last executing test programs: 2.672093623s ago: executing program 0 (id=543): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000140)='0\x00', 0x2) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f0000000800)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r5, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10820, 0x400}}, 0x20}}, 0x4084) file_setattr(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa2, 0x3, 0x4, 0x7}, 0x18, 0x100) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000380)={r6, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) r10 = socket$netlink(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r11, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0xc846) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000340)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r14}) 2.621730071s ago: executing program 0 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000000) fsmount(r1, 0x0, 0x88) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r2], 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) 2.551383424s ago: executing program 0 (id=547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) r6 = socket(0xa, 0x1, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x44000) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r4) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x1, 0x70bd2b, 0x25dfdbfc, {{'drbg_pr_sha1\x00'}, '\x00', '\x00', 0x2400, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x4800}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 2.498206453s ago: executing program 0 (id=549): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r0]) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) (async) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x8, 0x0, 0x0, {0x43, 0x3, 0x6, 0xffff, 0x1000, 0x80000000000000ff, 0x0, 0x0, 0x120, 0x2000, 0x2, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r5, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xaaa}}, './file0\x00'}) (async) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) (async) write$FUSE_WRITE(r2, &(0x7f0000000080)={0x18, 0x0, r4, {0x6}}, 0x18) (async) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x8, 0x3102}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffd, 0x80, 0x3231564e, 0x1, [0x2], [0xfffffffd, 0xffffffff, 0x4ec], [0x0, 0x1, 0x800000, 0xfffffffc], [0xa1d6]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x2, 0x0, 0x0, 0xb7}}, 0xe8) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r7, r6], 0x2}) 2.452405162s ago: executing program 0 (id=551): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) (rerun: 32) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) (rerun: 32) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r5, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x11e, 0x2000, 0x0, r7, r8, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) (async, rerun: 64) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r9, 0x40044d0e, 0x0) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x7, 0x1}, {0x0, 0xc}, {0xb, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x4040005) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) 2.44895346s ago: executing program 0 (id=552): r0 = socket$alg(0x26, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r2, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x1086, &(0x7f0000000640)=ANY=[], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) write$sndseq(r4, &(0x7f0000000100)=[{0x9, 0x37, 0x7, 0x9, @tick=0x5, {0x1, 0x8b}, {0x9}, @raw8={"c2ebca87a5fa93953e8ef923"}}], 0x1c) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede-generic)\x00'}, 0x58) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x44, &(0x7f0000000380)={[{0x3d, 0x4e00, "3ddd38ecfaa671f392024ae0d51ec1ccf4bc784c857816c895736db77eb3b6a62bc965784a1957881ef80dc23f0cf1b1873ab06333329bdeaa36b1dbad"}]}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000005440)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4800}], 0x1, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) recvmmsg(r6, 0x0, 0x0, 0x60, 0x0) 1.252285507s ago: executing program 3 (id=573): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x10b080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x400cd55}, 0xc000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x400cd55}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x0, 0x40, 0xc, {{0x27, 0x4, 0x2, 0x30, 0x9c, 0x66, 0x0, 0xca, 0x4, 0x0, @broadcast, @broadcast, {[@end, @end, @cipso={0x86, 0x58, 0x0, [{0x1, 0x11, "bd0d2a289786850808ebd548e96f5c"}, {0x6, 0x12, "856537ef2f456d7a1cefe6090dd2a4b6"}, {0x2, 0xb, "460a6792e50131273d"}, {0x2, 0x7, "69d66f5deb"}, {0x6, 0x7, "96ec9df45e"}, {0x7, 0xc, "1b68ec0e5998cfeed4e0"}, {0x6, 0xa, "2667002a6f063f09"}]}, @ssrr={0x89, 0x7, 0xa3, [@empty]}, @generic={0x88, 0xe, "4ffe650e4175cf12cf26fb31"}, @lsrr={0x83, 0x13, 0x50, [@multicast1, @multicast1, @rand_addr=0x64010102, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@ipv4_getnetconf={0x44, 0x52, 0x2de2657daed04d83, 0x70bd26, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_FORWARDING={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_RP_FILTER={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x101}, @NETCONFA_FORWARDING={0x8}]}, 0x44}}, 0x4000000) (async) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@ipv4_getnetconf={0x44, 0x52, 0x2de2657daed04d83, 0x70bd26, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_FORWARDING={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @NETCONFA_RP_FILTER={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x101}, @NETCONFA_FORWARDING={0x8}]}, 0x44}}, 0x4000000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r5 = socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x9, 0xfffffff7, 0x9e, 0xd, 0x0, 0xe0, 0x3, 0x2}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20040000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20040000) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0xd, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000), 0x304000, 0x1000, 0x0, 0x5}, 0x20) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000700)="8c2f9aaa783be01aa73029f9666267146ae39b3581a064cfd02b1d089a7ff628d09ced83e3088fef638a6ead07394c647c653ea687b7ba23b5a69c01264bf3a8d985690b9c72f3544b406a322708a30afc4ad967efb7d2207fa610cbdc7c1b777871ffc96f4ef878f01f69cd722cb993bf4dd3bcaf29adf5594164d2522fec8017df3a3d8f", 0x85}, {&(0x7f0000002c00)="3cd7d887928ea09214b3e2d61a78a5e85f832fd026def03752887199f4b9a4ee02db115c6fd1a116b55a2a4fa96d022fc6fae87843c0f4aa3310c48667868267b5b2c57e3b9d56cbb3d28e2bb63639b842b0a04c7b3056c99c2a637d06026b7e868e30dddd296fa69fb44c361b0ea66cd0888805d3285a0995d462704c70379db3c2d7fd18a6d5eae46414712c5939e22d176f427325fd38f02b9209a1295282b3040e1e2dfc510143a268530c3ffcc036a41ea7735a1937240d875ec17a56aae90ccb23cac6a885ad4cfa2351db98772120251e75dc3e682cc897c021dafcd82f423381358b1281d5d2f2757ca9dfdf1e328ae81b92ab8663dd5305cd6b67d41ba540be4f0348c12a3a2f216b33ee69033317ec2eb52573fb71cdcc80d8cc49470c5c262627aa66b777ae5cee4ef61ffb649d875ed31fdbb7ecb2d214e8b363ed74e1018fc941899ed83f05e94e3bbf075441ac95f4cf13d8ddfb26b23b3e41a417f889bbd8dd20f965d22fa68b67a22eb5d49e57fa1956b0ad87f0ece650b5f1b05ea04bdd8fecef970689ad992b20841e403b66ee1632d58b51bf38b3f682791ab563a16567109add807424095560db4bd4fdf20e4bf9177679a5a933a7fdeba6ab5db104bf2b72f1453c6ee2ce40422c5651a913b294d5acb20864c6abaa46481c562c625636d535c66735e2396d986bf7787376f6549b145cd13918ff735bc487fda82e05984537f0a213b15beef622ce72af35986daae4af3ae3b8a3cfb1e01f39ae39a7ad51a4d235e4fc8cf37be003cb87790c8be2d727da1e101e767caa402b83b2cb696a0d8d4c885caac6f818555e5c20b7c5384eb089b6a4d67896e0dcd43b3587e4c7bbb4159e57249dc4d3e81f67ac102fa96afec6e84a7a6a7d80124470f910ceb0dafc315def1517b0d928a1613f88c3fdb31d6e102f01e1d2499c7bd9bdbac90564b608f5726c383319663193f82f043bfe5a87768f879bef0c29b22762b5eaae63ac94b44f9f788673ab7e860c0d54ffd56292ada6808102192a6ff77efd96f9ea1ede629ea8d8c2b58a907c299a4762683e67908864ed71a78a2575c5783af60368691036d93618796cfb57c26529a5cd96b11d695b44fac146993857bb46baa50800167cb6c0ad9b16a8d61afa8584da7e2fc5f0d6ff9515eda1d376e865f40fe0d4bb36af61395799fae25dd44da483fdef3da906935cbe2e392f46bd135bb8ef31c56b38d7a461a5e2e100686f1cbca50ddaabaecc0b8960a98256958734ed6ba16ba921fa0f471213c8a657c6ed15de6975cf1b07711790d4c7bb63ad11191053038b91dab86ba2c9279b3cb907bd4bef093514f5326fa8d092a7008b684334b310502ca22209711928690e2d0013de32f651c4aa80ac41b865983553997b05059028e414f75c16f9fdeb065e0f2bd8c6049f4255905d0eb1d3214ba95692582021f377192cf6e33a3524e2dc6271a6e9403845a57c33c0be8fb070a9119cb734c4dcc4d61dff16edd81bea090594ebaa9e715112efacebec90f26dad6dc6c127750d0d2d2bf76c2377083c509bd6484d6d262d28d4b04dee95f7baa686bd83714a0131043b8bc3c77e673760260c13de27e83aaa86daf9128dc6b0a353d46075bebbcae77b44300dfa2728ca6b307a5e1c4baded8288539df59fce32e4fd3455e61f10478b23e3f93fd549af366ec3d74b1ce1f037d9226802764cc570ab93c386e912e83168f68c984d5b1629c068d178e4394b0acf19a0c29368d5154a8d48b07664081b79bc0f68409466b188911cb66a51857537e5d9f6b109746f3f2db9994e3cbd2e4d17d7b638d8539fc8fe91533a59a8ad2525e876337e6a53f2f942d84c61f7ccdfe8ab6cf25d045d613b30ba3888425d290d6becad7d7db7ab156dacb79bc00a6dc181e57b114b0f0b6f99ea2b989da95592b386e046a3e0243b36be14b1529e992888e4995f23b6bd96b98ac46d2c5bfdf0ed6c4bfde97d906858d8e92ed4e3de9540cc32ceb0b9d003256695ba5ffd68e60483e38d1dda4c053595ccace6441c8235facaed73b5e2ec72ffedb26d05ba5d1240fde8a468259f894383f38551ddbb04696ae6688115b96d6f34b61d71911179e32dd58f049461d37b9ade48921ce2e2461a5a55ebf4b40318cc7ed520ab4e84cbcceda580c2db94a747450af118000c75326a1132ba2f36efad436e2dd71eaa7eb7c34197d47c0ee27fdd7cb21e3e4e5284607e7d3125ef949df7e2a40d974e43a246f6806267cc589f4c7f9f73220a57f30c8da88f721a0def0d2c1e181e7da3302567dd682b908c6144c4938d90c7d769bca915870d7c6e04b92e865f58b738544371bf6ef25a964e9b8b2b72eac9095755027e693b06ca2afb1e81ceca263239e03b777af8793274c2e6576a8c5e0cc03328f32399725cc3f58196920a182cb47074303953377330f1eef8c981db7a775d0fb07b04c6717e2e7a604bef48ca190e393ce18b7828391c3162a19f0ca00bf841c07ef37e1e298761d1e6bad782154c3f531f4a9a22281409f903a48d59147c2313439926b188387ce313810282c1f8dabdc57eb51f029575d62464b6f8dacdec01ffa6f5f21bcbe74bccbe00e2ba5976c90a7ad565f9a5135c601d008ed809f87e117f1d36aa25c2b6844d18bc61677bccd6490b6849ac3b7a36f0d5b67b84c430dcfa7fcbe60af1eab97506fa55d30f9b0ec9e5c9d0fc860d6f0ac4aa9559a0d3fb9eac931f91f8b438ddd77686d40cae94d7e7be65eb068b2b4fb0a14485ef46e614e2a4ca116c3ce91d123e5364144c2f5958870d15931bbf1aeeb28cd82631c6f3defbe15c4cece8b7ee277761dba018d4dcafa0521259f58bbc7a99cac70a3f07f20de3991a9a48a523f02d28d28dc5b3884bcb0fcb7d531bb5a16f88022140914987d5951ac35616e58a42b8e449b3ccdcaaa50e89599f18eb6d682a7af07633ede9d51f0607e89d47e4cd69d28163d2218fd1645d042eae051b3c10446b7d0d92a2e3cec6beaae5e9cc7b7e89ba5aa626657bb416dab790c24b26729a36fb0c39b8acb8da1399e06e8c79bc1b99adeadcffa863bc0f2807af8a5bd45041c1fd5d82c1b3a094a4bd4e67f18bd9033ac7f74cdf9f306bd74235ca82147d9c21aee4d6cb92091faaa9f2e1c6ab63587276a044e98fa5f9ccb0f47bfbfd799b5aabc85d413b9cf373775343f5fe97952321892c976c87bed7b2c0457c79e045db1f9e07abbed3e0231bbef65bd5414202b93966d0c9f18427a6b2e323561cf52738104b404da65e876c486912e3b83b7577057978c48ee34532905ce85269604d793e5bd91f6fd549e8e3047ba2665c7cee5b27050782a8a6f53d53dc0f2a5075e2f14a17323543be05301a677b6364b51830bbb6edc8c963383efd489f92cd548157af9df8982a5cb9138443012f5fb4b02b3b4d218ffe774fd9485966be1a3fa3ddf8ca90af89ce29ea82e4d19e5bbb96635628d40f01b2a44b2670e90aeb8257fda171a255b5b8efff9632fee053e62c172e83060c400f7f5f6e658bdc3f52f141874edb795f6fd3ab4a4e0b9987653f749859c7480bfd3821e89c96d19234d0b4a9bd8f21bf9caf28471a8928741cc3dd04f2b14aff30d4bc027c4b1b2756e55e04783c06daa139e5054738a34c4f80bf1d61d4686578761ed54239147f2e5373e6d5c5b1779b335908bec3f382342a29deadeb78646005637ccf43aca6636efb3fc11fa2cb4dc9e56a7caf9df004fe2dbd5ae3b0895f73a79fa3699da4f6fea00651d0b11fe048c281b62de94599312cfcbe2751374347277baebdf1a593a29a015b5428789cbf33a6b22be721ed6032ae5d2895dd37d3442693293c1c694e384725ee92bae69b71c7a4faa46492a9bd7856887d0d457b3b2508cc35dc5f1fe5c3e65d1aa5217e0bd82a80248a2a2ff0eaeb0beba267375e061f9f4c5a85c3c2354cf95cedc84c9f137476990b5a2b1c9448eefbf802d17aab5c982549220099a896fbd0f4a823b583aedfa38e9ef72947941e36d28a96b5e003c0d4fdf817dd0059fec7dcdccbb914d3d9ce38a0b8800a535c8488295c78d6829e08cea1d332d49c81cc9c801efcbe511085af5f9dd4cc09b2a3c97100ad09c199a5c42914496e0a014137f5a8ddb9825ca5131bfb7819cadfb4f65170a5abd3208d37bfd78c051c2dfc9b1f264ca21e15196d94eec9a008ddfccf6dd91310b6dd7c5c04deab49e1926c53e368eeaba2f78df234990aef34eeb8f5f32499ba6737c7f8e5e9585a70eeb2d9c659007e26382ce98d8b5a33e5765c91f5fac7653ee99b632d0727bb7a9a94b9cb51b942d7befa08f0e919eb095cfa0e91147210fc7e621b6357cd8e369ea3b3e80167adaa3cec0b76392e1caea33be07408911a0e8b1ff67fe07f78220d7da6a535e104eb9c48393d6cb036c8a109c515feb456aaa46c030954623d9a741c203851a49360aa1225927ed72486e680fc703d2178096d38dc95bda14d090f8c45035706f44164e5f444e832ab437367b9ad147d1ff397dbd3678fe24dde7c564f29ab78636ec6a2c262e8b639f195925ca182a31be5cbbb7ddc902e8bc0aba84a9952448fbf53cd805a319c052d911bccc78b089215409b83f1d4a05cbfe50d983eb6a550e7507c602911e61782c225f521edd5af3c18dec08c278cb5870eeef85129a17a91260b88c460b684e40f77cc8d0f774c6b14da635729303fda9c17e0aa03db170aa1e3f4c421d02316b3abe92f2326707adf194b2b5bfd157ac9485d5e80e0bc9a32154a2570ca6a830eafe4dd043c00a337f6cdfcffa2fc30258ed211b51128cd43b0c62e26e8aa2c956c1ef1b2fd002b86f335252b266d2057db281f25c0cf58acfbd6d3be05356b3fe217dbb83709b51561dd0b22e98baa0a504485672850f9c1d07c8ce79935aa620480aca282fb027795439594bd52babd32127b9d41f52c6b7a1a1ab15c373d63741a4a465c05296417f795a4a0a6066ec91174a5448aeeba53b67f69ee6a3c73dc5f09e361797075883b38b51703457e5d451c6d90f3c4568672af56c7959383dd5bd2643a57570e830f676faa981750635b357bbb1a43f9070ffd6118652e92920a0544bd424ed199c9de1d7b4012c98d72422fa24da8a6c9a6d7858ee38bd75a3e5725e51fa5359543524c2c450418c77b36964614be9e40e6b616ebac582a3420e684c50ea7305f131efcb41f48cf495420595fa73d17916a6f5448d5105c384f30b140ce5a78a27bb652362843e8e5874dbcbc22a5fd4f9e4abc58b22db3d0654239bdd2f466c4dad1ee2533a9c6823dd15035e2a5149c27c26db844393bb9a3509d164a6364470fd7bbfe6546caa97771503a9d690f595cdfc750e31a6e287725f1c53822ca8eba4561b6cce692c3060a8247d03f1238ea23eeef0898d7dbffc8bf8976be7fd36202dde187403bcd77ae16f4f9aa258ede410375d72a331d2be63d0dd05ade7cf8e39dbed84b3b2ad0c0ab94a493cb32c3dbc535fe0337bfae6017dfde65876655ce643b16f179cfac67f89f7746b0be59a308d110557ce5548aaee3b22899029710e755c5496f0bde23c29cd0af8b252435ee20cbd2f4b8787747c9d9865663bdc56d69c39e59b996cf116dda0170c2c8eb81bcba36f3cdc38c89bd605a9bcb4b9eedb888d7bc86e11b54628b16a52df300b99951c916e574efcf516168994ac253e8dad89b1563d9c9116c6ef75e3a1acedcf169a528e18430a95af0b3cbed657ec952faee6ab2adde4d41bef9f3461ba2df9761685bb76b1b82e587ec12c9694c3ef63bef51416aca60dc84282629049a312de29bae1d598268ebf746499d061ab8d25ee8f2007375ddcfdab13eee7a3e45c2a6df6da02c551175f12c80aacea5ab9b741a8c34a260da28a4cb2145963c1330960fcbca29ca0c3a6df49d4443d6b0bd1f735da01956b4ea70376efb06b60705a176cb4fdd4a43e0b5ba523f1fd47dcff57013bfad503bcafa54e555c4", 0x10a9}, {&(0x7f0000000400)="e6c16f81eb93199c85de0c0000000000009141040000000000000001918a9a21332fd5990f0bd2c208ca08000000a2c7795a83e06cc4d86cbb8667ee24d636a3e32e41497d940010", 0x48}, {&(0x7f0000000580)="e1769cd1f510251a51d87e958b0931c974af44c4d93255c10d4240fdf3f1710259996d860fe073ef9606d6c5b4739ddb339a923bcbc4ed4f7b79db983e1d11f49458aa717851d9ba7389e31b49a689958b104ba01e528a51445b980131d963f872ada3ded3c4c8ddf1a6527887cc187c57a13473b41b700a84f747d3ff2fbf9c80f8a79e20eb1e47e051601fab80", 0x8e}], 0x4) (async) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000700)="8c2f9aaa783be01aa73029f9666267146ae39b3581a064cfd02b1d089a7ff628d09ced83e3088fef638a6ead07394c647c653ea687b7ba23b5a69c01264bf3a8d985690b9c72f3544b406a322708a30afc4ad967efb7d2207fa610cbdc7c1b777871ffc96f4ef878f01f69cd722cb993bf4dd3bcaf29adf5594164d2522fec8017df3a3d8f", 0x85}, {&(0x7f0000002c00)="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", 0x10a9}, {&(0x7f0000000400)="e6c16f81eb93199c85de0c0000000000009141040000000000000001918a9a21332fd5990f0bd2c208ca08000000a2c7795a83e06cc4d86cbb8667ee24d636a3e32e41497d940010", 0x48}, {&(0x7f0000000580)="e1769cd1f510251a51d87e958b0931c974af44c4d93255c10d4240fdf3f1710259996d860fe073ef9606d6c5b4739ddb339a923bcbc4ed4f7b79db983e1d11f49458aa717851d9ba7389e31b49a689958b104ba01e528a51445b980131d963f872ada3ded3c4c8ddf1a6527887cc187c57a13473b41b700a84f747d3ff2fbf9c80f8a79e20eb1e47e051601fab80", 0x8e}], 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x1170, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [0xffffff00, 0xffffffff, 0x80, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff0000ff], 'lo\x00', 'vlan0\x00', {}, {0xff}, 0x3a, 0x7, 0x0, 0x20}, 0x0, 0x1108, 0x1170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x1, './cgroup/syz0\x00', 0x4f6, {0xd}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x10, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x1170, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [0xffffff00, 0xffffffff, 0x80, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff0000ff], 'lo\x00', 'vlan0\x00', {}, {0xff}, 0x3a, 0x7, 0x0, 0x20}, 0x0, 0x1108, 0x1170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x1, './cgroup/syz0\x00', 0x4f6, {0xd}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x10, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000280)={0x51, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcd6, 0xbffff6df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9144e6a29fca871a, 0x0, 0x304}) 1.132281559s ago: executing program 3 (id=574): r0 = syz_io_uring_setup(0x6169, &(0x7f0000000140)={0x0, 0xc5b, 0x8, 0x2, 0x33b}, &(0x7f0000000200), &(0x7f0000000340)) r1 = syz_io_uring_setup(0x224fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x4, 0x132, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000002300)=0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r7, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r7, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r8, 0x0, r9}) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) fsetxattr$trusted_overlay_redirect(r11, &(0x7f00000001c0), 0x0, 0x0, 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000040)={0x1, 0x6}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$USBDEVFS_RESET(r5, 0x5514) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd_index=0x9, 0x8, 0x0, 0x0, 0x2}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x19}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x1}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x138, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a757bbf93c66062b18c790be178fc9cf"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="82440f497c82fa1fbb03aa6b56be8381"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8fa9a03eaafa3cb873923b0cd338d1f66740eee05eb4f607"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "952b42af845379b3"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="550c372f065fea90acb3767352796d5734b7e91006f48caad8c2e388836afc7f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dd6e99fc734a7d8770bdb340ee2e2e57"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="21c7c774755416a2753607585953f522"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x200}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="996b577b7d01da2b545ac0e5231ccd87dc727eb60d27dcd1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5b37eccc48510218b443f934624cdebca0ffbdf6d07381796c15c1894cef898a"}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40400d1}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r16, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000f609010400000000000000000a0000040902010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140c0009800800014000000081480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000000100000a776600e023bb3d5af42f26becfdf918bea3b90bf38effcb6223369d0996ba95b6bbb0444b902dd99b2091fc0ac339e68ff514e3cde3ad00036c1ff4655c357b6ec7bda307f"], 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.000119572s ago: executing program 3 (id=577): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x2, 0xb, &(0x7f0000000000)="01c9033c7e1cd68bd7cf39"}) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 712.239337ms ago: executing program 3 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20004801}, 0x40c0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x1000100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x1, '\x00', r4, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 711.315781ms ago: executing program 3 (id=582): ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000700)={0x60, 0x2000, 0x400, 0x478b27d189243d75, 0x6, 0x7, 0xf, 0x1, {0x40, 0x2}, {0x0, 0xc, 0x1}, {0x0, 0x10, 0x8000001}, {0x8, 0x400}, 0x2, 0x100, 0xcf, 0x1ff, 0x0, 0x4, 0x8b7, 0x200, 0xa740000, 0x10000, 0x1, 0x6, 0x21, 0x2, 0x3, 0xa}) 662.256707ms ago: executing program 1 (id=583): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000080)={0x4, 0x8}) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0xc0) 660.070093ms ago: executing program 3 (id=584): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000004c0)={0x1, 0x7, 0x1, &(0x7f0000000280)={0x5, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718dca33021b22b650"}}) (async) r1 = syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') dup3(r1, r1, 0x80000) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) (async) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) 590.723144ms ago: executing program 2 (id=586): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000051c0)={r3, @in={{0x2, 0x4e21, @multicast2}}, [0x6, 0x7, 0x401, 0x8000000000000001, 0xfffffffffffffff9, 0x1, 0x8, 0x9, 0x8000, 0x8, 0x8, 0xd0b, 0x537, 0x5, 0x100]}, &(0x7f00000002c0)=0x100) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x161b82, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0x12) (async) r5 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfe000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000280)={0x0, 0x0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r11, 0x1000002, 0x13, r9, 0x0) (async) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48a, 0x0, 0x3}]}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r12 = creat(&(0x7f0000000040)='./bus\x00', 0x20) (async) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r13, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x6, r12, &(0x7f00000001c0)="1319", 0x2, 0x800000a01}]) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 442.631972ms ago: executing program 1 (id=587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000700)) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 191.687644ms ago: executing program 2 (id=588): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x420, &(0x7f00000000c0)={[{@memory_recursiveprot}, {@memory_hugetlb_accounting}], [{@measure}, {@uid_lt={'uid<', r1}}, {@obj_user={'obj_user', 0x3d, 'd+'}}]}) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4ea0, 0x3, @loopback, 0xfd5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x2b8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x5e}}}], 0x18}}], 0x2, 0x4046040) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES8, @ANYRESDEC=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 190.971018ms ago: executing program 2 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000010000000008001c0001000000", 0x24) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000/0x1000)=nil, 0x1000, 0x19, 0x1}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 132.794015ms ago: executing program 2 (id=590): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000003c0)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000140)={"0160bd8f41a34066c329e5c9e7e0b93c4cdc2139bb1c026b2b7398bbddbc", 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}) 72.347552ms ago: executing program 1 (id=591): r0 = memfd_create(&(0x7f0000001700)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\f7\x8e\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00'/250, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) (async) setsockopt$inet6_tcp_int(r1, 0x11a, 0x5, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) (async) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, &(0x7f0000000400)=0xb8e7) mremap(&(0x7f0000169000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00005db000/0x3000)=nil) (async) r3 = socket(0x10, 0x803, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d090000080003"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, 0x240448c0}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r4, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0x8}, @var={0x7, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x2e, 0x0, 0x0, 0x30, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000600)=""/4096, 0x41, 0x1000, 0x0, 0x2e27}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x1c, 0x6e, 0x3, 0x215, 0x40c00, r6, 0xf, '\x00', 0x0, r7, 0x1, 0x4, 0x3}, 0x50) (async) fallocate(r0, 0x3, 0x3, 0xffffffff) (async) r8 = socket(0x15, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) getsockname$packet(r8, 0x0, &(0x7f0000000440)) syz_emit_ethernet(0x32, &(0x7f0000001680)=ANY=[@ANYBLOB="0ea6aa9ea6d3ed8600fa27aaaaaa000800450000100000ac2446830f069a2be4969d530c3814bbac1414bbf2df9f4a2c9410736b9ee3636f8208f0d65aa6b75252768c68144ac0396c13666800"/90], 0x0) 71.99553ms ago: executing program 2 (id=592): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_create(0x5, &(0x7f0000000240)={0x0, 0x41, 0x2, @tid=r1}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f6, 0x106, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmmsg$inet6(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001400)="2838f353786896fd288b396f689fad2306c43d14ca9a8689d16d539f914313b88187eec9e91aa76d8058d693b81e2da063c2f7d35735659a9f", 0x39}], 0x1}}], 0x1, 0x8004) (async) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8, 0x3) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) close(0x3) (async) r5 = socket$kcm(0x21, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYRES8=r5], 0x2) fremovexattr(r4, &(0x7f0000000000)=@known='system.posix_acl_default\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) (async) r6 = getpgrp(0xffffffffffffffff) migrate_pages(r6, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x270) 71.660535ms ago: executing program 1 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00198008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x388, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "d70d86434179f03c23cea1295c36c1896414cafc75fffb150592c50577c09cf0977fc0d8671e2036bab027c926a6697ea9b6ff0e508924001eb266ef807ec4412c7724826d2b9060fca38b70bc80b78586e0d1c41d278badf192e5da8cc220e3828db92ed6d0b1eeb4aa43d317d1a559a07d1babb8426ac602ba5bfc45f3243ef3447497114248445621c62bf8a0e42e30a50c2167eae8e0f5a8e77fa519436fdc23ace0c91181d4fa50fb4467cf4296d9887a23985f0f96d85151d2af2c35cba61dd936c2b9f73dc6bbc556d9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_MODES_OURS={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe1, 0x5, "c138631c5ae8885f4f82887fabad63c1c47576fe61f6f1fdead5acfadf2a77bd7bbdedb6e677be4562289d30da1429fa385951feb71e7987449af7fa98f8a975e83fbab55b8109e7c5d5fd9b99b5060a39c6862a27dc29dad3cd2c6145d427b99f8ee49a0457c8ba23e1d412821f7246138a6e60a5ecab665d0d1c3988cc197db6f4ea717bbd8d1b43a0d084d606646b66019afecb5a7d5204e2fc61381eae2173948aa912bfbb76799c9d8301f9b1d9766477f5d02fa4ae942a56e70d09dc91328ceb6feb7314b6c758e72765f512c9f110ddc70d61187bb0dd905ac5"}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "6024c2108586176645f63d980ec8da67306233ee052e7a2c624bd86d78adcc2c875c345f82e7b2c1e06c6e3726bbc99f87d54fa55d0062f4c1b70c8f7f3c3dc71e3aee3747148988504ab678b5dcc856c3f5174f50d6d472ed3b4578096265421490a2fb4ff3fc0c585f88f1761f49188f60e4fe141ca2ef6609d4d2e21ce912a380d98e99d6599cc20e38d8fc992831ddd80f919742980fed470d7699e8b256edf49fc7cecb241a92c0c1cd8c11defc0968cdf4143be2b34005e9c8a3ebb35a8bd013e310475c84673314a3883616eaf4d421135b0270e9"}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '}+-@:!-\\%\xbf/-\'%]!+,!-%\x00'}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x388}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) 2.620247ms ago: executing program 1 (id=594): syz_emit_ethernet(0x2a, &(0x7f0000000780)={@random="cf702e8cf675", @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @remote, @local, @remote, @broadcast}}}}, 0x0) 2.294148ms ago: executing program 2 (id=595): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x8000000000000003, 0x207, 0xe, 0xff, 0x3, 0x4, 0x200000000044f, 0x4, 0x3, 0x1b8, 0xf703, 0x5, 0x6, 0xff, 0xae, 0x6ff], 0x80a0000}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0xc880) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x80, r3, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac=@broadcast}, 0x200000000, @random=0x5, 0x0, @void, @void, @val={0x3, 0x1, 0xb9}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x2, 0xc0}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x80}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x80, r3, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac=@broadcast}, 0x200000000, @random=0x5, 0x0, @void, @void, @val={0x3, 0x1, 0xb9}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x2, 0xc0}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x80}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f00000000c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=597): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x35, 0x5}, @float={0x2, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/20, 0x37, 0x14, 0x1, 0x4000005, 0x10000}, 0x28) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1}, 0x4) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000def900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000035090100000000009500000000000000bf9800000000000056080000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x3eda65d110a8c4d1, 0x18, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0xd, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r2], &(0x7f00000004c0)=[{0x0, 0x4, 0xd, 0x6}, {0x5, 0x4, 0xc, 0x3}, {0x3, 0x3, 0xc, 0x1}], 0x10, 0xa44}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r5, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000040)=[r6], 0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000440)=[r6], 0x0, 0x1}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg$inet(r8, &(0x7f0000006340)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)}, {0x0}], 0x2}}], 0x2, 0xc044) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) write$binfmt_misc(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 52.822808][ T40] audit: type=1400 audit(1772565989.455:59): avc: denied { write } for pid=5907 comm="sh" path="pipe:[2787]" dev="pipefs" ino=2787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 52.833064][ T40] audit: type=1400 audit(1772565989.455:60): avc: denied { rlimitinh } for pid=5907 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.840928][ T40] audit: type=1400 audit(1772565989.455:61): avc: denied { siginh } for pid=5907 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:10254' (ED25519) to the list of known hosts. [ 53.910395][ T40] audit: type=1400 audit(1772565990.565:62): avc: denied { name_bind } for pid=5915 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.940899][ T40] audit: type=1400 audit(1772565990.595:63): avc: denied { execute } for pid=5916 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 53.950218][ T40] audit: type=1400 audit(1772565990.595:64): avc: denied { execute_no_trans } for pid=5916 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 56.213904][ T40] audit: type=1400 audit(1772565992.865:65): avc: denied { mounton } for pid=5916 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.224225][ T40] audit: type=1400 audit(1772565992.875:66): avc: denied { mount } for pid=5916 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.229234][ T5916] cgroup: Unknown subsys name 'net' [ 56.383452][ T5916] cgroup: Unknown subsys name 'cpuset' [ 56.391057][ T5916] cgroup: Unknown subsys name 'rlimit' [ 56.620395][ T5924] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 57.401140][ T5916] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.003237][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.003255][ T40] audit: type=1400 audit(1772565997.645:82): avc: denied { execmem } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.227293][ T40] audit: type=1400 audit(1772565997.875:83): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.236711][ T40] audit: type=1400 audit(1772565997.875:84): avc: denied { read write } for pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.244893][ T40] audit: type=1400 audit(1772565997.875:85): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.252567][ T40] audit: type=1400 audit(1772565997.885:86): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="socket:[8209]" dev="sockfs" ino=8209 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.255342][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.266759][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.273228][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.277390][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.280977][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.283583][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.286685][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.286796][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.291273][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.293354][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.293987][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.294633][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.295488][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.297490][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.298077][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.301750][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.302172][ T40] audit: type=1400 audit(1772565997.955:87): avc: denied { read } for pid=5935 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.302754][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.303208][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.305118][ T5287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.308760][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.312792][ T40] audit: type=1400 audit(1772565997.955:88): avc: denied { open } for pid=5935 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.342430][ T40] audit: type=1400 audit(1772565997.955:89): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.667703][ T40] audit: type=1400 audit(1772565998.315:90): avc: denied { module_request } for pid=5933 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.724368][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 61.733014][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 61.783530][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 61.920664][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 61.953220][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.957017][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.960342][ T5933] bridge_slave_0: entered allmulticast mode [ 61.964569][ T5933] bridge_slave_0: entered promiscuous mode [ 61.973062][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.976321][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.980343][ T5933] bridge_slave_1: entered allmulticast mode [ 61.984374][ T5933] bridge_slave_1: entered promiscuous mode [ 62.037245][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.039935][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.042286][ T5935] bridge_slave_0: entered allmulticast mode [ 62.045445][ T5935] bridge_slave_0: entered promiscuous mode [ 62.049216][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.051491][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.053862][ T5935] bridge_slave_1: entered allmulticast mode [ 62.056352][ T5935] bridge_slave_1: entered promiscuous mode [ 62.070928][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.074107][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.077543][ T5932] bridge_slave_0: entered allmulticast mode [ 62.082220][ T5932] bridge_slave_0: entered promiscuous mode [ 62.094704][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.098334][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.101783][ T5932] bridge_slave_1: entered allmulticast mode [ 62.106056][ T5932] bridge_slave_1: entered promiscuous mode [ 62.134981][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.171594][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.177964][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.183854][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.199616][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.226303][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.286309][ T5933] team0: Port device team_slave_0 added [ 62.290179][ T5933] team0: Port device team_slave_1 added [ 62.298987][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.302140][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.305249][ T5939] bridge_slave_0: entered allmulticast mode [ 62.309467][ T5939] bridge_slave_0: entered promiscuous mode [ 62.314793][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.318584][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.321719][ T5939] bridge_slave_1: entered allmulticast mode [ 62.325698][ T5939] bridge_slave_1: entered promiscuous mode [ 62.331193][ T5932] team0: Port device team_slave_0 added [ 62.334260][ T5935] team0: Port device team_slave_0 added [ 62.338047][ T5932] team0: Port device team_slave_1 added [ 62.361818][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.365415][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.376556][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.395581][ T5935] team0: Port device team_slave_1 added [ 62.399165][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.401544][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.410858][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.415616][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.418776][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.430582][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.461096][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.463417][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.472665][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.478453][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.485102][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.513731][ T5939] team0: Port device team_slave_0 added [ 62.516754][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.519938][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.528494][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.538972][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.541403][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.550348][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.555310][ T5939] team0: Port device team_slave_1 added [ 62.598818][ T5932] hsr_slave_0: entered promiscuous mode [ 62.601841][ T5932] hsr_slave_1: entered promiscuous mode [ 62.611812][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.614283][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.623285][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.653895][ T5935] hsr_slave_0: entered promiscuous mode [ 62.657023][ T5935] hsr_slave_1: entered promiscuous mode [ 62.659938][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 62.662424][ T5935] Cannot create hsr debugfs directory [ 62.666273][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.669047][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.679788][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.687515][ T5933] hsr_slave_0: entered promiscuous mode [ 62.691748][ T5933] hsr_slave_1: entered promiscuous mode [ 62.695084][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 62.697145][ T5933] Cannot create hsr debugfs directory [ 62.852535][ T5939] hsr_slave_0: entered promiscuous mode [ 62.855894][ T5939] hsr_slave_1: entered promiscuous mode [ 62.859858][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 62.862546][ T5939] Cannot create hsr debugfs directory [ 63.123863][ T5932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.131528][ T5932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.137370][ T5932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.151548][ T5932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.198646][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.212102][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.219115][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.225353][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.284049][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.291762][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.300340][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.307371][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.358991][ T5941] Bluetooth: hci0: command tx timeout [ 63.360036][ T5942] Bluetooth: hci3: command tx timeout [ 63.363036][ T5941] Bluetooth: hci2: command tx timeout [ 63.367723][ T5287] Bluetooth: hci1: command tx timeout [ 63.390360][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.399676][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.406773][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.416514][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.452695][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.517497][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.526590][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.532397][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.541768][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.544406][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.565125][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.567731][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.574424][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.597222][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.599767][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.611982][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.621977][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.625168][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.630763][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.634332][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.663748][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.666844][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.681886][ T40] audit: type=1400 audit(1772566000.335:91): avc: denied { sys_module } for pid=5932 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.692280][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.717274][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.732196][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.735515][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.755278][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.758607][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.821822][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.875188][ T5932] veth0_vlan: entered promiscuous mode [ 63.886920][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.900700][ T5932] veth1_vlan: entered promiscuous mode [ 63.916587][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.938145][ T5932] veth0_macvtap: entered promiscuous mode [ 63.951292][ T5932] veth1_macvtap: entered promiscuous mode [ 63.980796][ T5935] veth0_vlan: entered promiscuous mode [ 63.986529][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.003798][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.010111][ T5933] veth0_vlan: entered promiscuous mode [ 64.016797][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.036786][ T5935] veth1_vlan: entered promiscuous mode [ 64.040433][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.044390][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.055918][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.060479][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.070215][ T5933] veth1_vlan: entered promiscuous mode [ 64.130264][ T5939] veth0_vlan: entered promiscuous mode [ 64.145027][ T5933] veth0_macvtap: entered promiscuous mode [ 64.153065][ T5933] veth1_macvtap: entered promiscuous mode [ 64.158868][ T5939] veth1_vlan: entered promiscuous mode [ 64.162276][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.165839][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.169134][ T5935] veth0_macvtap: entered promiscuous mode [ 64.178706][ T5935] veth1_macvtap: entered promiscuous mode [ 64.196108][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.221847][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.230751][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.238550][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.254380][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.258435][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.264385][ T335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.269362][ T335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.282361][ T335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.286715][ T335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.296257][ T335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.305105][ T335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.310987][ T335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.328580][ T335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.332720][ T5932] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.349284][ T335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.352861][ T335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.363117][ T5939] veth0_macvtap: entered promiscuous mode [ 64.385178][ T5939] veth1_macvtap: entered promiscuous mode [ 64.415660][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.422073][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.426767][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.426846][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.452871][ T335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.457433][ T335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.464504][ T335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.464512][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.470421][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.472155][ T335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.533184][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.536396][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.566857][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.571677][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.651559][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.654290][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.991391][ T6054] netlink: 'syz.3.10': attribute type 9 has an invalid length. [ 65.096229][ T6054] netlink: 'syz.3.10': attribute type 6 has an invalid length. [ 65.379938][ T6073] warning: `syz.3.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.448125][ T63] Bluetooth: hci0: command tx timeout [ 65.451153][ T5941] Bluetooth: hci1: command tx timeout [ 65.451197][ T5942] Bluetooth: hci2: command tx timeout [ 65.454184][ T5287] Bluetooth: hci3: command tx timeout [ 65.590667][ T6083] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET) [ 65.851966][ T6090] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17'. [ 66.009320][ T40] kauditd_printk_skb: 9525 callbacks suppressed [ 66.009336][ T40] audit: type=1326 audit(1772566002.655:9617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.1.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32aad9c799 code=0x50000 [ 66.024153][ T40] audit: type=1326 audit(1772566002.655:9618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.1.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32aad9c799 code=0x50000 [ 66.033734][ T40] audit: type=1326 audit(1772566002.655:9619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.1.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32aad9c799 code=0x50000 [ 66.042691][ T40] audit: type=1326 audit(1772566002.665:9620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.1.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32aad9c799 code=0x50000 [ 66.053145][ T40] audit: type=1326 audit(1772566002.665:9621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.1.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32aad9c799 code=0x50000 [ 66.062752][ T40] audit: type=1326 audit(1772566002.665:9622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.1.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32aad9c799 code=0x50000 [ 66.073342][ T40] audit: type=1326 audit(1772566002.665:9623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.1.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32aad9c799 code=0x50000 [ 66.089180][ T40] audit: type=1326 audit(1772566002.665:9624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.1.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32aad9c799 code=0x50000 [ 66.097865][ T40] audit: type=1326 audit(1772566002.665:9625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.1.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32aad9c799 code=0x50000 [ 66.105987][ T40] audit: type=1326 audit(1772566002.665:9626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6033 comm="syz.1.7" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32aad9c799 code=0x50000 [ 66.788351][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.937685][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 66.942680][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 66.947981][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 66.951619][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 66.954188][ T10] usb 5-1: Product: syz [ 66.955533][ T10] usb 5-1: Manufacturer: syz [ 66.961893][ T10] usb 5-1: SerialNumber: syz [ 66.966627][ T10] usb 5-1: config 0 descriptor?? [ 66.975392][ T6110] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 67.187846][ T1462] usb 5-1: USB disconnect, device number 2 [ 67.355551][ T6125] netlink: 'syz.3.28': attribute type 10 has an invalid length. [ 67.360124][ T6125] netlink: 232 bytes leftover after parsing attributes in process `syz.3.28'. [ 67.517750][ T5287] Bluetooth: hci2: command tx timeout [ 67.527747][ T5287] Bluetooth: hci3: command tx timeout [ 67.529724][ T5287] Bluetooth: hci1: command tx timeout [ 67.729793][ T6128] gfs2: not a GFS2 filesystem [ 67.899080][ T6134] overlay: Unknown parameter 'smackfsroot' [ 67.951471][ T6139] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 68.022608][ T6123] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 68.040793][ T6139] overlayfs: failed to resolve './file0': -2 [ 68.221747][ T6146] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 68.301900][ T6150] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.36'. [ 68.586395][ T6158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 68.663350][ T1462] IPVS: starting estimator thread 0... [ 68.767764][ T6163] IPVS: using max 43 ests per chain, 103200 per kthread [ 68.776617][ T6165] Zero length message leads to an empty skb [ 68.798204][ T830] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.948275][ T830] usb 6-1: Using ep0 maxpacket: 16 [ 68.954907][ T830] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.958969][ T830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.963241][ T830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 68.968789][ T830] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 68.985787][ T830] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.994555][ T830] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 69.001659][ T830] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 69.004450][ T830] usb 6-1: Manufacturer: syz [ 69.010069][ T830] usb 6-1: config 0 descriptor?? [ 69.257718][ T830] rc_core: IR keymap rc-hauppauge not found [ 69.260801][ T830] Registered IR keymap rc-empty [ 69.263106][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.287865][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.310928][ T830] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 69.316655][ T830] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 69.326901][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.347769][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.367766][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.388036][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.409235][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.427720][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.447818][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.467805][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.487959][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.507837][ T830] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 69.530261][ T830] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 69.532955][ T830] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 69.540051][ T830] usb 6-1: USB disconnect, device number 2 [ 69.608485][ T5287] Bluetooth: hci1: command tx timeout [ 69.609436][ T5941] Bluetooth: hci3: command tx timeout [ 69.609543][ T5942] Bluetooth: hci2: command tx timeout [ 69.786782][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 69.967727][ T6208] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.190233][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 70.456801][ T6262] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.536307][ T6268] program syz.2.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.611988][ T6280] Cannot find set identified by id 0 to match [ 70.620807][ T6284] XFS (loop0): SB validate failed with error -5. [ 70.663011][ T6289] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 70.665737][ T6295] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 70.686634][ T6297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6297 comm=syz.1.77 [ 70.748690][ T6309] netlink: 76 bytes leftover after parsing attributes in process `syz.0.80'. [ 70.753910][ T6313] qrtr: Invalid version 0 [ 70.820673][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 70.823586][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 70.833911][ T155] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.837364][ T155] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.842597][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 70.845755][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 70.851287][ T155] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.855703][ T155] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.019349][ T6343] bridge_slave_1: left allmulticast mode [ 71.022608][ T6343] bridge_slave_1: left promiscuous mode [ 71.026591][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.035774][ T6343] bridge_slave_0: left allmulticast mode [ 71.039646][ T6343] bridge_slave_0: left promiscuous mode [ 71.042137][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.058430][ T40] kauditd_printk_skb: 13143 callbacks suppressed [ 71.058448][ T40] audit: type=1400 audit(1772566007.715:22770): avc: denied { map } for pid=6346 comm="syz.2.90" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.066849][ T6348] tmpfs: Bad value for 'mpol' [ 71.072996][ T40] audit: type=1400 audit(1772566007.715:22771): avc: denied { write execute } for pid=6346 comm="syz.2.90" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.088270][ T40] audit: type=1400 audit(1772566007.735:22772): avc: denied { map } for pid=6342 comm="syz.1.88" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.135045][ T40] audit: type=1400 audit(1772566007.785:22773): avc: denied { name_bind } for pid=6352 comm="syz.3.92" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 71.171689][ T40] audit: type=1400 audit(1772566007.825:22774): avc: denied { write } for pid=6349 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.179188][ T40] audit: type=1400 audit(1772566007.835:22775): avc: denied { ioctl } for pid=6342 comm="syz.1.88" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.398949][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 71.507457][ T40] audit: type=1400 audit(1772566008.155:22776): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 71.608697][ T40] audit: type=1400 audit(1772566008.255:22777): avc: denied { map } for pid=6379 comm="syz.1.99" path="socket:[12568]" dev="sockfs" ino=12568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 71.727773][ T40] audit: type=1400 audit(1772566008.375:22778): avc: denied { read write } for pid=6420 comm="syz.0.104" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.741603][ T40] audit: type=1400 audit(1772566008.375:22779): avc: denied { open } for pid=6420 comm="syz.0.104" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 72.036015][ T6433] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.074805][ T6436] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 72.084047][ T6438] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 72.087477][ T6438] netlink: 96 bytes leftover after parsing attributes in process `syz.3.110'. [ 72.088972][ T6440] syz.0.106 (6440): drop_caches: 0 [ 72.092628][ T6438] netlink: 'syz.3.110': attribute type 8 has an invalid length. [ 72.095935][ T6438] netlink: 610 bytes leftover after parsing attributes in process `syz.3.110'. [ 72.099121][ T6438] netlink: 1 bytes leftover after parsing attributes in process `syz.3.110'. [ 72.819762][ T6490] syzkaller0: entered promiscuous mode [ 72.822309][ T6490] syzkaller0: entered allmulticast mode [ 73.014801][ T6494] capability: warning: `syz.2.122' uses deprecated v2 capabilities in a way that may be insecure [ 73.067469][ T6502] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.080906][ T6505] mmap: syz.1.126 (6505) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.087884][ T6501] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 73.091055][ T6501] overlayfs: overlapping lowerdir path [ 73.195538][ T6415] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.354567][ T6524] can0: slcan on ttyS3. [ 73.539002][ T6524] can0 (unregistered): slcan off ttyS3. [ 73.622983][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.625872][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.666772][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.674419][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.735246][ T6527] netlink: 'syz.0.133': attribute type 4 has an invalid length. [ 73.739821][ T6412] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.747851][ T6412] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.751357][ T6412] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.754737][ T6412] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.931762][ T6534] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.060426][ T6537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6537 comm=syz.2.137 [ 74.065673][ T6537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6537 comm=syz.2.137 [ 74.179423][ T6546] netlink: 'syz.0.141': attribute type 10 has an invalid length. [ 74.183422][ T6546] team0: Device vxcan1 is of different type [ 74.258791][ T6555] netlink: 76 bytes leftover after parsing attributes in process `syz.0.143'. [ 74.576806][ T6574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4637 sclass=netlink_route_socket pid=6574 comm=syz.0.148 [ 74.734051][ T6583] netlink: 36 bytes leftover after parsing attributes in process `syz.0.150'. [ 74.748277][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 74.971050][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 75.135789][ T6598] macvlan0: entered allmulticast mode [ 75.142901][ T6599] pim6reg: entered allmulticast mode [ 75.146403][ T6598] macvlan0 (unregistering): left allmulticast mode [ 75.197851][ T5941] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 75.314141][ T6608] atomic_op ffff88805a671998 conn xmit_atomic 0000000000000000 [ 75.335495][ T6611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.159'. [ 75.397339][ T6618] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.478634][ T6618] netlink: 3 bytes leftover after parsing attributes in process `syz.1.161'. [ 75.589685][ T6629] syz.3.165: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 75.597429][ T6629] CPU: 2 UID: 0 PID: 6629 Comm: syz.3.165 Not tainted syzkaller #0 PREEMPT(full) [ 75.597455][ T6629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.597466][ T6629] Call Trace: [ 75.597472][ T6629] [ 75.597479][ T6629] dump_stack_lvl+0x100/0x190 [ 75.597542][ T6629] warn_alloc.cold+0x95/0x1c1 [ 75.597572][ T6629] ? __pfx_warn_alloc+0x10/0x10 [ 75.597605][ T6629] ? kasan_save_stack+0x3f/0x50 [ 75.597652][ T6629] ? kasan_save_stack+0x30/0x50 [ 75.597675][ T6629] ? kasan_save_track+0x14/0x30 [ 75.597699][ T6629] ? xskq_create+0xfb/0x1d0 [ 75.597733][ T6629] __vmalloc_node_range_noprof+0x1252/0x1530 [ 75.597758][ T6629] ? xskq_create+0xfb/0x1d0 [ 75.597787][ T6629] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 75.597816][ T6629] ? xskq_create+0xfb/0x1d0 [ 75.597839][ T6629] vmalloc_user_noprof+0x9e/0xe0 [ 75.597857][ T6629] ? xskq_create+0xfb/0x1d0 [ 75.597880][ T6629] xskq_create+0xfb/0x1d0 [ 75.597904][ T6629] xsk_setsockopt+0x743/0xab0 [ 75.597929][ T6629] ? __pfx_xsk_setsockopt+0x10/0x10 [ 75.597951][ T6629] ? find_held_lock+0x2b/0x80 [ 75.597970][ T6629] ? __fget_files+0x215/0x3d0 [ 75.597990][ T6629] ? selinux_socket_setsockopt+0x6a/0x80 [ 75.598016][ T6629] ? __pfx_xsk_setsockopt+0x10/0x10 [ 75.598041][ T6629] do_sock_setsockopt+0xf3/0x1d0 [ 75.598067][ T6629] __sys_setsockopt+0x195/0x220 [ 75.598091][ T6629] __x64_sys_setsockopt+0xbd/0x160 [ 75.598105][ T6629] ? do_syscall_64+0x95/0xf80 [ 75.598124][ T6629] ? lockdep_hardirqs_on+0x78/0x100 [ 75.598144][ T6629] do_syscall_64+0x106/0xf80 [ 75.598160][ T6629] ? clear_bhb_loop+0x40/0x90 [ 75.598180][ T6629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.598198][ T6629] RIP: 0033:0x7f951f19c799 [ 75.598211][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.598226][ T6629] RSP: 002b:00007f951ffc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 75.598244][ T6629] RAX: ffffffffffffffda RBX: 00007f951f415fa0 RCX: 00007f951f19c799 [ 75.598256][ T6629] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 75.598266][ T6629] RBP: 00007f951f232bd9 R08: 0000000000000004 R09: 0000000000000000 [ 75.598276][ T6629] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.598285][ T6629] R13: 00007f951f416038 R14: 00007f951f415fa0 R15: 00007ffc3933f478 [ 75.598315][ T6629] [ 75.638302][ T6637] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 75.644339][ T6629] Mem-Info: [ 75.646275][ T6637] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 75.647385][ T6637] vhci_hcd vhci_hcd.0: Device attached [ 75.652430][ T6629] active_anon:8978 inactive_anon:30 isolated_anon:155 [ 75.652430][ T6629] active_file:10607 inactive_file:37727 isolated_file:0 [ 75.652430][ T6629] unevictable:3659 dirty:1732 writeback:0 [ 75.652430][ T6629] slab_reclaimable:8737 slab_unreclaimable:65817 [ 75.652430][ T6629] mapped:24559 shmem:2400 pagetables:3569 [ 75.652430][ T6629] sec_pagetables:302 bounce:0 [ 75.652430][ T6629] kernel_misc_reclaimable:0 [ 75.652430][ T6629] free:461603 free_pcp:16939 free_cma:0 [ 75.660052][ T6637] loop2: detected capacity change from 0 to 7 [ 75.673218][ T6633] netlink: 'syz.1.164': attribute type 3 has an invalid length. [ 75.677356][ T6629] Node 0 active_anon:42596kB inactive_anon:120kB active_file:41776kB inactive_file:150700kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98236kB dirty:6924kB writeback:0kB shmem:6064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13696kB pagetables:10388kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB [ 75.690395][ T5940] Dev loop2: unable to read RDB block 7 [ 75.693053][ T6629] Node 1 active_anon:12kB inactive_anon:0kB active_file:652kB inactive_file:208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:4012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 75.701878][ T5940] loop2: unable to read partition table [ 75.705975][ T6629] Node 0 [ 75.718574][ T5940] loop2: partition table beyond EOD, [ 75.722232][ T6629] DMA free:15252kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:88kB local_pcp:0kB free_cma:0kB [ 75.742338][ T5940] truncated [ 75.755215][ T6629] lowmem_reserve[]: [ 75.774376][ T6637] Dev loop2: unable to read RDB block 7 [ 75.775102][ T6629] 0 [ 75.775865][ T6637] loop2: unable to read partition table [ 75.778360][ T6629] 1231 [ 75.790082][ T6637] loop2: partition table beyond EOD, [ 75.791295][ T6629] 1231 [ 75.793483][ T6637] truncated [ 75.797979][ T6637] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 75.799834][ T6629] 1231 1231 [ 75.813204][ T6629] Node 0 DMA32 free:187172kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35860kB inactive_anon:120kB active_file:41776kB inactive_file:150700kB unevictable:3536kB writepending:6948kB zspages:0kB present:2080628kB managed:1260940kB mlocked:0kB bounce:0kB free_pcp:69680kB local_pcp:27468kB free_cma:0kB [ 75.827190][ T6629] lowmem_reserve[]: 0 0 0 0 0 [ 75.829605][ T6629] Node 1 Normal free:1643668kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:652kB inactive_file:208kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:6324kB local_pcp:788kB free_cma:0kB [ 75.843968][ T6629] lowmem_reserve[]: 0 0 0 0 0 [ 75.846288][ T6629] Node 0 DMA: 7*4kB (U) 5*8kB (U) 7*16kB (U) 7*32kB (U) 6*64kB (U) 7*128kB (U) 5*256kB (U) 6*512kB (U) 5*1024kB (U) 2*2048kB (U) 0*4096kB = 15252kB [ 75.852974][ T6629] Node 0 DMA32: 617*4kB (UME) 141*8kB (UME) 641*16kB (UME) 590*32kB (UME) 421*64kB (UME) 175*128kB (UME) 96*256kB (UME) 77*512kB (UME) 40*1024kB (UM) 0*2048kB 0*4096kB = 187036kB [ 75.861484][ T6629] Node 1 Normal: 135*4kB (UME) 176*8kB (UME) 156*16kB (UE) 230*32kB (UE) 204*64kB (UE) 165*128kB (UME) 148*256kB (UE) 147*512kB (UME) 108*1024kB (UM) 15*2048kB (UME) 328*4096kB (UM) = 1643932kB [ 75.870723][ T6629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.874944][ T6629] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 75.879214][ T6629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.884448][ T6629] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 75.888997][ T6629] 50732 total pagecache pages [ 75.891316][ T6629] 0 pages in swap cache [ 75.893269][ T6629] Free swap = 124996kB [ 75.895392][ T6629] Total swap = 124996kB [ 75.897376][ T6629] 1048443 pages RAM [ 75.899255][ T6629] 0 pages HighMem/MovableOnly [ 75.901401][ T6629] 283897 pages reserved [ 75.903376][ T6629] 0 pages cma reserved [ 75.928047][ T6001] usb 42-1: SetAddress Request (2) to port 0 [ 75.931669][ T6001] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 75.982221][ T6639] vhci_hcd: connection reset by peer [ 75.989975][ T6415] vhci_hcd vhci_hcd.2: stop threads [ 75.992088][ T6415] vhci_hcd vhci_hcd.2: release socket [ 75.994669][ T6415] vhci_hcd vhci_hcd.2: disconnect device [ 76.013828][ T6652] ======================================================= [ 76.013828][ T6652] WARNING: The mand mount option has been deprecated and [ 76.013828][ T6652] and is ignored by this kernel. Remove the mand [ 76.013828][ T6652] option from the mount to silence this warning. [ 76.013828][ T6652] ======================================================= [ 76.085425][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 76.085438][ T40] audit: type=1400 audit(1772566012.735:22865): avc: denied { mount } for pid=6655 comm="syz.1.171" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 76.101152][ T6656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6656 comm=syz.1.171 [ 76.105840][ T6656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2565 sclass=netlink_tcpdiag_socket pid=6656 comm=syz.1.171 [ 76.112603][ T6656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2580 sclass=netlink_tcpdiag_socket pid=6656 comm=syz.1.171 [ 76.119833][ T6656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=6656 comm=syz.1.171 [ 76.127861][ T6656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=6656 comm=syz.1.171 [ 76.133400][ T6656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2572 sclass=netlink_tcpdiag_socket pid=6656 comm=syz.1.171 [ 76.157101][ T6659] kvm: user requested TSC rate below hardware speed [ 76.164197][ T6659] kvm: user requested TSC rate below hardware speed [ 76.173944][ T40] audit: type=1400 audit(1772566012.825:22866): avc: denied { connect } for pid=6660 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.342938][ T40] audit: type=1400 audit(1772566012.995:22867): avc: denied { watch_reads } for pid=6665 comm="syz.3.173" path="/26" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.352095][ T40] audit: type=1400 audit(1772566012.995:22868): avc: denied { ioctl } for pid=6665 comm="syz.3.173" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.403694][ T6668] QAT: failed to copy from user cfg_data. [ 76.447770][ T830] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.482017][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.484891][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.605844][ T830] usb 6-1: Using ep0 maxpacket: 8 [ 76.610482][ T830] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 76.614117][ T830] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 76.622305][ T830] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 76.626433][ T830] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 76.632120][ T40] audit: type=1400 audit(1772566013.285:22869): avc: denied { shutdown } for pid=6686 comm="syz.3.179" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.640723][ T830] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 76.645596][ T830] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.663230][ T830] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.666293][ T830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.687923][ T40] audit: type=1400 audit(1772566013.345:22870): avc: denied { map_create } for pid=6695 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.688616][ T6694] tmpfs: Bad value for 'mpol' [ 76.704349][ T6694] __nla_validate_parse: 2 callbacks suppressed [ 76.704368][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 76.801819][ T40] audit: type=1400 audit(1772566013.455:22871): avc: denied { read } for pid=6700 comm="syz.2.183" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 76.812549][ T40] audit: type=1400 audit(1772566013.455:22872): avc: denied { open } for pid=6700 comm="syz.2.183" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 76.884697][ T830] usb 6-1: usb_control_msg returned -32 [ 76.886724][ T830] usbtmc 6-1:16.0: can't read capabilities [ 76.953009][ T40] audit: type=1400 audit(1772566013.605:22873): avc: denied { map } for pid=6714 comm="syz.0.188" path="socket:[12212]" dev="sockfs" ino=12212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.964999][ T40] audit: type=1400 audit(1772566013.605:22874): avc: denied { read } for pid=6714 comm="syz.0.188" path="socket:[12212]" dev="sockfs" ino=12212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.003039][ T6720] tipc: Started in network mode [ 77.005564][ T6720] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 77.010493][ T6720] tipc: Enabling of bearer rejected, failed to enable media [ 77.086712][ T6727] process 'syz.0.191' launched './file0' with NULL argv: empty string added [ 77.243224][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 77.246560][ T6731] usbtmc 6-1:16.0: Unable to send data, error -71 [ 77.250587][ T6731] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 77.273940][ T1462] usb 6-1: USB disconnect, device number 3 [ 77.348247][ T5972] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.497724][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 77.501086][ T5972] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.504326][ T5972] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.507768][ T5972] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.512212][ T5972] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.518180][ T5972] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.520895][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.735392][ T5972] usb 5-1: GET_CAPABILITIES returned 0 [ 77.737514][ T5972] usbtmc 5-1:16.0: can't read capabilities [ 77.890680][ T6741] overlayfs: failed to set uuid (58/file0, err=-1); falling back to uuid=null. [ 77.894995][ T6741] overlayfs: failed to verify upper root origin [ 77.936643][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.939956][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.943019][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.946448][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.949700][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.952863][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.956046][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.958959][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.964111][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.967751][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.971713][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.975449][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.979167][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.982911][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.990476][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 77.994225][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.065792][ T6745] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 78.070125][ T6745] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 78.137880][ T6754] netlink: 'syz.1.197': attribute type 1 has an invalid length. [ 78.165244][ T6754] bond1: entered promiscuous mode [ 78.167459][ T6754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.180213][ T6754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.183745][ T6754] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 78.189064][ T6754] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 78.195881][ T6754] bond1: (slave vti0): making interface the new active one [ 78.199826][ T6754] vti0: entered promiscuous mode [ 78.203963][ T6754] bond1: (slave vti0): Enslaving as an active interface with an up link [ 78.210457][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 78.213567][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 78.268676][ T6758] delete_channel: no stack [ 78.351898][ T6767] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 78.622187][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'. [ 78.626807][ T6791] netlink: 36 bytes leftover after parsing attributes in process `syz.2.210'. [ 78.725886][ T6803] fuse: Bad value for 'fd' [ 78.732338][ T6803] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.826489][ T6812] netlink: 9 bytes leftover after parsing attributes in process `syz.2.218'. [ 78.834069][ T6812] 0·: renamed from hsr0 (while UP) [ 78.839629][ T6812] 0·: entered allmulticast mode [ 78.841813][ T6812] hsr_slave_0: entered allmulticast mode [ 78.850753][ T6812] hsr_slave_1: entered allmulticast mode [ 78.853861][ T6812] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 79.128059][ T6833] fuse: Unknown parameter '000000000000000000070x0000000000000009' [ 79.307744][ T830] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 79.457744][ T830] usb 7-1: Using ep0 maxpacket: 8 [ 79.461692][ T830] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 79.465286][ T830] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.470666][ T830] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.475127][ T830] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.479863][ T830] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.485888][ T830] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.490562][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.709432][ T830] usb 7-1: GET_CAPABILITIES returned 0 [ 79.711939][ T830] usbtmc 7-1:16.0: can't read capabilities [ 79.816012][ T6859] x_tables: duplicate underflow at hook 2 [ 79.975517][ T6827] program syz.2.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.986766][ T5972] usb 7-1: USB disconnect, device number 2 [ 80.100700][ T1462] usb 5-1: USB disconnect, device number 3 [ 80.521947][ T6877] overlayfs: missing 'lowerdir' [ 81.038457][ T6001] usb 42-1: device descriptor read/8, error -110 [ 81.195636][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 81.195653][ T40] audit: type=1400 audit(1772566017.845:22899): avc: denied { read } for pid=6903 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.248737][ T40] audit: type=1400 audit(1772566017.895:22900): avc: denied { getopt } for pid=6903 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.438211][ T6001] usb usb42-port1: attempt power cycle [ 81.915262][ T40] audit: type=1400 audit(1772566018.565:22901): avc: denied { append } for pid=6921 comm="syz.1.249" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.999662][ T6001] usb usb42-port1: unable to enumerate USB device [ 82.192405][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.195518][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.209830][ T6939] bridge0: entered allmulticast mode [ 82.211565][ T6940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.254'. [ 82.233072][ T6942] x_tables: duplicate underflow at hook 2 [ 82.314463][ T5941] Bluetooth: hci0: unexpected event for opcode 0x042c [ 82.386859][ T40] audit: type=1400 audit(1772566019.035:22902): avc: denied { read } for pid=6953 comm="syz.3.260" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.403154][ T40] audit: type=1400 audit(1772566019.035:22903): avc: denied { open } for pid=6953 comm="syz.3.260" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.413583][ T40] audit: type=1400 audit(1772566019.045:22904): avc: denied { ioctl } for pid=6953 comm="syz.3.260" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.472412][ T40] audit: type=1400 audit(1772566019.125:22905): avc: denied { mount } for pid=6959 comm="syz.0.261" name="/" dev="ramfs" ino=13231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.482916][ T6960] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.485484][ T6960] overlayfs: failed to set xattr on upper [ 82.487476][ T6960] overlayfs: ...falling back to redirect_dir=nofollow. [ 82.490721][ T40] audit: type=1400 audit(1772566019.135:22906): avc: denied { mounton } for pid=6959 comm="syz.0.261" path="/file0" dev="ramfs" ino=13232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 82.493893][ T6960] overlayfs: ...falling back to index=off. [ 82.525303][ T6960] overlayfs: ...falling back to uuid=null. [ 82.536473][ T6961] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 82.627013][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 82.635715][ T6972] openvswitch: netlink: Flow actions attr not present in new flow. [ 82.644593][ T6975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.262'. [ 82.725878][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 82.729589][ T40] audit: type=1400 audit(1772566019.375:22907): avc: denied { create } for pid=6965 comm="syz.1.262" name="#a" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.760204][ T40] audit: type=1400 audit(1772566019.375:22908): avc: denied { link } for pid=6965 comm="syz.1.262" name="#a" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.899697][ T6993] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 83.075016][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'. [ 83.088712][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.273'. [ 83.094428][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 83.234457][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.242143][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.300186][ T6412] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.304550][ T6412] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.313968][ T6412] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.319275][ T6412] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.529083][ T7036] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 83.588126][ T830] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 83.716299][ T7049] macsec0: entered promiscuous mode [ 83.720381][ T7049] macsec0: entered allmulticast mode [ 83.722582][ T7049] veth1_macvtap: entered allmulticast mode [ 83.739017][ T830] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.742180][ T830] usb 7-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 83.744892][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.749915][ T830] usb 7-1: config 0 descriptor?? [ 83.756755][ T830] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 83.961393][ T10] usb 7-1: USB disconnect, device number 3 [ 83.977786][ T5972] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.139292][ T5972] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.142524][ T5972] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.145915][ T5972] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.152478][ T5972] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 84.155861][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 84.159370][ T5972] usb 5-1: Product: syz [ 84.160941][ T5972] usb 5-1: Manufacturer: syz [ 84.162634][ T5972] usb 5-1: SerialNumber: syz [ 84.373057][ T5972] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 84.535825][ T7065] overlayfs: missing 'workdir' [ 84.574213][ T5972] usb 5-1: USB disconnect, device number 4 [ 84.579571][ T5972] usblp0: removed [ 84.627730][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 84.736740][ T7072] TCP: TCP_TX_DELAY enabled [ 84.757728][ T34] usb 6-1: device descriptor read/64, error -71 [ 85.002840][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 85.127723][ T34] usb 6-1: device descriptor read/64, error -71 [ 85.129048][ T7075] netlink: 48 bytes leftover after parsing attributes in process `syz.0.291'. [ 85.135211][ T7075] netlink: 48 bytes leftover after parsing attributes in process `syz.0.291'. [ 85.238201][ T34] usb usb6-port1: attempt power cycle [ 85.346342][ T7080] xt_nfacct: accounting object `syz0' does not exist [ 85.539295][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.297'. [ 85.544014][ T7094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7094 comm=syz.0.297 [ 85.597809][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.610292][ T7098] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 85.628851][ T34] usb 6-1: device descriptor read/8, error -71 [ 85.830872][ T7123] overlayfs: maximum fs stacking depth exceeded [ 85.877716][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.908183][ T34] usb 6-1: device descriptor read/8, error -71 [ 85.913148][ T7129] netlink: 'syz.0.306': attribute type 6 has an invalid length. [ 85.939381][ T7131] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 85.943884][ T7131] SELinux: failed to load policy [ 85.951357][ T7131] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 85.955401][ T7131] SELinux: failed to load policy [ 86.024905][ T34] usb usb6-port1: unable to enumerate USB device [ 86.080752][ T7144] Cannot find del_set index 1 as target [ 86.353084][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 86.353104][ T40] audit: type=1400 audit(1772566023.005:22931): avc: denied { accept } for pid=7158 comm="syz.2.315" lport=50178 faddr=::ffff:172.20.255.187 fport=19998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.364439][ T40] audit: type=1400 audit(1772566023.015:22932): avc: denied { setopt } for pid=7158 comm="syz.2.315" lport=50178 faddr=::ffff:172.20.255.187 fport=19998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 86.373676][ T40] audit: type=1400 audit(1772566023.015:22933): avc: denied { write } for pid=7158 comm="syz.2.315" path="socket:[16131]" dev="sockfs" ino=16131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 86.680424][ T7171] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 86.698118][ T7171] CIFS mount error: No usable UNC path provided in device string! [ 86.698118][ T7171] [ 86.702215][ T7171] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 86.704479][ T7173] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 86.733970][ T29] cfg80211: failed to load regulatory.db [ 86.768444][ T7173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.806407][ T7175] bond2: (slave veth3): Enslaving as an active interface with a down link [ 86.817602][ T7173] bond2: (slave dummy0): making interface the new active one [ 86.823276][ T7173] dummy0: entered promiscuous mode [ 86.825368][ T7173] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 86.833046][ T7173] netlink: 'syz.2.320': attribute type 10 has an invalid length. [ 86.841159][ T7173] bond2: (slave dummy0): Releasing active interface [ 86.881610][ T40] audit: type=1400 audit(1772566023.535:22934): avc: denied { append } for pid=7178 comm="syz.3.321" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.980348][ T40] audit: type=1400 audit(1772566023.635:22935): avc: denied { setopt } for pid=7186 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.988963][ T40] audit: type=1400 audit(1772566023.635:22936): avc: denied { getopt } for pid=7186 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.034782][ T7195] F2FS-fs: Conflicting test_dummy_encryption options [ 87.114871][ T7205] hugetlbfs: Bad value '$' for mount option 'size' [ 87.114871][ T7205] [ 87.118375][ T40] audit: type=1400 audit(1772566023.765:22937): avc: denied { remount } for pid=7204 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 87.185562][ T7213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52290 sclass=netlink_route_socket pid=7213 comm=syz.2.330 [ 87.194984][ T7213] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 87.234457][ T7216] __nla_validate_parse: 2 callbacks suppressed [ 87.234474][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 87.242466][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 87.293552][ T7219] ocfs2: Unknown parameter '¢¡s5B²-–®°V¡pÊðáÌ' [ 87.356224][ T7225] ipvlan1: entered allmulticast mode [ 87.359263][ T7225] veth0_vlan: entered allmulticast mode [ 87.428721][ T40] audit: type=1400 audit(1772566024.085:22938): avc: denied { write } for pid=7228 comm="syz.3.334" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 87.444814][ T7229] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 87.451370][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 87.461589][ T40] audit: type=1400 audit(1772566024.115:22939): avc: denied { read } for pid=7234 comm="syz.0.336" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 87.464689][ T7229] cramfs: wrong magic [ 87.610812][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.616037][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.622416][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.627059][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.633366][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.638269][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.645752][ T10] usb 7-1: config 0 descriptor?? [ 87.668460][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.340'. [ 87.853711][ T40] audit: type=1400 audit(1772566024.505:22940): avc: denied { add_name } for pid=7256 comm="syz.3.341" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.043437][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 88.047349][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 88.053831][ T7262] 9pnet_fd: p9_fd_create_tcp (7262): problem binding to privport [ 88.095688][ T7264] program syz.1.345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.162866][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 88.243396][ T7266] netlink: 36 bytes leftover after parsing attributes in process `syz.3.342'. [ 88.248501][ T5972] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 88.266650][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 88.272069][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.330'. [ 88.280838][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 88.283719][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 88.294785][ T10] usb 7-1: USB disconnect, device number 4 [ 88.296285][ T7278] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 88.344710][ T7278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.353341][ T7285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.349'. [ 88.369188][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.503009][ T7303] vivid-002: disconnect [ 88.505775][ T7302] vivid-002: reconnect [ 89.251963][ T7307] program syz.2.358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.261685][ T7312] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 89.286919][ T7309] gtp0: entered promiscuous mode [ 89.289197][ T7309] gtp0: entered allmulticast mode [ 89.292035][ T7309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7309 comm=syz.0.356 [ 89.339716][ T7319] Bluetooth: MGMT ver 1.23 [ 89.404890][ T7323] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 89.646551][ T7346] 9pnet_fd: p9_fd_create_unix (7346): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 89.692644][ T7349] MINIX-fs: blocksize too small for device [ 89.737560][ T7349] netlink: 'syz.2.371': attribute type 2 has an invalid length. [ 89.783465][ T7353] openvswitch: netlink: IP tunnel dst address not specified [ 89.884672][ T7359] wg1: entered promiscuous mode [ 89.886522][ T7359] wg1: entered allmulticast mode [ 90.222334][ T7379] input: syz0 as /devices/virtual/input/input10 [ 90.323247][ T7380] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 90.327151][ T7380] block device autoloading is deprecated and will be removed. [ 90.402440][ T7384] qnx4: no qnx4 filesystem (no root dir). [ 90.424442][ T7386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.429011][ T7386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.432995][ T7386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.436422][ T7386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.634920][ T7409] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 90.640692][ T7409] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 90.773140][ T7426] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 91.039041][ T6021] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 91.199402][ T6021] usb 7-1: Using ep0 maxpacket: 8 [ 91.209336][ T6021] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 91.213799][ T7470] xt_time: unknown flags 0xf4 [ 91.215565][ T6021] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.220154][ T6021] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.227426][ T6021] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.233635][ T6021] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.240594][ T6021] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.247318][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.300507][ T7477] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 91.467341][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.471792][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.475003][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.480239][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.484068][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.488301][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.493896][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.500488][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.508690][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.516206][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.534900][ T7425] usb usb8: usbfs: process 7425 (syz.2.394) did not claim interface 0 before use [ 91.549662][ T6021] usb 7-1: GET_CAPABILITIES returned 0 [ 91.553139][ T6021] usbtmc 7-1:16.0: can't read capabilities [ 91.580324][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 91.580340][ T40] audit: type=1800 audit(1772566028.235:22964): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.411" name="file1" dev="tmpfs" ino=488 res=0 errno=0 [ 91.673469][ T7520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7520 comm=syz.3.415 [ 91.694693][ T7522] syz.1.416: attempt to access beyond end of device [ 91.694693][ T7522] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 91.702002][ T7522] gfs2: error -5 reading superblock [ 91.753395][ T7529] netlink: 'syz.1.418': attribute type 8 has an invalid length. [ 91.755418][ T54] usb 7-1: USB disconnect, device number 5 [ 91.782000][ T7532] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 91.790933][ T40] audit: type=1400 audit(1772566028.445:22965): avc: denied { listen } for pid=7528 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.870026][ T40] audit: type=1326 audit(1772566028.525:22966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f19c799 code=0x50000 [ 91.879831][ T40] audit: type=1326 audit(1772566028.525:22967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f19c799 code=0x50000 [ 91.889343][ T40] audit: type=1326 audit(1772566028.525:22968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f19c799 code=0x50000 [ 91.898998][ T40] audit: type=1326 audit(1772566028.525:22969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f19c799 code=0x50000 [ 91.908603][ T40] audit: type=1326 audit(1772566028.525:22970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f19c799 code=0x50000 [ 91.916023][ T40] audit: type=1326 audit(1772566028.525:22971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f19c799 code=0x50000 [ 91.928623][ T40] audit: type=1326 audit(1772566028.525:22972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f19c799 code=0x50000 [ 91.939763][ T40] audit: type=1326 audit(1772566028.525:22973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.3.422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f19c799 code=0x50000 [ 92.147898][ T54] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 92.319094][ T54] usb 5-1: config 0 has no interfaces? [ 92.323350][ T54] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 92.327186][ T54] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 92.330782][ T54] usb 5-1: Product: syz [ 92.332676][ T54] usb 5-1: Manufacturer: syz [ 92.334953][ T54] usb 5-1: SerialNumber: syz [ 92.340091][ T54] usb 5-1: config 0 descriptor?? [ 92.603232][ T6001] libceph: connect (1)[c::]:6789 error -101 [ 92.606408][ T6001] libceph: mon0 (1)[c::]:6789 connect error [ 92.612111][ T54] usb 5-1: USB disconnect, device number 5 [ 92.696463][ T7568] ceph: No mds server is up or the cluster is laggy [ 92.810599][ T7571] netem: change failed [ 92.913993][ T7578] __nla_validate_parse: 14 callbacks suppressed [ 92.914008][ T7578] netlink: 104 bytes leftover after parsing attributes in process `syz.2.433'. [ 93.733529][ T7587] input: syz0 as /devices/virtual/input/input11 [ 93.871429][ T7595] netlink: 'syz.2.438': attribute type 4 has an invalid length. [ 93.877937][ T7595] libceph: resolve '0' (ret=-3): failed [ 94.079488][ T7613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7613 comm=syz.2.444 [ 94.084267][ T7613] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 94.089562][ T7613] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 94.092433][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.444'. [ 94.200150][ T7623] netlink: 'syz.2.447': attribute type 10 has an invalid length. [ 94.212108][ T7623] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 94.403838][ T7635] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 94.527796][ T6001] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 94.535038][ T7642] xt_TPROXY: Can be used only with -p tcp or -p udp [ 94.679975][ T6001] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.685570][ T6001] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.696564][ T6001] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.701320][ T6001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.709711][ T7633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.721192][ T6001] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.800425][ T7655] netlink: 56 bytes leftover after parsing attributes in process `syz.1.458'. [ 94.911570][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 94.924528][ T6001] usb 7-1: USB disconnect, device number 6 [ 95.079375][ T7679] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 95.098904][ T7679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.117519][ T7675] bond1: (slave geneve2): Opening slave failed [ 95.128070][ T7633] tmpfs: Unknown parameter 'nr]inodes' [ 95.246093][ T7688] netlink: 'syz.1.465': attribute type 9 has an invalid length. [ 95.250098][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 95.311096][ T7690] Failed to initialize the IGMP autojoin socket (err -2) [ 95.539959][ T7706] binder: 7705:7706 ioctl 5301 0 returned -22 [ 95.550865][ T7706] binder: 7705:7706 ioctl c0106426 200000000240 returned -22 [ 95.554276][ T7706] binder: 7705:7706 ioctl c010641d 200000000340 returned -22 [ 95.689587][ T7710] gfs2: gfs2 mount does not exist [ 95.776451][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 95.780525][ T7718] netlink: 48 bytes leftover after parsing attributes in process `syz.1.475'. [ 95.784630][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 95.855865][ T7725] overlayfs: conflicting options: userxattr,metacopy=on [ 95.902099][ T7728] SELinux: failed to load policy [ 95.919878][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'. [ 95.959169][ T5972] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 95.975897][ T7739] capability: warning: `syz.0.483' uses 32-bit capabilities (legacy support in use) [ 96.035975][ T7747] can0: slcan on ttynull. [ 96.046293][ T7747] netlink: 'syz.0.486': attribute type 2 has an invalid length. [ 96.054651][ T7747] : entered promiscuous mode [ 96.081883][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 96.109320][ T5972] usb 7-1: Using ep0 maxpacket: 32 [ 96.123839][ T5972] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.126718][ T5972] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.131863][ T5972] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 96.135150][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.138891][ T7762] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 96.139006][ T5972] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.141481][ T7746] can0 (unregistered): slcan off ttynull. [ 96.143228][ T7762] syz.1.490: vmalloc error: size 4183572480, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 96.151974][ T5972] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.155805][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.1.490 Not tainted syzkaller #0 PREEMPT(full) [ 96.155824][ T7762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.155831][ T7762] Call Trace: [ 96.155837][ T7762] [ 96.155843][ T7762] dump_stack_lvl+0x100/0x190 [ 96.155879][ T7762] warn_alloc.cold+0x95/0x1c1 [ 96.155902][ T7762] ? __pfx_warn_alloc+0x10/0x10 [ 96.155919][ T7762] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 96.155946][ T7762] ? lockdep_hardirqs_on+0x78/0x100 [ 96.155958][ T7762] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 96.155981][ T7762] ? kasan_save_stack+0x3f/0x50 [ 96.155999][ T7762] ? kasan_save_stack+0x30/0x50 [ 96.156016][ T7762] ? kasan_save_track+0x14/0x30 [ 96.156035][ T7762] ? vb2_vmalloc_alloc+0x135/0x410 [ 96.156059][ T7762] __vmalloc_node_range_noprof+0x1252/0x1530 [ 96.156073][ T7762] ? __x64_sys_ioctl+0x18e/0x210 [ 96.156090][ T7762] ? do_syscall_64+0x106/0xf80 [ 96.156103][ T7762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.156119][ T7762] ? vb2_vmalloc_alloc+0x135/0x410 [ 96.156140][ T7762] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 96.156161][ T7762] ? vb2_vmalloc_alloc+0x135/0x410 [ 96.156178][ T7762] vmalloc_user_noprof+0x9e/0xe0 [ 96.156192][ T7762] ? vb2_vmalloc_alloc+0x135/0x410 [ 96.156210][ T7762] vb2_vmalloc_alloc+0x135/0x410 [ 96.156226][ T7762] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 96.156243][ T7762] __vb2_queue_alloc+0x8d5/0x1160 [ 96.156267][ T7762] vb2_core_create_bufs+0x5fa/0xa30 [ 96.156285][ T7762] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 96.156303][ T7762] ? lock_acquire+0x1cf/0x380 [ 96.156325][ T7762] vb2_create_bufs+0x40c/0x830 [ 96.156341][ T7762] ? __pfx_vb2_create_bufs+0x10/0x10 [ 96.156353][ T7762] ? __video_do_ioctl+0x43e/0xdc0 [ 96.156366][ T7762] ? v4l_sanitize_colorspace+0x220/0x410 [ 96.156384][ T7762] vb2_ioctl_create_bufs+0x244/0x3e0 [ 96.156399][ T7762] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.156416][ T7762] vidioc_create_bufs+0x7d/0xf0 [ 96.156435][ T7762] v4l_create_bufs+0x17d/0x270 [ 96.156455][ T7762] __video_do_ioctl+0xaf8/0xdc0 [ 96.156469][ T7762] ? __might_fault+0xc5/0x140 [ 96.156484][ T7762] ? __pfx___video_do_ioctl+0x10/0x10 [ 96.156502][ T7762] video_usercopy+0x47a/0x1740 [ 96.156515][ T7762] ? __pfx___video_do_ioctl+0x10/0x10 [ 96.156528][ T7762] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 96.156552][ T7762] ? __pfx_video_usercopy+0x10/0x10 [ 96.156576][ T7762] v4l2_ioctl+0x1bd/0x250 [ 96.156589][ T7762] ? __pfx_v4l2_ioctl+0x10/0x10 [ 96.156604][ T7762] __x64_sys_ioctl+0x18e/0x210 [ 96.156624][ T7762] do_syscall_64+0x106/0xf80 [ 96.156636][ T7762] ? clear_bhb_loop+0x40/0x90 [ 96.156652][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.156666][ T7762] RIP: 0033:0x7f32aad9c799 [ 96.156677][ T7762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.156688][ T7762] RSP: 002b:00007f32abca0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.156699][ T7762] RAX: ffffffffffffffda RBX: 00007f32ab015fa0 RCX: 00007f32aad9c799 [ 96.156707][ T7762] RDX: 0000200000000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 96.156713][ T7762] RBP: 00007f32aae32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 96.156720][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.156727][ T7762] R13: 00007f32ab016038 R14: 00007f32ab015fa0 R15: 00007fff45097538 [ 96.156742][ T7762] [ 96.156746][ T7762] Mem-Info: [ 96.169102][ T5972] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 96.169675][ T7762] active_anon:6955 inactive_anon:4170 isolated_anon:0 [ 96.169675][ T7762] active_file:4039 inactive_file:11771 isolated_file:0 [ 96.169675][ T7762] unevictable:1797 dirty:23 writeback:0 [ 96.169675][ T7762] slab_reclaimable:7868 slab_unreclaimable:67500 [ 96.169675][ T7762] mapped:24812 shmem:4463 pagetables:3664 [ 96.169675][ T7762] sec_pagetables:305 bounce:0 [ 96.169675][ T7762] kernel_misc_reclaimable:0 [ 96.169675][ T7762] free:489651 free_pcp:18044 free_cma:0 [ 96.171335][ T5972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.172930][ T7762] Node 0 active_anon:23712kB inactive_anon:16680kB active_file:15496kB inactive_file:46876kB unevictable:3652kB isolated(anon):0kB isolated(file):0kB mapped:99248kB dirty:92kB writeback:0kB shmem:10220kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13792kB pagetables:10644kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 96.184123][ T5972] usb 7-1: config 0 descriptor?? [ 96.185136][ T7762] Node 1 active_anon:4108kB inactive_anon:0kB active_file:660kB inactive_file:208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:7632kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:4012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 96.335158][ T7762] Node 0 DMA free:11092kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:0kB free_cma:0kB [ 96.347028][ T7762] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 96.349341][ T7762] Node 0 DMA32 free:299244kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29784kB inactive_anon:16680kB active_file:15496kB inactive_file:46876kB unevictable:3652kB writepending:92kB zspages:0kB present:2080628kB managed:1260940kB mlocked:116kB bounce:0kB free_pcp:63732kB local_pcp:13268kB free_cma:0kB [ 96.361052][ T7762] lowmem_reserve[]: 0 0 0 0 0 [ 96.362688][ T7762] Node 1 Normal free:1645004kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4108kB inactive_anon:0kB active_file:660kB inactive_file:208kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:704kB local_pcp:100kB free_cma:0kB [ 96.373929][ T7762] lowmem_reserve[]: 0 0 0 0 0 [ 96.375606][ T7762] Node 0 DMA: 7*4kB (U) 7*8kB (U) 5*16kB (U) 6*32kB (U) 4*64kB (U) 6*128kB (U) 4*256kB (U) 5*512kB (U) 4*1024kB (U) 1*2048kB (U) 0*4096kB = 11108kB [ 96.381771][ T7762] Node 0 DMA32: 1322*4kB (U) 226*8kB (U) 417*16kB (UME) 263*32kB (UME) 584*64kB (UME) 216*128kB (UME) 146*256kB (UM) 131*512kB (UM) 67*1024kB (UM) 2*2048kB (U) 8*4096kB (U) = 297128kB [ 96.388457][ T7762] Node 1 Normal: 219*4kB (UME) 206*8kB (UME) 185*16kB (UME) 225*32kB (UME) 207*64kB (UME) 173*128kB (UME) 156*256kB (UME) 139*512kB (UME) 111*1024kB (UM) 16*2048kB (UME) 327*4096kB (UM) = 1645004kB [ 96.391670][ T5972] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 96.395312][ T7762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.402231][ T7762] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 96.405226][ T7762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.408913][ T7762] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 96.412305][ T7762] 23103 total pagecache pages [ 96.413911][ T7762] 13 pages in swap cache [ 96.415369][ T7762] Free swap = 124996kB [ 96.416804][ T7762] Total swap = 124996kB [ 96.418594][ T7762] 1048443 pages RAM [ 96.419930][ T7762] 0 pages HighMem/MovableOnly [ 96.421528][ T7762] 283897 pages reserved [ 96.422978][ T7762] 0 pages cma reserved [ 96.466477][ T7786] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.594233][ C1] usblp0: nonzero read bulk status received: -71 [ 96.602228][ T5972] usb 7-1: USB disconnect, device number 7 [ 96.631615][ T7795] Failed to initialize the IGMP autojoin socket (err -2) [ 96.730462][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41242 sclass=netlink_route_socket pid=7795 comm=syz.1.496 [ 96.734971][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41242 sclass=netlink_route_socket pid=7795 comm=syz.1.496 [ 96.739849][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41242 sclass=netlink_route_socket pid=7795 comm=syz.1.496 [ 96.744616][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41242 sclass=netlink_route_socket pid=7795 comm=syz.1.496 [ 96.750199][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41242 sclass=netlink_route_socket pid=7795 comm=syz.1.496 [ 96.754592][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41242 sclass=netlink_route_socket pid=7795 comm=syz.1.496 [ 96.758953][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41242 sclass=netlink_route_socket pid=7795 comm=syz.1.496 [ 96.763251][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41242 sclass=netlink_route_socket pid=7795 comm=syz.1.496 [ 96.767942][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41242 sclass=netlink_route_socket pid=7795 comm=syz.1.496 [ 96.772039][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41242 sclass=netlink_route_socket pid=7795 comm=syz.1.496 [ 96.810073][ T7714] Failed to initialize the IGMP autojoin socket (err -2) [ 96.888457][ T6001] hid-generic 0005:0006:5508.0002: hidraw1: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 96.917246][ T40] kauditd_printk_skb: 534 callbacks suppressed [ 96.917260][ T40] audit: type=1400 audit(1772566033.565:23508): avc: denied { watch } for pid=7802 comm="syz.1.498" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 96.946140][ T7713] usblp0: removed [ 96.949717][ T7805] program syz.1.499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.960723][ T7801] fido_id[7801]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 97.120685][ T7777] orangefs_mount: mount request failed with -4 [ 97.129751][ T7811] afs: Unknown parameter 'dayn' [ 97.174828][ T7816] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 97.351168][ T40] audit: type=1400 audit(1772566034.005:23509): avc: denied { accept } for pid=7822 comm="syz.3.507" path="socket:[21536]" dev="sockfs" ino=21536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.583820][ T40] audit: type=1400 audit(1772566034.235:23510): avc: denied { mount } for pid=7838 comm="syz.3.513" name="/" dev="pstore" ino=6132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 97.617824][ T5972] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 97.725091][ T7845] evm: overlay not supported [ 97.789294][ T7849] lo speed is unknown, defaulting to 1000 [ 97.792005][ T7849] lo speed is unknown, defaulting to 1000 [ 97.796802][ T7849] lo speed is unknown, defaulting to 1000 [ 97.807132][ T5972] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 97.813217][ T7849] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.814106][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.819061][ T7849] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 97.820073][ T5972] usb 6-1: Product: syz [ 97.823986][ T5972] usb 6-1: Manufacturer: syz [ 97.826148][ T5972] usb 6-1: SerialNumber: syz [ 97.842145][ T5972] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 97.869258][ T40] audit: type=1400 audit(1772566034.515:23511): avc: denied { firmware_load } for pid=54 comm="kworker/1:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 97.892738][ T7849] lo speed is unknown, defaulting to 1000 [ 97.898749][ T7849] lo speed is unknown, defaulting to 1000 [ 97.899339][ T54] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 97.903134][ T7849] lo speed is unknown, defaulting to 1000 [ 97.909175][ T7849] lo speed is unknown, defaulting to 1000 [ 98.072415][ T40] audit: type=1400 audit(1772566034.725:23512): avc: denied { getattr } for pid=7860 comm="syz.2.520" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.111501][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.119523][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.321912][ T7874] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 98.338227][ T7874] bond3: entered promiscuous mode [ 98.340433][ T7874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.351481][ T7874] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 98.362102][ T7874] Failed to initialize the IGMP autojoin socket (err -2) [ 98.463830][ T7874] __nla_validate_parse: 7 callbacks suppressed [ 98.463842][ T7874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.526'. [ 98.606536][ T7881] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.527'. [ 98.615944][ T7881] team0: Device gtp0 is of different type [ 98.683785][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.689877][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.697755][ T5972] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 98.770155][ T40] audit: type=1400 audit(1772566035.425:23513): avc: denied { append } for pid=7889 comm="syz.2.530" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 98.851565][ T5972] usb 8-1: Using ep0 maxpacket: 16 [ 98.856687][ T5972] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 98.859945][ T5972] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 98.862876][ T5972] usb 8-1: Product: syz [ 98.864855][ T5972] usb 8-1: Manufacturer: syz [ 98.866780][ T5972] usb 8-1: SerialNumber: syz [ 98.871718][ T7894] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.531'. [ 98.871771][ T5972] usb 8-1: config 0 descriptor?? [ 98.874938][ T7894] netlink: ct family unspecified [ 98.891923][ T7894] sp0: Synchronizing with TNC [ 98.905059][ T40] audit: type=1400 audit(1772566035.555:23514): avc: denied { getopt } for pid=7893 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.915236][ T7893] [U] è [ 98.930955][ T7899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.533'. [ 98.958744][ T54] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 98.962495][ T54] ath9k_htc: Failed to initialize the device [ 98.978956][ T7899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.533'. [ 98.982709][ T7899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.533'. [ 98.994550][ T54] usb 6-1: ath9k_htc: USB layer deinitialized [ 99.005584][ T6001] usb 6-1: USB disconnect, device number 8 [ 99.025765][ T40] audit: type=1400 audit(1772566035.675:23515): avc: denied { ioctl } for pid=7901 comm="syz.0.534" path="socket:[20742]" dev="sockfs" ino=20742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.083343][ T1462] usb 8-1: USB disconnect, device number 2 [ 99.138966][ T7912] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 99.142489][ T7911] [U] J"—E:ÀÆ" [ 99.225973][ T40] audit: type=1400 audit(1772566035.875:23516): avc: denied { setattr } for pid=7913 comm="syz.0.539" name="L2CAP" dev="sockfs" ino=20828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.267241][ T7926] netlink: 44 bytes leftover after parsing attributes in process `syz.2.541'. [ 99.275278][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.279134][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.394405][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 99.458175][ T40] audit: type=1400 audit(1772566036.115:23517): avc: denied { create } for pid=7941 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 99.495407][ T7946] fuse: Bad value for 'group_id' [ 99.497359][ T7946] fuse: Bad value for 'group_id' [ 99.530205][ T7951] syz.2.550 (7951) used obsolete PPPIOCDETACH ioctl [ 99.901462][ T7985] syzkaller1: entered promiscuous mode [ 99.904491][ T7985] syzkaller1: entered allmulticast mode [ 99.917802][ T1462] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.077769][ T1462] usb 5-1: Using ep0 maxpacket: 32 [ 100.081742][ T1462] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 100.083864][ T7996] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 100.084505][ T1462] usb 5-1: config 0 has no interface number 0 [ 100.090292][ T7999] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 100.092876][ T1462] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.096333][ T1462] usb 5-1: config 0 interface 85 has no altsetting 0 [ 100.103807][ T1462] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 100.107341][ T1462] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.110066][ T7996] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.113062][ T1462] usb 5-1: Product: syz [ 100.115132][ T1462] usb 5-1: Manufacturer: syz [ 100.117193][ T1462] usb 5-1: SerialNumber: syz [ 100.122532][ T1462] usb 5-1: config 0 descriptor?? [ 100.122853][ T7996] bond4: (slave gretap1): making interface the new active one [ 100.131028][ T7996] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 100.341386][ T8013] GUP no longer grows the stack in syz.2.566 (8013): 200000007000-20000000a000 (200000004000) [ 100.346307][ T8013] CPU: 1 UID: 0 PID: 8013 Comm: syz.2.566 Not tainted syzkaller #0 PREEMPT(full) [ 100.346330][ T8013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.346342][ T8013] Call Trace: [ 100.346350][ T8013] [ 100.346359][ T8013] dump_stack_lvl+0x100/0x190 [ 100.346389][ T8013] gup_vma_lookup.cold+0x83/0x96 [ 100.346416][ T8013] __get_user_pages+0x241/0x34d0 [ 100.346442][ T8013] ? xdp_umem_create+0x648/0x11e0 [ 100.346465][ T8013] ? xsk_setsockopt+0x7d8/0xab0 [ 100.346489][ T8013] ? do_sock_setsockopt+0xf3/0x1d0 [ 100.346509][ T8013] ? __pfx___get_user_pages+0x10/0x10 [ 100.346524][ T8013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.346549][ T8013] __gup_longterm_locked+0x279/0x16f0 [ 100.346568][ T8013] ? __lock_acquire+0x3c0/0x2630 [ 100.346601][ T8013] ? __pfx___gup_longterm_locked+0x10/0x10 [ 100.346643][ T8013] pin_user_pages+0x13c/0x160 [ 100.346662][ T8013] ? __pfx_pin_user_pages+0x10/0x10 [ 100.346680][ T8013] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 100.346707][ T8013] ? security_capset+0x270/0x270 [ 100.346735][ T8013] xdp_umem_create+0x723/0x11e0 [ 100.346767][ T8013] xsk_setsockopt+0x7d8/0xab0 [ 100.346791][ T8013] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.346813][ T8013] ? find_held_lock+0x2b/0x80 [ 100.346833][ T8013] ? __fget_files+0x215/0x3d0 [ 100.346854][ T8013] ? selinux_socket_setsockopt+0x6a/0x80 [ 100.346872][ T8013] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.346898][ T8013] do_sock_setsockopt+0xf3/0x1d0 [ 100.346922][ T8013] __sys_setsockopt+0x195/0x220 [ 100.346944][ T8013] __x64_sys_setsockopt+0xbd/0x160 [ 100.346959][ T8013] ? do_syscall_64+0x95/0xf80 [ 100.346977][ T8013] ? lockdep_hardirqs_on+0x78/0x100 [ 100.346995][ T8013] do_syscall_64+0x106/0xf80 [ 100.347011][ T8013] ? clear_bhb_loop+0x40/0x90 [ 100.347033][ T8013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.347050][ T8013] RIP: 0033:0x7f171179c799 [ 100.347066][ T8013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.347081][ T8013] RSP: 002b:00007f1712688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.347104][ T8013] RAX: ffffffffffffffda RBX: 00007f1711a15fa0 RCX: 00007f171179c799 [ 100.347115][ T8013] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 100.347125][ T8013] RBP: 00007f1711832bd9 R08: 0000000000000020 R09: 0000000000000000 [ 100.347135][ T8013] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 100.347144][ T8013] R13: 00007f1711a16038 R14: 00007f1711a15fa0 R15: 00007ffdfdb8bc08 [ 100.347169][ T8013] [ 100.509344][ T8020] netlink: 'syz.2.568': attribute type 2 has an invalid length. [ 100.609155][ T8025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.948280][ T8043] fuse: Unknown parameter 'f' [ 101.027512][ T8048] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 101.047199][ T8048] bond4: entered promiscuous mode [ 101.052943][ T8048] 8021q: adding VLAN 0 to HW filter on device bond4 [ 101.249554][ T8057] SELinux: failed to load policy [ 101.393985][ T8069] mkiss: ax0: crc mode is auto. [ 101.841489][ T8090] netlink: 'syz.2.589': attribute type 28 has an invalid length. [ 101.928369][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 101.928381][ T40] audit: type=1400 audit(1772566038.585:23533): avc: denied { connect } for pid=8102 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.124636][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.596'. [ 102.196570][ T8128] ------------[ cut here ]------------ [ 102.199102][ T8128] 1 [ 102.199111][ T8128] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#0: syz.1.597/8128 [ 102.207197][ T8128] Modules linked in: [ 102.209769][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT(full) [ 102.214058][ T8128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.219006][ T8128] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.222808][ T8128] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 34 93 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 102.232115][ T8128] RSP: 0018:ffffc9000695f760 EFLAGS: 00010246 [ 102.235155][ T8128] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 102.238961][ T8128] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000040cc0 [ 102.242720][ T8128] RBP: 000000000000000d R08: 0000000000000005 R09: 0000000000000009 [ 102.246553][ T8128] R10: 000000000000000d R11: 0000000000000000 R12: 0000000000040cc0 [ 102.250091][ T8128] R13: 1ffff92000d2bf3b R14: 000000000000000d R15: 1ffff92000d2bf05 [ 102.253510][ T8128] FS: 00007f32abca06c0(0000) GS:ffff8880d6345000(0000) knlGS:0000000000000000 [ 102.257373][ T8128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.260344][ T8128] CR2: 00007f32aad85dc0 CR3: 00000000443f4000 CR4: 0000000000352ef0 [ 102.263463][ T8128] Call Trace: [ 102.264780][ T8128] [ 102.265759][ T8128] ? find_held_lock+0x2b/0x80 [ 102.267286][ T8128] ? is_bpf_text_address+0x8a/0x1a0 [ 102.269016][ T8128] ? is_bpf_text_address+0x8a/0x1a0 [ 102.270669][ T8128] ? bpf_ksym_find+0x128/0x1c0 [ 102.272399][ T8128] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.274893][ T8128] ? is_bpf_text_address+0x94/0x1a0 [ 102.276827][ T8128] ? kernel_text_address+0x8d/0x100 [ 102.278569][ T8128] ? __kernel_text_address+0xd/0x30 [ 102.280200][ T8128] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.282186][ T8128] ? arch_stack_walk+0xa6/0xf0 [ 102.283765][ T8128] ? stack_trace_save+0x8e/0xc0 [ 102.285351][ T8128] ? __pfx_stack_trace_save+0x10/0x10 [ 102.287257][ T8128] ? stack_depot_save_flags+0x27/0x9d0 [ 102.289294][ T8128] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.291296][ T8128] ? policy_nodemask+0xed/0x4f0 [ 102.292253][ T8120] kvm_intel: kvm [8118]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xae09 [ 102.292971][ T8128] alloc_pages_mpol+0x1fb/0x550 [ 102.297440][ T8128] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 102.299246][ T8128] ? drm_syncobj_array_find+0x34/0x3b0 [ 102.301469][ T8128] ___kmalloc_large_node+0x104/0x150 [ 102.303415][ T8128] __kmalloc_large_node_noprof+0x1c/0x70 [ 102.305526][ T8128] __kmalloc_noprof+0x5be/0x850 [ 102.305803][ T8120] kvm: kvm [8118]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xcc04 [ 102.307316][ T8128] drm_syncobj_array_find+0x34/0x3b0 [ 102.312208][ T8128] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 102.314311][ T8128] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 102.316780][ T8128] ? drm_dev_exit+0x41/0x60 [ 102.318595][ T8128] ? drm_dev_exit+0x41/0x60 [ 102.320175][ T8128] drm_ioctl_kernel+0x1f3/0x3e0 [ 102.321249][ T8120] kvm: kvm [8118]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x442a [ 102.321839][ T8128] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 102.327730][ T8128] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 102.329582][ T8128] drm_ioctl+0x5e6/0xc60 [ 102.331159][ T8128] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 102.333620][ T8128] ? __pfx_drm_ioctl+0x10/0x10 [ 102.335263][ T8128] ? selinux_file_ioctl+0x139/0x290 [ 102.337059][ T8128] ? selinux_file_ioctl+0xb4/0x290 [ 102.338891][ T8128] ? __pfx_drm_ioctl+0x10/0x10 [ 102.340904][ T8128] __x64_sys_ioctl+0x18e/0x210 [ 102.342587][ T8128] do_syscall_64+0x106/0xf80 [ 102.344358][ T8128] ? clear_bhb_loop+0x40/0x90 [ 102.346060][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.348175][ T8128] RIP: 0033:0x7f32aad9c799 [ 102.349689][ T8128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.355914][ T8128] RSP: 002b:00007f32abca0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.359007][ T8128] RAX: ffffffffffffffda RBX: 00007f32ab015fa0 RCX: 00007f32aad9c799 [ 102.361957][ T8128] RDX: 0000200000000100 RSI: 00000000c01864cd RDI: 0000000000000005 [ 102.364601][ T8128] RBP: 00007f32aae32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 102.367265][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.370010][ T8128] R13: 00007f32ab016038 R14: 00007f32ab015fa0 R15: 00007fff45097538 [ 102.372654][ T8128] [ 102.373703][ T8128] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.376194][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT(full) [ 102.379376][ T8128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.382935][ T8128] Call Trace: [ 102.384079][ T8128] [ 102.385112][ T8128] dump_stack_lvl+0x100/0x190 [ 102.386662][ T8128] vpanic+0x552/0x970 [ 102.387928][ T8128] ? __pfx_vpanic+0x10/0x10 [ 102.389367][ T8128] panic+0xd1/0xe0 [ 102.390552][ T8128] ? __pfx_panic+0x10/0x10 [ 102.391996][ T8128] ? check_panic_on_warn+0x1f/0x90 [ 102.393569][ T8128] check_panic_on_warn.cold+0x19/0x34 [ 102.395279][ T8128] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.397303][ T8128] __warn.cold+0x191/0x348 [ 102.398748][ T8128] __report_bug+0x296/0x3d0 [ 102.400200][ T8128] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.402191][ T8128] ? __pfx___report_bug+0x10/0x10 [ 102.403918][ T8128] ? __lock_acquire+0x4a5/0x2630 [ 102.405672][ T8128] ? __lock_acquire+0x4a5/0x2630 [ 102.407310][ T8128] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.409315][ T8128] report_bug+0xb2/0x220 [ 102.410604][ T8128] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.412560][ T8128] handle_bug+0x16a/0x2a0 [ 102.413994][ T8128] exc_invalid_op+0x17/0x50 [ 102.415443][ T8128] asm_exc_invalid_op+0x1a/0x20 [ 102.417327][ T8128] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 102.419901][ T8128] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 34 93 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 102.427302][ T8128] RSP: 0018:ffffc9000695f760 EFLAGS: 00010246 [ 102.429378][ T8128] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 102.432017][ T8128] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000040cc0 [ 102.435256][ T8128] RBP: 000000000000000d R08: 0000000000000005 R09: 0000000000000009 [ 102.438358][ T8128] R10: 000000000000000d R11: 0000000000000000 R12: 0000000000040cc0 [ 102.441511][ T8128] R13: 1ffff92000d2bf3b R14: 000000000000000d R15: 1ffff92000d2bf05 [ 102.444872][ T8128] ? find_held_lock+0x2b/0x80 [ 102.447013][ T8128] ? is_bpf_text_address+0x8a/0x1a0 [ 102.449080][ T8128] ? is_bpf_text_address+0x8a/0x1a0 [ 102.451140][ T8128] ? bpf_ksym_find+0x128/0x1c0 [ 102.453140][ T8128] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.455458][ T8128] ? is_bpf_text_address+0x94/0x1a0 [ 102.457681][ T8128] ? kernel_text_address+0x8d/0x100 [ 102.459824][ T8128] ? __kernel_text_address+0xd/0x30 [ 102.461959][ T8128] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.464625][ T8128] ? arch_stack_walk+0xa6/0xf0 [ 102.466423][ T8128] ? stack_trace_save+0x8e/0xc0 [ 102.468417][ T8128] ? __pfx_stack_trace_save+0x10/0x10 [ 102.470527][ T8128] ? stack_depot_save_flags+0x27/0x9d0 [ 102.472709][ T8128] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.474973][ T8128] ? policy_nodemask+0xed/0x4f0 [ 102.476869][ T8128] alloc_pages_mpol+0x1fb/0x550 [ 102.478477][ T8128] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 102.480445][ T8128] ? drm_syncobj_array_find+0x34/0x3b0 [ 102.482314][ T8128] ___kmalloc_large_node+0x104/0x150 [ 102.484073][ T8128] __kmalloc_large_node_noprof+0x1c/0x70 [ 102.485889][ T8128] __kmalloc_noprof+0x5be/0x850 [ 102.487678][ T8128] drm_syncobj_array_find+0x34/0x3b0 [ 102.489437][ T8128] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 102.491527][ T8128] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 102.493941][ T8128] ? drm_dev_exit+0x41/0x60 [ 102.495685][ T8128] ? drm_dev_exit+0x41/0x60 [ 102.497505][ T8128] drm_ioctl_kernel+0x1f3/0x3e0 [ 102.499479][ T8128] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 102.502235][ T8128] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 102.504430][ T8128] drm_ioctl+0x5e6/0xc60 [ 102.506048][ T8128] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 102.508862][ T8128] ? __pfx_drm_ioctl+0x10/0x10 [ 102.510810][ T8128] ? selinux_file_ioctl+0x139/0x290 [ 102.512890][ T8128] ? selinux_file_ioctl+0xb4/0x290 [ 102.515111][ T8128] ? __pfx_drm_ioctl+0x10/0x10 [ 102.517255][ T8128] __x64_sys_ioctl+0x18e/0x210 [ 102.519208][ T8128] do_syscall_64+0x106/0xf80 [ 102.521126][ T8128] ? clear_bhb_loop+0x40/0x90 [ 102.523062][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.525417][ T8128] RIP: 0033:0x7f32aad9c799 [ 102.527141][ T8128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.534278][ T8128] RSP: 002b:00007f32abca0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.537564][ T8128] RAX: ffffffffffffffda RBX: 00007f32ab015fa0 RCX: 00007f32aad9c799 [ 102.540530][ T8128] RDX: 0000200000000100 RSI: 00000000c01864cd RDI: 0000000000000005 [ 102.543571][ T8128] RBP: 00007f32aae32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 102.546778][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.549961][ T8128] R13: 00007f32ab016038 R14: 00007f32ab015fa0 R15: 00007fff45097538 [ 102.553306][ T8128] [ 102.555524][ T8128] Kernel Offset: disabled [ 102.557279][ T8128] Rebooting in 86400 seconds..