118.224280][ T7272] syz.0.331 (7272) used greatest stack depth: 19264 bytes left [ 118.256653][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.325121][ T39] audit: type=1400 audit(1734538544.056:673): avc: denied { setopt } for pid=7346 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.328388][ T7347] netlink: 100 bytes leftover after parsing attributes in process `syz.0.360'. [ 118.616253][ T30] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 118.762877][ T30] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 118.765183][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.767605][ T30] usb 5-1: Product: syz [ 118.768887][ T30] usb 5-1: Manufacturer: syz [ 118.770088][ T30] usb 5-1: SerialNumber: syz [ 118.777009][ T30] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 118.810414][ T1020] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 118.996722][ T7356] binder: BINDER_SET_CONTEXT_MGR already set [ 119.000012][ T7356] binder: 7355:7356 ioctl 4018620d 20000100 returned -16 [ 119.001972][ T7356] binder: BINDER_SET_CONTEXT_MGR already set [ 119.004220][ T7356] binder: 7355:7356 ioctl 4018620d 20000100 returned -16 [ 119.050042][ T39] audit: type=1400 audit(1734538544.812:674): avc: denied { write } for pid=7360 comm="syz.1.364" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 119.056244][ T39] audit: type=1400 audit(1734538544.812:675): avc: denied { open } for pid=7360 comm="syz.1.364" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 119.056250][ T7361] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 119.057832][ T7361] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 119.091252][ T39] audit: type=1400 audit(1734538544.854:676): avc: denied { read } for pid=7364 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.098512][ T39] audit: type=1400 audit(1734538544.854:677): avc: denied { open } for pid=7364 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.184498][ T7370] vxcan2: entered promiscuous mode [ 119.200394][ T8] usb 5-1: USB disconnect, device number 11 [ 119.997685][ T1020] usb 5-1: Service connection timeout for: 256 [ 119.999374][ T1020] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 120.004064][ T1020] ath9k_htc: Failed to initialize the device [ 120.006172][ T8] usb 5-1: ath9k_htc: USB layer deinitialized [ 120.064093][ T58] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 120.207521][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 120.210805][ T58] usb 7-1: config 2 has an invalid interface number: 89 but max is 0 [ 120.212793][ T58] usb 7-1: config 2 has no interface number 0 [ 120.214367][ T58] usb 7-1: config 2 interface 89 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 120.217346][ T58] usb 7-1: config 2 interface 89 altsetting 3 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.219790][ T58] usb 7-1: config 2 interface 89 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 120.222516][ T58] usb 7-1: config 2 interface 89 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 120.225216][ T58] usb 7-1: config 2 interface 89 altsetting 3 bulk endpoint 0x9 has invalid maxpacket 64 [ 120.227824][ T58] usb 7-1: config 2 interface 89 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 120.230453][ T58] usb 7-1: config 2 interface 89 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 120.233132][ T58] usb 7-1: config 2 interface 89 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 120.237282][ T58] usb 7-1: config 2 interface 89 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 120.237304][ T58] usb 7-1: config 2 interface 89 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 120.237323][ T58] usb 7-1: config 2 interface 89 altsetting 3 endpoint 0x2 has invalid maxpacket 1552, setting to 64 [ 120.237344][ T58] usb 7-1: config 2 interface 89 has no altsetting 0 [ 120.239009][ T58] usb 7-1: New USB device found, idVendor=0af0, idProduct=6250, bcdDevice=e6.9b [ 120.240727][ T7409] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input22 [ 120.254252][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.257065][ T58] usb 7-1: Product: ဉ [ 120.258164][ T58] usb 7-1: Manufacturer: Ð… [ 120.259294][ T58] usb 7-1: SerialNumber: и [ 120.263308][ T7398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.343378][ T7419] netlink: 56 bytes leftover after parsing attributes in process `syz.1.379'. [ 120.458274][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.461840][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.465762][ T7399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.468531][ T7399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.478170][ T58] option 7-1:2.89: GSM modem (1-port) converter detected [ 120.483078][ T58] usb 7-1: USB disconnect, device number 9 [ 120.489978][ T58] option 7-1:2.89: device disconnected [ 120.626656][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 120.715256][ T7444] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 120.745218][ T7446] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input23 [ 120.781225][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.783502][ T8] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.786055][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.788533][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 120.791213][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 120.794970][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.797405][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.800023][ T8] usb 5-1: Product: syz [ 120.801097][ T8] usb 5-1: Manufacturer: syz [ 120.804470][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 120.805832][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 120.844307][ T7455] syz.1.390: attempt to access beyond end of device [ 120.844307][ T7455] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 120.848760][ T7455] befs: (nbd1): unable to read superblock [ 120.881657][ T7457] netlink: 'syz.1.391': attribute type 1 has an invalid length. [ 120.895434][ T75] usb 9-1: USB disconnect, device number 7 [ 120.899022][ T8] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 120.899279][ T75] usblp0: removed [ 120.900576][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 120.976363][ T7462] overlayfs: failed to resolve './file1': -2 [ 120.992440][ T7464] syz.4.392: attempt to access beyond end of device [ 120.992440][ T7464] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 120.995712][ T7464] befs: (nbd4): unable to read superblock [ 121.009558][ T1454] usb 5-1: USB disconnect, device number 12 [ 121.034064][ T7472] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input24 [ 121.083092][ T7478] netlink: 132 bytes leftover after parsing attributes in process `syz.1.398'. [ 121.122748][ T7490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.401'. [ 121.124968][ T7490] all: renamed from gre0 (while UP) [ 121.300138][ T7518] netlink: 448 bytes leftover after parsing attributes in process `syz.1.408'. [ 121.303172][ T7518] unsupported nla_type 14345 [ 121.322591][ T7522] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input25 [ 121.386574][ T7529] mkiss: ax0: crc mode is auto. [ 121.395013][ T7529] trusted_key: syz.2.411 sent an empty control message without MSG_MORE. [ 121.398176][ T75] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 121.491923][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 121.491935][ T39] audit: type=1400 audit(1734538547.374:696): avc: denied { create } for pid=7537 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 121.534337][ T39] audit: type=1400 audit(1734538547.426:697): avc: denied { ioctl } for pid=7537 comm="syz.1.412" path="socket:[17724]" dev="sockfs" ino=17724 ioctlcmd=0x5401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 121.560067][ T75] usb 9-1: Using ep0 maxpacket: 8 [ 121.562786][ T75] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 121.564862][ T75] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 121.571490][ T75] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 121.573719][ T75] usb 9-1: config 250 has no interface number 0 [ 121.573969][ T39] audit: type=1400 audit(1734538547.468:698): avc: denied { mount } for pid=7544 comm="syz.0.413" name="/" dev="configfs" ino=2188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 121.575341][ T75] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 121.575357][ T75] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 121.582873][ T39] audit: type=1400 audit(1734538547.479:699): avc: denied { write } for pid=7546 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.593800][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 121.595166][ T75] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.596071][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 121.599678][ T75] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 121.599704][ T75] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 121.599728][ T75] usb 9-1: config 250 interface 228 has no altsetting 0 [ 121.604736][ T39] audit: type=1400 audit(1734538547.500:700): avc: denied { search } for pid=7544 comm="syz.0.413" name="/" dev="configfs" ino=2188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.609629][ T75] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 121.610234][ T39] audit: type=1400 audit(1734538547.500:701): avc: denied { write } for pid=7544 comm="syz.0.413" name="/" dev="configfs" ino=2188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.615483][ T75] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 121.615497][ T75] usb 9-1: Product: syz [ 121.615505][ T75] usb 9-1: SerialNumber: syz [ 121.621290][ T75] hub 9-1:250.228: bad descriptor, ignoring hub [ 121.625414][ T39] audit: type=1400 audit(1734538547.500:702): avc: denied { add_name } for pid=7544 comm="syz.0.413" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.629740][ T75] hub 9-1:250.228: probe with driver hub failed with error -5 [ 121.634935][ T39] audit: type=1400 audit(1734538547.500:703): avc: denied { create } for pid=7544 comm="syz.0.413" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 121.642209][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 121.645011][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 121.694479][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 121.697219][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 121.820867][ T75] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 121.887704][ T39] audit: type=1400 audit(1734538547.794:704): avc: denied { read write } for pid=7562 comm="" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.892782][ T39] audit: type=1400 audit(1734538547.794:705): avc: denied { open } for pid=7562 comm="" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 122.169290][ T58] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 122.324898][ T58] usb 7-1: config 0 interface 0 altsetting 18 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.328262][ T58] usb 7-1: config 0 interface 0 altsetting 18 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 122.331058][ T58] usb 7-1: config 0 interface 0 altsetting 18 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 122.334922][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.338104][ T58] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 122.342145][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.344188][ T58] usb 7-1: Product: syz [ 122.345269][ T58] usb 7-1: Manufacturer: syz [ 122.346439][ T58] usb 7-1: SerialNumber: syz [ 122.348992][ T58] usb 7-1: config 0 descriptor?? [ 122.356325][ T7567] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.370419][ T7579] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input26 [ 122.618658][ T58] appledisplay 7-1:0.0: Error while getting initial brightness: -110 [ 122.623664][ T58] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110 [ 122.649097][ T1020] usb 7-1: USB disconnect, device number 10 [ 122.657700][ T7597] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 122.858831][ T7601] ======================================================= [ 122.858831][ T7601] WARNING: The mand mount option has been deprecated and [ 122.858831][ T7601] and is ignored by this kernel. Remove the mand [ 122.858831][ T7601] option from the mount to silence this warning. [ 122.858831][ T7601] ======================================================= [ 122.868121][ T7601] cgroup: noprefix used incorrectly [ 122.893219][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 123.036401][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 123.039057][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 123.041311][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.043785][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.046473][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.049001][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.052325][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.054615][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.107120][ T7613] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input27 [ 123.254097][ T9] usb 5-1: usb_control_msg returned -32 [ 123.256415][ T9] usbtmc 5-1:16.0: can't read capabilities [ 123.286375][ T7635] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 123.692411][ T7650] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 123.694484][ T7650] netlink: 'syz.0.426': attribute type 2 has an invalid length. [ 124.067421][ T7633] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.123329][ T7652] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input28 [ 124.350626][ T7666] option changes via remount are deprecated (pid=7665 comm=syz.1.444) [ 124.405029][ T7667] 9pnet_virtio: no channels available for device syz [ 124.521072][ T7674] input: syz0 as /devices/virtual/input/input29 [ 125.071519][ T8] usb 9-1: USB disconnect, device number 8 [ 125.077993][ T8] usblp0: removed [ 125.254352][ T7685] bond0: entered promiscuous mode [ 125.256631][ T7685] bond_slave_0: entered promiscuous mode [ 125.258146][ T7685] bond_slave_1: entered promiscuous mode [ 125.259635][ T7685] batadv_slave_0: entered promiscuous mode [ 125.322222][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.646055][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 125.789064][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 125.791625][ T8] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 125.793754][ T8] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 125.795977][ T8] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 125.798307][ T8] usb 6-1: config 250 has no interface number 0 [ 125.800043][ T8] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 125.802990][ T8] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 125.805702][ T8] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.808432][ T8] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 125.811088][ T8] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 125.814607][ T8] usb 6-1: config 250 interface 228 has no altsetting 0 [ 125.817756][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 125.820173][ T8] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 125.822308][ T8] usb 6-1: Product: syz [ 125.823409][ T8] usb 6-1: SerialNumber: syz [ 125.827876][ T8] hub 6-1:250.228: bad descriptor, ignoring hub [ 125.829632][ T8] hub 6-1:250.228: probe with driver hub failed with error -5 [ 126.021355][ T8] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 126.047763][ T5996] usb 5-1: USB disconnect, device number 13 [ 126.126226][ T7723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.462'. [ 126.210518][ T7736] lo speed is unknown, defaulting to 1000 [ 126.213436][ T7736] lo speed is unknown, defaulting to 1000 [ 126.215444][ T7736] lo speed is unknown, defaulting to 1000 [ 126.220039][ T7736] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 126.229637][ T7736] lo speed is unknown, defaulting to 1000 [ 126.229698][ T7730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.231785][ T7736] lo speed is unknown, defaulting to 1000 [ 126.232960][ T7730] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.235094][ T7736] lo speed is unknown, defaulting to 1000 [ 126.238647][ T7736] lo speed is unknown, defaulting to 1000 [ 126.247909][ T7730] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.253450][ T7730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.254974][ T7730] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.258936][ T7730] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.263627][ T7730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.265978][ T7730] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.269053][ T7730] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.272859][ T7730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.274460][ T7730] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.280656][ T7742] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 126.301648][ T7730] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.469471][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 126.469482][ T39] audit: type=1400 audit(1734538552.602:729): avc: denied { append } for pid=7761 comm="syz.2.473" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.189472][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 127.192912][ T39] audit: type=1400 audit(1734538553.368:730): avc: denied { create } for pid=7776 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 127.197729][ T39] audit: type=1400 audit(1734538553.368:731): avc: denied { sys_admin } for pid=7776 comm="syz.0.476" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 127.206302][ T7777] lo speed is unknown, defaulting to 1000 [ 127.475090][ T8] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 127.546602][ T7787] lo speed is unknown, defaulting to 1000 [ 127.618034][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 127.620589][ T8] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 127.622675][ T8] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 127.625507][ T39] audit: type=1400 audit(1734538553.820:732): avc: denied { write } for pid=7790 comm="syz.2.479" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.631283][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.633912][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.636366][ T8] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.639877][ T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.642188][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.657419][ T7791] loop7: detected capacity change from 16384 to 16383 [ 127.817838][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.483'. [ 127.837793][ T8] usb 9-1: GET_CAPABILITIES returned 0 [ 127.839292][ T8] usbtmc 9-1:16.0: can't read capabilities [ 127.858130][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 127.863091][ T6220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.865236][ T6220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.132281][ T5969] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 128.151364][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.218088][ T65] Bluetooth: hci1: command 0x0405 tx timeout [ 128.218149][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.221906][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.284706][ T5969] usb 7-1: Using ep0 maxpacket: 8 [ 128.287259][ T5969] usb 7-1: config 0 has an invalid interface number: 203 but max is 0 [ 128.289376][ T5969] usb 7-1: config 0 has no interface number 0 [ 128.292485][ T5969] usb 7-1: New USB device found, idVendor=257a, idProduct=260a, bcdDevice=69.93 [ 128.295480][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.297470][ T5969] usb 7-1: Product: syz [ 128.298584][ T5969] usb 7-1: Manufacturer: syz [ 128.299934][ T5969] usb 7-1: SerialNumber: syz [ 128.302765][ T5969] usb 7-1: config 0 descriptor?? [ 128.306137][ T5969] option 7-1:0.203: GSM modem (1-port) converter detected [ 128.550391][ T39] audit: type=1400 audit(1734538554.785:733): avc: denied { listen } for pid=7792 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.070302][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 129.158250][ T39] audit: type=1326 audit(1734538555.426:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.0.489" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14d6785d29 code=0x0 [ 129.344552][ T5996] usb 6-1: USB disconnect, device number 4 [ 129.350211][ T5996] usblp0: removed [ 129.361570][ T8] usb 9-1: USB disconnect, device number 9 [ 129.547213][ T7831] overlayfs: workdir and upperdir must reside under the same mount [ 129.558882][ T39] audit: type=1400 audit(1734538555.846:735): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 129.944013][ T39] audit: type=1400 audit(1734538556.255:736): avc: denied { ioctl } for pid=7840 comm="syz.0.496" path="socket:[18872]" dev="sockfs" ino=18872 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.973889][ T39] audit: type=1400 audit(1734538556.287:737): avc: denied { accept } for pid=7842 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 129.977618][ T7843] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.981230][ T7843] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.983384][ T7843] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.985577][ T7843] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.123204][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.199411][ T65] Bluetooth: hci1: command 0x0405 tx timeout [ 130.199497][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.201111][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.256528][ T75] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.399350][ T75] usb 5-1: Using ep0 maxpacket: 8 [ 130.402477][ T75] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 130.404533][ T75] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 130.406717][ T75] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 130.409104][ T75] usb 5-1: config 250 has no interface number 0 [ 130.412211][ T75] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 130.415093][ T75] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 130.417652][ T75] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.427766][ T75] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 130.431822][ T75] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 130.435398][ T75] usb 5-1: config 250 interface 228 has no altsetting 0 [ 130.438407][ T75] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 130.440819][ T75] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 130.442971][ T75] usb 5-1: Product: syz [ 130.444014][ T75] usb 5-1: SerialNumber: syz [ 130.448265][ T75] hub 5-1:250.228: bad descriptor, ignoring hub [ 130.449899][ T75] hub 5-1:250.228: probe with driver hub failed with error -5 [ 130.582244][ T8] usb 7-1: USB disconnect, device number 11 [ 130.584202][ T8] option 7-1:0.203: device disconnected [ 130.604394][ T39] audit: type=1400 audit(1734538556.948:738): avc: denied { ioctl } for pid=7855 comm="syz.2.501" path="socket:[20724]" dev="sockfs" ino=20724 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 130.642097][ T75] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 130.798329][ T7869] netlink: 'syz.2.506': attribute type 6 has an invalid length. [ 131.024507][ T7883] xt_hashlimit: size too large, truncated to 1048576 [ 131.541189][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 131.541200][ T39] audit: type=1400 audit(1734538557.924:741): avc: denied { create } for pid=7896 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.549085][ T39] audit: type=1400 audit(1734538557.935:742): avc: denied { setopt } for pid=7896 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.555287][ T39] audit: type=1400 audit(1734538557.935:743): avc: denied { bind } for pid=7896 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.571973][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 131.574257][ T7899] netlink: 5 bytes leftover after parsing attributes in process `syz.2.514'. [ 131.600544][ T39] audit: type=1400 audit(1734538557.998:744): avc: denied { connect } for pid=7900 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.639556][ T75] usb 5-1: USB disconnect, device number 14 [ 131.645558][ T75] usblp0: removed [ 131.686202][ T7909] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 131.701073][ T7913] openvswitch: netlink: Key type 2070 is out of range max 32 [ 131.726386][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.728061][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.800520][ T39] audit: type=1400 audit(1734538558.208:745): avc: denied { write } for pid=7915 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 132.058808][ T5941] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 132.063220][ T7945] mkiss: ax0: crc mode is auto. [ 132.104946][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.180961][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.182700][ T5939] Bluetooth: hci1: command 0x0405 tx timeout [ 132.185916][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.194621][ T7952] syz.0.526: attempt to access beyond end of device [ 132.194621][ T7952] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 132.199459][ T7952] befs: (nbd0): unable to read superblock [ 132.531314][ T39] audit: type=1400 audit(1734538558.964:746): avc: denied { ioctl } for pid=7969 comm="syz.4.530" path="mnt:[4026533023]" dev="nsfs" ino=4026533023 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 132.591658][ T39] audit: type=1400 audit(1734538559.037:747): avc: denied { setopt } for pid=7978 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.614485][ T39] audit: type=1400 audit(1734538559.058:748): avc: denied { setopt } for pid=7971 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.626032][ T7981] ipt_REJECT: ECHOREPLY no longer supported. [ 132.885909][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 133.029088][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 133.033510][ T8] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 133.035660][ T8] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 133.037892][ T8] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 133.040446][ T8] usb 5-1: config 250 has no interface number 0 [ 133.042172][ T8] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 133.046011][ T8] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 133.049157][ T8] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.052143][ T8] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 133.055315][ T8] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 133.059847][ T8] usb 5-1: config 250 interface 228 has no altsetting 0 [ 133.064645][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 133.066842][ T7989] nbd: socks must be embedded in a SOCK_ITEM attr [ 133.067330][ T8] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 133.071225][ T8] usb 5-1: Product: syz [ 133.072426][ T8] usb 5-1: SerialNumber: syz [ 133.081479][ T8] hub 5-1:250.228: bad descriptor, ignoring hub [ 133.083288][ T8] hub 5-1:250.228: probe with driver hub failed with error -5 [ 133.225032][ T39] audit: type=1400 audit(1734538559.698:749): avc: denied { accept } for pid=8004 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.232772][ T8004] ALSA: mixer_oss: invalid OSS volume '¢' [ 133.274216][ T8] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 133.316262][ T8018] tipc: Started in network mode [ 133.317591][ T8018] tipc: Node identity a68ca2431bd, cluster identity 4711 [ 133.321008][ T8018] tipc: Enabled bearer , priority 0 [ 133.326935][ T8018] syzkaller0: MTU too low for tipc bearer [ 133.328402][ T8018] tipc: Disabling bearer [ 133.419782][ T8021] syz.4.546: attempt to access beyond end of device [ 133.419782][ T8021] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 133.464396][ T39] audit: type=1400 audit(1734538559.950:750): avc: denied { module_load } for pid=8020 comm="syz.4.546" path="/82/bus" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 133.620199][ T8035] devtmpfs: Cannot enable quota on remount [ 133.793904][ T8042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.553'. [ 133.796232][ T8042] netlink: 228 bytes leftover after parsing attributes in process `syz.4.553'. [ 133.798625][ T8042] netlink: 64 bytes leftover after parsing attributes in process `syz.4.553'. [ 133.803009][ T8042] netlink: 'syz.4.553': attribute type 7 has an invalid length. [ 133.805001][ T8042] netlink: 244 bytes leftover after parsing attributes in process `syz.4.553'. [ 133.810926][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.553'. [ 133.813822][ T8045] netlink: 228 bytes leftover after parsing attributes in process `syz.4.553'. [ 133.816855][ T8045] netlink: 64 bytes leftover after parsing attributes in process `syz.4.553'. [ 133.947290][ T8053] lo speed is unknown, defaulting to 1000 [ 134.009039][ T8056] program syz.2.557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.121817][ T8059] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 134.218973][ T8066] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1542 sclass=netlink_tcpdiag_socket pid=8066 comm=syz.1.559 [ 134.267731][ T30] usb 5-1: USB disconnect, device number 15 [ 134.270404][ T30] usblp0: removed [ 135.143203][ T8096] netlink: 'syz.1.568': attribute type 4 has an invalid length. [ 135.153004][ T8096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8096 comm=syz.1.568 [ 135.296904][ T8108] macvlan0: entered allmulticast mode [ 135.298515][ T8108] veth1_vlan: entered allmulticast mode [ 135.310115][ T8108] overlayfs: failed to get inode (-116) [ 135.312035][ T8108] overlayfs: failed to look up (file0) for ino (-116) [ 135.316718][ T8108] veth1_vlan: left allmulticast mode [ 135.326333][ T8108] macvlan0 (unregistering): left allmulticast mode [ 135.600853][ T30] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 135.753043][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 135.755983][ T30] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 135.758024][ T30] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 135.760247][ T30] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 135.762450][ T30] usb 9-1: config 250 has no interface number 0 [ 135.767153][ T30] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 135.770171][ T30] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 135.773563][ T30] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.776104][ T30] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 135.778615][ T30] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 135.782359][ T30] usb 9-1: config 250 interface 228 has no altsetting 0 [ 135.785311][ T30] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 135.787718][ T30] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 135.789776][ T30] usb 9-1: Product: syz [ 135.790847][ T30] usb 9-1: SerialNumber: syz [ 135.795616][ T30] hub 9-1:250.228: bad descriptor, ignoring hub [ 135.797217][ T30] hub 9-1:250.228: probe with driver hub failed with error -5 [ 135.994864][ T30] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 136.362912][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 136.799386][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 136.799398][ T39] audit: type=1400 audit(1734538563.446:759): avc: denied { map } for pid=8181 comm="syz.0.586" path="socket:[20131]" dev="sockfs" ino=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 136.804403][ T8183] program syz.0.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.872068][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.590'. [ 136.874187][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.590'. [ 136.910691][ T8200] tipc: Started in network mode [ 136.912003][ T8200] tipc: Node identity 101, cluster identity 4711 [ 136.913537][ T8200] tipc: Node number set to 257 [ 138.226563][ T39] audit: type=1400 audit(1734538564.947:760): avc: denied { sys_chroot } for pid=8202 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 138.232403][ T39] audit: type=1400 audit(1734538564.947:761): avc: denied { setgid } for pid=8202 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 138.237717][ T39] audit: type=1400 audit(1734538564.947:762): avc: denied { setrlimit } for pid=8202 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 138.242213][ T39] audit: type=1400 audit(1734538564.958:763): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 139.280417][ T75] usb 9-1: USB disconnect, device number 10 [ 139.286171][ T75] usblp0: removed [ 150.033647][ T8217] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 150.036592][ T8217] overlayfs: missing 'lowerdir' [ 150.041220][ T8218] digital: digital_start_poll: Unknown protocol [ 150.053822][ T39] audit: type=1400 audit(1734538577.367:764): avc: denied { create } for pid=8222 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.059098][ T39] audit: type=1400 audit(1734538577.367:765): avc: denied { create } for pid=8222 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.066639][ T39] audit: type=1400 audit(1734538577.367:766): avc: denied { write } for pid=8222 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.076286][ T8219] hsr0: entered promiscuous mode [ 150.080489][ T8219] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 150.084637][ T39] audit: type=1400 audit(1734538577.398:767): avc: denied { bind } for pid=8222 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.094911][ T39] audit: type=1400 audit(1734538577.398:768): avc: denied { create } for pid=8225 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 150.150479][ T8226] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 150.205055][ T8230] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3132 (6264 ns) > initial count (256 ns). Using initial count to start timer. [ 150.259615][ T39] audit: type=1400 audit(1734538577.577:769): avc: denied { connect } for pid=8229 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 150.323087][ T8248] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 150.327665][ T39] audit: type=1400 audit(1734538577.661:770): avc: denied { connect } for pid=8247 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 150.394162][ T58] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 150.490520][ T8261] netlink: 104 bytes leftover after parsing attributes in process `syz.4.605'. [ 150.495641][ T39] audit: type=1400 audit(1734538577.829:771): avc: denied { ioctl } for pid=8259 comm="syz.4.605" path="socket:[21929]" dev="sockfs" ino=21929 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.504422][ T8261] veth1_to_hsr: mtu less than device minimum [ 150.546581][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 150.549223][ T58] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 150.551426][ T58] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 150.553596][ T58] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 150.560076][ T58] usb 5-1: config 250 has no interface number 0 [ 150.561813][ T58] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 150.564778][ T58] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 150.568158][ T58] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.571023][ T58] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 150.574182][ T58] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 150.577905][ T58] usb 5-1: config 250 interface 228 has no altsetting 0 [ 150.580922][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 150.583174][ T58] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 150.585714][ T58] usb 5-1: Product: syz [ 150.586821][ T58] usb 5-1: SerialNumber: syz [ 150.592317][ T58] hub 5-1:250.228: bad descriptor, ignoring hub [ 150.594413][ T58] hub 5-1:250.228: probe with driver hub failed with error -5 [ 150.715738][ T39] audit: type=1326 audit(1734538578.059:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.2.608" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3916b85d29 code=0x0 [ 150.788240][ T58] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 151.056074][ T39] audit: type=1400 audit(1734538578.416:773): avc: denied { execute } for pid=8272 comm="syz.1.609" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.139594][ T8281] option changes via remount are deprecated (pid=8280 comm=syz.1.610) [ 151.177030][ T8284] netlink: 'syz.1.611': attribute type 1 has an invalid length. [ 151.189263][ T8284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.196306][ T8284] bond2: (slave ip6gretap1): making interface the new active one [ 151.200020][ T8284] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 151.482770][ T8303] usb usb7: usbfs: interface 0 claimed by hub while 'syz.1.616' resets device [ 151.533772][ T8306] usb 2-1: USB disconnect, device number 2 [ 151.542531][ T8308] Bluetooth: MGMT ver 1.23 [ 151.549642][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'. [ 151.635978][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.621'. [ 151.648397][ T8320] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 151.734383][ T8332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.626'. [ 151.734686][ T8330] bridge4: entered promiscuous mode [ 151.794772][ T58] usb 5-1: USB disconnect, device number 16 [ 151.797508][ T58] usblp0: removed [ 151.866833][ T8343] qnx4: no qnx4 filesystem (no root dir). [ 151.893609][ T8348] No such timeout policy "syz1" [ 151.896470][ T8348] fuse: Unknown parameter 'H÷˜Šs@bì 00000000000000000000' [ 151.963725][ T8357] bond1: entered promiscuous mode [ 151.965109][ T8357] bond1: entered allmulticast mode [ 151.967104][ T8357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.127238][ T8366] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.132601][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 152.354301][ T8377] xt_time: unknown flags 0xc [ 152.356736][ T8377] trusted_key: encrypted_key: insufficient parameters specified [ 152.409237][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 152.456167][ T8381] sctp: [Deprecated]: syz.4.641 (pid 8381) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.456167][ T8381] Use struct sctp_sack_info instead [ 152.760355][ T8392] 9pnet_fd: p9_fd_create_unix (8392): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 152.789453][ T8390] x86/PAT: syz.1.644:8390 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 152.810931][ T8395] netem: change failed [ 152.849729][ T8399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.851874][ T8399] IPv6: NLM_F_CREATE should be set when creating new route [ 152.854403][ T8399] IPv6: NLM_F_CREATE should be set when creating new route [ 152.858351][ T8399] sit0: entered promiscuous mode [ 152.863181][ T8399] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 152.865754][ T8399] netlink: 1 bytes leftover after parsing attributes in process `syz.2.648'. [ 152.912072][ T8401] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 152.930581][ T8401] block device autoloading is deprecated and will be removed. [ 152.933719][ T8401] syz.2.649: attempt to access beyond end of device [ 152.933719][ T8401] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 153.070796][ T833] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 153.146148][ T8416] netlink: 'syz.2.653': attribute type 10 has an invalid length. [ 153.166367][ T8416] veth0_vlan: left promiscuous mode [ 153.171884][ T8416] veth0_vlan: entered promiscuous mode [ 153.181560][ T8416] [ 153.182483][ T8416] ============================================ [ 153.184612][ T8416] WARNING: possible recursive locking detected [ 153.186800][ T8416] 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 Not tainted [ 153.190366][ T8416] -------------------------------------------- [ 153.193244][ T8416] syz.2.653/8416 is trying to acquire lock: [ 153.195387][ T8416] ffff88804dfe0e00 (team->team_lock_key){+.+.}-{4:4}, at: team_device_event+0x2c7/0x770 [ 153.198796][ T8416] [ 153.198796][ T8416] but task is already holding lock: [ 153.201368][ T8416] ffff88804dfe0e00 (team->team_lock_key){+.+.}-{4:4}, at: team_add_slave+0x9c/0x20f0 [ 153.204446][ T8416] [ 153.204446][ T8416] other info that might help us debug this: [ 153.207198][ T8416] Possible unsafe locking scenario: [ 153.207198][ T8416] [ 153.209769][ T8416] CPU0 [ 153.210929][ T8416] ---- [ 153.212032][ T8416] lock(team->team_lock_key); [ 153.213616][ T8416] lock(team->team_lock_key); [ 153.215214][ T8416] [ 153.215214][ T8416] *** DEADLOCK *** [ 153.215214][ T8416] [ 153.217990][ T8416] May be due to missing lock nesting notation [ 153.217990][ T8416] [ 153.220839][ T8416] 2 locks held by syz.2.653/8416: [ 153.222545][ T8416] #0: ffffffff8fedc3c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d9/0x1d60 [ 153.225590][ T8416] #1: ffff88804dfe0e00 (team->team_lock_key){+.+.}-{4:4}, at: team_add_slave+0x9c/0x20f0 [ 153.228855][ T8416] [ 153.228855][ T8416] stack backtrace: [ 153.230900][ T8416] CPU: 1 UID: 0 PID: 8416 Comm: syz.2.653 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 153.234510][ T8416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.238204][ T8416] Call Trace: [ 153.239384][ T8416] [ 153.240421][ T8416] dump_stack_lvl+0x116/0x1f0 [ 153.242083][ T8416] print_deadlock_bug+0x2e3/0x410 [ 153.243902][ T8416] __lock_acquire+0x2117/0x3c40 [ 153.245646][ T8416] ? __pfx___lock_acquire+0x10/0x10 [ 153.247454][ T8416] ? __local_bh_enable_ip+0xa4/0x120 [ 153.249374][ T8416] ? __pfx___lock_acquire+0x10/0x10 [ 153.251202][ T8416] ? dev_mc_add+0xd4/0x110 [ 153.252793][ T8416] ? __local_bh_enable_ip+0xa4/0x120 [ 153.254657][ T8416] lock_acquire.part.0+0x11b/0x380 [ 153.256470][ T8416] ? team_device_event+0x2c7/0x770 [ 153.258287][ T8416] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 153.260268][ T8416] ? rcu_is_watching+0x12/0xc0 [ 153.261957][ T8416] ? trace_lock_acquire+0x14e/0x1f0 [ 153.263768][ T8416] ? team_device_event+0x2c7/0x770 [ 153.265560][ T8416] ? lock_acquire+0x2f/0xb0 [ 153.267156][ T8416] ? team_device_event+0x2c7/0x770 [ 153.268945][ T8416] __mutex_lock+0x19b/0xa60 [ 153.270535][ T8416] ? team_device_event+0x2c7/0x770 [ 153.272318][ T8416] ? dev_get_flags+0x1ea/0x250 [ 153.274020][ T8416] ? team_device_event+0x2c7/0x770 [ 153.275828][ T8416] ? __pfx___mutex_lock+0x10/0x10 [ 153.277624][ T8416] ? team_device_event+0x2c7/0x770 [ 153.279416][ T8416] team_device_event+0x2c7/0x770 [ 153.281151][ T8416] notifier_call_chain+0xb7/0x410 [ 153.282912][ T8416] ? __pfx_team_device_event+0x10/0x10 [ 153.284799][ T8416] call_netdevice_notifiers_info+0xbe/0x140 [ 153.286879][ T8416] __dev_notify_flags+0x12d/0x2e0 [ 153.288651][ T8416] ? __pfx___dev_notify_flags+0x10/0x10 [ 153.289568][ T833] usb 6-1: Using ep0 maxpacket: 8 [ 153.290573][ T8416] ? __pfx___dev_change_flags+0x10/0x10 [ 153.294175][ T833] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 153.294191][ T833] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 153.297023][ T8416] ? __nla_put+0x27/0x40 [ 153.300909][ T833] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 153.300924][ T833] usb 6-1: config 250 has no interface number 0 [ 153.304037][ T8416] dev_change_flags+0x10c/0x160 [ 153.304072][ T8416] vlan_device_event+0xdfc/0x2120 [ 153.306530][ T833] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 153.308136][ T8416] ? __pfx_phonet_device_notify+0x10/0x10 [ 153.309843][ T833] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 153.313677][ T8416] ? __pfx_vlan_device_event+0x10/0x10 [ 153.315522][ T833] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.318909][ T8416] ? __pfx_br_device_event+0x10/0x10 [ 153.318933][ T8416] ? raw_notifier+0xa4/0x860 [ 153.318960][ T8416] ? isotp_notifier+0xa4/0x6d0 [ 153.320387][ T833] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 153.323844][ T8416] ? bcm_notifier+0xa8/0x820 [ 153.323865][ T8416] ? cgw_notifier+0xa2/0x390 [ 153.325298][ T833] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 153.326840][ T8416] notifier_call_chain+0xb7/0x410 [ 153.328116][ T833] usb 6-1: config 250 interface 228 has no altsetting 0 [ 153.331525][ T8416] ? __pfx_vlan_device_event+0x10/0x10 [ 153.333942][ T833] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 153.334334][ T8416] call_netdevice_notifiers_info+0xbe/0x140 [ 153.339192][ T833] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 153.340755][ T8416] __dev_notify_flags+0x12d/0x2e0 [ 153.342464][ T833] usb 6-1: Product: syz [ 153.344317][ T8416] ? __pfx___dev_notify_flags+0x10/0x10 [ 153.344351][ T8416] ? __pfx___dev_change_flags+0x10/0x10 [ 153.344377][ T8416] ? __nla_put+0x27/0x40 [ 153.344403][ T8416] dev_change_flags+0x10c/0x160 [ 153.344431][ T8416] vlan_device_event+0xdfc/0x2120 [ 153.344454][ T8416] ? __pfx_phonet_device_notify+0x10/0x10 [ 153.344477][ T8416] ? __pfx_vlan_device_event+0x10/0x10 [ 153.344498][ T8416] ? __pfx_br_device_event+0x10/0x10 [ 153.347169][ T833] usb 6-1: SerialNumber: syz [ 153.348903][ T8416] ? raw_notifier+0xa4/0x860 [ 153.348933][ T8416] ? isotp_notifier+0xa4/0x6d0 [ 153.353252][ T833] hub 6-1:250.228: bad descriptor, ignoring hub [ 153.354224][ T8416] ? bcm_notifier+0xa8/0x820 [ 153.355752][ T833] hub 6-1:250.228: probe with driver hub failed with error -5 [ 153.357642][ T8416] ? cgw_notifier+0xa2/0x390 [ 153.357669][ T8416] notifier_call_chain+0xb7/0x410 [ 153.357695][ T8416] ? __pfx_vlan_device_event+0x10/0x10 [ 153.383759][ T8416] call_netdevice_notifiers_info+0xbe/0x140 [ 153.385816][ T8416] dev_open+0x144/0x160 [ 153.387289][ T8416] ? __pfx_dev_open+0x10/0x10 [ 153.388954][ T8416] ? __kmalloc_noprof+0x23b/0x510 [ 153.390704][ T8416] team_add_slave+0xacd/0x20f0 [ 153.392338][ T8416] ? __pfx_team_add_slave+0x10/0x10 [ 153.394039][ T8416] ? __lock_acquire+0x15a9/0x3c40 [ 153.395726][ T8416] ? __pfx_validate_linkmsg+0x10/0x10 [ 153.397478][ T8416] ? __pfx_team_add_slave+0x10/0x10 [ 153.399206][ T8416] do_set_master+0x1bc/0x230 [ 153.400750][ T8416] do_setlink.constprop.0+0xb5b/0x3f80 [ 153.402534][ T8416] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 153.404455][ T8416] ? lock_acquire.part.0+0x11b/0x380 [ 153.406226][ T8416] ? __mutex_trylock_common+0xea/0x250 [ 153.408009][ T8416] ? __pfx___mutex_trylock_common+0x10/0x10 [ 153.410040][ T8416] ? rtnl_newlink+0x5d9/0x1d60 [ 153.411655][ T8416] ? rcu_is_watching+0x12/0xc0 [ 153.413225][ T8416] ? trace_contention_end+0xee/0x140 [ 153.415017][ T8416] ? __mutex_lock+0x1cc/0xa60 [ 153.416564][ T8416] ? rtnl_newlink+0x5d9/0x1d60 [ 153.418219][ T8416] ? __pfx___mutex_lock+0x10/0x10 [ 153.419930][ T8416] ? __pfx___nla_validate_parse+0x10/0x10 [ 153.421845][ T8416] ? cap_capable+0x1cf/0x240 [ 153.423431][ T8416] rtnl_newlink+0x1303/0x1d60 [ 153.425060][ T8416] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.426719][ T8416] ? __pfx___lock_acquire+0x10/0x10 [ 153.428468][ T8416] ? cred_has_capability.isra.0+0x192/0x2f0 [ 153.430443][ T8416] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 153.432548][ T8416] ? find_held_lock+0x2d/0x110 [ 153.434179][ T8416] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 153.435827][ T8416] ? __pfx_lock_release+0x10/0x10 [ 153.437302][ T8416] ? trace_lock_acquire+0x14e/0x1f0 [ 153.438617][ T8416] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.439918][ T8416] rtnetlink_rcv_msg+0x95b/0xea0 [ 153.441128][ T8416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.442455][ T8416] netlink_rcv_skb+0x16b/0x440 [ 153.443645][ T8416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.445059][ T8416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.446369][ T8416] ? netlink_deliver_tap+0x1ae/0xd30 [ 153.447751][ T8416] netlink_unicast+0x53c/0x7f0 [ 153.449024][ T8416] ? __pfx_netlink_unicast+0x10/0x10 [ 153.450328][ T8416] netlink_sendmsg+0x8b8/0xd70 [ 153.451509][ T8416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.452899][ T8416] ____sys_sendmsg+0xaaf/0xc90 [ 153.454152][ T8416] ? copy_msghdr_from_user+0x10b/0x160 [ 153.455595][ T8416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.456933][ T8416] ___sys_sendmsg+0x135/0x1e0 [ 153.458052][ T8416] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.459325][ T8416] ? __pfx_lock_release+0x10/0x10 [ 153.460567][ T8416] ? trace_lock_acquire+0x14e/0x1f0 [ 153.461875][ T8416] ? __fget_files+0x206/0x3a0 [ 153.463040][ T8416] __sys_sendmsg+0x16e/0x220 [ 153.464183][ T8416] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.465512][ T8416] ? __x64_sys_futex+0x1e1/0x4c0 [ 153.466807][ T8416] do_syscall_64+0xcd/0x250 [ 153.467995][ T8416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.469550][ T8416] RIP: 0033:0x7f3916b85d29 [ 153.470722][ T8416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.475745][ T8416] RSP: 002b:00007f39179f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.477909][ T8416] RAX: ffffffffffffffda RBX: 00007f3916d76080 RCX: 00007f3916b85d29 [ 153.479905][ T8416] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004 [ 153.481965][ T8416] RBP: 00007f3916c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 153.484034][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.486119][ T8416] R13: 0000000000000000 R14: 00007f3916d76080 R15: 00007ffe1e87fd88 [ 153.488179][ T8416] [ 153.547809][ T833] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 154.538224][ T833] usb 6-1: USB disconnect, device number 5 [ 154.541352][ T833] usblp0: removed VM DIAGNOSIS: 16:16:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000112874 RBX=0000000000000000 RCX=ffffffff8b299759 RDX=ffffed100d4c6fee RSI=ffffffff8bd1e8a0 RDI=ffffffff81709459 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f2fd0 R15=0000000000000000 RIP=ffffffff8b29ab3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f76eaa04440 CR3=00000000280e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1e880120 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3916c029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3916c029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3916c029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3916c029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3916c02a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3916c02b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bbaf5 RDI=ffffffff9ab0ec20 RBP=ffffffff9ab0ebe0 RSP=ffffc900224560d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=000000000000006f R14=ffffffff851bba90 R15=0000000000000000 RIP=ffffffff851bbb1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f39179f86c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1f29b65440 CR3=0000000036a1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000100 Opmask01=00000000ffffffff Opmask02=00000000fff90000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe90c7ec40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000b24dc RBX=0000000000000002 RCX=ffffffff8b299759 RDX=ffffed100d506fee RSI=ffffffff8bd1e8a0 RDI=ffffffff81709459 RBP=ffffed1003a5b000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d2d8000 R14=ffffffff905f2fd0 R15=0000000000000000 RIP=ffffffff8b29ab3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c28ea6b CR3=000000004bafe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd78c7dcf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14d68029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14d68029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14d68029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14d68029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14d6802a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14d6802b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000cd0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000cd0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000afb84 RBX=0000000000000003 RCX=ffffffff8b299759 RDX=ffffed100d526fee RSI=ffffffff8bd1e8a0 RDI=ffffffff81709459 RBP=ffffed1003a5b488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d2da440 R14=ffffffff905f2fd0 R15=0000000000000000 RIP=ffffffff8b29ab3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000205ae000 CR3=0000000057b7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f416ea029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f416ea029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f416ea029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f416ea029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f416ea02a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f416ea02b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f416eb4b488 00007f416eb4b480 00007f416eb4b478 00007f416eb4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f416f6ad100 00007f416eb4b440 00007f416eb40004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f416eb4b498 00007f416eb4b490 00007f416eb4b488 00007f416eb4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c9 559e947a8291a268 a932a8d9277263c2 5091079866ed6fb5 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c07ac1294db8458f 48db115b9415cb70 2fa9eacb6aba4ba9 9c07e6a687027603 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 95f19d03ed5525a4 f64f5950bb023aa1 0c4593e7a91138fc b33604393f9fc72f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1020fd2da4245bb4 263b93a4d5dfe387 511a0bee7da9a878 c2f38adcd3b2b2e9 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000