last executing test programs: 3m17.853741133s ago: executing program 2 (id=185): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) splice(r2, 0x0, r0, 0x0, 0x800000000ff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) 3m17.853129655s ago: executing program 2 (id=186): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x6880, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 3m17.781522313s ago: executing program 2 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbdb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xa}]}]}, 0x20}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x200, 0x6, 0x6, 0x6, 0x5eb8}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1148, 0x14, 0x8, 0x70bd2b, 0x25dfdbff, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x35, 0x1, "1edf29019b1c57e3f05b364e070ec4e5182542fccf4ce955b6dcbf2480c578a552549b41bf36886e808b03c081d7c0ebc8"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "fc0fe4be355992a0b987d0e167f263adfde01013a73040a22a2b3072d95b77fdbdc218f10c4e4e8dc7f0e926dd8a4186d2197ac2de075361bba9d6205dc8572a06efe50713e111b85db37e23a86006aeb6c37f262987b74adb66004b619dc36efd67eca06d6903951eaf95cb490e784432954b679cf1ca4d9aec662e2e773cd9b486ce79817e11a14af870011beae9b37aafa870d05cf33c4f7fb252038a8caa3126dd53884413231bce92dd001cfc715986834bee77606dfa69c49126772e264144"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "61877b13150a40349b5dac1780a10b689d4344a163efda0a3fbdbc56245af38ee02ba4907355a3f9e8a8cb907511920bc6d0fb2e278d03ae75dbecb7702860a8bb01235eab58ca58c0811dc3c4e7def2456dba075427c6d812abafe977a94f3cc516bd0279d339d4c7267ed6640d22189aeeabb5865e7a1dc01db456c69f10244738237e8e8efd408243ae5a75c408f0479e014cbb2ef082b249b89833c0cbec0be245ce8600171c28e10359e529e94833cadd743c36f43aa9e6d3d488972f60957d831c98333abfc64a8dbbddaeec8a2351cc7d382a4c2b87838dc83f22e0a638cd85638f877cc0d4830bb7dc1e828c70ea50a434760cf008c68e448aa6df4e8475a4aa3d42cf481b383edc96b0fb41f182167900d638bfd1b46e2cf5cb29cf5ef0560f07e23704318a8a8e143c140e217d0ba6398df3b336f689e2f14e0472724874f82e5055846952554289947ec4e8eeae437b4c6ed9dcbbd2b75692a110102596bca2717eaac86ee1fdf0856e3555ea58b9d2c6bc8e8ba3e5a2572986c76aee8aec75bde7e89e4b2074d89d5ffbedf0a7f9a02b50f9506702e4b30864c178187f693f1fdbee63c25c60c97362f5183c551f29fdfdd4de41d30fa833b6b0381df0bafe7dbcc75323a8b1dcdbf9eb0a6b9ee1e4f05e40aeac51a19cef66493ea27574de3ed803ef07a9b750f66dbc0c3919e60052f67928c1247821dfb3a13b06b599b2adbb3e86542e2a3555f3793aeaa4d2227a1b84cee9b2bf5ba752453961833163ea8ab36e7a243f89e907794e10425a9a938c692b0edd13d3285f2fddb35b0cc236fe4c3aba41775951bbfedb36da9a705c7796c9ab6c16a7a1dbdf4c6402c34dbc80093789d3535962fa3e5455c6faab7d7bbe6785c40658e4144e61fa7bcc0f75bfa43657345ab4ea354d98661db279786b5cc48a03919d39451afd104e53516b83117b6d2bc7cb92fbaa2e3220d49006f7ee9912acd40919b0270bd53ecef262d2c5fa5d18371dca4b519fe3d27719789b7de4087a6e50ecff40232eea2d6fe130e1845d06c766a5e0aee840ee31a2cec08b4ca8a0dd771be3799f5207a0e7186e1e5a2b1b09a20a28e76b187af1d0a7e765245929b6c264b589f7be073c065c39e2ce5ca58f6d4732759705dfbb5bb0161236fc4364616a904047d474d1e1165361ec36c5b93156b4d0192d588f82ce270713c9fecc1e39a03f747fe018dd40a592cf078703c6a3e2cc6162dd029a867b52bea6b5c81e8331592faa65cddce382ac48f214d9426cf335cb6ca0b4590229f69bbf3925a8b85ca7950c5f4b02cffdd5af1acd8c251bfd2d09ab54ca9fc04460cc4e2482596ca20bd0c5eec2450fb0c05c7a109c5a774e0512648e1195aef05d68df006f60a392b6402ad04735006139c8047d520cb0e8ed30ca278a58c0db80488741bad0cb6658c768a92d517ebc234ea9086951da11fbb5f471319de4ec4d5f2d3ac33d59bb61045cd3796f8c6e3b88cd0a0591bb4fc0f5959feb2c649de88f20fe417fd49171170d7abdfa34b30619e0b3935bcf269d7a60bb7523d7907c2311afe799e5f7f0d6cfc70a3d3e0cad5b41f4332111b2db2a18520293f9c4747c81c7e3aa18e81c2de59441ec2439eacce2e53fb226fc806a7105ff61694cadbb2505e702a19bd0e9277962eb584f63b0dc37937764b637dd70a7cfa87966c6801c30752d00fa4a910b6fa28620ca7ce9a0a17de554abf66196bf9a40c1cd1846208068816ec5afff8d319d87545326b49c3ab45a95f02b1c5ddc4abfa05d26c4cb961a8b51cbe5fe7f1e79f5dcd157ee744f0c4ccb75958be73d3a33496c5536fa7d118201011dd1f4c3649470aae7ab7765588e88aa5a44d6d3edf10a0a5344033c5bf191fb72eedfc30fcd5d45224596e864e75f8379b1053f1c8cbbbf00aeb9bd2baf3f48c5ef8200a28d92f6eaa73e1a51f2c1cc620850c197b124a3310684f7b698d79ba99a3154585fccdc93d12111342add8e80220da0eff103376fe60f4747a942674355de42e615b4ca39e481df373db672b4fe41b6fb31125f622cafa955cc18a32ab7be8985104e0c35ce071ff71810cc5cad6f0d0928027288229f68c00117addaa1c6649c7dc36e160a5afac2d474a4911c9f428aa0b04aeee6eec2e26db63d86387ba9de19bd750c409158bb35897fd4905249bd393a3c9ea612f6a879efd7455b7aa9824ae309c8d04696d889d00613815f05581284cd12c6abe7c6fb213eea84151d08ee5343d258c156480bd97e2b3d15691bcfa9de8eaa8750b8304db84ae25b33909a49df0da9b6220e05c03afdb960b39e877ae05618e20258aaad22d0bfdcc9302420602cfe11898871e897903f391d81bcfdb56bb4cf639009bc4fa58d9ccb9b24a509504f9aa3a216d0dfe2a3105465bea530ed4a9368791c35a64884c64cf43a3dc0baa320e3cb677ef3ce4309c11c7ed4c289b695ebca0f002cfa4141b0fa2e61ec3f6b08de1be7fd97184ba6c5c505ca71293b1042fc6470458eb895022de3ef13fbcb1e81394624ee1bf7e04b52587f83f628710686bb30d311dffff4d0dd04b6253e4890dcfc25e538dc1a14ea4417fb50e950ae18474f8005a1b2fd8cac66ab82af0060425bec4c5b48605fdda94b79079eeedbe29ad6be7cab5c8f5ff7a101cc02f9949c84a6e343311f9566d9079f150727c8a50f07dd0cf27cc5470e31618bce7e3a91e0550867a793c9bb3b2e73a4303b6c7b196d5b86700249eade011ffb029c344af08d3500abccb95756e3a5b7090dc552e25f96cf64a4b3e2f8b490d82c65e55a3be998af98455dfe19dd6fc63e9bd67ca202288dff986121e95b6893abc8ca15a79e814e08e230a2fd65d1d34fb24f885d4e41ecf78e8ddb7acf0355aa1b4780b3d62544d06f91334042513fab75734e51ea4fa5d980655ba165b552fd47681e96888d8081ed091cd2508cd9c4a70891f3aa0087fe41b792adb22e06aae413838debe09da5e33d9d3cf655927071e3cdf8997285d6f23f789a1f58ba99f6a9116b19ab4fcff419c999343fa7dff9a10d8b5bec3fbedba1df4ae3d06f5c9eff5176161a5f6bf7d5d7ccdc442837b54435b21f408c7cc59bb80f7f01cb65868378549898989cda1e1894bd8fc98252556498a9d7185bde5d54a136f14f6d2c1bcb121d5c503018423a5dd80aa9ba2fbd90075eba578c6275821e790a6ed8c82348643a9368c71d191e1e9ec71d630f59d4d1f6430febd37d544707b5216df25566593d31e5fd4bf44b80abbd4ee9139463b55a1fa90a1c63cc7100fcf5608e40dacd45b992af9b9ce42f63ee6ce7e911781fc382cfc231e7387ebe90f7e1a3c2ef8f8bc24c2ec406bc5c1edc6916ede078f3d37a9933a711218d50f120b0f2ab2af1e7b46a65214598f81e15812b9f7c65423f2b8a4fc3c4f7cd505a7def70d59e337194c859d2c6e6f74633bac00bb746a0f61bbb126984813e785ef32997f7a022ff7b89eddca2450488879fba41681d4f131544f42b3915ba958992c317eeda0b7ced0937f145365b404bf87736d12bd2f0294fcdf560506bbf63d827f4c09ee50fc661ea561db1b0921e3aa945433db5bfc0046a1107f81f3d99c9ba9859496107f7efdba42bd438edbebf2e334537c5ef0c9589b02eec001183eab3ce6dcf4c4d09b7ee681b7caae0c73b90370be2ddf5d3b92a10bc853f98f79a34b1feb916a0128bb1f2d4e59e5092dfaa312c203ed077b9dabb9f818c607487855e6d944f18174b09c5da5263de8f9c962340fc15418d8eeaca7de6fdad7013c894bd12edcfc0ac7758e0974759291e24f801c84933f9930910657399254dde9ed38e44328194c19f5007c177930acf650d65f0399584527b2d543d655c4320956352d437fa63e4380ef4d34af93c698b64257a36f7bbabe4d9d190192cafa89776874741ed4f9546a2cc2d2db0e79a8e6b2a73be269c4326860e2c30b15d83c02cbd98d54e585cde882a9cb5af071c1b0ffdf2f3381f53ce38f8cd0a293c2ceb4aff5754223f3caecbea8bc40bba3e19715f752e06a4961964ea39f6b44e9f03b47f6f1d705e9ad6432fda2307b55ba98d85d0b05aaffd5e2f471bec5471ffd20097855d6fb57505ce07202c4aae5d9a1ac122ee6ec222686d914b5260d4f02bd6fe0e41ced33c2986afad49ec1a58fcda0ddcd6709e82de5f915f56d7510bc2e7e791530c7f275710cdc292758f63cb7f4b8217ad1bc868b071941169b4bbc2103757d8edffea74c0c54d5b7bdd6fbf12c895136285b2a7fd05c123a4772bd9610358eccac0157eaabfc8d64de66fb34ebd283e5da961fecb230aa58ba31132860c4d7339af8a1fc9cb12b5b75117c4294a0daceb924d88189ee4313f42ca330aea086fe0425744136f540d5622b362bc76d1477e710c310e1c564a28e4e233d90f4584f4688fec37159bcc14eff8e447f2352fde74c8abde3c4e18bdd06ff303d7e7d8a84a8ba18a038009ab13a03317385d746a053e2533bb0831b034622c08ea0e70f825b08a83e93b2c1a9b642736b8db041487fe4de60bef4541874e0afb94237de8fb5075b2452fafe8b7fb3cee072662cbc659e3f692592207fd15c138139a9a2ff8248e4302d473a1064adf030c4d98657ce9b4f1a7c3fbcc8ea6037d25b664d40efd0b88944d1b4cc39c23db294d8be55dca26e31e58ee232b85434193efaad21e48b1068c9b9eb05b081e977745e2f88b2bb87406316ff8d8e77b17fd81080fcfcb5b7debe9dd6ea8cd2f588520ff2a8b273015a48980bcfeba2aea03b7bf9613b8aefe3c490632c3724e5e4dce6b21378e15fa64454d2a98af24a2e0c784873b5351d57af1fe20daec7ff0f6ca20f8fb18c49a570ea946d8feeb326f8c7fb4a7b40a10bf8013ecef4dd38b7d1815158e3f1474bde0f07aba9f19a7a6d64b62af5d417cc02ff6fb9c30dc8fcc457e2ce55a7fbdce328321e78afcd47365961741cb28ea16bfa3d164982f835b02085d5160911f8f553447913220dd114e1b6ca2a56f649ef0b015248b81105afb270356ec5d9ce7ea256d5785830b6c7d590a0db4daf3a5b1ce7e87f6058ec3aa9dc59b87f9239b9d05526c1d1856ee4f33e1e2ffeb7dc162ac4c6898f944ac10e38dc277c8613f0e8d559a812e33b171ebbf400ad1efde7ad6662cb208e713411568f81283d209e2d5aa43f6f95aabc0071aac5658e10d19fd9e425cd96fb08cb316d5c36bf0baab3040eb0df66af965ab624f402c33ee6565ccf93bbb6104b60af0c1d9c2266709a8f7cf2226e3d0020c7da47a772a1089f4df739fe70bdcd5b4c02a5b3b7dcbd9edc66b9034b377a5edc8b887e5833dd7de96c21aa13431e8cf9c5666ffe3f2486fd73491a01992cbfa2e0ddce47b5bbb70d0acb869d9b91563a36aef8c7b53e33237632e871634d7e32254cb9ea2cc97d2dc6994738a32ce491f64f0ab6d4dc7b8cb93492f18295eda95ea29cafcf70f3e0c9c4b2125a387b5afca97f09241bc2f3bf36b151efb11e4f28bcdff5dae5a5b50f1be5d58803c57488966edf047cd9e02ec6ff39bd7bd1433b1aa180f6da79330b2618d70a08db8934664ca5e127c12d685bd74d6f0b89c82e2304057d9981ad90e1b667c8af89037897f56d0bd6e2164862425bf19c34d1ea96fd7ff706d3c6c6a1d8073b13c23430cb975db705db38c8f9741c7d3605def137c31b66fcafac7b2ea812a7e979de9e17c223d92e71db695ad4d11c1b19d77506077bf6306345e24081d1d32a7e0886e22"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "6fc55f10af05771300ac6c4dab49dfcf673fbe535bb304c97dd3886dd54fb9ba666569e7f0c9e68aeb8c"}]}, 0x1148}, 0x1, 0x0, 0x0, 0x44001}, 0x800) (async) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0xf0) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x63, "2d6d798107d30d370f6242d408de20ce5184b3fc7e06b13c83f2342a52e4da89963d784ccf81115676f0f3976c07c03fb867ee177b3be6ab1c581af4f7f99a7bf09529aa218efdecc12e7e9d181180dd4b88c3f65212cb667e4829264acdd2be17b91a"}, &(0x7f0000000000)=0x6b) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0x17a, 0x1000, 0x8, 0x7, 0xe, 0x1, 0x6, 0x8, r5}, 0x20) preadv2(r4, &(0x7f0000001840)=[{&(0x7f0000001400)=""/124, 0x7c}, {&(0x7f0000001480)=""/34, 0x22}, {&(0x7f00000014c0)=""/223, 0xdf}, {&(0x7f00000015c0)=""/231, 0xe7}, {&(0x7f00000016c0)=""/199, 0xc7}, {&(0x7f00000017c0)=""/116, 0x74}], 0x6, 0x4, 0x6, 0x16) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000018c0), 0x3d9000, 0x0) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000001900)={0x29, 0x30, 0xa, 0x12, 0xa, 0x0, 0x6, 0x76, 0xffffffffffffffff}) (async) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 3m16.92368321s ago: executing program 2 (id=197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'q\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) 3m16.915374436s ago: executing program 2 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 3m16.862620772s ago: executing program 2 (id=201): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8) getsockopt$inet6_mreq(r4, 0x29, 0x14, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) (async) prctl$PR_GET_ENDIAN(0x13, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x413}}}, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(0x4) (async) close(0x4) 3m0.945688638s ago: executing program 32 (id=201): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8) getsockopt$inet6_mreq(r4, 0x29, 0x14, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) (async) prctl$PR_GET_ENDIAN(0x13, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x413}}}, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(0x4) (async) close(0x4) 2.491181056s ago: executing program 0 (id=2676): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x5509, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000500)) 1.750841721s ago: executing program 0 (id=2677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000080a01010000000000000000070000070900020073797a3100000000140000001100010000000000000000000700000a6710fb60160346d1f3c674e61e07d6b3dfd71ed65d687c4c574a6fd1f0c6edab99"], 0x48}}, 0x844) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0) 1.744285573s ago: executing program 0 (id=2678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x4884) r1 = socket(0x0, 0x80805, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/100, 0x8b) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) close(0x3) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000011c0)={'\x00', 0x8000, 0xfffa, 0x2, 0x0, 0x50, 0xd000, 0x8000000, '\x00', 0x2}) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x24040014) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r10 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) ftruncate(r10, 0x1000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r9}, 0x38) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000140)=0x200000000) 1.390776439s ago: executing program 3 (id=2685): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, &(0x7f00000004c0)='nfc\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, &(0x7f00000004c0)='nfc\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xa, 0x4, 0x2, 0x7fff, 0x2, "773d8ecdef384aa0"}) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xa, 0x4, 0x2, 0x7fff, 0x2, "773d8ecdef384aa0"}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = gettid() r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) kcmp(r4, r5, 0x1, r2, r1) (async) kcmp(r4, r5, 0x1, r2, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x7d7400, 0x0) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r7}, 0x10) shmdt(0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000f23000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=""/4111, 0x100f, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, &(0x7f0000000300)=0x40) 1.219798144s ago: executing program 3 (id=2689): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000003e00)=""/4093, 0xffd}], 0x1}, 0x101}], 0x1, 0x40000020, 0x0) 1.218494904s ago: executing program 3 (id=2690): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000100)) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008001}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r4, &(0x7f00000003c0)={0x2020}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000240)=""/106, 0x6a}], 0x1, 0x81, 0x2) r7 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r8, @ANYBLOB="010000800000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a60001000000010000000f00a8007365636f6e646e616d6500008900a9005962c494e705f1a7ff574cdce52b6add044060b88f481d877cde3e7cb48a975d6d4a029d85cb147ddea571db9315b42567487ef6926536e4ea3251c1578e73959bc84e69d27f7a8e5f51791a9a4b79d23ddf0834e08dbfc6c9364dfccd441ff5f6c63832f29f9437a9bc4e227908951f2e8fca234213bbd439c068246c867e8a4262d13d673dd0b0"], 0xdc}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.009562084s ago: executing program 1 (id=2695): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "8c6f4ee6c98b0470ed7622d7e3cfdc1cc61d370c5600f070bf298fad5b73a45e", "ef9a574fd36ff07051bccc9b2a09615a", {"1def0ac2ee14caa61af0ec9113dc48ed", "9f19e1c6a8c8464c563862aa03114236"}}}}}}}}, 0x0) 1.007948532s ago: executing program 1 (id=2697): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0xd4, 0x30, 0x48b, 0x1, 0x0, {}, [{0xc0, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x80000001, 0x0, 0x9, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x6c, 0x4, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xffffffff, 0x5, 0x8, 0xffff38f4}, 0x7567}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0xbdfc, 0x8, 0x5, 0x3}, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001600)={0x24, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa}]}, 0x24}}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe, 0x7}, 0xe) recvmmsg(r5, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000122, 0x0) (async) recvmmsg(r5, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000122, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/bsg/2:0:0:0\x00', 0x200000, 0x0) (async) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/bsg/2:0:0:0\x00', 0x200000, 0x0) ioctl$BSG_SET_TIMEOUT(r6, 0x2201, &(0x7f00000005c0)=0x2e) r7 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r9 = syz_open_dev$mouse(&(0x7f0000000180), 0x2, 0x200000) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x7fffffff}, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x7fffffff}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000240)={r10, 0x3, 0x8000}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETFILTEREBPF(r11, 0x800454e1, &(0x7f0000000040)) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) write$uinput_user_dev(r12, &(0x7f0000000940)={'syz1\x00', {0x6, 0x5d3, 0x4, 0x7}, 0x3c, [0x4, 0x8, 0x3, 0x4, 0x9, 0x8001, 0xfffffffb, 0x7cb1, 0x3, 0x48eb, 0x4, 0x4dd3, 0x0, 0x40, 0x4, 0xb1e5, 0x5, 0xea, 0xffffffff, 0xfffffffa, 0xff, 0x1, 0x6, 0x4, 0x2, 0x2, 0x1, 0x6, 0x6, 0x5c27, 0x9, 0x8, 0xfff, 0xfffffffb, 0x9, 0x1, 0x0, 0x7f, 0x4, 0x10, 0x7, 0x0, 0x8, 0xfffffffa, 0x2000, 0x8, 0x1ff, 0x20000000, 0x7, 0xc, 0x9, 0x9, 0x3, 0x1, 0x7, 0x6, 0x1, 0x8, 0x5, 0xfffffffb, 0x1000, 0x4, 0xff, 0x80], [0x7, 0xe2, 0x7fff, 0x80000000, 0xdbd, 0x7f, 0x4, 0x8, 0xcc6b, 0xff, 0xffffff01, 0xc9, 0x80000000, 0x5, 0x69e3, 0xf, 0x9, 0xce, 0xe2f, 0x1, 0x4, 0x6, 0x8, 0x4, 0xffff, 0x400, 0x471, 0xa, 0x2, 0x6, 0x3, 0x8, 0x2, 0x5, 0x7, 0x1, 0xe8d, 0x8, 0x250, 0xffffffff, 0xd1, 0x8, 0xf, 0x651, 0x5, 0x6, 0x9, 0xfffffffd, 0x8, 0x9, 0x7112, 0x4fc96def, 0xe2, 0x8, 0x8a, 0xfffffffe, 0x35f, 0xffffffff, 0x1, 0x3, 0x60d, 0x0, 0x3, 0xd6], [0x43e3, 0x8, 0x7, 0xfffffffa, 0x4de, 0x9, 0x9c8, 0x8, 0x6, 0xca, 0x6, 0x0, 0x6, 0x24c93a3e, 0xffffffff, 0x1ff, 0x40, 0x9, 0x9, 0x9, 0x3, 0x2ab, 0x2db3, 0x1343590d, 0x2, 0xa3, 0x6, 0x0, 0x200, 0x99, 0x9, 0x5875, 0x0, 0x3, 0xb, 0x7, 0x1, 0x2, 0x6b6, 0xc, 0x4, 0x10000, 0x2, 0x595, 0x4ea3, 0xe8d9, 0x7, 0x1000, 0xed, 0xfffffe01, 0x0, 0x1, 0xff, 0xf27, 0x8, 0x80, 0x1, 0x1ff, 0x5, 0x40, 0x1ff, 0xffffff7f, 0x4, 0x40], [0x8, 0x7, 0xfffffbff, 0xb43f, 0x8000, 0x4, 0x5, 0x1000, 0xcc1, 0x10, 0x400, 0x8001, 0x0, 0x2007, 0xbd5, 0x4, 0x1, 0x0, 0x2cc, 0x9, 0x0, 0xb, 0x200, 0x5, 0x8, 0x8, 0x6, 0x8, 0x3, 0x0, 0x5, 0x40, 0x70, 0x7d, 0x6, 0x2, 0xbeb2, 0x0, 0x7, 0x6, 0x8, 0x3286, 0xf, 0x1, 0x6, 0x81, 0x80000001, 0x0, 0x200, 0xff, 0x4, 0x80000000, 0x6, 0x7, 0x800, 0x5, 0x3, 0x3, 0x2, 0x8, 0x100, 0x8, 0x100, 0x4]}, 0x45c) 921.144039ms ago: executing program 3 (id=2698): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/route\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setrlimit(0x7, &(0x7f0000000400)) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x3, 0x4, 0x1, 0xd, 0x5, 0x0, 0x5, {0x0, @in={{0x2, 0x4e20, @local}}, 0x401, 0x4, 0x2, 0x8, 0x3}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={r2, 0x0, &(0x7f00000000c0)}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) pread64(r0, &(0x7f0000001480)=""/4110, 0x100e, 0x80) 921.004496ms ago: executing program 4 (id=2699): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000003e00)=""/4093, 0xffd}], 0x1}, 0x101}], 0x1, 0x40000020, 0x0) 920.158316ms ago: executing program 3 (id=2700): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000140)=""/12, 0xc, 0x7, &(0x7f0000000280)) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) sendmsg(r0, &(0x7f00000019c0)={&(0x7f0000000740)=@generic={0x1d, "0fa3386c39b3185f290c51205783fddf121d2d279b6cb55d114a3c450ba02a6c7e1afe403b5f4ebfca4641a09f9ead6609b6207e2e75c4cd82e446786c7fe02f3179514a81bb7cc0cd1b55e41dd3457fac3afa96ef9a21a5d539618fdb44c3a95a184000476322ac5c44a5305c2a9f3969ae9202d370bc02411cab6ff87e"}, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)="33895b441acd8db47ffadaa7b52d4d810ed6c0f7f9e5a0903913e3c7b6f00a5e60839a0f1e7579f8af9ff7f37f439703f245b403628db8d3cf6fa25cd3069c25fda99670de158e9e2f3cf80cbe9204c940cf1e9fbbee65a4ba321682412391ac1001b783767124e7308b728d77aa911ca023f02f0b1608e18854fe801a884214d761b065b54756fcab6192f929ad22fef19421134b59f3fe45e5ce660b8459d1c821766ea842734c3c6f734f7c477b8b7cd86a9ad4ca12280e9a78235b59f8161420d8f95d29170b29e52547daba204ad30ed642fc0f4a086f6e1693a95b", 0xde}], 0x1, &(0x7f0000000940)=[{0x50, 0x11, 0x5, "3b4182f789515035f023b476415ec32cf781c61b020545c212f0e92d301d30fa2672e811006c943acfa948dd85320641266ca08d4e2d7cee416faa6d9d"}, {0x1010, 0x108, 0xedf, "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"}], 0x1060}, 0xc0) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000040)={@default, @default}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x180, 0x4f}, 0x0, 0x0, 0x5, 0x0, 0x6, 0x3, 0x0, 0x2, 0x476d, 0xee}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffe28, r5, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000002c0)={r6, 0x4, 0x7, 0x1, 0x3, [], [0x6, 0xfffffffb, 0x0, 0xe], [0x1, 0xfffffffe, 0x9, 0xffffff85], [0x2bebcc00, 0xffffffffffffffab, 0x9, 0x55]}) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f0000000440)=r6) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r7, 0x100000000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x41}]}, 0x30}, 0x1, 0x0, 0x0, 0x408c5}, 0x4048040) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000006c0)={&(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x3, r5, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000700)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], r9, 0x0, '\x00', 0x8, 0x6}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r10, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000003e00)=""/4093, 0xffd}], 0x1}, 0x101}], 0x1, 0x40000020, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r10, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 919.24069ms ago: executing program 4 (id=2701): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x8, 0x4, 0x0, 0x4, 0x0}) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000080)) (async) pause() (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 871.150513ms ago: executing program 1 (id=2702): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={[&(0x7f0000000180)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r3, &(0x7f0000000b80)=[{0x0}, {0x0}, {&(0x7f0000000880)="1dfda5", 0x3}], 0x3) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @loopback, 0x9}, {0xa, 0x4e20, 0xfffffffc, @mcast1}, r2, 0x20000}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r2, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x90) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@unlock_all, 0xb) 870.792498ms ago: executing program 4 (id=2703): openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r0 = userfaultfd(0x801) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r1, 0x31e, &(0x7f0000000200)={0xa1, 0x7, 0x7}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r3 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, 0x0) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05002abd7000e0dbfaa35f"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@local, 0x2}) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r7, 0x110, 0x3) 821.063105ms ago: executing program 1 (id=2704): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) 819.650821ms ago: executing program 0 (id=2705): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "8c6f4ee6c98b0470ed7622d7e3cfdc1cc61d370c5600f070bf298fad5b73a45e", "ef9a574fd36ff07051bccc9b2a09615a", {"1def0ac2ee14caa61af0ec9113dc48ed", "9f19e1c6a8c8464c563862aa03114236"}}}}}}}}, 0x0) 761.26035ms ago: executing program 1 (id=2706): mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000380)={0x4, 0x6, 0x6, 0x0, 0x4, 0x10001, 0x1, 0x6, 0x5}) 710.085519ms ago: executing program 1 (id=2707): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000280)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000200)={r3, 0x0, r4, 0x7ff, 0x4000, 0x80000003, 0x0, 0x5, 0x5, 0xe, 0x6, 0x322}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x4000) (async) r6 = getpid() (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000180)={0x0, 0x7, {r6}, {r7}, 0x4, 0xd1}) 709.655697ms ago: executing program 0 (id=2708): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x54, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x7fff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) readv(r6, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 678.936733ms ago: executing program 4 (id=2709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x181802, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1]) (async) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x3ff, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x400c000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {0x0, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) 678.675778ms ago: executing program 0 (id=2710): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000140)=""/12, 0xc, 0x7, &(0x7f0000000280)) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) sendmsg(r0, &(0x7f00000019c0)={&(0x7f0000000740)=@generic={0x1d, "0fa3386c39b3185f290c51205783fddf121d2d279b6cb55d114a3c450ba02a6c7e1afe403b5f4ebfca4641a09f9ead6609b6207e2e75c4cd82e446786c7fe02f3179514a81bb7cc0cd1b55e41dd3457fac3afa96ef9a21a5d539618fdb44c3a95a184000476322ac5c44a5305c2a9f3969ae9202d370bc02411cab6ff87e"}, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)="33895b441acd8db47ffadaa7b52d4d810ed6c0f7f9e5a0903913e3c7b6f00a5e60839a0f1e7579f8af9ff7f37f439703f245b403628db8d3cf6fa25cd3069c25fda99670de158e9e2f3cf80cbe9204c940cf1e9fbbee65a4ba321682412391ac1001b783767124e7308b728d77aa911ca023f02f0b1608e18854fe801a884214d761b065b54756fcab6192f929ad22fef19421134b59f3fe45e5ce660b8459d1c821766ea842734c3c6f734f7c477b8b7cd86a9ad4ca12280e9a78235b59f8161420d8f95d29170b29e52547daba204ad30ed642fc0f4a086f6e1693a95b", 0xde}], 0x1, &(0x7f0000000940)=[{0x50, 0x11, 0x5, "3b4182f789515035f023b476415ec32cf781c61b020545c212f0e92d301d30fa2672e811006c943acfa948dd85320641266ca08d4e2d7cee416faa6d9d"}, {0x1010, 0x108, 0xedf, "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"}], 0x1060}, 0xc0) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000040)={@default, @default}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x180, 0x4f}, 0x0, 0x0, 0x5, 0x0, 0x6, 0x3, 0x0, 0x2, 0x476d, 0xee}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffe28, r5, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000002c0)={r6, 0x4, 0x7, 0x1, 0x3, [], [0x6, 0xfffffffb, 0x0, 0xe], [0x1, 0xfffffffe, 0x9, 0xffffff85], [0x2bebcc00, 0xffffffffffffffab, 0x9, 0x55]}) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f0000000440)=r6) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r7, 0x100000000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x41}]}, 0x30}, 0x1, 0x0, 0x0, 0x408c5}, 0x4048040) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000006c0)={&(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x3, r5, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000700)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], r9, 0x0, '\x00', 0x8, 0x6}) r10 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r10, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000003e00)=""/4093, 0xffd}], 0x1}, 0x101}], 0x1, 0x40000020, 0x0) 611.149743ms ago: executing program 4 (id=2711): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 610.570153ms ago: executing program 4 (id=2712): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@empty, r1}, 0x14) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000380)="01e2", 0x2}], 0x1}}], 0x1, 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280), 0x4) 0s ago: executing program 3 (id=2713): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000000280)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r0, &(0x7f0000001400)=""/4046, 0xffd8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4dfd, 0x80000, @empty, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00'], 0x28}, 0xc4) kernel console output (not intermixed with test programs): perblock [ 224.912910][T12893] kvm: pic: non byte write [ 224.918260][T12893] kvm: pic: non byte write [ 225.043476][T12901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1987'. [ 225.050202][T12901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1987'. [ 225.054037][T12901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1987'. [ 225.057574][T12901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1987'. [ 225.061581][T12901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1987'. [ 225.243349][T12912] syz.0.1991: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 225.251842][T12912] CPU: 1 UID: 0 PID: 12912 Comm: syz.0.1991 Not tainted syzkaller #0 PREEMPT(full) [ 225.251870][T12912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.251883][T12912] Call Trace: [ 225.251904][T12912] [ 225.251911][T12912] dump_stack_lvl+0x16c/0x1f0 [ 225.251954][T12912] warn_alloc+0x248/0x3a0 [ 225.251987][T12912] ? __pfx_warn_alloc+0x10/0x10 [ 225.252016][T12912] ? __pfx_stack_trace_save+0x10/0x10 [ 225.252052][T12912] ? kasan_save_stack+0x42/0x60 [ 225.252070][T12912] ? kasan_save_stack+0x33/0x60 [ 225.252087][T12912] ? kasan_save_track+0x14/0x30 [ 225.252112][T12912] ? xskq_create+0x52/0x1d0 [ 225.252138][T12912] ? xsk_setsockopt+0x74e/0x9a0 [ 225.252161][T12912] ? do_sock_setsockopt+0xf3/0x1d0 [ 225.252195][T12912] ? xskq_create+0xfb/0x1d0 [ 225.252239][T12912] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 225.252271][T12912] ? xskq_create+0xfb/0x1d0 [ 225.252302][T12912] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.252338][T12912] ? xskq_create+0xfb/0x1d0 [ 225.252361][T12912] vmalloc_user_noprof+0x9e/0xe0 [ 225.252383][T12912] ? xskq_create+0xfb/0x1d0 [ 225.252409][T12912] xskq_create+0xfb/0x1d0 [ 225.252435][T12912] xsk_setsockopt+0x74e/0x9a0 [ 225.252460][T12912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 225.252483][T12912] ? find_held_lock+0x2b/0x80 [ 225.252511][T12912] ? selinux_socket_setsockopt+0x6a/0x80 [ 225.252542][T12912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 225.252566][T12912] do_sock_setsockopt+0xf3/0x1d0 [ 225.252596][T12912] __sys_setsockopt+0x1a0/0x230 [ 225.252623][T12912] __x64_sys_setsockopt+0xbd/0x160 [ 225.252644][T12912] ? do_syscall_64+0x91/0xfa0 [ 225.252661][T12912] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.252679][T12912] do_syscall_64+0xcd/0xfa0 [ 225.252697][T12912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.252715][T12912] RIP: 0033:0x7f5b8998f749 [ 225.252732][T12912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.252749][T12912] RSP: 002b:00007f5b8a79d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 225.252768][T12912] RAX: ffffffffffffffda RBX: 00007f5b89be5fa0 RCX: 00007f5b8998f749 [ 225.252781][T12912] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 225.252792][T12912] RBP: 00007f5b89a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 225.252804][T12912] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.252816][T12912] R13: 00007f5b89be6038 R14: 00007f5b89be5fa0 R15: 00007ffd596490d8 [ 225.252845][T12912] [ 225.252872][T12912] Mem-Info: [ 225.378635][T12912] active_anon:13561 inactive_anon:14561 isolated_anon:0 [ 225.378635][T12912] active_file:1300 inactive_file:31672 isolated_file:0 [ 225.378635][T12912] unevictable:2792 dirty:22 writeback:0 [ 225.378635][T12912] slab_reclaimable:10218 slab_unreclaimable:89864 [ 225.378635][T12912] mapped:31797 shmem:19473 pagetables:1994 [ 225.378635][T12912] sec_pagetables:312 bounce:0 [ 225.378635][T12912] kernel_misc_reclaimable:0 [ 225.378635][T12912] free:408594 free_pcp:30737 free_cma:0 [ 225.396441][T12912] Node 0 active_anon:50856kB inactive_anon:58244kB active_file:4820kB inactive_file:126476kB unevictable:7632kB isolated(anon):0kB isolated(file):0kB mapped:127124kB dirty:88kB writeback:0kB shmem:71080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14672kB pagetables:7252kB sec_pagetables:1248kB all_unreclaimable? no Balloon:0kB [ 225.408458][T12912] Node 1 active_anon:3388kB inactive_anon:0kB active_file:380kB inactive_file:212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:6812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:784kB pagetables:724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 225.419481][T12912] Node 0 DMA free:7836kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1744kB inactive_anon:3240kB active_file:36kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:264kB local_pcp:12kB free_cma:0kB [ 225.432891][T12912] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 225.435022][T12912] Node 0 DMA32 free:121508kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49112kB inactive_anon:55004kB active_file:4784kB inactive_file:126468kB unevictable:7632kB writepending:88kB zspages:0kB present:2080628kB managed:1269472kB mlocked:0kB bounce:0kB free_pcp:29168kB local_pcp:4140kB free_cma:0kB [ 225.447473][T12912] lowmem_reserve[]: 0 0 0 0 0 [ 225.449739][T12912] Node 1 Normal free:1505032kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3388kB inactive_anon:0kB active_file:380kB inactive_file:212kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:93516kB local_pcp:37308kB free_cma:0kB [ 225.461479][T12912] lowmem_reserve[]: 0 0 0 0 0 [ 225.463150][T12912] Node 0 DMA: 35*4kB (UME) 62*8kB (UME) 38*16kB (UME) 40*32kB (UME) 11*64kB (UM) 4*128kB (ME) 4*256kB (ME) 0*512kB 3*1024kB (ME) 0*2048kB 0*4096kB = 7836kB [ 225.468504][T12912] Node 0 DMA32: 1593*4kB (UME) 869*8kB (UME) 321*16kB (UM) 581*32kB (UME) 162*64kB (UME) 69*128kB (UME) 41*256kB (UME) 25*512kB (UME) 19*1024kB (UM) 7*2048kB (UM) 2*4096kB (U) = 121532kB [ 225.475117][T12912] Node 1 Normal: 232*4kB (UME) 343*8kB (UME) 298*16kB (UME) 242*32kB (UME) 160*64kB (UME) 77*128kB (UM) 52*256kB (UME) 39*512kB (UM) 30*1024kB (UME) 8*2048kB (U) 339*4096kB (UM) = 1505208kB [ 225.481804][T12912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.485318][T12912] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 225.488757][T12912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.492636][T12912] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 225.495856][T12912] 52441 total pagecache pages [ 225.497606][T12912] 0 pages in swap cache [ 225.499332][T12912] Free swap = 124996kB [ 225.500706][T12912] Total swap = 124996kB [ 225.502061][T12912] 1048443 pages RAM [ 225.503567][T12912] 0 pages HighMem/MovableOnly [ 225.506379][T12912] 281762 pages reserved [ 225.508470][T12912] 0 pages cma reserved [ 226.045674][ T9941] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.048501][ T9941] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.061899][ T9941] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.065581][ T9941] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.074307][ T9946] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.078513][ T9946] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.089297][ T9946] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.093564][ T9946] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.138689][ T5945] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 226.143974][ T5945] Bluetooth: hci2: unexpected event for opcode 0x203e [ 226.670049][T12950] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 226.802048][T12962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12962 comm=syz.0.2002 [ 227.189594][T12998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.193434][T12998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.196663][T12998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.246238][T13007] sctp: [Deprecated]: syz.1.2011 (pid 13007) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.246238][T13007] Use struct sctp_sack_info instead [ 227.256508][T13007] sctp: [Deprecated]: syz.1.2011 (pid 13007) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.256508][T13007] Use struct sctp_sack_info instead [ 227.277959][T12998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.281944][T12998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.286733][T12998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.392838][T12998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.397659][T12998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.402667][T12998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.579107][ T1461] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 227.628765][ T9941] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.632456][ T9941] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.636029][ T9941] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.652116][ T41] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.655649][ T41] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.659495][ T41] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.670517][ T9946] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.674310][ T9946] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.677964][ T9946] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.689098][ T9941] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.694091][ T9941] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.697788][ T9941] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.730461][ T1461] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.734739][ T1461] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 227.739171][ T1461] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 227.743096][ T1461] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.743277][ T40] kauditd_printk_skb: 130 callbacks suppressed [ 227.743289][ T40] audit: type=1400 audit(2000000112.399:3776): avc: denied { create } for pid=13031 comm="syz.3.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.748369][ T1461] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.748383][ T1461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.754114][ T1461] usb 6-1: config 0 descriptor?? [ 227.765052][ T40] audit: type=1400 audit(2000000112.399:3777): avc: denied { write } for pid=13031 comm="syz.3.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.776747][ T40] audit: type=1400 audit(2000000112.399:3778): avc: denied { read } for pid=13031 comm="syz.3.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.785281][ T40] audit: type=1400 audit(2000000112.399:3779): avc: denied { ioctl } for pid=13031 comm="syz.3.2013" path="socket:[47327]" dev="sockfs" ino=47327 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.794140][ T40] audit: type=1400 audit(2000000112.439:3780): avc: denied { write } for pid=13035 comm="syz.3.2014" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 227.803325][ T40] audit: type=1400 audit(2000000112.439:3781): avc: denied { create } for pid=13035 comm="syz.3.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.811167][ T40] audit: type=1400 audit(2000000112.439:3782): avc: denied { write } for pid=13035 comm="syz.3.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.820347][ T40] audit: type=1400 audit(2000000112.439:3783): avc: denied { nlmsg_write } for pid=13035 comm="syz.3.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.897669][ T40] audit: type=1400 audit(2000000112.549:3784): avc: denied { create } for pid=13044 comm="syz.3.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.916653][ T40] audit: type=1400 audit(2000000112.569:3785): avc: denied { write } for pid=13044 comm="syz.3.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.186048][ T1461] usbhid 6-1:0.0: can't add hid device: -71 [ 228.193242][ T1461] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 228.200017][ T1461] usb 6-1: USB disconnect, device number 30 [ 228.377553][T13083] tmpfs: Bad value for 'mpol' [ 228.590882][T13146] overlayfs: conflicting options: userxattr,redirect_dir=on [ 228.712752][ T5941] Bluetooth: hci2: unexpected subevent 0x19 length: 24 < 28 [ 228.718157][T13162] netlink: 'syz.1.2029': attribute type 1 has an invalid length. [ 228.772111][T13165] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 228.777445][T13165] bond5 (unregistering): Released all slaves [ 228.812375][T13234] __nla_validate_parse: 30 callbacks suppressed [ 228.812388][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'. [ 228.818680][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2030'. [ 228.900594][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2034'. [ 228.912679][T13251] lo speed is unknown, defaulting to 1000 [ 228.913734][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 228.919739][T13250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2034'. [ 228.922092][T13257] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 228.927774][T13257] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.2036'. [ 228.949270][T13257] program syz.1.2036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.135339][T13295] xt_l2tp: invalid flags combination: 8 [ 229.219668][ T6005] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 229.370652][ T6005] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.374327][ T6005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.377849][ T6005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 229.382248][ T6005] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.386610][ T6005] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.389932][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.394596][ T6005] usb 5-1: config 0 descriptor?? [ 229.464466][T13314] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.2043'. [ 229.522727][T13325] netlink: 'syz.1.2047': attribute type 30 has an invalid length. [ 229.649432][T13332] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 229.653054][T13332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.809486][ T6005] usbhid 5-1:0.0: can't add hid device: -71 [ 229.813475][ T6005] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 229.820684][ T6005] usb 5-1: USB disconnect, device number 43 [ 230.201619][ T5941] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 230.205503][ T5941] Bluetooth: hci2: Injecting HCI hardware error event [ 230.211199][ T5941] Bluetooth: hci2: hardware error 0x00 [ 230.433934][T13379] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2061'. [ 230.953709][T13364] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.955956][T13364] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.958183][T13364] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.153929][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 231.254764][T13468] binder: 13467:13468 unknown command 0 [ 231.257309][T13468] binder: 13467:13468 ioctl c0306201 200000000080 returned -22 [ 231.268859][ T6212] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 231.276118][T13468] binder: 13467:13468 ioctl c02064b9 200000000580 returned -22 [ 231.314238][T13478] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2080'. [ 231.430978][ T6212] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.436461][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.443498][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 231.447684][ T6212] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.458667][ T6212] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.462950][ T6212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.472853][ T6212] usb 5-1: config 0 descriptor?? [ 231.480353][T13493] syz_tun: entered allmulticast mode [ 231.488688][T13492] syz_tun: left allmulticast mode [ 231.824242][T13528] random: crng reseeded on system resumption [ 231.894275][ T6212] usbhid 5-1:0.0: can't add hid device: -71 [ 231.897080][ T6212] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 231.902159][ T5952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.903036][ T6212] usb 5-1: USB disconnect, device number 44 [ 231.914906][ T5952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.920725][ T5952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.926331][ T5952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.931291][ T5952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.943528][T13545] program syz.4.2095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.958807][T13531] lo speed is unknown, defaulting to 1000 [ 232.110836][T13531] chnl_net:caif_netlink_parms(): no params data found [ 232.199158][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.247295][T13531] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.253736][T13531] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.256312][T13531] bridge_slave_0: entered allmulticast mode [ 232.259372][T13531] bridge_slave_0: entered promiscuous mode [ 232.262811][T13531] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.265531][T13531] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.267966][T13531] bridge_slave_1: entered allmulticast mode [ 232.271847][T13531] bridge_slave_1: entered promiscuous mode [ 232.277738][T13854] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 232.278779][ T5941] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 232.286108][T13854] exFAT-fs (nullb0): invalid boot record signature [ 232.288306][T13854] exFAT-fs (nullb0): failed to read boot sector [ 232.292941][T13854] exFAT-fs (nullb0): failed to recognize exfat type [ 232.356301][T13531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.363058][T13531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.425318][T13531] team0: Port device team_slave_0 added [ 232.431452][T13531] team0: Port device team_slave_1 added [ 232.462709][T14127] netlink: 'syz.3.2101': attribute type 6 has an invalid length. [ 232.510461][T13531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.513954][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.526398][T13531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.539831][T13531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.543106][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.554664][T13531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.581298][ T9953] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.584912][ T9953] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.682311][ T9953] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.686903][ T9953] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.690665][T14373] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.693969][T14373] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 232.698369][T14373] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.702875][T14373] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 232.705205][T13531] hsr_slave_0: entered promiscuous mode [ 232.708489][T13531] hsr_slave_1: entered promiscuous mode [ 232.712183][T13531] debugfs: 'hsr0' already exists in 'hsr' [ 232.714420][T13531] Cannot create hsr debugfs directory [ 232.752261][ T40] kauditd_printk_skb: 301 callbacks suppressed [ 232.752276][ T40] audit: type=1400 audit(2000000117.409:4087): avc: denied { read write } for pid=14454 comm="syz.0.2107" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.767483][ T40] audit: type=1400 audit(2000000117.409:4088): avc: denied { open } for pid=14454 comm="syz.0.2107" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.778831][ T40] audit: type=1400 audit(2000000117.409:4089): avc: denied { ioctl } for pid=14454 comm="syz.0.2107" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.785419][ T9953] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.797232][ T9953] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.863534][ T9953] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.867016][ T9953] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.954239][ T40] audit: type=1400 audit(2000000117.609:4090): avc: denied { read } for pid=5648 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 232.962800][ T40] audit: type=1400 audit(2000000117.619:4091): avc: denied { search } for pid=5648 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.970628][ T40] audit: type=1400 audit(2000000117.619:4092): avc: denied { search } for pid=5648 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.977704][ T40] audit: type=1400 audit(2000000117.619:4093): avc: denied { search } for pid=5648 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.990108][ T40] audit: type=1400 audit(2000000117.619:4094): avc: denied { read } for pid=5648 comm="dhcpcd" name="n115" dev="tmpfs" ino=8107 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 232.991977][ T841] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 232.992848][ T9953] bridge0: port 4(batadv0) entered disabled state [ 232.999461][ T5941] Bluetooth: hci4: command 0x0405 tx timeout [ 232.999507][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.000446][ T40] audit: type=1400 audit(2000000117.619:4095): avc: denied { open } for pid=5648 comm="dhcpcd" path="/run/udev/data/n115" dev="tmpfs" ino=8107 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.022783][ T9953] dummy0: left allmulticast mode [ 233.022787][ T40] audit: type=1400 audit(2000000117.619:4096): avc: denied { getattr } for pid=5648 comm="dhcpcd" path="/run/udev/data/n115" dev="tmpfs" ino=8107 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.035129][ T9953] bridge0: port 3(dummy0) entered disabled state [ 233.038825][ T9953] bridge_slave_1: left allmulticast mode [ 233.040881][ T9953] bridge_slave_1: left promiscuous mode [ 233.043018][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.051620][ T9953] bridge_slave_0: left allmulticast mode [ 233.054425][ T9953] bridge_slave_0: left promiscuous mode [ 233.056530][ T9953] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.150513][ T841] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.156184][ T841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.163141][ T841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.167381][ T841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.173861][ T841] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.178135][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.185189][ T841] usb 5-1: config 0 descriptor?? [ 233.597488][ T841] usbhid 5-1:0.0: can't add hid device: -71 [ 233.600275][ T841] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 233.605310][ T841] usb 5-1: USB disconnect, device number 45 [ 233.862137][ T9953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.865201][ T9953] bond_slave_0: left allmulticast mode [ 233.868409][ T9953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.872062][ T9953] bond_slave_1: left allmulticast mode [ 233.878002][ T9953] bond0 (unregistering): (slave team0): Releasing backup interface [ 233.881363][ T9953] team0: left allmulticast mode [ 233.883008][ T9953] team_slave_0: left allmulticast mode [ 233.884903][ T9953] team_slave_1: left allmulticast mode [ 233.888476][ T9953] bond0 (unregistering): Released all slaves [ 233.895735][ T9953] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 233.900374][ T9953] bond1 (unregistering): Released all slaves [ 233.961378][ T5952] Bluetooth: hci5: command tx timeout [ 234.028139][ T9953] bond2 (unregistering): Released all slaves [ 234.140271][ T9953] bond3 (unregistering): (slave bond4): Releasing backup interface [ 234.144085][ T9953] bond4 (unregistering): left promiscuous mode [ 234.146708][ T9953] bond4 (unregistering): left allmulticast mode [ 234.150137][ T9953] bond3 (unregistering): Released all slaves [ 234.235808][ T9953] bond4 (unregistering): Released all slaves [ 235.799786][T14640] macvlan0: entered allmulticast mode [ 235.802090][T14640] veth1_vlan: entered allmulticast mode [ 235.805578][ T9953] : left promiscuous mode [ 235.821049][T14651] __nla_validate_parse: 3 callbacks suppressed [ 235.821075][T14651] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2114'. [ 235.832618][T14651] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2114'. [ 235.884799][T14664] openvswitch: netlink: IP tunnel dst address not specified [ 235.964412][ T9953] tipc: Left network mode [ 236.038909][ T5952] Bluetooth: hci5: command tx timeout [ 236.213791][T14704] fuse: Bad value for 'group_id' [ 236.221686][T14704] fuse: Bad value for 'group_id' [ 236.279439][T13531] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.288324][T13531] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.297446][T13531] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.305676][T13531] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 236.387884][T13531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.397546][ T9953] hsr_slave_0: left promiscuous mode [ 236.403831][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.406867][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.410828][ T9953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.413247][ T9953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.445346][ T9953] veth1_macvtap: left promiscuous mode [ 236.447531][ T9953] veth0_macvtap: left promiscuous mode [ 236.449811][ T9953] veth1_vlan: left promiscuous mode [ 236.451656][ T9953] veth0_vlan: left promiscuous mode [ 236.561538][ T9953] pimreg (unregistering): left allmulticast mode [ 237.313066][ T9953] team0 (unregistering): Port device team_slave_1 removed [ 237.399173][ T9953] team0 (unregistering): Port device team_slave_0 removed [ 238.051327][T13531] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.059745][ T9955] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.062490][ T9955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.070592][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.072953][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.073695][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 238.073709][ T40] audit: type=1400 audit(2000000122.730:4198): avc: denied { ioctl } for pid=14755 comm="syz.0.2125" path="socket:[47866]" dev="sockfs" ino=47866 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.102108][ T40] audit: type=1400 audit(2000000122.760:4199): avc: denied { module_request } for pid=13531 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 238.119638][ T5952] Bluetooth: hci5: command tx timeout [ 238.121542][ T40] audit: type=1400 audit(2000000122.780:4200): avc: denied { sys_module } for pid=13531 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 238.159525][ T40] audit: type=1400 audit(2000000122.820:4201): avc: denied { read } for pid=14762 comm="syz.0.2127" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 238.169686][ T40] audit: type=1400 audit(2000000122.820:4202): avc: denied { open } for pid=14762 comm="syz.0.2127" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 238.181622][ T40] audit: type=1400 audit(2000000122.820:4203): avc: denied { ioctl } for pid=14762 comm="syz.0.2127" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 238.194622][ T40] audit: type=1400 audit(2000000122.820:4204): avc: denied { allowed } for pid=14762 comm="syz.0.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 238.201162][T13531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.204119][ T40] audit: type=1400 audit(2000000122.820:4205): avc: denied { create } for pid=14762 comm="syz.0.2127" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.249010][T13531] veth0_vlan: entered promiscuous mode [ 238.259411][T13531] veth1_vlan: entered promiscuous mode [ 238.279825][ T40] audit: type=1400 audit(2000000122.940:4206): avc: denied { create } for pid=14767 comm="syz.0.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 238.286347][T13531] veth0_macvtap: entered promiscuous mode [ 238.289263][ T40] audit: type=1400 audit(2000000122.940:4207): avc: denied { shutdown } for pid=14767 comm="syz.0.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 238.296854][T13531] veth1_macvtap: entered promiscuous mode [ 238.336329][T13531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.347489][T13531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.371688][ T9955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.377857][ T9955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.381639][ T9955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.385416][ T9955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.393516][T14775] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2130'. [ 238.400532][T14775] sctp: [Deprecated]: syz.0.2130 (pid 14775) Use of int in max_burst socket option. [ 238.400532][T14775] Use struct sctp_assoc_value instead [ 238.488818][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.494840][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.512036][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.514710][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.574374][T14789] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2132'. [ 238.695362][T14805] blktrace: Concurrent blktraces are not allowed on sg0 [ 238.698100][T14804] blktrace: Concurrent blktraces are not allowed on sg0 [ 238.744987][T14809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.077129][T14836] hpfs: hpfs_map_sector(): read error [ 239.958599][ T841] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 240.064055][T14886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2154'. [ 240.123507][T14886] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14886 comm=syz.3.2154 [ 240.127043][ T841] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.133646][ T841] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.140096][ T841] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.143637][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.209250][ T5952] Bluetooth: hci5: command tx timeout [ 240.270300][T14966] syz.3.2159 (14966): attempted to duplicate a private mapping with mremap. This is not supported. [ 240.357637][ T841] usb 5-1: usb_control_msg returned -32 [ 240.358877][T14973] tmpfs: Unknown parameter 'mpol?‘çK#–MÞj' [ 240.361547][ T841] usbtmc 5-1:16.0: can't read capabilities [ 240.676826][T15001] misc userio: Invalid payload size [ 240.762401][T15008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2171'. [ 241.248855][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.256459][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.261412][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.265707][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.270249][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.302745][T15026] lo speed is unknown, defaulting to 1000 [ 241.434352][T15026] chnl_net:caif_netlink_parms(): no params data found [ 241.575676][T15026] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.580375][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.583897][T15026] bridge_slave_0: entered allmulticast mode [ 241.591101][T15026] bridge_slave_0: entered promiscuous mode [ 241.597519][T15026] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.603771][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.607243][T15026] bridge_slave_1: entered allmulticast mode [ 241.611727][T15026] bridge_slave_1: entered promiscuous mode [ 241.682286][T15026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.692381][T15026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.762506][T15026] team0: Port device team_slave_0 added [ 241.766586][T15026] team0: Port device team_slave_1 added [ 241.812422][T15026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.815102][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.823717][T15026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.829458][T15026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.832242][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.842466][T15026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.914517][T15026] hsr_slave_0: entered promiscuous mode [ 241.917936][T15026] hsr_slave_1: entered promiscuous mode [ 241.922117][T15026] debugfs: 'hsr0' already exists in 'hsr' [ 241.924242][T15026] Cannot create hsr debugfs directory [ 242.106698][T15026] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.112109][T15026] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.117087][T15026] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.196420][T15026] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.201225][T15026] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.205720][T15026] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.274702][T15026] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.280507][T15026] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.284791][T15026] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.335912][T16053] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2180'. [ 242.362991][T15026] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.367338][T15026] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.373432][T15026] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.385013][T16064] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 242.457599][T16066] syzkaller0: entered promiscuous mode [ 242.460383][T16066] syzkaller0: entered allmulticast mode [ 242.470093][T16066] i2c i2c-1: Invalid block write size 34 [ 242.712181][ T6071] usb 5-1: USB disconnect, device number 46 [ 243.320549][ T5941] Bluetooth: hci0: command tx timeout [ 243.664076][ T40] kauditd_printk_skb: 193 callbacks suppressed [ 243.664093][ T40] audit: type=1400 audit(2000000128.320:4401): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 243.677657][ T40] audit: type=1400 audit(2000000128.330:4402): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 244.117554][ T40] audit: type=1400 audit(2000000128.770:4403): avc: denied { read } for pid=16102 comm="syz.0.2188" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.128481][ T40] audit: type=1400 audit(2000000128.770:4404): avc: denied { open } for pid=16102 comm="syz.0.2188" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.134382][T15026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 244.137829][ T40] audit: type=1400 audit(2000000128.770:4405): avc: denied { write } for pid=16102 comm="syz.0.2188" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 244.150955][ T40] audit: type=1400 audit(2000000128.790:4406): avc: denied { read } for pid=15026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.155507][T15026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 244.159544][ T40] audit: type=1400 audit(2000000128.800:4407): avc: denied { map } for pid=16102 comm="syz.0.2188" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 244.174463][ T40] audit: type=1400 audit(2000000128.820:4408): avc: denied { ioctl } for pid=16102 comm="syz.0.2188" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.179668][T15026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 244.194356][T15026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 244.242454][ T40] audit: type=1400 audit(2000000128.900:4409): avc: denied { read write } for pid=16119 comm="syz.1.2190" name="video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 244.252385][ T40] audit: type=1400 audit(2000000128.900:4410): avc: denied { open } for pid=16119 comm="syz.1.2190" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 244.271545][T15026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.281625][T15026] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.287928][ T9941] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.290578][ T9941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.297378][ T9941] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.299911][ T9941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.317336][T16125] IPv6: sit2: Disabled Multicast RS [ 244.321709][T16125] sit2: entered allmulticast mode [ 244.491802][T15026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.520264][T15026] veth0_vlan: entered promiscuous mode [ 244.525746][T15026] veth1_vlan: entered promiscuous mode [ 244.542265][T15026] veth0_macvtap: entered promiscuous mode [ 244.548170][T15026] veth1_macvtap: entered promiscuous mode [ 244.574987][T15026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.586992][T15026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.596369][ T9953] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.602260][ T9953] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.607412][ T9953] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.611039][ T1473] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 244.612582][ T9953] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.657201][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.666441][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.690341][ T9941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.693703][ T9941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.770347][ T1473] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.774118][ T1473] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.780821][ T1473] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.788056][ T1473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.997834][ T1473] usb 6-1: usb_control_msg returned -32 [ 244.999830][ T1473] usbtmc 6-1:16.0: can't read capabilities [ 245.052141][T16185] overlayfs: empty lowerdir [ 245.055296][T16185] overlay: ./file0 is not a directory [ 245.368087][T16204] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2204'. [ 245.376244][ T5941] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 245.376276][ T5941] Bluetooth: hci1: Malformed LE Event: 0x02 [ 245.398694][ T5941] Bluetooth: hci0: command tx timeout [ 245.457355][T16216] syz.4.2206 (16216): /proc/16214/oom_adj is deprecated, please use /proc/16214/oom_score_adj instead. [ 245.620441][T16232] lo speed is unknown, defaulting to 1000 [ 246.108146][ T54] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 246.278222][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 246.283394][ T54] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 246.287333][ T54] usb 5-1: config 179 has no interface number 0 [ 246.290528][ T54] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 246.295161][ T54] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 246.300289][ T54] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 246.306724][ T54] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 246.312776][ T54] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 246.316616][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.323644][T16273] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 246.539814][ T54] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input26 [ 246.735326][ C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 246.735330][ T6393] usb 5-1: USB disconnect, device number 47 [ 246.735668][ C2] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 246.737662][T16306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2216'. [ 246.891519][T16327] Cannot find set identified by id 65534 to match [ 246.940499][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 246.944659][T16331] netlink: 'syz.3.2220': attribute type 12 has an invalid length. [ 247.347755][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2228'. [ 247.368656][ T841] usb 6-1: USB disconnect, device number 31 [ 247.478303][ T5941] Bluetooth: hci0: command tx timeout [ 247.551567][T16402] overlay: filesystem on ./bus not supported as upperdir [ 247.555638][T16402] overlay: filesystem on ./bus not supported as upperdir [ 247.561215][T16402] overlay: filesystem on ./bus not supported as upperdir [ 247.565290][T16402] overlay: filesystem on ./bus not supported as upperdir [ 247.569911][T16402] overlay: filesystem on ./bus not supported as upperdir [ 247.574211][T16402] overlay: filesystem on ./bus not supported as upperdir [ 247.578606][T16402] overlay: filesystem on ./bus not supported as upperdir [ 247.582428][T16402] overlay: filesystem on ./bus not supported as upperdir [ 247.586335][T16402] overlay: filesystem on ./bus not supported as upperdir [ 247.591354][T16402] overlay: filesystem on ./bus not supported as upperdir [ 247.597343][T16398] overlayfs: failed lookup in lower (newroot/16, name='bus', err=-40): overlapping layers [ 247.604896][T16398] overlayfs: failed lookup in lower (newroot/16, name='bus', err=-40): overlapping layers [ 247.609407][T16402] overlayfs: failed lookup in lower (newroot/16, name='bus', err=-40): overlapping layers [ 247.614549][T16402] overlayfs: failed lookup in lower (newroot/16, name='bus', err=-40): overlapping layers [ 247.884979][T16421] openvswitch: netlink: Key type 31 is not supported [ 247.925797][ T6393] IPVS: starting estimator thread 0... [ 248.027979][T16428] IPVS: using max 39 ests per chain, 93600 per kthread [ 248.060617][T16441] xt_l2tp: wrong L2TP version: 0 [ 248.676877][ T40] kauditd_printk_skb: 200 callbacks suppressed [ 248.676892][ T40] audit: type=1400 audit(2000000133.330:4611): avc: denied { write } for pid=16463 comm="syz.0.2253" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.677030][ T5941] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 248.679885][T16466] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2253'. [ 248.681526][ T40] audit: type=1400 audit(2000000133.330:4612): avc: denied { read } for pid=16463 comm="syz.0.2253" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 248.681572][ T40] audit: type=1400 audit(2000000133.330:4613): avc: denied { open } for pid=16463 comm="syz.0.2253" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 248.681613][ T40] audit: type=1400 audit(2000000133.330:4614): avc: denied { ioctl } for pid=16463 comm="syz.0.2253" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 248.725199][ T40] audit: type=1400 audit(2000000133.380:4615): avc: denied { ioctl } for pid=16467 comm="syz.0.2254" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 248.901685][T16474] lo speed is unknown, defaulting to 1000 [ 248.951747][T16497] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 248.963812][T16489] netlink: 'syz.0.2256': attribute type 13 has an invalid length. [ 248.967531][T16489] netlink: 'syz.0.2256': attribute type 17 has an invalid length. [ 248.990436][T16489] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.994058][T16489] batman_adv: batadv0: Interface activated: team0 [ 248.999355][T16489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.068853][ T40] audit: type=1400 audit(2000000133.730:4616): avc: denied { create } for pid=16505 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 249.075890][ T40] audit: type=1400 audit(2000000133.730:4617): avc: denied { watch } for pid=16505 comm="syz.0.2258" path="/563/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 249.092570][ T40] audit: type=1400 audit(2000000133.730:4618): avc: denied { watch_sb watch_reads } for pid=16505 comm="syz.0.2258" path="/563/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.111286][ T40] audit: type=1400 audit(2000000133.730:4619): avc: denied { read } for pid=16505 comm="syz.0.2258" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 249.121034][ T40] audit: type=1400 audit(2000000133.730:4620): avc: denied { open } for pid=16505 comm="syz.0.2258" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 249.208702][T16515] netlink: 'syz.0.2261': attribute type 1 has an invalid length. [ 249.211446][T16515] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2261'. [ 249.382087][ T5941] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 249.558308][ T5941] Bluetooth: hci0: command tx timeout [ 250.111921][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 250.397612][T16560] ufs: You didn't specify the type of your ufs filesystem [ 250.397612][T16560] [ 250.397612][T16560] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 250.397612][T16560] [ 250.397612][T16560] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 250.411632][T16560] ufs: failed to set blocksize [ 250.417249][T16560] netlink: 'syz.0.2270': attribute type 4 has an invalid length. [ 250.427127][T16560] netlink: 'syz.0.2270': attribute type 4 has an invalid length. [ 250.482116][T16564] bridge_slave_1: entered allmulticast mode [ 250.611511][T16581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2277'. [ 250.651125][T16583] ip6gre1: entered promiscuous mode [ 250.653376][T16583] ip6gre1: entered allmulticast mode [ 250.657078][ T9941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.661209][ T9941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.678082][ T841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.694700][T16594] SET target dimension over the limit! [ 250.742029][T16603] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2282'. [ 250.801285][T16612] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2284'. [ 250.844037][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'. [ 250.847475][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'. [ 250.946710][T16627] syzkaller0: entered promiscuous mode [ 250.949723][T16627] syzkaller0: entered allmulticast mode [ 251.188126][ T841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.238150][ T5980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.318654][ T841] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 251.469935][ T841] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.475223][ T841] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.481908][ T841] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.485872][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.597769][ T5980] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 251.698287][ T841] usb 5-1: usb_control_msg returned -32 [ 251.701852][ T841] usbtmc 5-1:16.0: can't read capabilities [ 251.749979][ T5980] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.755349][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.761970][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.765814][ T5980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.772397][ T5980] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.786857][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.792840][ T5980] usb 6-1: config 0 descriptor?? [ 251.804882][T16672] netlink: 'syz.4.2295': attribute type 16 has an invalid length. [ 251.809153][T16672] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2295'. [ 251.868922][T16674] netlink: 'syz.4.2295': attribute type 39 has an invalid length. [ 252.204121][ T5980] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 252.206854][ T5980] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 252.209469][ T5980] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 252.211908][ T5980] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 252.214561][ T5980] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 252.217320][ T5980] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 252.221021][ T5980] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 252.224849][ T5980] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 252.227493][ T5980] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 252.230194][ T5980] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 252.238885][ T5980] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 254.041850][ T40] kauditd_printk_skb: 135 callbacks suppressed [ 254.041861][ T40] audit: type=1400 audit(2000000138.700:4756): avc: denied { create } for pid=16726 comm="syz.3.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.051247][ T40] audit: type=1400 audit(2000000138.700:4757): avc: denied { write } for pid=16726 comm="syz.3.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.084648][ T6005] usb 5-1: USB disconnect, device number 48 [ 254.118716][ T40] audit: type=1400 audit(2000000138.770:4758): avc: denied { view } for pid=16741 comm="syz.0.2305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 254.134826][ T40] audit: type=1400 audit(2000000138.790:4759): avc: denied { read write } for pid=15026 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.145110][ T40] audit: type=1400 audit(2000000138.790:4760): avc: denied { open } for pid=15026 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.154014][ T40] audit: type=1400 audit(2000000138.790:4761): avc: denied { ioctl } for pid=15026 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.211898][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2307'. [ 254.220883][ T40] audit: type=1400 audit(2000000138.880:4762): avc: denied { create } for pid=16750 comm="syz.3.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 254.228114][ T40] audit: type=1400 audit(2000000138.880:4763): avc: denied { write } for pid=16750 comm="syz.3.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 254.271401][ T40] audit: type=1400 audit(2000000138.930:4764): avc: denied { read append } for pid=16754 comm="syz.3.2308" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 254.285985][ T40] audit: type=1400 audit(2000000138.930:4765): avc: denied { open } for pid=16754 comm="syz.3.2308" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 254.307894][T16757] netlink: 'syz.0.2309': attribute type 2 has an invalid length. [ 254.371884][ T54] usb 6-1: USB disconnect, device number 32 [ 254.406322][T16779] netlink: 'syz.0.2312': attribute type 1 has an invalid length. [ 254.456338][T16779] bond6: (slave geneve4): making interface the new active one [ 254.460575][T16779] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 254.464591][ T9953] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 254.468616][ T41] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 254.472191][ T41] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 254.475839][ T41] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 254.517696][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.624921][ T841] IPVS: starting estimator thread 0... [ 254.677987][T16849] Bluetooth: MGMT ver 1.23 [ 254.717740][T16844] IPVS: using max 24 ests per chain, 57600 per kthread [ 254.717823][ T54] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 254.870367][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.875447][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.880893][ T54] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.886704][ T54] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.891607][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.900516][ T54] usb 6-1: config 0 descriptor?? [ 255.049132][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2325'. [ 255.317216][ T54] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xe [ 255.331205][ T54] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 255.739240][ T6393] usb 6-1: USB disconnect, device number 33 [ 255.954216][T16901] loop8: detected capacity change from 0 to 1 [ 255.962816][ T6552] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 255.966950][ T6552] loop8: p1 start 540042604 is beyond EOD, truncated [ 255.969817][ T6552] loop8: p2 start 1640453368 is beyond EOD, truncated [ 255.972424][ T6552] loop8: p3 start 1935506780 is beyond EOD, truncated [ 255.974976][ T6552] loop8: p4 start 3893138939 is beyond EOD, truncated [ 255.977251][ T6552] loop8: p5 start 287485722 is beyond EOD, truncated [ 255.979660][ T6552] loop8: p6 start 3376667143 is beyond EOD, truncated [ 255.981958][ T6552] loop8: p7 start 2111012381 is beyond EOD, truncated [ 255.984334][ T6552] loop8: p8 start 3147612238 is beyond EOD, truncated [ 255.986904][ T6552] loop8: p9 start 2252824347 is beyond EOD, truncated [ 255.989672][ T6552] loop8: p10 start 489633540 is beyond EOD, truncated [ 255.992117][ T6552] loop8: p11 start 1985099615 is beyond EOD, truncated [ 255.994377][ T6552] loop8: p12 start 2132828001 is beyond EOD, truncated [ 255.998123][T16901] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 256.002623][T16901] loop8: p1 start 540042604 is beyond EOD, truncated [ 256.005836][T16901] loop8: p2 start 1640453368 is beyond EOD, truncated [ 256.009526][T16901] loop8: p3 start 1935506780 is beyond EOD, truncated [ 256.012852][T16901] loop8: p4 start 3893138939 is beyond EOD, truncated [ 256.016121][T16901] loop8: p5 start 287485722 is beyond EOD, truncated [ 256.019603][T16901] loop8: p6 start 3376667143 is beyond EOD, truncated [ 256.022770][T16901] loop8: p7 start 2111012381 is beyond EOD, truncated [ 256.026094][T16901] loop8: p8 start 3147612238 is beyond EOD, truncated [ 256.028999][T16901] loop8: p9 start 2252824347 is beyond EOD, truncated [ 256.031336][T16901] loop8: p10 start 489633540 is beyond EOD, truncated [ 256.033688][T16901] loop8: p11 start 1985099615 is beyond EOD, truncated [ 256.035958][T16901] loop8: p12 start 2132828001 is beyond EOD, truncated [ 256.142578][T16931] netlink: 'syz.4.2333': attribute type 10 has an invalid length. [ 256.146176][T16931] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2333'. [ 256.150718][T16931] ocfs2: Unknown parameter 'grpquotaC°Ø˜±œÙ{¡Ê~9]Æ%™vré¡B<ÃÉ~' [ 256.255166][T16938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2335'. [ 256.260756][T16938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2335'. [ 256.342043][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.354706][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.361083][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.369904][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.373808][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.412502][T16947] lo speed is unknown, defaulting to 1000 [ 256.535055][T16947] chnl_net:caif_netlink_parms(): no params data found [ 256.622875][T16947] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.625501][T16947] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.628529][T16947] bridge_slave_0: entered allmulticast mode [ 256.631513][T16947] bridge_slave_0: entered promiscuous mode [ 256.634798][T16947] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.637749][T16947] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.641356][T16947] bridge_slave_1: entered allmulticast mode [ 256.644338][T16947] bridge_slave_1: entered promiscuous mode [ 256.691769][T16947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.696713][T16947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.744734][T16947] team0: Port device team_slave_0 added [ 256.751885][T16947] team0: Port device team_slave_1 added [ 256.805119][T16947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.811022][T16947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.820904][T16947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.829083][T16947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.831637][T16947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.840819][T16947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.849860][T17624] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2342'. [ 256.856756][T17624] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2342'. [ 256.903304][T16947] hsr_slave_0: entered promiscuous mode [ 256.906528][T16947] hsr_slave_1: entered promiscuous mode [ 256.910350][T16947] debugfs: 'hsr0' already exists in 'hsr' [ 256.912208][T16947] Cannot create hsr debugfs directory [ 256.977124][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 257.039843][T16947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 257.043180][T16947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 257.046283][T16947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 257.113984][T17967] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 257.130099][T16947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 257.133747][T16947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 257.137090][T16947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 257.240837][T16947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 257.245549][T16947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 257.250457][T16947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 257.341011][T17987] FAULT_INJECTION: forcing a failure. [ 257.341011][T17987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.341540][T16947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 257.346560][T17987] CPU: 3 UID: 0 PID: 17987 Comm: syz.1.2351 Not tainted syzkaller #0 PREEMPT(full) [ 257.346577][T17987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.346585][T17987] Call Trace: [ 257.346602][T17987] [ 257.346608][T17987] dump_stack_lvl+0x16c/0x1f0 [ 257.346639][T17987] should_fail_ex+0x512/0x640 [ 257.346664][T17987] _copy_to_user+0x32/0xd0 [ 257.346680][T17987] simple_read_from_buffer+0xcb/0x170 [ 257.346700][T17987] proc_fail_nth_read+0x197/0x240 [ 257.346715][T17987] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.346729][T17987] ? rw_verify_area+0xcf/0x6c0 [ 257.346746][T17987] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.346758][T17987] vfs_read+0x1e4/0xcf0 [ 257.346771][T17987] ? __pfx___mutex_lock+0x10/0x10 [ 257.346784][T17987] ? __pfx_vfs_read+0x10/0x10 [ 257.346798][T17987] ? __fget_files+0x20e/0x3c0 [ 257.346814][T17987] ksys_read+0x12a/0x250 [ 257.346825][T17987] ? __pfx_ksys_read+0x10/0x10 [ 257.346839][T17987] do_syscall_64+0xcd/0xfa0 [ 257.346852][T17987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.346864][T17987] RIP: 0033:0x7f2a2158e15c [ 257.346875][T17987] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.346886][T17987] RSP: 002b:00007f2a1f7f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.346897][T17987] RAX: ffffffffffffffda RBX: 00007f2a217e5fa0 RCX: 00007f2a2158e15c [ 257.346905][T17987] RDX: 000000000000000f RSI: 00007f2a1f7f60a0 RDI: 0000000000000005 [ 257.346913][T17987] RBP: 00007f2a1f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.346919][T17987] R10: 000000000000009a R11: 0000000000000246 R12: 0000000000000001 [ 257.346926][T17987] R13: 00007f2a217e6038 R14: 00007f2a217e5fa0 R15: 00007ffd231b4fa8 [ 257.346941][T17987] [ 257.360386][T17990] FAULT_INJECTION: forcing a failure. [ 257.360386][T17990] name failslab, interval 1, probability 0, space 0, times 0 [ 257.361725][T16947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 257.363884][T17990] CPU: 3 UID: 0 PID: 17990 Comm: syz.4.2352 Not tainted syzkaller #0 PREEMPT(full) [ 257.363909][T17990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.363921][T17990] Call Trace: [ 257.363927][T17990] [ 257.363935][T17990] dump_stack_lvl+0x16c/0x1f0 [ 257.363959][T17990] should_fail_ex+0x512/0x640 [ 257.363981][T17990] ? fs_reclaim_acquire+0xae/0x150 [ 257.364005][T17990] should_failslab+0xc2/0x120 [ 257.364027][T17990] __kmalloc_noprof+0xdd/0x880 [ 257.364052][T17990] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 257.364080][T17990] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 257.364100][T17990] tomoyo_realpath_from_path+0xc2/0x6e0 [ 257.364123][T17990] ? tomoyo_profile+0x47/0x60 [ 257.364149][T17990] tomoyo_path_number_perm+0x245/0x580 [ 257.364310][T17990] ? tomoyo_path_number_perm+0x237/0x580 [ 257.364331][T17990] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.364350][T17990] ? find_held_lock+0x2b/0x80 [ 257.364397][T17990] ? find_held_lock+0x2b/0x80 [ 257.364419][T17990] ? hook_file_ioctl_common+0x145/0x410 [ 257.364449][T17990] ? __fget_files+0x20e/0x3c0 [ 257.364472][T17990] security_file_ioctl+0x9b/0x240 [ 257.364495][T17990] __x64_sys_ioctl+0xb7/0x210 [ 257.364522][T17990] do_syscall_64+0xcd/0xfa0 [ 257.364543][T17990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.364561][T17990] RIP: 0033:0x7f9376d8f749 [ 257.364577][T17990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.364594][T17990] RSP: 002b:00007f9377c22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.364612][T17990] RAX: ffffffffffffffda RBX: 00007f9376fe5fa0 RCX: 00007f9376d8f749 [ 257.364624][T17990] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 257.364635][T17990] RBP: 00007f9377c22090 R08: 0000000000000000 R09: 0000000000000000 [ 257.364646][T17990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.364657][T17990] R13: 00007f9376fe6038 R14: 00007f9376fe5fa0 R15: 00007ffc4225b378 [ 257.364684][T17990] [ 257.364691][T17990] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.365443][T16947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 257.663750][T16947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.669369][T16947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.676002][T18032] ip6tnl0: Caught tx_queue_len zero misconfig [ 257.686727][T16947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.692939][T16947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 257.740023][T16947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.749910][T16947] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.757195][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.759824][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.772170][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.775730][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.794922][T18050] FAULT_INJECTION: forcing a failure. [ 257.794922][T18050] name failslab, interval 1, probability 0, space 0, times 0 [ 257.801767][T18050] CPU: 1 UID: 0 PID: 18050 Comm: syz.3.2362 Not tainted syzkaller #0 PREEMPT(full) [ 257.801794][T18050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.801806][T18050] Call Trace: [ 257.801813][T18050] [ 257.801821][T18050] dump_stack_lvl+0x16c/0x1f0 [ 257.801854][T18050] should_fail_ex+0x512/0x640 [ 257.801876][T18050] ? fs_reclaim_acquire+0xae/0x150 [ 257.801900][T18050] should_failslab+0xc2/0x120 [ 257.801922][T18050] __kmalloc_noprof+0xdd/0x880 [ 257.801949][T18050] ? tomoyo_encode2+0x100/0x3e0 [ 257.801975][T18050] ? tomoyo_encode2+0x100/0x3e0 [ 257.801995][T18050] tomoyo_encode2+0x100/0x3e0 [ 257.802021][T18050] tomoyo_encode+0x29/0x50 [ 257.802043][T18050] tomoyo_realpath_from_path+0x18f/0x6e0 [ 257.802074][T18050] tomoyo_path_number_perm+0x245/0x580 [ 257.802093][T18050] ? tomoyo_path_number_perm+0x237/0x580 [ 257.802114][T18050] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.802134][T18050] ? find_held_lock+0x2b/0x80 [ 257.802181][T18050] ? find_held_lock+0x2b/0x80 [ 257.802204][T18050] ? hook_file_ioctl_common+0x145/0x410 [ 257.802235][T18050] ? __fget_files+0x20e/0x3c0 [ 257.802260][T18050] security_file_ioctl+0x9b/0x240 [ 257.802284][T18050] __x64_sys_ioctl+0xb7/0x210 [ 257.802313][T18050] do_syscall_64+0xcd/0xfa0 [ 257.802335][T18050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.802354][T18050] RIP: 0033:0x7f436698f749 [ 257.802369][T18050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.802386][T18050] RSP: 002b:00007f4367895038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.802403][T18050] RAX: ffffffffffffffda RBX: 00007f4366be5fa0 RCX: 00007f436698f749 [ 257.802415][T18050] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 257.802425][T18050] RBP: 00007f4367895090 R08: 0000000000000000 R09: 0000000000000000 [ 257.802436][T18050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.802446][T18050] R13: 00007f4366be6038 R14: 00007f4366be5fa0 R15: 00007fff071cb6c8 [ 257.802473][T18050] [ 257.802492][T18050] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.818192][ T6071] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 257.966627][T16947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.996429][T16947] veth0_vlan: entered promiscuous mode [ 258.005693][T16947] veth1_vlan: entered promiscuous mode [ 258.023203][T16947] veth0_macvtap: entered promiscuous mode [ 258.029856][T16947] veth1_macvtap: entered promiscuous mode [ 258.043515][T16947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.045706][ T6071] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.053751][T16947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.054296][ T6071] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 22304, setting to 64 [ 258.063239][ T98] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.068774][ T6071] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.069986][ T98] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.074514][ T6071] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.074540][ T6071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.089209][ T98] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.096560][ T98] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.166197][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.172602][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.201371][ T9946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.205170][ T9946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.289492][ T6071] usb 6-1: usb_control_msg returned -32 [ 258.290611][T18005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.291826][ T6071] usbtmc 6-1:16.0: can't read capabilities [ 258.298830][T18005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.390616][T18094] kvm: kvm [18093]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 258.395765][T18094] kvm: kvm [18093]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 258.437631][ T5941] Bluetooth: hci1: command tx timeout [ 258.461165][ T6393] usb 6-1: USB disconnect, device number 34 [ 258.647775][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'. [ 258.835151][T18170] FAULT_INJECTION: forcing a failure. [ 258.835151][T18170] name failslab, interval 1, probability 0, space 0, times 0 [ 258.841098][T18170] CPU: 0 UID: 0 PID: 18170 Comm: syz.4.2385 Not tainted syzkaller #0 PREEMPT(full) [ 258.841122][T18170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.841131][T18170] Call Trace: [ 258.841137][T18170] [ 258.841144][T18170] dump_stack_lvl+0x16c/0x1f0 [ 258.841164][T18170] should_fail_ex+0x512/0x640 [ 258.841180][T18170] ? __kmalloc_cache_noprof+0x5f/0x780 [ 258.841204][T18170] should_failslab+0xc2/0x120 [ 258.841223][T18170] __kmalloc_cache_noprof+0x72/0x780 [ 258.841243][T18170] ? drm_atomic_state_alloc+0xb8/0x120 [ 258.841265][T18170] ? drm_atomic_state_alloc+0xb8/0x120 [ 258.841281][T18170] drm_atomic_state_alloc+0xb8/0x120 [ 258.841297][T18170] drm_mode_atomic_ioctl+0x393/0x2600 [ 258.841318][T18170] ? avc_has_extended_perms+0x33a/0x1090 [ 258.841343][T18170] ? avc_has_extended_perms+0x47c/0x1090 [ 258.841365][T18170] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 258.841383][T18170] ? __lock_acquire+0xb8a/0x1c90 [ 258.841410][T18170] ? drm_is_current_master+0x2c/0x40 [ 258.841429][T18170] ? do_raw_spin_unlock+0x172/0x230 [ 258.841449][T18170] drm_ioctl_kernel+0x1f4/0x3e0 [ 258.841463][T18170] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 258.841482][T18170] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 258.841502][T18170] drm_ioctl+0x5c9/0xc30 [ 258.841519][T18170] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 258.841537][T18170] ? __pfx_drm_ioctl+0x10/0x10 [ 258.841559][T18170] ? selinux_file_ioctl+0x180/0x270 [ 258.841575][T18170] ? selinux_file_ioctl+0xb4/0x270 [ 258.841592][T18170] ? __pfx_drm_ioctl+0x10/0x10 [ 258.841607][T18170] __x64_sys_ioctl+0x18e/0x210 [ 258.841629][T18170] do_syscall_64+0xcd/0xfa0 [ 258.841645][T18170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.841680][T18170] RIP: 0033:0x7f9376d8f749 [ 258.841693][T18170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.841707][T18170] RSP: 002b:00007f9377c22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.841723][T18170] RAX: ffffffffffffffda RBX: 00007f9376fe5fa0 RCX: 00007f9376d8f749 [ 258.841733][T18170] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 258.841742][T18170] RBP: 00007f9377c22090 R08: 0000000000000000 R09: 0000000000000000 [ 258.841751][T18170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.841759][T18170] R13: 00007f9376fe6038 R14: 00007f9376fe5fa0 R15: 00007ffc4225b378 [ 258.841781][T18170] [ 258.947364][ T6393] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 259.065366][ T40] kauditd_printk_skb: 241 callbacks suppressed [ 259.065378][ T40] audit: type=1400 audit(2000000001.590:5007): avc: denied { read write } for pid=18179 comm="syz.4.2388" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 259.075874][ T40] audit: type=1400 audit(2000000001.600:5008): avc: denied { ioctl open } for pid=18179 comm="syz.4.2388" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 259.115778][ T40] audit: type=1400 audit(2000000001.640:5009): avc: denied { open } for pid=18184 comm="syz.0.2389" path="/dev/ttyq5" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 259.128333][ T6393] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.132815][ T6393] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.139565][ T6393] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.143617][ T6393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.174109][ T40] audit: type=1400 audit(2000000001.700:5010): avc: denied { sys_module } for pid=18179 comm="syz.4.2388" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 259.198119][ T40] audit: type=1400 audit(2000000001.730:5011): avc: denied { mount } for pid=18179 comm="syz.4.2388" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 259.207501][ T40] audit: type=1400 audit(2000000001.730:5012): avc: denied { read } for pid=18179 comm="syz.4.2388" dev="nsfs" ino=4026533808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 259.216727][ T40] audit: type=1400 audit(2000000001.730:5013): avc: denied { open } for pid=18179 comm="syz.4.2388" path="net:[4026533808]" dev="nsfs" ino=4026533808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 259.226951][ T40] audit: type=1400 audit(2000000001.730:5014): avc: denied { create } for pid=18179 comm="syz.4.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.236166][ T40] audit: type=1400 audit(2000000001.730:5015): avc: denied { read write } for pid=18179 comm="syz.4.2388" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.248247][ T40] audit: type=1400 audit(2000000001.730:5016): avc: denied { open } for pid=18179 comm="syz.4.2388" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.355958][T18210] FAULT_INJECTION: forcing a failure. [ 259.355958][T18210] name failslab, interval 1, probability 0, space 0, times 0 [ 259.356492][ T6393] usb 6-1: usb_control_msg returned -32 [ 259.361396][T18210] CPU: 0 UID: 0 PID: 18210 Comm: syz.4.2394 Not tainted syzkaller #0 PREEMPT(full) [ 259.361419][T18210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 259.361429][T18210] Call Trace: [ 259.361434][T18210] [ 259.361440][T18210] dump_stack_lvl+0x16c/0x1f0 [ 259.361456][T18210] should_fail_ex+0x512/0x640 [ 259.361469][T18210] ? __kmalloc_noprof+0xca/0x880 [ 259.361486][T18210] should_failslab+0xc2/0x120 [ 259.361498][T18210] __kmalloc_noprof+0xdd/0x880 [ 259.361513][T18210] ? drm_atomic_state_init+0xe4/0x320 [ 259.361527][T18210] ? drm_atomic_state_init+0xe4/0x320 [ 259.361538][T18210] drm_atomic_state_init+0xe4/0x320 [ 259.361549][T18210] ? __kasan_kmalloc+0xaa/0xb0 [ 259.361560][T18210] drm_atomic_state_alloc+0xd3/0x120 [ 259.361572][T18210] drm_mode_atomic_ioctl+0x393/0x2600 [ 259.361586][T18210] ? avc_has_extended_perms+0x33a/0x1090 [ 259.361604][T18210] ? avc_has_extended_perms+0x47c/0x1090 [ 259.361619][T18210] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 259.361632][T18210] ? __lock_acquire+0xb8a/0x1c90 [ 259.361673][T18210] ? drm_is_current_master+0x2c/0x40 [ 259.361686][T18210] ? do_raw_spin_unlock+0x172/0x230 [ 259.361699][T18210] drm_ioctl_kernel+0x1f4/0x3e0 [ 259.361710][T18210] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 259.361723][T18210] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 259.361736][T18210] drm_ioctl+0x5c9/0xc30 [ 259.361747][T18210] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 259.361760][T18210] ? __pfx_drm_ioctl+0x10/0x10 [ 259.361775][T18210] ? selinux_file_ioctl+0x180/0x270 [ 259.361787][T18210] ? selinux_file_ioctl+0xb4/0x270 [ 259.361799][T18210] ? __pfx_drm_ioctl+0x10/0x10 [ 259.361809][T18210] __x64_sys_ioctl+0x18e/0x210 [ 259.361825][T18210] do_syscall_64+0xcd/0xfa0 [ 259.361835][T18210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.361847][T18210] RIP: 0033:0x7f9376d8f749 [ 259.361856][T18210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.361866][T18210] RSP: 002b:00007f9377c22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.361876][T18210] RAX: ffffffffffffffda RBX: 00007f9376fe5fa0 RCX: 00007f9376d8f749 [ 259.361883][T18210] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 259.361889][T18210] RBP: 00007f9377c22090 R08: 0000000000000000 R09: 0000000000000000 [ 259.361895][T18210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.361900][T18210] R13: 00007f9376fe6038 R14: 00007f9376fe5fa0 R15: 00007ffc4225b378 [ 259.361914][T18210] [ 259.459829][ T6393] usbtmc 6-1:16.0: can't read capabilities [ 259.568000][T18237] netlink: 'syz.0.2399': attribute type 1 has an invalid length. [ 259.814653][T18248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2401'. [ 259.819166][T18248] sch_tbf: burst 88 is lower than device virt_wifi0 mtu (1514) ! [ 259.835469][T18250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2402'. [ 259.913448][T18254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 259.923338][T18254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2403'. [ 259.972331][T18260] netlink: zone id is out of range [ 260.047100][T18272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2407'. [ 260.095646][T18279] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 260.095646][T18279] program syz.0.2408 not setting count and/or reply_len properly [ 260.121837][T18279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2408'. [ 260.268484][T18293] tmpfs: User quota inode hardlimit too large. [ 260.272657][T18293] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 260.340494][T18297] loop4: detected capacity change from 0 to 7 [ 260.427293][ T6393] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 260.517326][ T5941] Bluetooth: hci1: command tx timeout [ 260.590058][ T6393] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 260.593663][ T6393] usb 5-1: config 0 has no interface number 0 [ 260.596375][ T6393] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.607161][ T6393] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 260.611596][ T6393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.615194][ T6393] usb 5-1: Product: syz [ 260.617278][ T6393] usb 5-1: Manufacturer: syz [ 260.619681][ T6393] usb 5-1: SerialNumber: syz [ 260.624606][ T6393] usb 5-1: config 0 descriptor?? [ 260.635511][ T6552] Dev loop4: unable to read RDB block 7 [ 260.636685][ T6393] yurex 5-1:0.50: USB YUREX device now attached to Yurex #1 [ 260.638009][ T6552] loop4: unable to read partition table [ 260.644460][ T6552] loop4: partition table beyond EOD, truncated [ 260.877245][ T54] usb 5-1: USB disconnect, device number 49 [ 260.880677][ T54] yurex 5-1:0.50: USB YUREX #1 now disconnected [ 261.019419][T18297] Dev loop4: unable to read RDB block 7 [ 261.022062][T18297] loop4: unable to read partition table [ 261.024501][T18297] loop4: partition table beyond EOD, truncated [ 261.027530][T18297] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 261.080694][T18286] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 261.110552][T18319] delete_channel: no stack [ 261.140783][T18323] netlink: 'syz.4.2418': attribute type 8 has an invalid length. [ 261.494148][T18349] netlink: 'syz.4.2423': attribute type 1 has an invalid length. [ 261.518373][T18349] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.546724][T18349] bond6: (slave geneve2): making interface the new active one [ 261.554935][T18349] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 261.558832][ T9946] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.562972][ T9946] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.571097][ T9946] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.575187][ T9946] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.582855][T18384] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2422'. [ 261.720645][ T6393] usb 6-1: USB disconnect, device number 35 [ 261.849963][T18425] ptrace attach of "/syz-executor exec"[7085] was attempted by ""[18425] [ 261.960433][T18434] overlay: Unknown parameter 'subj_role' [ 261.988312][T18435] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 261.992151][T18435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.004896][T18439] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 262.007808][T18439] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 262.013098][T18439] vhci_hcd vhci_hcd.0: Device attached [ 262.064000][T18440] vhci_hcd: connection closed [ 262.066379][ T98] vhci_hcd: stop threads [ 262.070705][ T98] vhci_hcd: release socket [ 262.072727][ T98] vhci_hcd: disconnect device [ 262.077215][ T5980] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 262.229321][ T5980] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.233437][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 262.237372][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 262.240926][ T5980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.246295][ T5980] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.250583][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.256729][ T5980] usb 5-1: config 0 descriptor?? [ 262.517296][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 262.597624][ T5941] Bluetooth: hci1: command tx timeout [ 262.668795][ T5980] hid_parser_main: 1 callbacks suppressed [ 262.668817][ T5980] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 262.674649][ T5980] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 262.679150][ T5980] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 262.682477][ T5980] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 262.686149][ T5980] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 262.696562][ T5980] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 263.005871][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2443'. [ 263.039978][T18488] netlink: zone id is out of range [ 263.050517][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2444'. [ 263.060048][T18488] input: syz1 as /devices/virtual/input/input28 [ 263.180655][T18500] netlink: 'syz.1.2446': attribute type 10 has an invalid length. [ 263.212878][T18502] netlink: 'syz.1.2447': attribute type 30 has an invalid length. [ 263.324418][T18512] trusted_key: encrypted_key: insufficient parameters specified [ 263.501153][T18525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 263.534010][T18525] netlink: 'syz.1.2451': attribute type 12 has an invalid length. [ 263.538595][T18525] netlink: 'syz.1.2451': attribute type 29 has an invalid length. [ 264.346298][ T40] kauditd_printk_skb: 220 callbacks suppressed [ 264.346311][ T40] audit: type=1400 audit(2000000006.870:5237): avc: denied { unmount } for pid=13531 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 264.379215][ T40] audit: type=1400 audit(2000000006.910:5238): avc: denied { unlink } for pid=18545 comm="syz.1.2455" name="#2a" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 264.387514][ T40] audit: type=1400 audit(2000000006.910:5239): avc: denied { mount } for pid=18545 comm="syz.1.2455" name="/" dev="overlay" ino=399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 264.408706][ T40] audit: type=1400 audit(2000000006.940:5240): avc: denied { unmount } for pid=13531 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 264.421080][ T40] audit: type=1400 audit(2000000006.950:5241): avc: denied { read write } for pid=13531 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.430963][ T40] audit: type=1400 audit(2000000006.950:5242): avc: denied { open } for pid=13531 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.439469][ T40] audit: type=1400 audit(2000000006.950:5243): avc: denied { ioctl } for pid=13531 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.448525][ T40] audit: type=1400 audit(2000000006.970:5244): avc: denied { accept } for pid=18547 comm="syz.1.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 264.455579][ T40] audit: type=1400 audit(2000000006.970:5245): avc: denied { write } for pid=18547 comm="syz.1.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 264.469815][ T40] audit: type=1400 audit(2000000007.000:5246): avc: denied { read } for pid=18547 comm="syz.1.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 264.479055][ T1473] usb 5-1: reset high-speed USB device number 50 using dummy_hcd [ 264.679274][ T5941] Bluetooth: hci1: command tx timeout [ 264.935729][T18582] __nla_validate_parse: 3 callbacks suppressed [ 264.935743][T18582] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2462'. [ 265.090359][T18595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2465'. [ 265.184479][T18666] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2468'. [ 265.728771][ T7962] usb 5-1: USB disconnect, device number 50 [ 265.866949][ T7962] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 266.018653][ T7962] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.022715][ T7962] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.029237][ T7962] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.032856][ T7962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.245408][ T7962] usb 5-1: usb_control_msg returned -32 [ 266.247529][ T7962] usbtmc 5-1:16.0: can't read capabilities [ 266.288805][ T6071] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 266.446678][ T6071] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.452745][ T6071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.458440][ T6071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 266.462761][ T6071] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.469743][ T6071] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.479298][ T6071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.491539][ T6071] usb 6-1: config 0 descriptor?? [ 266.565383][T18772] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 266.744626][T18785] 9pnet: Could not find request transport: tc |Ž겤sx0000000000004e0x0000000000000003 [ 266.770779][T18790] 9pnet: Could not find request transport: tc |Ž겤sx0000000000004e0x0000000000000003 [ 266.900267][T18806] loop2: detected capacity change from 0 to 7 [ 266.904244][T18806] Dev loop2: unable to read RDB block 7 [ 266.907375][T18806] loop2: unable to read partition table [ 266.910260][T18806] loop2: partition table beyond EOD, truncated [ 266.913198][T18806] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 266.917873][T18806] binder: 18805:18806 ioctl 400c620e 200000000000 returned -22 [ 266.918520][ T6071] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 266.926749][ T6071] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 266.932155][ T6071] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 266.935859][ T6071] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 266.940044][ T6071] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 266.952459][ T6071] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 268.098417][T18845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2501'. [ 268.129123][T18845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2501'. [ 268.134415][T18845] nbd: device at index 64 is going down [ 268.170529][T18858] program syz.4.2502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.240511][ T6552] udevd[6552]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 268.251562][ T6552] udevd[6552]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 268.427950][ T6212] usb 5-1: USB disconnect, device number 51 [ 268.745658][T18888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2506'. [ 269.044099][ T1461] usb 6-1: USB disconnect, device number 36 [ 269.833838][T18979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2512'. [ 269.845597][ T40] kauditd_printk_skb: 216 callbacks suppressed [ 269.845616][ T40] audit: type=1400 audit(2000000012.370:5463): avc: denied { read } for pid=18983 comm="syz.3.2513" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 269.846112][T18984] program syz.3.2513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.851544][ T40] audit: type=1400 audit(2000000012.370:5464): avc: denied { open } for pid=18983 comm="syz.3.2513" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 269.874515][ T1473] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 269.880460][T18986] netlink: 'syz.0.2514': attribute type 1 has an invalid length. [ 269.903052][ T40] audit: type=1400 audit(2000000012.430:5465): avc: denied { read write } for pid=18988 comm="syz.3.2515" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 269.913398][T18986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.918234][ T40] audit: type=1400 audit(2000000012.430:5466): avc: denied { open } for pid=18988 comm="syz.3.2515" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 269.929126][ T40] audit: type=1400 audit(2000000012.440:5467): avc: denied { ioctl } for pid=18988 comm="syz.3.2515" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 269.942025][ T40] audit: type=1400 audit(2000000012.440:5468): avc: denied { module_request } for pid=18988 comm="syz.3.2515" kmod="iptable_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 269.950623][ T40] audit: type=1400 audit(2000000012.470:5469): avc: denied { name_bind } for pid=18988 comm="syz.3.2515" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 269.952392][T18994] netlink: 700 bytes leftover after parsing attributes in process `syz.3.2515'. [ 269.963971][ T40] audit: type=1400 audit(2000000012.480:5470): avc: denied { perfmon } for pid=18988 comm="syz.3.2515" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 269.969192][T18986] veth5: entered promiscuous mode [ 269.971183][ T40] audit: type=1400 audit(2000000012.480:5471): avc: denied { prog_run } for pid=18988 comm="syz.3.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 269.974975][T18986] bond1: (slave veth5): Enslaving as an active interface with a down link [ 269.981508][ T40] audit: type=1400 audit(2000000012.490:5472): avc: denied { map } for pid=18988 comm="syz.3.2515" path="socket:[58776]" dev="sockfs" ino=58776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 269.988318][T19084] vlan2: entered allmulticast mode [ 269.997019][T19084] bond1: entered allmulticast mode [ 270.000320][T19084] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 270.038601][ T1473] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.043339][ T1473] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.051282][ T1473] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.059852][ T1473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.099489][T19098] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 270.110002][T19098] dvmrp0: entered allmulticast mode [ 270.270972][ T1473] usb 6-1: usb_control_msg returned -32 [ 270.273978][ T1473] usbtmc 6-1:16.0: can't read capabilities [ 270.396808][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 270.558435][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.563960][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.570170][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 270.574704][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.581597][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.585627][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.592221][ T9] usb 5-1: config 0 descriptor?? [ 271.005649][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 271.009286][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 271.012828][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 271.016278][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 271.021324][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 271.033649][ T9] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 271.163062][T19135] xt_nfacct: accounting object `syz0' does not exist [ 271.291028][T19145] vlan1: entered promiscuous mode [ 271.292739][T19145] bridge0: entered promiscuous mode [ 271.294637][T19145] vlan1: entered allmulticast mode [ 271.297096][T19145] bridge0: entered allmulticast mode [ 271.318946][T19150] netlink: 'syz.3.2526': attribute type 2 has an invalid length. [ 271.526020][T19183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2532'. [ 271.634706][T19200] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2535'. [ 271.664265][T19207] tmpfs: Bad value for 'mpol' [ 271.690110][T19207] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 271.698672][T19207] netlink: 'syz.4.2536': attribute type 15 has an invalid length. [ 271.702055][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 271.705907][T19207] netlink: 'syz.4.2536': attribute type 15 has an invalid length. [ 271.709948][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 271.900755][T19225] bridge6: entered allmulticast mode [ 272.071754][T19240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2543'. [ 272.075551][T19240] bridge_slave_0: left allmulticast mode [ 272.078093][T19240] bridge_slave_0: left promiscuous mode [ 272.084969][T19240] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.632963][ T6006] usb 6-1: USB disconnect, device number 37 [ 272.703977][T19277] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 272.751998][T19281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 272.758236][T19281] openvswitch: netlink: Missing key (keys=40, expected=80) [ 272.805052][T19284] bond1: ARP target 4.0.0.0 is already present [ 272.808065][T19284] bond1: option arp_ip_target: invalid value (4) [ 272.812500][T19284] bond1 (unregistering): Released all slaves [ 272.854492][T19350] program syz.1.2552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.977754][T19356] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 272.980327][T19356] [U] J"—e:ÀÆ" [ 272.982082][T19356] netlink: 'syz.1.2555': attribute type 10 has an invalid length. [ 272.998570][T19356] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 273.158205][ T6006] usb 5-1: USB disconnect, device number 52 [ 273.452001][T19380] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2558'. [ 273.455248][T19380] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2558'. [ 273.712922][T19406] program syz.0.2566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.753269][T19404] kvm: kvm [19403]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x120000009d00 [ 273.757723][T19404] kvm: kvm [19403]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x120000009d00 [ 273.950350][T19415] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.2567'. [ 273.986548][ T1461] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 274.072730][T19417] nbd: nbd64 already in use [ 274.150389][ T1461] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.154615][ T1461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.159442][ T1461] usb 5-1: Product: syz [ 274.161752][ T1461] usb 5-1: Manufacturer: syz [ 274.163797][ T1461] usb 5-1: SerialNumber: syz [ 274.172369][ T1461] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 274.181932][ T6552] udevd[6552]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 274.199230][ T5980] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 274.432015][T19450] program syz.1.2573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.448823][ T6071] usb 5-1: USB disconnect, device number 53 [ 274.515189][T19461] CIFS mount error: No usable UNC path provided in device string! [ 274.515189][T19461] [ 274.518820][T19461] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 274.532346][T19464] CIFS mount error: No usable UNC path provided in device string! [ 274.532346][T19464] [ 274.537845][T19464] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 275.067364][T19491] netlink: 'syz.3.2580': attribute type 1 has an invalid length. [ 275.070963][ T40] kauditd_printk_skb: 219 callbacks suppressed [ 275.070977][ T40] audit: type=1400 audit(2000000017.590:5692): avc: denied { read write } for pid=19492 comm="syz.0.2581" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.090606][ T40] audit: type=1400 audit(2000000017.590:5693): avc: denied { open } for pid=19492 comm="syz.0.2581" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.092369][T19491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.100714][ T40] audit: type=1400 audit(2000000017.590:5694): avc: denied { ioctl } for pid=19492 comm="syz.0.2581" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7b3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.114823][ T40] audit: type=1400 audit(2000000017.590:5695): avc: denied { module_request } for pid=19492 comm="syz.0.2581" kmod="net-pf-16-proto-13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 275.138349][ T40] audit: type=1400 audit(2000000017.660:5696): avc: denied { append } for pid=19555 comm="syz.0.2582" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.159285][T19490] bond1: (slave veth3): Enslaving as an active interface with a down link [ 275.169668][T19491] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 275.172173][T19491] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 275.196539][ T40] audit: type=1400 audit(2000000017.710:5697): avc: denied { name_bind } for pid=19555 comm="syz.0.2582" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 275.204434][ T40] audit: type=1400 audit(2000000017.720:5698): avc: denied { create } for pid=19555 comm="syz.0.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 275.215708][ T40] audit: type=1400 audit(2000000017.720:5699): avc: denied { ioctl } for pid=19555 comm="syz.0.2582" path="socket:[60702]" dev="sockfs" ino=60702 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 275.226738][ T40] audit: type=1400 audit(2000000017.720:5700): avc: denied { create } for pid=19555 comm="syz.0.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 275.235418][ T40] audit: type=1400 audit(2000000017.720:5701): avc: denied { connect } for pid=19555 comm="syz.0.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 275.248255][ T5980] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 275.251386][ T5980] ath9k_htc: Failed to initialize the device [ 275.261778][ T6071] usb 5-1: ath9k_htc: USB layer deinitialized [ 275.488377][T19623] __nla_validate_parse: 5 callbacks suppressed [ 275.488392][T19623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2588'. [ 275.498663][T19623] geneve2: entered allmulticast mode [ 275.530464][T19628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2588'. [ 275.671390][T19639] program syz.1.2590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.683589][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2591'. [ 275.687294][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2591'. [ 275.690881][T19642] netlink: 'syz.4.2591': attribute type 11 has an invalid length. [ 275.694961][T19642] netlink: 'syz.4.2591': attribute type 13 has an invalid length. [ 275.926397][ T6006] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 275.996028][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2596'. [ 276.062998][T19678] trusted_key: encrypted_key: master key parameter '£Ðð˜sœg]눭*ѳoÏB]³ryŸ½nðÀ•l¢UT賧%ĵ±x ðk\' is invalid [ 276.081100][ T6006] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 276.085328][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.089449][ T6006] usb 6-1: Product: syz [ 276.091360][ T6006] usb 6-1: Manufacturer: syz [ 276.093745][ T6006] usb 6-1: SerialNumber: syz [ 276.106882][ T6006] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 276.128506][ T7962] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 276.174423][T19688] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 276.255023][ T2096] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 276.262802][ T2096] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz1] on syz0 [ 276.369451][ T6006] usb 6-1: USB disconnect, device number 38 [ 276.428993][T19697] Invalid source name [ 276.430218][T19698] Invalid source name [ 276.431767][T19697] UBIFS error (pid: 19697): cannot open "/dev/sg0", error -22 [ 276.433605][T19698] UBIFS error (pid: 19698): cannot open "/dev/sg0", error -22 [ 276.551711][T19742] program syz.0.2605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.627567][T19753] openvswitch: netlink: IP tunnel dst address not specified [ 276.627782][T19752] [U] [ 276.631788][T19752] [U] [ 276.632815][T19752] [U] [ 276.633792][T19752] [U] [ 276.635028][T19752] [U] [ 276.636007][T19752] [U] [ 276.637027][T19752] [U] [ 276.637987][T19752] [U] [ 276.640164][T19752] [U] [ 276.641180][T19752] [U] [ 276.642403][T19752] [U] [ 276.643564][T19752] [U] [ 276.644844][T19752] [U] [ 276.646078][T19752] [U] [ 276.647397][T19752] [U] [ 276.648652][T19752] [U] [ 276.652941][T19753] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 276.655587][T19753] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 276.660307][T19753] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 276.663667][T19753] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 276.739875][T19751] [U] [ 276.904160][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'. [ 276.909396][T19778] veth1_macvtap: left promiscuous mode [ 277.166310][ T7962] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 277.176654][ T7962] ath9k_htc: Failed to initialize the device [ 277.181472][ T6006] usb 6-1: ath9k_htc: USB layer deinitialized [ 277.235250][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 277.341884][T19827] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 277.346539][T19827] overlayfs: missing 'lowerdir' [ 277.876549][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.363251][T19845] syz_tun: entered allmulticast mode [ 278.379358][T19844] syz_tun: left allmulticast mode [ 278.548820][T19864] netlink: 'syz.1.2635': attribute type 3 has an invalid length. [ 278.840799][T19880] f2fs: Unknown parameter 'acl' [ 279.566142][T19899] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2642'. [ 279.581231][T19893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=19893 comm=syz.0.2649 [ 279.592796][T19907] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2642'. [ 279.994799][T19948] Bluetooth: MGMT ver 1.23 [ 280.083447][T19960] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 280.087884][T19960] netem: incorrect ge model size [ 280.090756][T19960] netem: change failed [ 280.093774][ T40] kauditd_printk_skb: 221 callbacks suppressed [ 280.093790][ T40] audit: type=1400 audit(2000000022.621:5923): avc: denied { ioctl } for pid=19959 comm="syz.4.2657" path="socket:[58188]" dev="sockfs" ino=58188 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.109659][ T40] audit: type=1400 audit(2000000022.641:5924): avc: denied { ioctl } for pid=19935 comm="syz.1.2650" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.121529][ T40] audit: type=1400 audit(2000000022.641:5925): avc: denied { sys_module } for pid=19959 comm="syz.4.2657" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 280.131977][ T40] audit: type=1400 audit(2000000022.641:5926): avc: denied { module_request } for pid=19959 comm="syz.4.2657" kmod="bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 280.166239][ T5980] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 280.168560][ T40] audit: type=1400 audit(2000000022.691:5927): avc: denied { allowed } for pid=19964 comm="syz.4.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 280.181398][ T40] audit: type=1400 audit(2000000022.701:5928): avc: denied { create } for pid=19964 comm="syz.4.2658" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 280.316108][ T40] audit: type=1400 audit(2000000022.831:5929): avc: denied { read write } for pid=7085 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.324969][ T40] audit: type=1400 audit(2000000022.831:5930): avc: denied { open } for pid=7085 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.326852][ T5980] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.333933][ T40] audit: type=1400 audit(2000000022.831:5931): avc: denied { ioctl } for pid=7085 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.337697][ T5980] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.352198][ T5980] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.356538][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.403820][ T40] audit: type=1400 audit(2000000022.921:5932): avc: denied { read } for pid=19977 comm="syz.0.2661" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 280.596223][ T5980] usb 6-1: usb_control_msg returned -32 [ 280.598860][ T5980] usbtmc 6-1:16.0: can't read capabilities [ 280.624541][T19997] pimreg: entered allmulticast mode [ 280.655106][ T2096] IPVS: starting estimator thread 0... [ 280.756135][T20003] IPVS: using max 46 ests per chain, 110400 per kthread [ 280.807981][T20005] kvm: kvm [20004]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 280.813580][T20005] kvm: kvm [20004]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 280.827877][T20011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2666'. [ 280.902615][T20018] pimreg3: entered allmulticast mode [ 280.943192][T20022] comedi comedi2: fl512: a I/O base address must be specified [ 281.945790][T20035] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2672'. [ 282.022198][ T61] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.026449][ T61] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.030644][ T61] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.034908][ T61] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.927210][ T54] usb 6-1: USB disconnect, device number 39 [ 283.072278][T20073] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2682'. [ 283.245749][T20088] netlink: 'syz.3.2685': attribute type 10 has an invalid length. [ 283.262311][T20088] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 283.270676][T20093] caif0: entered promiscuous mode [ 283.409470][T20107] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2691'. [ 283.857048][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2703'. [ 284.126045][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 284.285968][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 284.290855][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.294961][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.298162][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.303469][ T9] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 284.307351][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.313944][ T9] usb 6-1: config 0 descriptor?? [ 284.529887][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 284.584236][ T9] shield 0003:0955:7214.0014: Registered Thunderstrike controller [ 284.593320][ T9] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 284.721571][T20175] random: crng reseeded on system resumption [ 284.733005][ T54] usb 6-1: USB disconnect, device number 40 [ 284.733132][ T6071] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 284.740852][ T54] ------------[ cut here ]------------ [ 284.740873][ T6071] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 284.742787][ T54] workqueue: work disable count underflowed [ 284.742844][ T54] WARNING: CPU: 2 PID: 54 at kernel/workqueue.c:4355 enable_work+0x2f8/0x340 [ 284.748178][ T6071] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 284.750180][ T54] Modules linked in: [ 284.754244][ T6071] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 284.760054][ T54] CPU: 2 UID: 0 PID: 54 Comm: kworker/2:1 Not tainted syzkaller #0 PREEMPT(full) [ 284.760075][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.760083][ T54] Workqueue: usb_hub_wq hub_event [ 284.760101][ T54] RIP: 0010:enable_work+0x2f8/0x340 [ 284.760116][ T54] Code: 89 ee e8 3b b8 38 00 45 84 ed 0f 85 29 fe ff ff e8 4d bd 38 00 c6 05 da 69 e6 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 c7 60 a1 00 e9 aa fe ff ff [ 284.760126][ T54] RSP: 0018:ffffc90000a7f3b0 EFLAGS: 00010086 [ 284.760135][ T54] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b1cd8 [ 284.760142][ T54] RDX: ffff888021b6a480 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 284.760149][ T54] RBP: ffff888053f43738 R08: 0000000000000001 R09: 0000000000000000 [ 284.760155][ T54] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200014fe77 [ 284.760162][ T54] R13: 0000000000000000 R14: ffff888053f43698 R15: ffff888053f43730 [ 284.760168][ T54] FS: 0000000000000000(0000) GS:ffff8880d6c05000(0000) knlGS:0000000000000000 [ 284.760193][ T54] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.760203][ T54] CR2: 00007f4367874d58 CR3: 0000000031666000 CR4: 0000000000352ef0 [ 284.760211][ T54] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 284.760220][ T54] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 284.760230][ T54] Call Trace: [ 284.760237][ T54] [ 284.760246][ T54] ? __pfx_enable_work+0x10/0x10 [ 284.760265][ T54] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 284.760286][ T54] __cancel_work_sync+0xe7/0x130 [ 284.760306][ T54] thermal_zone_device_unregister+0x28e/0x4d0 [ 284.760324][ T54] ? __pfx_shield_remove+0x10/0x10 [ 284.760339][ T54] power_supply_unregister+0x10a/0x150 [ 284.760352][ T54] shield_remove+0x75/0x130 [ 284.760365][ T54] ? __pfx_shield_remove+0x10/0x10 [ 284.760378][ T54] hid_device_remove+0xd1/0x260 [ 284.760389][ T54] ? __pfx_hid_device_remove+0x10/0x10 [ 284.760401][ T54] device_remove+0xcb/0x170 [ 284.760412][ T54] device_release_driver_internal+0x44b/0x620 [ 284.760427][ T54] bus_remove_device+0x22f/0x420 [ 284.760445][ T54] device_del+0x396/0x9f0 [ 284.760458][ T54] ? __pfx_device_del+0x10/0x10 [ 284.760468][ T54] ? do_raw_spin_lock+0x12c/0x2b0 [ 284.760484][ T54] hid_destroy_device+0x19c/0x240 [ 284.760495][ T54] usbhid_disconnect+0xa0/0xe0 [ 284.760511][ T54] usb_unbind_interface+0x1dd/0x9e0 [ 284.760529][ T54] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 284.760541][ T54] ? __pfx_usb_unbind_interface+0x10/0x10 [ 284.760557][ T54] device_remove+0x125/0x170 [ 284.760567][ T54] device_release_driver_internal+0x44b/0x620 [ 284.760584][ T54] bus_remove_device+0x22f/0x420 [ 284.760601][ T54] device_del+0x396/0x9f0 [ 284.760613][ T54] ? __pfx_device_del+0x10/0x10 [ 284.760623][ T54] ? kobject_put+0x210/0x5a0 [ 284.760638][ T54] usb_disable_device+0x355/0x7d0 [ 284.760684][ T54] usb_disconnect+0x2e1/0x9c0 [ 284.760701][ T54] hub_event+0x1c81/0x4fe0 [ 284.760725][ T54] ? __lock_acquire+0xb8a/0x1c90 [ 284.760737][ T54] ? __pfx_hub_event+0x10/0x10 [ 284.760749][ T54] ? assoc_array_destroy_subtree.part.0+0x2c0/0x4d0 [ 284.760772][ T54] ? rcu_is_watching+0x12/0xc0 [ 284.760788][ T54] process_one_work+0x9cf/0x1b70 [ 284.760805][ T54] ? __pfx_process_one_work+0x10/0x10 [ 284.760825][ T54] ? assign_work+0x1a0/0x250 [ 284.760837][ T54] worker_thread+0x6c8/0xf10 [ 284.760853][ T54] ? __kthread_parkme+0x19e/0x250 [ 284.760869][ T54] ? __pfx_worker_thread+0x10/0x10 [ 284.760880][ T54] kthread+0x3c5/0x780 [ 284.760891][ T54] ? __pfx_kthread+0x10/0x10 [ 284.760903][ T54] ? rcu_is_watching+0x12/0xc0 [ 284.760916][ T54] ? __pfx_kthread+0x10/0x10 [ 284.760928][ T54] ret_from_fork+0x675/0x7d0 [ 284.760938][ T54] ? __pfx_kthread+0x10/0x10 [ 284.760949][ T54] ret_from_fork_asm+0x1a/0x30 [ 284.760972][ T54] [ 284.760978][ T54] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.760985][ T54] CPU: 2 UID: 0 PID: 54 Comm: kworker/2:1 Not tainted syzkaller #0 PREEMPT(full) [ 284.760998][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.761005][ T54] Workqueue: usb_hub_wq hub_event [ 284.761019][ T54] Call Trace: [ 284.761023][ T54] [ 284.761028][ T54] dump_stack_lvl+0x3d/0x1f0 [ 284.761039][ T54] vpanic+0x640/0x6f0 [ 284.761057][ T54] ? enable_work+0x2f8/0x340 [ 284.761068][ T54] panic+0xca/0xd0 [ 284.761084][ T54] ? __pfx_panic+0x10/0x10 [ 284.761104][ T54] ? check_panic_on_warn+0x1f/0xb0 [ 284.761114][ T54] check_panic_on_warn+0xab/0xb0 [ 284.761125][ T54] __warn+0xf6/0x3c0 [ 284.761134][ T54] ? __pfx_vprintk_emit+0x10/0x10 [ 284.761147][ T54] ? enable_work+0x2f8/0x340 [ 284.761160][ T54] report_bug+0x3c3/0x580 [ 284.761176][ T54] ? enable_work+0x2f8/0x340 [ 284.761188][ T54] handle_bug+0x184/0x210 [ 284.761202][ T54] exc_invalid_op+0x17/0x50 [ 284.761214][ T54] asm_exc_invalid_op+0x1a/0x20 [ 284.761224][ T54] RIP: 0010:enable_work+0x2f8/0x340 [ 284.761236][ T54] Code: 89 ee e8 3b b8 38 00 45 84 ed 0f 85 29 fe ff ff e8 4d bd 38 00 c6 05 da 69 e6 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 c7 60 a1 00 e9 aa fe ff ff [ 284.761247][ T54] RSP: 0018:ffffc90000a7f3b0 EFLAGS: 00010086 [ 284.761255][ T54] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b1cd8 [ 284.761265][ T54] RDX: ffff888021b6a480 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 284.761271][ T54] RBP: ffff888053f43738 R08: 0000000000000001 R09: 0000000000000000 [ 284.761278][ T54] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200014fe77 [ 284.761284][ T54] R13: 0000000000000000 R14: ffff888053f43698 R15: ffff888053f43730 [ 284.761295][ T54] ? __warn_printk+0x198/0x350 [ 284.761310][ T54] ? __warn_printk+0x1a5/0x350 [ 284.761329][ T54] ? __pfx_enable_work+0x10/0x10 [ 284.761343][ T54] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 284.761357][ T54] __cancel_work_sync+0xe7/0x130 [ 284.761371][ T54] thermal_zone_device_unregister+0x28e/0x4d0 [ 284.761385][ T54] ? __pfx_shield_remove+0x10/0x10 [ 284.761399][ T54] power_supply_unregister+0x10a/0x150 [ 284.761429][ T54] shield_remove+0x75/0x130 [ 284.761443][ T54] ? __pfx_shield_remove+0x10/0x10 [ 284.761456][ T54] hid_device_remove+0xd1/0x260 [ 284.761468][ T54] ? __pfx_hid_device_remove+0x10/0x10 [ 284.761480][ T54] device_remove+0xcb/0x170 [ 284.761490][ T54] device_release_driver_internal+0x44b/0x620 [ 284.761505][ T54] bus_remove_device+0x22f/0x420 [ 284.761523][ T54] device_del+0x396/0x9f0 [ 284.761535][ T54] ? __pfx_device_del+0x10/0x10 [ 284.761546][ T54] ? do_raw_spin_lock+0x12c/0x2b0 [ 284.761561][ T54] hid_destroy_device+0x19c/0x240 [ 284.761573][ T54] usbhid_disconnect+0xa0/0xe0 [ 284.761588][ T54] usb_unbind_interface+0x1dd/0x9e0 [ 284.761606][ T54] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 284.761617][ T54] ? __pfx_usb_unbind_interface+0x10/0x10 [ 284.761633][ T54] device_remove+0x125/0x170 [ 284.761644][ T54] device_release_driver_internal+0x44b/0x620 [ 284.761659][ T54] bus_remove_device+0x22f/0x420 [ 284.761677][ T54] device_del+0x396/0x9f0 [ 284.761689][ T54] ? __pfx_device_del+0x10/0x10 [ 284.761699][ T54] ? kobject_put+0x210/0x5a0 [ 284.761714][ T54] usb_disable_device+0x355/0x7d0 [ 284.761732][ T54] usb_disconnect+0x2e1/0x9c0 [ 284.761748][ T54] hub_event+0x1c81/0x4fe0 [ 284.761772][ T54] ? __lock_acquire+0xb8a/0x1c90 [ 284.761784][ T54] ? __pfx_hub_event+0x10/0x10 [ 284.761797][ T54] ? assoc_array_destroy_subtree.part.0+0x2c0/0x4d0 [ 284.761823][ T54] ? rcu_is_watching+0x12/0xc0 [ 284.761839][ T54] process_one_work+0x9cf/0x1b70 [ 284.761856][ T54] ? __pfx_process_one_work+0x10/0x10 [ 284.761871][ T54] ? assign_work+0x1a0/0x250 [ 284.761883][ T54] worker_thread+0x6c8/0xf10 [ 284.761899][ T54] ? __kthread_parkme+0x19e/0x250 [ 284.761915][ T54] ? __pfx_worker_thread+0x10/0x10 [ 284.761927][ T54] kthread+0x3c5/0x780 [ 284.761938][ T54] ? __pfx_kthread+0x10/0x10 [ 284.761949][ T54] ? rcu_is_watching+0x12/0xc0 [ 284.761963][ T54] ? __pfx_kthread+0x10/0x10 [ 284.761974][ T54] ret_from_fork+0x675/0x7d0 [ 284.761983][ T54] ? __pfx_kthread+0x10/0x10 [ 284.761994][ T54] ret_from_fork_asm+0x1a/0x30 [ 284.762015][ T54] [ 284.764028][ T54] Kernel Offset: disabled VM DIAGNOSIS: 23:54:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000064 RCX=ffffffff819bcf31 RDX=ffff88802534a480 RSI=ffffffff819bcf1f RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000348f8e8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000691f1f R13=0000000000000200 R14=ffff888021b6a480 R15=ffffc9000348f9b0 RIP=ffffffff819bcf21 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4366be2000 CR3=000000004e24d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 72bb5aeab1bfa8fa a8ccad7830c65130 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b32ba46fe78d7f8c a25aafa6f5c9c5bd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c400fb5450a2a7c3 5773ad82307721bd ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e924f95a590ca11d 6471acc550c20df3 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a97e023105cc67c3 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac39a00400000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1202ab6936a1e21b d0c46ced2b4defe1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000007ecdfbd6 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856b08c647 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a217ba4a8 00007f2a217ba4a0 00007f2a217ba498 00007f2a217ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a2231d100 00007f2a217ba460 00007f2a217ba478 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a217ba4b8 00007f2a217ba4b0 00007f2a217ba4a8 00007f2a217ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=1ffff9200002efb0 RCX=ffffffff8168faa5 RDX=ffff88801dea2480 RSI=ffffffff8168fad9 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90000177d70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff8880d6b05000 R13=0000000000000001 R14=0000000000000000 R15=ffffffff93a1e9c0 RIP=ffffffff8160c360 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555dbf3d6a18 CR3=0000000025b42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558dd8ac88 000055558dd87ad0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558dd712d4 000055558dd712d0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce219bad20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558dd6e51b 000055558dd6e290 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558dd74988 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04000ab403000400 0ab0031204000aac 03048602000aaa03 0002000aa8032080 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0180034010000a80 0440080052080001 00000808060a016c e00008000ab80300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0810000180040180 8080808080c20800 5208000100000808 060a016cfe0a0800 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9003408080048800 07880302b7fa0484 0007840314040007 8003078004038003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0103881000038004 0100000808060601 68ce00080003e003 50100003d0030000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000240e0800 03000403c0030010 0003b0030fffffff ffffff0403a00338 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000390031fffff fffa080007b00300 0000000000000000 0000000000000001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff df08079003408080 04880007880302b7 fa04840007840314 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85297215 RDI=ffffffff9addb780 RBP=ffffffff9addb740 RSP=ffffc90000a7ed10 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000054 R14=ffffffff9addb740 R15=ffffffff852971b0 RIP=ffffffff8529723f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4367874d58 CR3=0000000031666000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff071cba50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4366a15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4366a1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4366a15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4366a1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4366a150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4366a151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002472d7 RBX=0000000000000003 RCX=ffffffff8b60c2a9 RDX=0000000000000000 RSI=ffffffff8da2c177 RDI=ffffffff8bf073c0 RBP=ffffed1003bd6000 RSP=ffffc90000197de8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801deb0000 R14=ffffffff908216d0 R15=0000000000000000 RIP=ffffffff8b60ad5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4367894f98 CR3=000000003ccbf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9376e15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9376e1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9376e15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9376e1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9376e150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9376e151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9376fba4a8 00007f9376fba4a0 00007f9376fba498 00007f9376fba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9377b1d100 00007f9376fba460 00007f9376fb0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9376fba4b8 00007f9376fba4b0 00007f9376fba4a8 00007f9376fba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000