last executing test programs: 2.170337321s ago: executing program 3 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x141800, 0x0) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delqdisc={0x120, 0x25, 0x300, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x1, 0x9}, {0x2, 0x3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x65c, 0xb, 0x6}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x0, 0x2}}}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x0, 0x6, 0x1, 0x5, 0xe2fd, 0x6}}, {0x10, 0x2, [0x5, 0x0, 0x7, 0x80, 0x3, 0x8]}}, {{0x1c, 0x1, {0x8, 0x0, 0x6, 0x1000, 0x0, 0x4, 0x80000001, 0x4}}, {0xc, 0x2, [0xa5, 0x0, 0x2, 0x1]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0xfa, 0x9}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x4, 0x6, 0x1, 0x0, 0xffffffff}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xe, 0x3, 0x10000, 0xb80e843294772faf, 0x2, 0xfff, 0x8}}, {0x14, 0x2, [0x5, 0x7fff, 0x91fe, 0x3, 0x0, 0x2, 0x0, 0x7]}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x44045}, 0xc091) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.029467924s ago: executing program 3 (id=580): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000200)=@in6={0xa, 0x4e22, 0x6, @empty, 0x81}, 0x80, 0x0}, 0x20040010) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@in6={0xa, 0x6e22, 0xfffffffc, @loopback, 0x1000000b}, 0x80, 0x0}, 0x2004c051) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'team0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "0ac2e90db8ea9b42ab9c0000000000000000000000000000000fe4ffffff00", "2c4216954ce13f9ac712efe0c94f7781d625a196e19abceb603800", "23f8b4d3ea8e139730273ece0ff6857b7df746298827090d7276ecd802899a7a", "195d1dbd16aae8800a2d650cb9743e1a06bade385bf5095a39cec682f6366c2a", "41cb0a4600aa99f48f0c01728a0ba0b9cf6a2c2c5ed1992ad9214f556ed91842", "e642a87f7cfbf1f6e52eaf1e", 0x3000, 0x4, 0x4, 0x8f, 0x8}}) r2 = signalfd(r0, &(0x7f0000000000)={[0x218]}, 0x8) r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xa) fchdir(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) 1.144570822s ago: executing program 3 (id=606): r0 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000001000)={0x2020}, 0x2020) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x5, 0x100) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "385f655f47a99719f3c1bec188d311189d09ac33b0c82c65602d70b1ffc8188ba7a6684f8a5ad683c7370bb888949bd3f870ac5ba436f4fbf9a6e30d893e5c64519a3c0eb19bb1a496af790eff5b8ef8614a2cdcb94fb110d7fa85081e9803b4dabf51d364950668b40de40c7c65eab8120bc5c60500e64adfe8bfb4f6a7d1cf7f1c97df2076256e1cf4d0d34d66255738d9e776d91061aa2e177ee6720c11e714a0621a285141a8bb546e6b355efa77c06bfd9dec10f9889739d38d8c9d162f226d31c4b14fd9"}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0xffffffffffffff6a, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d146"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004840) 1.091240344s ago: executing program 1 (id=607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000680)=[@nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro32=0x4406, 0x1, 0xffff, 0x4}}, @in_dx={0x69, 0x20, {0xaf12, 0x3}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x6000, 0x4, 0x9, 0x3de54e7b}}, @nested_amd_vmsave={0x183, 0x18}, @wr_drn={0x68, 0x20, {0x0, 0x1}}, @in_dx={0x69, 0x20, {0xa605, 0x2}}, @cpuid={0x64, 0x18, {0x2, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x0, 0x2, 0x1}}, @nested_load_code={0x12e, 0x62, {0x1, "26643666400f38816e00b9b4080000b8c2000000ba000000000f300f01df440f0199000000808fc8489e3b0d450f001429460f2383b9550200000f320fc79c786ae40000663e430f011f"}}, @nested_load_code={0x12e, 0x6b, {0x0, "c744240041000000c744240207000000ff1c24400f01c5d807410f0097c89e00000f01d7430f23dcc74424000e000000c744240206000000c7442406000000000f011c24410f019ab7000000c421fc105ea1ad"}}, @set_irq_handler={0xc8, 0x20, {0xbd, 0x1}}], 0x285}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e0"], 0x1000f) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x281, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000680)=[@nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro32=0x4406, 0x1, 0xffff, 0x4}}, @in_dx={0x69, 0x20, {0xaf12, 0x3}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x6000, 0x4, 0x9, 0x3de54e7b}}, @nested_amd_vmsave={0x183, 0x18}, @wr_drn={0x68, 0x20, {0x0, 0x1}}, @in_dx={0x69, 0x20, {0xa605, 0x2}}, @cpuid={0x64, 0x18, {0x2, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x0, 0x2, 0x1}}, @nested_load_code={0x12e, 0x62, {0x1, "26643666400f38816e00b9b4080000b8c2000000ba000000000f300f01df440f0199000000808fc8489e3b0d450f001429460f2383b9550200000f320fc79c786ae40000663e430f011f"}}, @nested_load_code={0x12e, 0x6b, {0x0, "c744240041000000c744240207000000ff1c24400f01c5d807410f0097c89e00000f01d7430f23dcc74424000e000000c744240206000000c7442406000000000f011c24410f019ab7000000c421fc105ea1ad"}}, @set_irq_handler={0xc8, 0x20, {0xbd, 0x1}}], 0x285}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e0"], 0x1000f) (async) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000080)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 1.001142536s ago: executing program 3 (id=609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='schedstat\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001300)=""/4112, 0x1010}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@getae={0x2bc, 0x1f, 0x10, 0x70bd2b, 0x25dfdbfe, {{@in=@loopback, 0x4d3, 0xa, 0x2b}, @in=@rand_addr=0x64010101, 0x7fff, 0x34ff}, [@algo_auth={0x4f, 0x1, {{'sm3-ce\x00'}, 0x38, "9dc98dba39c471"}}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0xf7, 0xeb}}, @extra_flags={0x8, 0x18, 0x73}, @algo_crypt={0x104, 0x2, {{'ctr(des3_ede)\x00'}, 0x5e0, "def51eb614a622ec8b89b12b899bad68be20039c40c9451e2280dc331a0e5620b81b8d3bf90cc55748d171e14bd9eafa94abc9cc2bd4a910c87e93a4da7082198dcaab485329f6572ba3b9f2dc1828f24931c0170a48b764d852837eae75c08a34fd5daa03e309925c60fcbde77158e5bbeb43125e1c1b33bab82fd8242864e1abaf040c88d0b0f1f2299b0ddd14ce20630c98026c89a74634046cb920a4058533065c03360417ba0b60109e63ca33c5568bb660a535a47b37f3233a"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7f}, @extra_flags={0x8, 0x18, 0x8}, @algo_crypt={0xab, 0x2, {{'cbc(cast5)\x00'}, 0x318, "26cc96b5497b2df153bedba020c931debfe62791edae12bd60699e85b894b4e2cb4bdb6f634810f9404abafc8874188089a540b032a87b594e7e5ff49d757b1a8d11f5c2107e7c5b910793377c07dfc545030d21a5773f603413a318980e4ce47e1346"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7f}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1000}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast2, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a", 0x29) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000004780), r3) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000047c0)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, 0x0, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000a40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f00000009c0)={&(0x7f00000002c0)={0x34, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0xd}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="9d60467df44c"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x1, 0x20000000, 0x8, 0x1, 0x7fb, 0x7e73, 0x7fffffffffffffff, 0x10000006, 0x95}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c9301ffffffff0000000000000000000000f90000000000000000000000001c000000000000000000000008000000", @ANYRES32=r7], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000000a00)="01", 0x1}], 0x1}}], 0x4, 0xc080) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 928.826167ms ago: executing program 3 (id=611): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008f000000000000000b000000181100008dd7fae59fad4ed803bdb4c6b8b41ea75acc6d5e10b785f5905d4dab94596d131c08", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000004d09000000000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4f}, 0x94) syz_open_dev$vcsn(&(0x7f0000000040), 0x10df, 0xda6a8464f3941601) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x6c, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xe0b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x41000, 0xa, '\x00', r2, @fallback=0x28, r3, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r1, 0x4, &(0x7f0000000740)=[r0, r0, r5, 0xffffffffffffffff, r0, r0], &(0x7f0000000780)=[{0x4, 0x4, 0x13}, {0x4, 0x3, 0x7, 0x7}, {0x5, 0x1, 0xa, 0x2}, {0x2, 0x5, 0x1, 0x6}], 0x10, 0x7}, 0x94) 927.912707ms ago: executing program 3 (id=613): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000200)={0x0, 0x6, 0x1, 'queue0\x00', 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000180)={&(0x7f00000001c0)=[r2], 0x0, 0x200000000009, 0x1, 0xb}) 925.964392ms ago: executing program 1 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r5, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) ioctl$CDROMVOLREAD(r5, 0x5313, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r4, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x300}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 799.810041ms ago: executing program 1 (id=617): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) unshare(0x20000500) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fanotify_init(0x500, 0x400) (async) r3 = fcntl$dupfd(r1, 0x406, r1) fanotify_mark(r2, 0x1, 0x40000019, r3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000001340)=[{&(0x7f0000000240)='H\x00', 0x2}], 0x1) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) (async) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) syz_emit_ethernet(0x70, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x3a, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x4, {0x6, 0x6, "0e189a", 0x1, 0x3a, 0xff, @remote, @private0, [], "b3ee73f10f4f24e156fc"}}}}}}}, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000380), &(0x7f00000002c0)=r7}, 0x20) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="01c022ef67157d4095ffffff0c2e626e4cd63b35e4fb99506eabb9623e47dd50341b20e553b995f266584a1a1f2cde02773dbd77b8524d219a506c46570a91a199a20dbcf3f8a1e45a34684f3b091b6ce4eaec0297e5d1f231fb8f72ef8f602511ba63ec1a2af2cfddae40edb7894c5a32bffe30ecdde724535161302926f3c03c6a4a49d1edd43207e094b7026c6284f4c4f986c5be46fc717639d840454427596837e82db6098960789e6498f1eb228ef645ac7a34c81d933a474aa9dbbd95e9f011e2c15fa49e441bfdf37a9a8e0f39e81025d1268597c4165dc5d305a41466c45dc59b671efe8064bc8b4c2828d8710c072b48aa821ee8e3402758"]) 621.171217ms ago: executing program 1 (id=618): syz_open_dev$loop(&(0x7f0000000000), 0xbc5, 0x80000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000a00000000008000f0fffeffe809005300fff5dd00000010000100070c10000000000000000000", 0x58}], 0x1) 571.026264ms ago: executing program 1 (id=619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xbdb], 0xdddd0000, 0x1c4213}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x44}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000010c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x20004041}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (rerun: 32) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 570.74373ms ago: executing program 2 (id=620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001500010028bd7000fedbdf250aa920c8", @ANYRES32=0x0, @ANYBLOB="0800b0575f50a96d"], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x10) 520.736927ms ago: executing program 2 (id=621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0x38, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r3, 0x0, 0x6, 0x2, &(0x7f00000003c0)='\x00 ', 0x4}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 520.091029ms ago: executing program 2 (id=622): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 440.938011ms ago: executing program 1 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'macvlan0\x00', {0x6}, 0xffff}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x981) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x40200) (async) r1 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x40200) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000180)=0xda) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 431.586253ms ago: executing program 2 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x20040800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1000, 0x0, &(0x7f00000005c0)="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"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000580)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x1) writev(r0, &(0x7f0000000040), 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) 350.517483ms ago: executing program 0 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dd2e79f0fee2038a218e0100000000008a1f38b53f00000008000300", @ANYRES32=r1, @ANYBLOB="1c005e80080007008801000008000500170000000800060006000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x5411, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x8, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1, 0x3}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000540)={&(0x7f00000003c0), &(0x7f00000004c0)=""/85, 0x55}) r8 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x1}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000006c0)={'sit0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x8, 0x7, {{0x2a, 0x4, 0x0, 0xd, 0xa8, 0x66, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@cipso={0x86, 0x1e, 0x0, [{0x7, 0xf, "8f0fac3856f7548e06787efa9b"}, {0x6, 0x9, "c947cbc1c4768f"}]}, @noop, @noop, @generic={0x7, 0x7, "d429005b71"}, @timestamp_addr={0x44, 0x2c, 0xe3, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@remote}, {@rand_addr=0x64010101, 0xfffffffa}, {@multicast2, 0xcc2}, {@remote, 0x3}]}, @ssrr={0x89, 0x17, 0xe8, [@private=0xa010101, @loopback, @private=0xa010100, @empty, @broadcast]}, @timestamp={0x44, 0xc, 0xbe, 0x0, 0x9, [0x7, 0x8]}, @timestamp_addr={0x44, 0x1c, 0x84, 0x1, 0xb, [{@broadcast, 0xd3e}, {@multicast2, 0x2}, {@local, 0x4}]}, @generic={0x94, 0x2}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x85, 0xffffffff, 0x40, @mcast2, @mcast1, 0x40, 0x80, 0x7, 0x3}}) sendmsg$nl_route(r8, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="880100001800000827bd7000fddbdf251c101405fe04fd0300200000140012001000596130dd98f1964f0bb0b5c7e90e140012002b00f2a93308a5ab5830a02d0e82d7bc05001a00040000008400130000000400000000000000000000000000000007000000040000000000000000000004030000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0f0000000000000007000000000000000000000004000000020000000000000000000000000000000000000003000000000008000100000000000c00090000002000", @ANYRES8=0x0, @ANYBLOB="0cdf080016002409", @ANYRES32=r9, @ANYRES64=r4, @ANYRES32=r10, @ANYBLOB="4ec0e26b", @ANYRES32=r11, @ANYBLOB="84001300000000000000000000000000000000000000020000000000000000000000000000000400000000000000000000000c0000000000000f0f0000000000000000000000000000000e000000000000000f000000000000000f0000000500"/132], 0x188}, 0x1, 0x0, 0x0, 0x22000010}, 0x810) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1001}}, 0x10) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r13, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="780000db00000100953858b0116f6500", @ANYRES16=r2, @ANYBLOB="00012dbd7000fcdbdf25510000000c0099000f000000010000000a000600ffffffffffff00000a000600080211000000000005008a00040000000a000600ffffffffffff000005008a000600000005008a00000000000a000600080211000000000005008a000200000005008a0002000000"], 0x78}, 0x1, 0x0, 0x0, 0x80d0}, 0x5c) sendmsg$TIPC_NL_KEY_SET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000ec02000000400001802c0004001400010002000020ac14140f000000000094c2001400120002000000ffffffff00000000000000000d0001"], 0x54}}, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r12, 0x3ba0, &(0x7f0000000000)={0x48, 0xc, 0x0, 0x0, 0x1fffd, 0x40000000d}) ioctl$FBIOGET_VSCREENINFO(r8, 0x4600, 0x0) 348.554498ms ago: executing program 2 (id=626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 229.901167ms ago: executing program 0 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r1}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x13, r2, 0x0) 161.161479ms ago: executing program 0 (id=628): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000000)={0x10, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r3, 0xc40, 0x27025}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048d4}, 0x40000) 159.862148ms ago: executing program 0 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc458}, [@IFLA_PORT_SELF={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4604}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc458}, [@IFLA_PORT_SELF={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4604}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = dup(r2) write$P9_RSTATFS(r3, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x7, 0x9, 0x1, 0x0, 0x9, 0x6600000000, 0x4, 0x10, 0x1ff}}, 0x43) (async) write$P9_RSTATFS(r3, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x7, 0x9, 0x1, 0x0, 0x9, 0x6600000000, 0x4, 0x10, 0x1ff}}, 0x43) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) syz_open_pts(r2, 0x80) (async) r4 = syz_open_pts(r2, 0x80) dup3(r4, r2, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) (async) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) read(r2, &(0x7f00000002c0)=""/228, 0x2f) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x2e08d, 0x418c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x2e08d, 0x418c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0xc004) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@loopback, @remote, 0xff, 0x0, 'batadv0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x50, 0x0, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xf, 0x9}}}, {{@ip={@multicast2, @empty, 0xff000000, 0xffffff00, 'netdevsim0\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x16, 0x3, 0x19}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, 'VX', 0x1}}, @common=@addrtype={{0x30}, {0x0, 0x100}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 82.315593ms ago: executing program 2 (id=630): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@deltaction={0x54, 0x31, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0xc805) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5) 81.983456ms ago: executing program 0 (id=631): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) r1 = fanotify_init(0x1, 0x80000) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x30) fanotify_mark(r1, 0x455, 0x40001010, r2, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async) r4 = fanotify_init(0x10, 0x400) fanotify_mark(r4, 0x39, 0x1a, r3, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0xf4240) (async) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000000c0), 0x284000, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) (async) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000feff5366"], 0x10) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r11, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r10, 0x0, 0x30, 0x0, @val=@tracing={r12, 0x4}}, 0x20) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) read(r5, &(0x7f0000000600)=""/4096, 0x1000) (async) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r14, &(0x7f00000023c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$KVM_TDX_GET_CPUID(r6, 0xc008aeba, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000100)={0x4, 0x0, [{0x2, 0x9, 0x1, 0x8, 0x2, 0x1a3a, 0xffffff25}, {0x1, 0x2, 0x4, 0x9, 0x2, 0x0, 0x5}, {0x0, 0x400, 0x8, 0x0, 0x5, 0x2, 0x1}, {0xc0000000, 0xb1e, 0x5, 0x1, 0x108, 0xc8, 0xfffffffe}]}}) (async) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x3) 0s ago: executing program 0 (id=632): syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) r1 = request_key(0x0, &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000280)='GPL\x00', 0xfffffffffffffffb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000014000101a4ad7000fddbdf2501", @ANYRESOCT=r1, @ANYRESOCT=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb680018000000000000000c0000000c00000006000000040000000000008c18a84d83e732997c5f"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x10000, @value=r5}, 0x28) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="66f7b2abf633222db01bfac416e74b5cdde5fc08bdc17357", 0x18}, {&(0x7f0000000300)="35dcb2b5eb0b8483a18d58be", 0xc}, {&(0x7f0000000500)="5c54e69e276e17578754949c8f0cf7ad82b7393d77c9f8d4ea9acbc7ad2c902ffe36e723fcd75235d3fc45c3cf512de592f3aacc0d72f98265f57e171d770bdb0ba6a78aa0fc069e22d7678e1621cc0c55e0b5bc0d06793abe4d3b936746ee35c9479cba21ed54fe9dcaa6912b7688", 0x6f}, {&(0x7f0000000a40)="9bd8d4823f7219d6aba4718c05bfa68733979157fb1fe9a2cb28b33e37c5d3c76bb653565f9745ed9be21842ddb983c24ca18966ffb3a21f4a9bcc84bbdf62df12ee51cb1e091603dc8e5d11dacebac9dda12b4edf9c21185d0f7432b0196a784309341656e36e7ea596673bb4e39bb93c8b7046f934f3c2a60d9914f88040a8793670989dd4243699d1c37795baad5ebecb4903c6551b7d9d0974c7cf7f0aafcbd0234257044053f670a15c8985659279098f688b4cf26c4ebd87e9ea629f0e401cd68e06da13614b59a628d76084e149a1d1a40263e4be6073bbb105bb3696078976", 0xe3}, {&(0x7f0000002380)="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", 0x1023}, {&(0x7f0000000780)="636e256affa06f4e3fc705d69dc71f295b8483dcb1d676781548c2b560e04ceeb8929b75734defeec4ed1cdd6f3a87a35f0a7e8e5de89b8f0573abe323b609e7202a640b20d96126ca9dc14ab5721e6fda875e713563cccc89a30c4937", 0x5d}, {&(0x7f0000000340)="b1d5f1f9132726efc8cb8359aa7942b2c3936d7e9e442f823e8acb1612ae7ddac7f443d13d45a0ae75907d673ea28704c8de52076484a28333c52d0a9b", 0x3d}, {&(0x7f0000000800)="9c362eba037c8a46692f24537cfed71310d86369e3ac34fae90007745d6f02ede13ced25df3c0b3979e2ff317d2756000045b837b03edbc5750de4098f1e", 0x3e}, {&(0x7f0000000840)="043be76d08618f4550d525806ba89a702d885332330567cbea44b626fb8c9352bcefcee888210e23ad6a060e42102f67214e290ddfb2cdbb09de1669", 0x3c}], 0x9, &(0x7f0000000b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r6]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r4, r4]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x150, 0x800}}], 0x1, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) socket(0x10, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) syz_open_dev$mouse(&(0x7f0000000100), 0x3b84, 0x595040) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r11, 0x11543}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) (async) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:35004' (ED25519) to the list of known hosts. [ 46.232195][ T40] audit: type=1400 audit(1771735986.040:62): avc: denied { name_bind } for pid=5833 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.270833][ T40] audit: type=1400 audit(1771735986.080:63): avc: denied { execute } for pid=5834 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.282900][ T40] audit: type=1400 audit(1771735986.080:64): avc: denied { execute_no_trans } for pid=5834 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.224264][ T40] audit: type=1400 audit(1771735989.030:65): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.234687][ T40] audit: type=1400 audit(1771735989.040:66): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.236657][ T5834] cgroup: Unknown subsys name 'net' [ 49.247369][ T40] audit: type=1400 audit(1771735989.060:67): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.364906][ T5834] cgroup: Unknown subsys name 'cpuset' [ 49.371018][ T5834] cgroup: Unknown subsys name 'rlimit' [ 49.551962][ T40] audit: type=1400 audit(1771735989.360:68): avc: denied { setattr } for pid=5834 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.562050][ T40] audit: type=1400 audit(1771735989.360:69): avc: denied { create } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.571294][ T40] audit: type=1400 audit(1771735989.360:70): avc: denied { write } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.580214][ T40] audit: type=1400 audit(1771735989.360:71): avc: denied { read } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.589153][ T40] audit: type=1400 audit(1771735989.370:72): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.600550][ T40] audit: type=1400 audit(1771735989.370:73): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.610258][ T40] audit: type=1400 audit(1771735989.390:74): avc: denied { read } for pid=5636 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.624033][ T5909] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.771939][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.241411][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 55.241425][ T40] audit: type=1400 audit(1771735995.050:82): avc: denied { execmem } for pid=5918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.481367][ T40] audit: type=1400 audit(1771735995.290:83): avc: denied { create } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.495887][ T40] audit: type=1400 audit(1771735995.290:84): avc: denied { read write } for pid=5922 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.503669][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.505014][ T40] audit: type=1400 audit(1771735995.290:85): avc: denied { open } for pid=5922 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.508433][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.515695][ T40] audit: type=1400 audit(1771735995.300:86): avc: denied { ioctl } for pid=5922 comm="syz-executor" path="socket:[7194]" dev="sockfs" ino=7194 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.518886][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.531476][ T5928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.534241][ T5928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.537262][ T5928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.546620][ T5933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.547552][ T5937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.550402][ T5933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.552897][ T5937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.555600][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.560813][ T5933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.561285][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.576183][ T5937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.576526][ T40] audit: type=1400 audit(1771735995.380:87): avc: denied { read } for pid=5922 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.579589][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.588179][ T40] audit: type=1400 audit(1771735995.380:88): avc: denied { open } for pid=5922 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.589568][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.596054][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.597060][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.598058][ T40] audit: type=1400 audit(1771735995.380:89): avc: denied { mounton } for pid=5922 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.600887][ T5928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.617585][ T5928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.739766][ T40] audit: type=1400 audit(1771735995.550:90): avc: denied { module_request } for pid=5922 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.796736][ T5922] chnl_net:caif_netlink_parms(): no params data found [ 55.915178][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.918242][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.920498][ T5922] bridge_slave_0: entered allmulticast mode [ 55.923163][ T5922] bridge_slave_0: entered promiscuous mode [ 55.929163][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.931378][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.933599][ T5922] bridge_slave_1: entered allmulticast mode [ 55.936302][ T5922] bridge_slave_1: entered promiscuous mode [ 56.016994][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.035274][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.067464][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 56.074890][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 56.083312][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 56.092847][ T5922] team0: Port device team_slave_0 added [ 56.102226][ T5922] team0: Port device team_slave_1 added [ 56.173007][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.178301][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.188940][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.214594][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.217125][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.225099][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.310564][ T5922] hsr_slave_0: entered promiscuous mode [ 56.313170][ T5922] hsr_slave_1: entered promiscuous mode [ 56.329507][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.331857][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.334294][ T5926] bridge_slave_0: entered allmulticast mode [ 56.337403][ T5926] bridge_slave_0: entered promiscuous mode [ 56.348395][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.350827][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.353177][ T5926] bridge_slave_1: entered allmulticast mode [ 56.355973][ T5926] bridge_slave_1: entered promiscuous mode [ 56.390609][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.405360][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.408000][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.410385][ T5923] bridge_slave_0: entered allmulticast mode [ 56.413119][ T5923] bridge_slave_0: entered promiscuous mode [ 56.416962][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.419344][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.421716][ T5923] bridge_slave_1: entered allmulticast mode [ 56.424526][ T5923] bridge_slave_1: entered promiscuous mode [ 56.427644][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.429968][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.432320][ T5929] bridge_slave_0: entered allmulticast mode [ 56.435129][ T5929] bridge_slave_0: entered promiscuous mode [ 56.438537][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.440894][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.443311][ T5929] bridge_slave_1: entered allmulticast mode [ 56.446059][ T5929] bridge_slave_1: entered promiscuous mode [ 56.449701][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.492841][ T5926] team0: Port device team_slave_0 added [ 56.502423][ T5926] team0: Port device team_slave_1 added [ 56.509510][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.514846][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.526605][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.539475][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.552050][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.554973][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.566072][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.584545][ T5923] team0: Port device team_slave_0 added [ 56.591173][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.594043][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.604492][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.616891][ T5923] team0: Port device team_slave_1 added [ 56.647852][ T5929] team0: Port device team_slave_0 added [ 56.663092][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.665408][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.676650][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.682799][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.685637][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.695490][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.700930][ T5929] team0: Port device team_slave_1 added [ 56.753977][ T5926] hsr_slave_0: entered promiscuous mode [ 56.756413][ T5926] hsr_slave_1: entered promiscuous mode [ 56.759106][ T5926] debugfs: 'hsr0' already exists in 'hsr' [ 56.760971][ T5926] Cannot create hsr debugfs directory [ 56.780164][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.782464][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.792717][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.799249][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.802275][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.813008][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.839967][ T5923] hsr_slave_0: entered promiscuous mode [ 56.843141][ T5923] hsr_slave_1: entered promiscuous mode [ 56.846508][ T5923] debugfs: 'hsr0' already exists in 'hsr' [ 56.848978][ T5923] Cannot create hsr debugfs directory [ 56.937608][ T5929] hsr_slave_0: entered promiscuous mode [ 56.939930][ T5929] hsr_slave_1: entered promiscuous mode [ 56.942040][ T5929] debugfs: 'hsr0' already exists in 'hsr' [ 56.943818][ T5929] Cannot create hsr debugfs directory [ 56.951696][ T5922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.973993][ T5922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.006844][ T5922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.017800][ T5922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.191599][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.198538][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.213528][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.218974][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.254180][ T5923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.274234][ T5923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.281602][ T5923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.294020][ T5923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.308407][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.349158][ T5929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.357080][ T5929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.368504][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.370846][ T5929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.378318][ T5929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.399287][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.401820][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.419105][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.422201][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.473190][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.491099][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.507215][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.509628][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.519143][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.522269][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.543362][ T40] audit: type=1400 audit(1771735997.350:91): avc: denied { sys_module } for pid=5922 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.559660][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.583156][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.602374][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.613998][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.617105][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.618455][ T5934] Bluetooth: hci1: command tx timeout [ 57.620670][ T5928] Bluetooth: hci3: command tx timeout [ 57.626120][ T5928] Bluetooth: hci0: command tx timeout [ 57.633885][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.642252][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.645243][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.658286][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.682807][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.686097][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.693158][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.695986][ T5928] Bluetooth: hci2: command tx timeout [ 57.696442][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.755408][ T5922] veth0_vlan: entered promiscuous mode [ 57.764490][ T5922] veth1_vlan: entered promiscuous mode [ 57.791564][ T5922] veth0_macvtap: entered promiscuous mode [ 57.798958][ T5922] veth1_macvtap: entered promiscuous mode [ 57.820818][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.839342][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.844024][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.853046][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.858003][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.879650][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.882567][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.923813][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.977094][ T5926] veth0_vlan: entered promiscuous mode [ 57.983415][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.989376][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.992934][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.993295][ T5926] veth1_vlan: entered promiscuous mode [ 58.025560][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.029636][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.054269][ T5929] veth0_vlan: entered promiscuous mode [ 58.071686][ T5929] veth1_vlan: entered promiscuous mode [ 58.077531][ T5923] veth0_vlan: entered promiscuous mode [ 58.080606][ T5926] veth0_macvtap: entered promiscuous mode [ 58.081713][ T5922] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.092084][ T5926] veth1_macvtap: entered promiscuous mode [ 58.095609][ T5923] veth1_vlan: entered promiscuous mode [ 58.114340][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.138024][ T6011] openvswitch: netlink: IP tunnel TTL not specified. [ 58.143139][ T5929] veth0_macvtap: entered promiscuous mode [ 58.148072][ T5929] veth1_macvtap: entered promiscuous mode [ 58.157583][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.164938][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.170591][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.188111][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.194357][ T5923] veth0_macvtap: entered promiscuous mode [ 58.199319][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.202934][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.209558][ T5923] veth1_macvtap: entered promiscuous mode [ 58.218079][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.248299][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.252084][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.258015][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.268192][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.274738][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.280320][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.321454][ T87] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.329382][ T6018] binder: BINDER_SET_CONTEXT_MGR already set [ 58.331454][ T6018] binder: 6016:6018 ioctl 4018620d 200000000100 returned -16 [ 58.334320][ T87] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.341678][ T87] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.350465][ T6017] No source specified [ 58.362309][ T87] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.367512][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.370087][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.405881][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.408417][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.437116][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.440769][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.445526][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.455909][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.488776][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.493024][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.541822][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.544588][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.582479][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 58.589497][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 58.594782][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 58.686749][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 58.729749][ T6048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.734769][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14'. [ 58.813897][ T6053] capability: warning: `syz.3.16' uses deprecated v2 capabilities in a way that may be insecure [ 58.898847][ T6056] binder: 6055:6056 ioctl c0306201 2000000003c0 returned -14 [ 58.915252][ T6056] 9p: Bad value for 'version' [ 58.987909][ T6061] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 59.054532][ T6068] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.061658][ T6068] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 59.184192][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 59.257478][ T6093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21'. [ 59.537639][ T6105] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 59.696593][ T5928] Bluetooth: hci0: command tx timeout [ 59.699044][ T5928] Bluetooth: hci1: command tx timeout [ 59.701392][ T5928] Bluetooth: hci3: command tx timeout [ 59.719931][ T6105] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.724305][ T6105] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.730125][ T6105] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.734167][ T6105] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.776387][ T5934] Bluetooth: hci2: command tx timeout [ 59.918796][ T6117] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 59.945607][ T6105] usb 8-1: usb_control_msg returned -32 [ 59.947618][ T6105] usbtmc 8-1:16.0: can't read capabilities [ 59.983031][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 59.987566][ T6117] team0: entered promiscuous mode [ 59.989938][ T6117] team_slave_0: entered promiscuous mode [ 59.992691][ T6117] team_slave_1: entered promiscuous mode [ 60.031873][ T6121] program syz.0.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.038297][ T6121] Bluetooth: MGMT ver 1.23 [ 60.079846][ T6123] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 60.084993][ T6123] bond1 (unregistering): Released all slaves [ 60.133148][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 60.254579][ T6145] Set syz1 is full, maxelem 1021 reached [ 60.259645][ T40] kauditd_printk_skb: 122 callbacks suppressed [ 60.259660][ T40] audit: type=1400 audit(1771736000.070:214): avc: denied { create } for pid=6144 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.264107][ T6147] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 60.284646][ T40] audit: type=1400 audit(1771736000.090:215): avc: denied { create } for pid=6146 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 60.291319][ T40] audit: type=1400 audit(1771736000.090:216): avc: denied { setopt } for pid=6146 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 60.306934][ T40] audit: type=1400 audit(1771736000.110:217): avc: denied { read write } for pid=6148 comm="syz.2.47" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 60.314096][ T6105] usb 8-1: USB disconnect, device number 2 [ 60.317332][ T40] audit: type=1400 audit(1771736000.110:218): avc: denied { open } for pid=6148 comm="syz.2.47" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 60.340727][ T40] audit: type=1400 audit(1771736000.140:219): avc: denied { setopt } for pid=6146 comm="syz.0.46" lport=33690 faddr=fc02:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.383682][ T40] audit: type=1400 audit(1771736000.190:220): avc: denied { mount } for pid=6156 comm="syz.1.49" name="/" dev="ramfs" ino=11397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 60.398920][ T40] audit: type=1400 audit(1771736000.210:221): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 60.407330][ T40] audit: type=1400 audit(1771736000.210:222): avc: denied { create } for pid=6158 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.414841][ T40] audit: type=1400 audit(1771736000.220:223): avc: denied { write } for pid=6158 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.468248][ T6165] Illegal XDP return value 4232769536 on prog (id 7) dev N/A, expect packet loss! [ 60.479394][ T6161] random: crng reseeded on system resumption [ 60.494116][ T6161] PM: hibernation: Image mismatch: memory size [ 60.708802][ T6187] afs: Unknown parameter 'fls' [ 60.712058][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.59'. [ 60.786218][ T57] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 60.915947][ T57] usb 8-1: device descriptor read/64, error -71 [ 61.167048][ T57] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 61.186309][ T6208] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 61.229239][ T6210] Zero length message leads to an empty skb [ 61.235041][ T6210] Device name not specified. [ 61.235041][ T6210] [ 61.308994][ T57] usb 8-1: device descriptor read/64, error -71 [ 61.394778][ T6223] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.398833][ T6223] overlayfs: failed to set xattr on upper [ 61.401410][ T6223] overlayfs: ...falling back to redirect_dir=nofollow. [ 61.404351][ T6223] overlayfs: ...falling back to metacopy=off. [ 61.407660][ T6223] overlayfs: ...falling back to index=off. [ 61.410928][ T6223] overlayfs: ...falling back to uuid=null. [ 61.416396][ T57] usb usb8-port1: attempt power cycle [ 61.466394][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.618357][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.623119][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.636134][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.642446][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.651452][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.659728][ T10] usb 7-1: config 0 descriptor?? [ 61.680343][ T6239] NILFS (nbd1): device size too small [ 61.776138][ T5934] Bluetooth: hci3: command tx timeout [ 61.776165][ T5928] Bluetooth: hci1: command tx timeout [ 61.776215][ T5937] Bluetooth: hci0: command tx timeout [ 61.787285][ T57] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 61.806861][ T57] usb 8-1: device descriptor read/8, error -71 [ 61.855898][ T5928] Bluetooth: hci2: command tx timeout [ 61.903235][ T6245] tmpfs: Bad value for 'nr_blocks' [ 61.907088][ T6245] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 61.932727][ T6247] loop6: detected capacity change from 0 to 524288000 [ 62.044115][ T6252] ubi31: attaching mtd0 [ 62.052558][ T6252] ubi31: scanning is finished [ 62.054147][ T6252] ubi31: empty MTD device detected [ 62.056223][ T57] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 62.076581][ T57] usb 8-1: device descriptor read/8, error -71 [ 62.083375][ T10] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 62.091612][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 62.162201][ T6270] netlink: 'syz.0.82': attribute type 6 has an invalid length. [ 62.198375][ T57] usb usb8-port1: unable to enumerate USB device [ 62.201461][ T6252] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 62.204093][ T6252] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 62.206891][ T6252] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 62.209301][ T6252] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 62.211834][ T6252] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 62.214088][ T6252] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 62.216848][ T6252] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2557427069 [ 62.220085][ T6252] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 62.224259][ T6274] ubi31: background thread "ubi_bgt31d" started, PID 6274 [ 62.340017][ T6286] autofs4:pid:6286:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32768.65536), cmd(0xc0189377) [ 62.344411][ T6286] autofs4:pid:6286:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 62.350762][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.365185][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.372625][ T10] usb 7-1: USB disconnect, device number 2 [ 62.619892][ T6303] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 62.942761][ T6315] atomic_op ffff888041356998 conn xmit_atomic 0000000000000000 [ 63.421130][ T6327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6327 comm=syz.2.100 [ 63.653301][ T6341] capability: warning: `syz.3.104' uses 32-bit capabilities (legacy support in use) [ 63.823536][ T6352] all: renamed from bridge_slave_0 (while UP) [ 63.856291][ T5928] Bluetooth: hci0: command tx timeout [ 63.857213][ T5934] Bluetooth: hci3: command tx timeout [ 63.858647][ T5937] Bluetooth: hci1: command tx timeout [ 63.884838][ T6357] netlink: 'syz.3.110': attribute type 5 has an invalid length. [ 63.889511][ T6357] __nla_validate_parse: 4 callbacks suppressed [ 63.889526][ T6357] netlink: 48 bytes leftover after parsing attributes in process `syz.3.110'. [ 63.935962][ T5928] Bluetooth: hci2: command tx timeout [ 64.093462][ T6373] netlink: 'syz.1.112': attribute type 10 has an invalid length. [ 64.097068][ T6373] netlink: 228 bytes leftover after parsing attributes in process `syz.1.112'. [ 64.145875][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.236067][ T6384] netlink: 256 bytes leftover after parsing attributes in process `syz.1.114'. [ 64.245849][ T6386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.114'. [ 64.274234][ T6391] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.298594][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 64.302830][ T29] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 64.308058][ T29] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 64.311790][ T29] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 64.315361][ T29] usb 5-1: config 250 has no interface number 0 [ 64.317646][ T29] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 64.321344][ T29] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 64.324651][ T29] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 64.328260][ T29] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 64.331533][ T29] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 64.337254][ T29] usb 5-1: config 250 interface 228 has no altsetting 0 [ 64.340754][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 64.343647][ T29] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 64.346879][ T29] usb 5-1: Product: syz [ 64.348235][ T29] usb 5-1: SerialNumber: syz [ 64.354579][ T29] hub 5-1:250.228: bad descriptor, ignoring hub [ 64.357151][ T903] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 64.362416][ T29] hub 5-1:250.228: probe with driver hub failed with error -5 [ 64.367484][ T6395] XFS (nullb0): Invalid superblock magic number [ 64.528572][ T903] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 64.532409][ T903] usb 8-1: config 0 has no interface number 0 [ 64.535286][ T903] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 64.545173][ T903] usb 8-1: New USB device found, idVendor=0c45, idProduct=0610, bcdDevice=e6.00 [ 64.550675][ T903] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.554344][ T903] usb 8-1: Product: syz [ 64.556025][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.559408][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.560583][ T903] usb 8-1: Manufacturer: syz [ 64.566966][ T29] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 64.577686][ T903] usb 8-1: SerialNumber: syz [ 64.593056][ T903] usb 8-1: config 0 descriptor?? [ 64.628753][ T6426] netlink: 'syz.2.120': attribute type 7 has an invalid length. [ 64.639088][ T29] usb 5-1: USB disconnect, device number 2 [ 64.662489][ T29] usblp0: removed [ 64.678090][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.680918][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.683714][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.693173][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.700620][ T6426] evm: overlay not supported [ 64.812178][ T6377] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 64.818505][ T6377] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 64.823516][ T6377] overlayfs: missing 'lowerdir' [ 64.842416][ T34] usb 8-1: USB disconnect, device number 7 [ 64.968729][ T6444] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 65.171422][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 65.295042][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 65.295055][ T40] audit: type=1400 audit(1771736005.100:321): avc: denied { map } for pid=6491 comm="syz.1.132" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.302149][ T6492] ptrace attach of "/syz-executor exec"[5926] was attempted by ""[6492] [ 65.313524][ T40] audit: type=1400 audit(1771736005.100:322): avc: denied { execute } for pid=6491 comm="syz.1.132" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.379017][ T40] audit: type=1400 audit(1771736005.180:323): avc: denied { listen } for pid=6501 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.410968][ T40] audit: type=1400 audit(1771736005.200:324): avc: denied { setopt } for pid=6501 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.425610][ T40] audit: type=1400 audit(1771736005.200:325): avc: denied { name_bind } for pid=6501 comm="syz.1.135" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 65.435335][ T40] audit: type=1400 audit(1771736005.210:326): avc: denied { bind } for pid=6501 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.444076][ T40] audit: type=1400 audit(1771736005.230:327): avc: denied { setopt } for pid=6501 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.452944][ T40] audit: type=1400 audit(1771736005.240:328): avc: denied { nlmsg_read } for pid=6504 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.474337][ T40] audit: type=1400 audit(1771736005.240:329): avc: denied { ioctl } for pid=6504 comm="syz.3.137" path="pid:[4026532879]" dev="nsfs" ino=4026532879 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.503727][ T40] audit: type=1400 audit(1771736005.290:330): avc: denied { map_read map_write } for pid=6512 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 65.585039][ T6526] can0: slcan on ttynull. [ 65.689338][ T6525] can0 (unregistered): slcan off ttynull. [ 65.728723][ T6541] netlink: 'syz.3.145': attribute type 21 has an invalid length. [ 65.731239][ T6541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.145'. [ 65.744198][ T6548] ata1.00: invalid multi_count 128 ignored [ 65.802059][ T6548] ata1.00: invalid multi_count 128 ignored [ 65.841767][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 65.878099][ T6548] ata1.00: invalid multi_count 128 ignored [ 65.928248][ T6548] ata1.00: invalid multi_count 128 ignored [ 65.978387][ T6548] ata1.00: invalid multi_count 128 ignored [ 66.017803][ T6567] Bluetooth: hci0: unsupported parameter 255 [ 66.020495][ T6567] Bluetooth: hci0: unsupported parameter 255 [ 66.044064][ T6548] ata1.00: invalid multi_count 128 ignored [ 66.093490][ T6548] ata1.00: invalid multi_count 128 ignored [ 66.187369][ T6548] ata1.00: invalid multi_count 128 ignored [ 66.229079][ T6548] ata1.00: invalid multi_count 128 ignored [ 66.298444][ T6548] ata1.00: invalid multi_count 128 ignored [ 66.355221][ C3] sr 2:0:0:0: [sr0] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 66.357998][ T6548] ata1.00: invalid multi_count 128 ignored [ 66.360249][ C3] sr 2:0:0:0: [sr0] tag#8 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 66.438113][ T6548] ata1.00: invalid multi_count 128 ignored [ 66.467764][ T6548] ata1.00: invalid multi_count 128 ignored [ 66.507109][ T6548] ata1.00: invalid multi_count 128 ignored [ 66.547257][ T29] ata1.00: invalid multi_count 128 ignored [ 66.656615][ T6105] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 66.704015][ T5928] Bluetooth: hci3: unexpected event 0x14 length: 10 > 6 [ 66.779251][ T6637] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 66.850364][ T6105] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 66.854390][ T6105] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 66.859823][ T6105] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 66.864074][ T6105] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 66.870172][ T6105] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 66.874770][ T6105] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 66.885143][ T6105] usb 8-1: string descriptor 0 read error: -22 [ 66.888459][ T6105] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 66.892714][ T6105] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.902012][ T6105] usb 8-1: config 0 descriptor?? [ 66.905211][ T6600] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.910900][ T6105] hub 8-1:0.0: bad descriptor, ignoring hub [ 66.915219][ T6105] hub 8-1:0.0: probe with driver hub failed with error -5 [ 66.930153][ T6105] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input8 [ 67.012419][ T6661] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 67.029801][ T6661] binder_alloc: 6660: binder_alloc_buf size 1024 failed, no address space [ 67.033605][ T6661] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 67.051403][ T6663] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 67.072652][ T6665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.170'. [ 67.151691][ T6671] 9p: Bad value for 'rfdno' [ 67.195513][ T6677] use of bytesused == 0 is deprecated and will be removed in the future, [ 67.199280][ T6677] use the actual size instead. [ 67.386025][ C3] usb_acecad 8-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 67.398916][ T6698] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 67.478083][ T6713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6713 comm=syz.0.185 [ 67.496638][ T6713] gtp0: entered promiscuous mode [ 67.498252][ T6716] tmpfs: Bad value for 'mpol' [ 67.498295][ T6713] team0: Device gtp0 is of different type [ 67.576128][ C1] usb_acecad 8-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 67.604106][ T6724] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 67.642477][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.189'. [ 67.710853][ T6736] xfrm0 speed is unknown, defaulting to 1000 [ 67.727189][ T6736] xfrm0 speed is unknown, defaulting to 1000 [ 67.730643][ T6736] xfrm0 speed is unknown, defaulting to 1000 [ 67.734019][ T6735] ======================================================= [ 67.734019][ T6735] WARNING: The mand mount option has been deprecated and [ 67.734019][ T6735] and is ignored by this kernel. Remove the mand [ 67.734019][ T6735] option from the mount to silence this warning. [ 67.734019][ T6735] ======================================================= [ 67.734905][ T6736] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.753058][ T6736] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 67.776782][ T6736] xfrm0 speed is unknown, defaulting to 1000 [ 67.784642][ T5937] Bluetooth: unknown link type 251 [ 67.787926][ T5937] Bluetooth: hci3: connection err: -111 [ 67.791718][ T6736] xfrm0 speed is unknown, defaulting to 1000 [ 67.797199][ T6736] xfrm0 speed is unknown, defaulting to 1000 [ 67.801412][ T6736] xfrm0 speed is unknown, defaulting to 1000 [ 67.905158][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'. [ 68.532675][ T6808] SELinux: Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped). [ 68.685421][ T6824] 9p: Bad value for 'rfdno' [ 68.750312][ C0] usb_acecad 8-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 68.772442][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.937275][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 68.944457][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.949730][ T29] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 68.952917][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.957151][ C2] usb_acecad 8-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 68.961411][ T29] usb 6-1: config 0 descriptor?? [ 69.097659][ T6836] __nla_validate_parse: 3 callbacks suppressed [ 69.097675][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 69.179824][ T29] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 69.274368][ T6842] warning: `syz.0.223' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.282427][ T6842] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.223' sets config #0 [ 69.291294][ C3] usb_acecad 8-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 69.376680][ T5937] Bluetooth: hci3: command 0x0405 tx timeout [ 69.439816][ T57] usb 8-1: USB disconnect, device number 8 [ 69.535981][ T5992] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.677098][ T6853] overlayfs: upper fs does not support tmpfile. [ 69.685933][ T5992] usb 5-1: Using ep0 maxpacket: 8 [ 69.692325][ T5992] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 69.698472][ T5992] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.702318][ T5992] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.706579][ T5992] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.709995][ T5992] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.714472][ T5992] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.718772][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.929277][ T5992] usb 5-1: GET_CAPABILITIES returned 0 [ 69.931765][ T5992] usbtmc 5-1:16.0: can't read capabilities [ 69.985500][ T6872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.161823][ T6878] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.353308][ T40] kauditd_printk_skb: 788 callbacks suppressed [ 70.353329][ T40] audit: type=1400 audit(1771736010.160:1119): avc: denied { read write } for pid=5922 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.367387][ T40] audit: type=1400 audit(1771736010.160:1120): avc: denied { open } for pid=5922 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.375069][ T40] audit: type=1400 audit(1771736010.160:1121): avc: denied { ioctl } for pid=5922 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.390451][ T40] audit: type=1400 audit(1771736010.200:1122): avc: denied { read write } for pid=5922 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.398699][ T40] audit: type=1400 audit(1771736010.200:1123): avc: denied { open } for pid=5922 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.409688][ T40] audit: type=1400 audit(1771736010.200:1124): avc: denied { ioctl } for pid=5922 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.423785][ T40] audit: type=1400 audit(1771736010.230:1125): avc: denied { write } for pid=6895 comm="syz.3.236" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.434058][ T40] audit: type=1400 audit(1771736010.240:1126): avc: denied { map_create } for pid=6895 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.442783][ T40] audit: type=1400 audit(1771736010.240:1127): avc: denied { perfmon } for pid=6895 comm="syz.3.236" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.451593][ T40] audit: type=1400 audit(1771736010.240:1128): avc: denied { map_read map_write } for pid=6895 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.532032][ T34] usb 6-1: USB disconnect, device number 2 [ 71.748828][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 71.841857][ T6931] IPv6: syztnl0: Disabled Multicast RS [ 71.859513][ T6931] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.942903][ T6937] bridge2: entered promiscuous mode [ 71.959545][ T6937] bridge3: entered promiscuous mode [ 71.971205][ T6937] bridge4: entered promiscuous mode [ 71.990199][ T6937] bridge5: entered promiscuous mode [ 72.007980][ T6937] bridge6: entered promiscuous mode [ 72.016945][ T6937] bridge7: entered promiscuous mode [ 72.025736][ T6937] bridge8: entered promiscuous mode [ 72.036805][ T34] usb 5-1: USB disconnect, device number 3 [ 72.052008][ T6937] bridge9: entered promiscuous mode [ 72.066388][ T6937] bridge10: entered promiscuous mode [ 72.078347][ T6937] bridge11: entered promiscuous mode [ 72.092666][ T6937] bridge12: entered promiscuous mode [ 72.099597][ T6937] bridge13: entered promiscuous mode [ 72.121220][ T6937] bridge14: entered promiscuous mode [ 72.139238][ T6937] bridge15: entered promiscuous mode [ 72.153834][ T6937] bridge16: entered promiscuous mode [ 72.163592][ T6946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.253'. [ 72.166443][ T6937] bridge17: entered promiscuous mode [ 72.176204][ T6937] bridge18: entered promiscuous mode [ 72.185065][ T6937] bridge19: entered promiscuous mode [ 72.194438][ T6937] bridge20: entered promiscuous mode [ 72.203194][ T6937] bridge21: entered promiscuous mode [ 72.211814][ T6937] bridge22: entered promiscuous mode [ 72.233431][ T6937] bridge23: entered promiscuous mode [ 72.246197][ T6947] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 72.255419][ T6937] bridge24: entered promiscuous mode [ 72.261999][ T6937] bridge25: entered promiscuous mode [ 72.270147][ T6937] bridge26: entered promiscuous mode [ 72.283363][ T6937] bridge27: entered promiscuous mode [ 72.294037][ T6937] bridge28: entered promiscuous mode [ 72.300552][ T6937] bridge29: entered promiscuous mode [ 72.306134][ T6937] bridge30: entered promiscuous mode [ 72.311381][ T6937] bridge31: entered promiscuous mode [ 72.319575][ T6937] bridge32: entered promiscuous mode [ 72.325429][ T6937] bridge33: entered promiscuous mode [ 72.331198][ T6937] bridge34: entered promiscuous mode [ 72.401184][ T6958] tmpfs: Bad value for 'mode' [ 72.403607][ T6955] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 72.406335][ T6955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.429543][ T6020] libceph: connect (1)[c::]:6789 error -13 [ 72.431934][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 72.709962][ T29] libceph: connect (1)[c::]:6789 error -13 [ 72.712872][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 72.824493][ T6984] netlink: 'syz.0.263': attribute type 2 has an invalid length. [ 72.828812][ T6984] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 72.832494][ T6984] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 72.954726][ T6988] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 73.229517][ T29] libceph: connect (1)[c::]:6789 error -13 [ 73.231640][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 73.233786][ T6958] ceph: No mds server is up or the cluster is laggy [ 73.316171][ T7003] process 'syz.1.271' launched './file0' with NULL argv: empty string added [ 74.085210][ T7039] 9pnet_virtio: no channels available for device syz [ 74.496277][ T7060] netlink: 108 bytes leftover after parsing attributes in process `syz.3.287'. [ 74.890842][ T7081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.293'. [ 74.952637][ T7085] nbd: couldn't find device at index -2127233020 [ 75.008745][ T7086] netlink: 'syz.3.294': attribute type 1 has an invalid length. [ 75.359449][ T40] kauditd_printk_skb: 629 callbacks suppressed [ 75.359464][ T40] audit: type=1400 audit(1771736015.160:1758): avc: denied { read write } for pid=5922 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.386739][ T40] audit: type=1400 audit(1771736015.160:1759): avc: denied { open } for pid=5922 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.394754][ T7097] random: crng reseeded on system resumption [ 75.400485][ T40] audit: type=1400 audit(1771736015.160:1760): avc: denied { ioctl } for pid=5922 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.412409][ T40] audit: type=1400 audit(1771736015.180:1761): avc: denied { mounton } for pid=7092 comm="syz.1.297" path="/87/bus" dev="tmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.420587][ T40] audit: type=1400 audit(1771736015.190:1762): avc: denied { unlink } for pid=7092 comm="syz.1.297" name="#6" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.427775][ T40] audit: type=1400 audit(1771736015.190:1763): avc: denied { mount } for pid=7092 comm="syz.1.297" name="/" dev="overlay" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.427800][ T40] audit: type=1400 audit(1771736015.200:1764): avc: denied { watch watch_reads } for pid=7096 comm="syz.3.298" path="/64" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.427822][ T40] audit: type=1400 audit(1771736015.200:1765): avc: denied { create } for pid=7096 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.427842][ T40] audit: type=1400 audit(1771736015.200:1766): avc: denied { write } for pid=7096 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.427862][ T40] audit: type=1400 audit(1771736015.200:1767): avc: denied { append } for pid=7096 comm="syz.3.298" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.706194][ T7115] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.742945][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.303'. [ 75.746813][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 75.784742][ T7118] netlink: 596 bytes leftover after parsing attributes in process `syz.2.304'. [ 75.981329][ T7128] F2FS-fs: Conflicting test_dummy_encryption options [ 76.129762][ T7141] 9p: Bad value for 'wfdno' [ 76.327986][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 76.415916][ T5937] Bluetooth: hci3: command 0x0405 tx timeout [ 76.433941][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.437928][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.462943][ T7162] sd 0:0:0:0: PR command failed: 1026 [ 76.465379][ T7162] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 76.468914][ T7162] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 77.162738][ T7215] block nbd3: NBD_DISCONNECT [ 77.168100][ T7215] netlink: 80 bytes leftover after parsing attributes in process `syz.3.334'. [ 77.172406][ T7215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=7215 comm=syz.3.334 [ 77.698405][ T7239] mkiss: ax0: crc mode is auto. [ 77.784747][ T7243] Device name not specified. [ 77.784747][ T7243] [ 77.989635][ T7245] kvm: Disabled LAPIC found during irq injection [ 78.210923][ T7248] netlink: 'syz.3.344': attribute type 4 has an invalid length. [ 78.223017][ T7248] netlink: 'syz.3.344': attribute type 4 has an invalid length. [ 78.502349][ T7257] bond1 (unregistering): Released all slaves [ 78.642631][ T7261] netlink: 'syz.3.348': attribute type 21 has an invalid length. [ 78.646040][ T7261] netlink: 156 bytes leftover after parsing attributes in process `syz.3.348'. [ 78.668268][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.671255][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.704767][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.712824][ T7267] binder: BINDER_SET_CONTEXT_MGR already set [ 78.715898][ T7267] binder: 7265:7267 ioctl 4018620d 200000000100 returned -16 [ 78.723850][ T7266] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 78.915881][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 78.944518][ T7275] syz.1.353 uses obsolete (PF_INET,SOCK_PACKET) [ 78.951419][ T7275] xt_l2tp: unknown flags: 51 [ 79.077506][ T10] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 79.080179][ T10] usb 8-1: config 1 has no interface number 0 [ 79.082359][ T10] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 79.085475][ T10] usb 8-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 79.093469][ T10] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 79.098727][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.101403][ T10] usb 8-1: Product: syz [ 79.103015][ T10] usb 8-1: Manufacturer: syz [ 79.104533][ T10] usb 8-1: SerialNumber: syz [ 79.109456][ T7262] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.111984][ T7262] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.117921][ T10] usb 8-1: Expected 3 endpoints, found: 2 [ 79.167764][ T7286] xt_HMARK: spi-set and port-set can't be combined [ 79.185651][ T7286] xfrm0 speed is unknown, defaulting to 1000 [ 79.317855][ T5992] usb 8-1: USB disconnect, device number 9 [ 79.528365][ T7291] hpfs: Bad magic ... probably not HPFS [ 79.632004][ T7298] bridge35: the hash_elasticity option has been deprecated and is always 16 [ 79.642097][ T7299] bridge36: the hash_elasticity option has been deprecated and is always 16 [ 79.772968][ T7305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.361'. [ 80.191223][ T7324] openvswitch: netlink: IP tunnel dst address not specified [ 80.372702][ T40] kauditd_printk_skb: 861 callbacks suppressed [ 80.372716][ T40] audit: type=1400 audit(1771736020.180:2629): avc: denied { read write } for pid=7337 comm="syz.2.372" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.387055][ T40] audit: type=1400 audit(1771736020.180:2630): avc: denied { read write open } for pid=7337 comm="syz.2.372" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.397542][ T40] audit: type=1400 audit(1771736020.180:2631): avc: denied { ioctl } for pid=7337 comm="syz.2.372" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.417987][ T7341] syzkaller0: entered promiscuous mode [ 80.420144][ T7341] syzkaller0: entered allmulticast mode [ 80.429331][ T40] audit: type=1400 audit(1771736020.240:2632): avc: denied { read write } for pid=5926 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.437747][ T40] audit: type=1400 audit(1771736020.240:2633): avc: denied { open } for pid=5926 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.446783][ T40] audit: type=1400 audit(1771736020.240:2634): avc: denied { ioctl } for pid=5926 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.455434][ T40] audit: type=1400 audit(1771736020.260:2635): avc: denied { create } for pid=7340 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.463770][ T40] audit: type=1400 audit(1771736020.260:2636): avc: denied { write } for pid=7340 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.468813][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 80.471051][ T40] audit: type=1400 audit(1771736020.280:2637): avc: denied { create } for pid=7342 comm="syz.1.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.481535][ T40] audit: type=1400 audit(1771736020.280:2638): avc: denied { create } for pid=7342 comm="syz.1.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.872820][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 80.989278][ T7385] xt_connbytes: Forcing CT accounting to be enabled [ 81.022272][ T7385] ufs: You didn't specify the type of your ufs filesystem [ 81.022272][ T7385] [ 81.022272][ T7385] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 81.022272][ T7385] [ 81.022272][ T7385] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 81.032472][ T7385] ufs: failed to set blocksize [ 81.296988][ T5928] Bluetooth: unknown link type 255 [ 81.298869][ T5928] Bluetooth: hci3: connection err: -111 [ 81.307272][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 81.413959][ T7423] netlink: 32 bytes leftover after parsing attributes in process `syz.3.396'. [ 81.746386][ T7449] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 81.786751][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.790879][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.799919][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.803779][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.940252][ T7451] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 81.979084][ T7451] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 81.983875][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.403'. [ 81.988997][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 81.989426][ T7451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.027638][ T7460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.404'. [ 82.050375][ T7460] bond1 (unregistering): Released all slaves [ 82.109310][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 82.345876][ T39] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 82.451018][ T7482] syz.0.412 (7482): /proc/7480/oom_adj is deprecated, please use /proc/7480/oom_score_adj instead. [ 82.506159][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 82.510625][ T39] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 82.514212][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.524153][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.528610][ T39] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 82.532947][ T39] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 82.538583][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.546203][ T39] usb 8-1: config 0 descriptor?? [ 82.594681][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 82.598865][ T7493] Cannot find add_set index 46338 as target [ 82.652397][ T7496] random: crng reseeded on system resumption [ 82.886799][ T7509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7509 comm=syz.2.420 [ 82.921674][ T7506] bond2: invalid ARP target 0.0.0.0 specified for addition [ 82.924392][ T7506] bond2: option arp_ip_target: invalid value (0) [ 82.927925][ T7506] bond2 (unregistering): Released all slaves [ 82.964679][ T39] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.0003/input/input9 [ 83.030385][ T39] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.0003/input/input10 [ 83.103441][ T39] kye 0003:0458:5013.0003: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 83.160579][ T57] usb 8-1: USB disconnect, device number 10 [ 83.177447][ T1125] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 83.181218][ T1125] sr 2:0:0:0: [sr0] tag#22 Sense Key : Illegal Request [current] [ 83.186257][ T1125] sr 2:0:0:0: [sr0] tag#22 Add. Sense: Invalid command operation code [ 83.189670][ T1125] sr 2:0:0:0: [sr0] tag#22 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 83.192602][ T1125] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 83.197231][ T1125] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 83.215980][ T5937] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 83.219719][ T5928] Bluetooth: hci0: command 0x0401 tx timeout [ 83.359912][ T7522] overlayfs: failed to resolve '/$e': -2 [ 83.640001][ T7546] program syz.2.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.800156][ T7562] netlink: 'syz.3.433': attribute type 1 has an invalid length. [ 83.843012][ T7562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.877160][ T7562] bond1: (slave veth3): Enslaving as an active interface with a down link [ 83.892784][ T7562] bond1: (slave dummy0): making interface the new active one [ 83.896534][ T7562] dummy0: entered promiscuous mode [ 83.899198][ T7562] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 83.903418][ T7562] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 83.907514][ T7562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.433'. [ 83.911744][ T7562] bond1: (slave dummy0): Releasing active interface [ 84.028020][ T7576] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 84.081995][ T7576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.438'. [ 84.143390][ T7588] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 84.342570][ T7592] NILFS (nbd0): device size too small [ 84.535053][ T7590] tmpfs: Unknown parameter 'fsmagic' [ 84.675441][ T7633] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 84.711535][ T7636] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 84.713007][ T7633] bond2: (slave geneve2): making interface the new active one [ 84.720031][ T7633] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 84.722936][ T87] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.726608][ T87] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.730843][ T87] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.733851][ T87] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 85.018853][ T7649] __nla_validate_parse: 1 callbacks suppressed [ 85.018872][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 85.045641][ T7655] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 85.047982][ T7655] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.053733][ T7655] vhci_hcd vhci_hcd.0: Device attached [ 85.074821][ T7656] vhci_hcd: connection closed [ 85.083123][ T12] vhci_hcd vhci_hcd.1: stop threads [ 85.089162][ T12] vhci_hcd vhci_hcd.1: release socket [ 85.092424][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 85.130944][ T7668] loop4: detected capacity change from 0 to 7 [ 85.141562][ T7668] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.146530][ T7668] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.149533][ T7668] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.152692][ T7668] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.155854][ T7668] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.158825][ T7668] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.161871][ T7668] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.165545][ T7668] ldm_validate_partition_table(): Disk read failed. [ 85.168905][ T7668] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.171960][ T7668] Buffer I/O error on dev loop4, logical block 0, async page read [ 85.175406][ T7668] Dev loop4: unable to read RDB block 0 [ 85.179865][ T7668] loop4: unable to read partition table [ 85.186524][ T7668] loop4: partition table beyond EOD, truncated [ 85.189772][ T7668] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 85.201375][ T7668] devtmpfs: Unknown parameter 'usrquopa_block_har' [ 85.264513][ T7676] i2c i2c-1: Invalid block write size 34 [ 85.378308][ T40] kauditd_printk_skb: 1025 callbacks suppressed [ 85.378328][ T40] audit: type=1400 audit(1771736025.190:3664): avc: denied { read write } for pid=7682 comm="syz.0.471" name="vsock" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.389970][ T40] audit: type=1400 audit(1771736025.190:3665): avc: denied { read write } for pid=7683 comm="syz.3.472" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.402241][ T40] audit: type=1400 audit(1771736025.190:3666): avc: denied { open } for pid=7683 comm="syz.3.472" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.411377][ T40] audit: type=1400 audit(1771736025.190:3667): avc: denied { ioctl } for pid=7683 comm="syz.3.472" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.421522][ T40] audit: type=1400 audit(1771736025.190:3668): avc: denied { read write } for pid=7683 comm="syz.3.472" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.431478][ T40] audit: type=1400 audit(1771736025.190:3669): avc: denied { open } for pid=7683 comm="syz.3.472" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.440936][ T40] audit: type=1400 audit(1771736025.190:3670): avc: denied { read open } for pid=7682 comm="syz.0.471" path="/dev/vsock" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.448471][ T40] audit: type=1400 audit(1771736025.210:3671): avc: denied { ioctl } for pid=7682 comm="syz.0.471" path="/dev/vsock" dev="devtmpfs" ino=1339 ioctlcmd=0x5100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.454501][ T7689] netlink: 496 bytes leftover after parsing attributes in process `syz.3.474'. [ 85.458837][ T40] audit: type=1400 audit(1771736025.210:3672): avc: denied { read write } for pid=7682 comm="syz.0.471" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.470781][ T40] audit: type=1400 audit(1771736025.210:3673): avc: denied { open } for pid=7682 comm="syz.0.471" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.473521][ T7688] block nbd0: NBD_DISCONNECT [ 85.660440][ T7700] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 85.665875][ T830] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 85.774150][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 85.778073][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 85.826125][ T830] usb 6-1: Using ep0 maxpacket: 8 [ 85.831233][ T830] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 85.834563][ T830] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 85.838887][ T830] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.844512][ T830] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.847999][ T830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.850591][ T830] usb 6-1: Product: syz [ 85.851916][ T830] usb 6-1: Manufacturer: syz [ 85.853441][ T830] usb 6-1: SerialNumber: syz [ 85.946090][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.978873][ T5937] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 86.079568][ T830] usb 6-1: 0:2 : does not exist [ 86.111761][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 86.117179][ T830] usb 6-1: USB disconnect, device number 3 [ 86.119859][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.125943][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.129678][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 86.134441][ T9] usb 5-1: Product: syz [ 86.140216][ T9] usb 5-1: Manufacturer: syz [ 86.146132][ T9] usb 5-1: SerialNumber: syz [ 86.149540][ T9] usb 5-1: config 0 descriptor?? [ 86.156212][ T9] usb 5-1: selecting invalid altsetting 0 [ 86.354686][ T6020] usb 5-1: USB disconnect, device number 4 [ 86.614949][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 86.652362][ T7726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.668527][ T861] cfg80211: failed to load regulatory.db [ 86.809065][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 86.887547][ T7740] bond3: up delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 86.891349][ T7740] bond3: entered allmulticast mode [ 86.899502][ T7740] bond3: up delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 87.046798][ T7757] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 87.198299][ T7765] nbd: socks must be embedded in a SOCK_ITEM attr [ 87.352281][ T7772] xfrm0 speed is unknown, defaulting to 1000 [ 87.490026][ T7784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.501'. [ 87.792421][ T7802] veth1_macvtap: left promiscuous mode [ 87.794381][ T7802] macsec0: entered promiscuous mode [ 87.796501][ T7802] macsec0: entered allmulticast mode [ 87.873710][ T7812] binder: 7811:7812 ioctl c0306201 200000000040 returned -14 [ 87.884631][ T7812] : entered promiscuous mode [ 87.896006][ T830] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 88.004807][ T7821] ptrace attach of "/syz-executor exec"[5923] was attempted by ""[7821] [ 88.057001][ T830] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 88.064400][ T830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.071064][ T830] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 88.082863][ T830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.088143][ T830] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 88.093340][ T830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.097702][ T830] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 88.112650][ T830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.117903][ T830] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 88.123179][ T830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.130097][ T7837] cgroup: Invalid name [ 88.132218][ T830] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 88.134304][ T7837] cgroup: Invalid name [ 88.142530][ T7837] cgroup: Invalid name [ 88.144496][ T7837] cgroup: Invalid name [ 88.147244][ T7837] cgroup: Invalid name [ 88.147951][ T830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.148791][ T7837] cgroup: Invalid name [ 88.152778][ T830] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 88.155536][ T7837] cgroup: Invalid name [ 88.162313][ T7837] cgroup: Invalid name [ 88.164548][ T7837] cgroup: Invalid name [ 88.166803][ T7837] cgroup: Invalid name [ 88.168001][ T830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.168631][ T7837] cgroup: Invalid name [ 88.172450][ T830] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 88.174588][ T7837] cgroup: Invalid name [ 88.181546][ T830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.181875][ T7837] cgroup: Invalid name [ 88.185543][ T830] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 88.187665][ T7837] cgroup: Invalid name [ 88.192638][ T7837] cgroup: Invalid name [ 88.194275][ T830] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 88.195373][ T7837] cgroup: Invalid name [ 88.198414][ T830] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 88.202734][ T830] usb 8-1: Product: syz [ 88.204032][ T830] usb 8-1: Manufacturer: syz [ 88.205588][ T830] usb 8-1: SerialNumber: syz [ 88.211704][ T830] usb 8-1: config 0 descriptor?? [ 88.338763][ T7848] netlink: 168 bytes leftover after parsing attributes in process `syz.1.520'. [ 88.341877][ T7852] binder: Binderfs stats mode cannot be changed during a remount [ 88.346952][ T7848] netlink: 56 bytes leftover after parsing attributes in process `syz.1.520'. [ 88.408397][ T7859] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 88.463245][ T5928] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 88.558727][ T830] usb 8-1: USB disconnect, device number 11 [ 88.700377][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 88.709315][ T46] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.713969][ T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.725858][ T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.729554][ T46] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.745863][ T5992] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 88.931009][ T5992] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 88.933969][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.945150][ T5992] usb 6-1: Product: syz [ 88.947496][ T5992] usb 6-1: Manufacturer: syz [ 88.949017][ T5992] usb 6-1: SerialNumber: syz [ 88.956706][ T5992] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.957505][ T7902] gfs2: error -5 reading superblock [ 88.981888][ T6851] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.033581][ T7904] overlayfs: upper fs does not support file handles, falling back to index=off. [ 89.193923][ T7913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.217180][ T6105] usb 6-1: USB disconnect, device number 4 [ 89.254370][ T7915] binder: 7914:7915 ioctl c0306201 2000000003c0 returned -22 [ 89.956718][ T7944] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 89.982183][ T7944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.001563][ T7944] bond1: (slave gretap1): making interface the new active one [ 90.006974][ T7944] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 90.015905][ T6851] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 90.018391][ T6851] ath9k_htc: Failed to initialize the device [ 90.022839][ T6105] usb 6-1: ath9k_htc: USB layer deinitialized [ 90.415853][ T5937] Bluetooth: hci3: command 0x0405 tx timeout [ 90.489475][ T40] kauditd_printk_skb: 1038 callbacks suppressed [ 90.489489][ T40] audit: type=1400 audit(90.403:4712): avc: denied { read write } for pid=5923 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.500285][ T40] audit: type=1400 audit(90.403:4713): avc: denied { open } for pid=5923 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.508246][ T40] audit: type=1400 audit(90.403:4714): avc: denied { ioctl } for pid=5923 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.522123][ T40] audit: type=1400 audit(90.433:4715): avc: denied { prog_load } for pid=7956 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.528507][ T40] audit: type=1400 audit(90.433:4716): avc: denied { bpf } for pid=7956 comm="syz.0.554" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.534833][ T40] audit: type=1400 audit(90.433:4717): avc: denied { prog_load } for pid=7956 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.541156][ T40] audit: type=1400 audit(90.433:4718): avc: denied { perfmon } for pid=7956 comm="syz.0.554" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.548077][ T40] audit: type=1400 audit(90.433:4719): avc: denied { prog_run } for pid=7956 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.554055][ T40] audit: type=1400 audit(90.443:4720): avc: denied { read write } for pid=7956 comm="syz.0.554" name="video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.562114][ T40] audit: type=1400 audit(90.443:4721): avc: denied { open } for pid=7956 comm="syz.0.554" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.924887][ T7967] faux_driver vgem: [drm] Unknown color mode 727; guessing buffer size. [ 90.932277][ T7967] __nla_validate_parse: 5 callbacks suppressed [ 90.932288][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 91.020150][ T7969] netlink: 'syz.0.558': attribute type 32 has an invalid length. [ 91.688171][ T8010] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 91.748509][ T8019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=8019 comm=syz.0.572 [ 91.765947][ T8016] input: syz0 as /devices/virtual/input/input12 [ 91.804306][ T8021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.811625][ T8021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.055916][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.215865][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 92.218896][ T10] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.222002][ T10] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.226001][ T10] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.230193][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 92.234124][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 92.237145][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.239658][ T10] usb 5-1: Product: syz [ 92.241006][ T10] usb 5-1: Manufacturer: syz [ 92.242613][ T10] usb 5-1: SerialNumber: syz [ 92.457329][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 92.710248][ T8021] usblp0:failed reading printer status (-32) [ 92.723598][ T10] usb 5-1: USB disconnect, device number 5 [ 92.729505][ T10] usblp0: removed [ 92.900106][ T8041] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 92.919407][ T8041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.949238][ T8041] bond2: (slave veth5): Enslaving as an active interface with a down link [ 92.963617][ T8041] vlan2: entered allmulticast mode [ 92.965629][ T8041] bond2: entered allmulticast mode [ 92.970202][ T8041] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 93.011543][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 93.015499][ T8043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.578'. [ 93.055250][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 93.059382][ T8045] netlink: 3 bytes leftover after parsing attributes in process `syz.1.579'. [ 93.314369][ T8053] new mount options do not match the existing superblock, will be ignored [ 93.345207][ T8055] netlink: 'syz.2.583': attribute type 2 has an invalid length. [ 93.349117][ T8055] netlink: 44 bytes leftover after parsing attributes in process `syz.2.583'. [ 93.408403][ T8065] smc: net device hsr0 applied user defined pnetid SYZ2 [ 93.412939][ T8065] smc: net device hsr0 erased user defined pnetid SYZ2 [ 93.535873][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.546604][ T8083] misc userio: The device must be registered before sending interrupts [ 93.626711][ T8091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8091 comm=syz.0.593 [ 93.644156][ T8097] binder: 8095:8097 ioctl 400c620e 200000000100 returned -22 [ 93.811265][ T8110] geneve2: entered promiscuous mode [ 94.017363][ T8119] mmap: syz.3.606 (8119) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.093272][ T8133] tmpfs: Unknown parameter 'usrquotaZ' [ 94.100308][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 94.229582][ T8151] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 94.233873][ T8151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.293700][ T8163] program syz.1.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.294224][ T8159] FAULT_INJECTION: forcing a failure. [ 94.294224][ T8159] name failslab, interval 1, probability 0, space 0, times 1 [ 94.303262][ T8159] CPU: 0 UID: 0 PID: 8159 Comm: syz.2.616 Not tainted syzkaller #0 PREEMPT(full) [ 94.303284][ T8159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.303294][ T8159] Call Trace: [ 94.303300][ T8159] [ 94.303305][ T8159] dump_stack_lvl+0x100/0x190 [ 94.303480][ T8159] should_fail_ex.cold+0x5/0xa [ 94.303510][ T8159] should_failslab+0xc2/0x120 [ 94.303560][ T8159] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 94.303602][ T8159] ? copy_process+0x48b/0x7a10 [ 94.303646][ T8159] ? mark_held_locks+0x40/0x70 [ 94.303681][ T8159] copy_process+0x48b/0x7a10 [ 94.303702][ T8159] ? __pfx_copy_process+0x10/0x10 [ 94.303719][ T8159] ? lockdep_init_map_type+0x5c/0x250 [ 94.303737][ T8159] ? lockdep_init_map_type+0x5c/0x250 [ 94.303756][ T8159] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 94.303785][ T8159] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 94.303801][ T8159] vhost_task_create+0x1db/0x370 [ 94.303830][ T8159] ? __pfx_vhost_task_create+0x10/0x10 [ 94.303841][ T8159] ? trace_contention_end+0x140/0x180 [ 94.303856][ T8159] ? __pfx_vhost_task_fn+0x10/0x10 [ 94.303869][ T8159] ? __pfx___mutex_lock+0x10/0x10 [ 94.303927][ T8159] ? kasan_quarantine_put+0x104/0x240 [ 94.303946][ T8159] ? lockdep_hardirqs_on+0x78/0x100 [ 94.303960][ T8159] kvm_mmu_post_init_vm+0x1b3/0x370 [ 94.303974][ T8159] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 94.304003][ T8159] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 94.304054][ T8159] kvm_vcpu_ioctl+0x730/0x1730 [ 94.304071][ T8159] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.304087][ T8159] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.304124][ T8159] ? do_vfs_ioctl+0x226/0x13e0 [ 94.304158][ T8159] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.304174][ T8159] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 94.304250][ T8159] ? __fget_files+0x215/0x3d0 [ 94.304264][ T8159] ? hook_file_ioctl_common+0x146/0x410 [ 94.304286][ T8159] ? selinux_file_ioctl+0x139/0x290 [ 94.304300][ T8159] ? selinux_file_ioctl+0xb4/0x290 [ 94.304319][ T8159] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.304342][ T8159] __x64_sys_ioctl+0x18e/0x210 [ 94.304364][ T8159] do_syscall_64+0x106/0xf80 [ 94.304379][ T8159] ? clear_bhb_loop+0x40/0x90 [ 94.304395][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.304411][ T8159] RIP: 0033:0x7f6ac139c629 [ 94.304441][ T8159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.304456][ T8159] RSP: 002b:00007f6ac2329028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.304489][ T8159] RAX: ffffffffffffffda RBX: 00007f6ac1615fa0 RCX: 00007f6ac139c629 [ 94.304499][ T8159] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 94.304508][ T8159] RBP: 00007f6ac2329090 R08: 0000000000000000 R09: 0000000000000000 [ 94.304519][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.304528][ T8159] R13: 00007f6ac1616038 R14: 00007f6ac1615fa0 R15: 00007ffe49d03108 [ 94.304549][ T8159] [ 94.732076][ T8191] netlink: 36 bytes leftover after parsing attributes in process `syz.0.625'. [ 94.790227][ T8191] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 94.859266][ T8204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.959441][ T8212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.966969][ T8213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.978320][ T8212] x_tables: duplicate underflow at hook 2 [ 95.008728][ T8216] FAULT_INJECTION: forcing a failure. [ 95.008728][ T8216] name failslab, interval 1, probability 0, space 0, times 0 [ 95.015319][ T8216] CPU: 2 UID: 0 PID: 8216 Comm: syz.2.630 Not tainted syzkaller #0 PREEMPT(full) [ 95.015335][ T8216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.015342][ T8216] Call Trace: [ 95.015346][ T8216] [ 95.015351][ T8216] dump_stack_lvl+0x100/0x190 [ 95.015373][ T8216] should_fail_ex.cold+0x5/0xa [ 95.015387][ T8216] ? lsm_blob_alloc+0x68/0x90 [ 95.015420][ T8216] should_failslab+0xc2/0x120 [ 95.015437][ T8216] __kmalloc_noprof+0xe0/0x850 [ 95.015452][ T8216] ? audit_alloc+0xa2/0x7b0 [ 95.015471][ T8216] lsm_blob_alloc+0x68/0x90 [ 95.015486][ T8216] security_task_alloc+0x2a/0x260 [ 95.015500][ T8216] copy_process+0x2531/0x7a10 [ 95.015523][ T8216] ? __pfx_copy_process+0x10/0x10 [ 95.015539][ T8216] ? lockdep_init_map_type+0x5c/0x250 [ 95.015559][ T8216] ? lockdep_init_map_type+0x5c/0x250 [ 95.015578][ T8216] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 95.015596][ T8216] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 95.015612][ T8216] vhost_task_create+0x1db/0x370 [ 95.015625][ T8216] ? __pfx_vhost_task_create+0x10/0x10 [ 95.015637][ T8216] ? trace_contention_end+0x140/0x180 [ 95.015651][ T8216] ? __pfx_vhost_task_fn+0x10/0x10 [ 95.015665][ T8216] ? __pfx___mutex_lock+0x10/0x10 [ 95.015677][ T8216] ? kasan_quarantine_put+0x104/0x240 [ 95.015692][ T8216] ? lockdep_hardirqs_on+0x78/0x100 [ 95.015706][ T8216] kvm_mmu_post_init_vm+0x1b3/0x370 [ 95.015719][ T8216] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 95.015733][ T8216] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 95.015769][ T8216] kvm_vcpu_ioctl+0x730/0x1730 [ 95.015789][ T8216] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 95.015811][ T8216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.015833][ T8216] ? do_vfs_ioctl+0x226/0x13e0 [ 95.015850][ T8216] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 95.015865][ T8216] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 95.015888][ T8216] ? __fget_files+0x215/0x3d0 [ 95.015901][ T8216] ? hook_file_ioctl_common+0x146/0x410 [ 95.015928][ T8216] ? selinux_file_ioctl+0x139/0x290 [ 95.015940][ T8216] ? selinux_file_ioctl+0xb4/0x290 [ 95.015953][ T8216] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 95.015969][ T8216] __x64_sys_ioctl+0x18e/0x210 [ 95.015985][ T8216] do_syscall_64+0x106/0xf80 [ 95.015996][ T8216] ? clear_bhb_loop+0x40/0x90 [ 95.016010][ T8216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.016021][ T8216] RIP: 0033:0x7f6ac139c629 [ 95.016031][ T8216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.016042][ T8216] RSP: 002b:00007f6ac2329028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.016059][ T8216] RAX: ffffffffffffffda RBX: 00007f6ac1615fa0 RCX: 00007f6ac139c629 [ 95.016066][ T8216] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 95.016072][ T8216] RBP: 00007f6ac2329090 R08: 0000000000000000 R09: 0000000000000000 [ 95.016078][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.016085][ T8216] R13: 00007f6ac1616038 R14: 00007f6ac1615fa0 R15: 00007ffe49d03108 [ 95.016111][ T8216] [ 95.115885][ T8148] ------------[ cut here ]------------ [ 95.129108][ T8148] [CRTC:37:crtc-0] vblank wait timed out [ 95.131216][ T8148] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1921 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#3: syz.3.613/8148 [ 95.136480][ T8148] Modules linked in: [ 95.138523][ T8148] CPU: 3 UID: 0 PID: 8148 Comm: syz.3.613 Not tainted syzkaller #0 PREEMPT(full) [ 95.142301][ T8148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.145828][ T8148] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 95.148465][ T8148] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 68 fb 41 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 f3 2a 66 fc e9 7c fe ff ff e8 d9 [ 95.154866][ T8148] RSP: 0018:ffffc90003c07580 EFLAGS: 00010246 [ 95.157215][ T8148] RAX: 0000000000000000 RBX: ffff888100f40040 RCX: 1ffff110201e8023 [ 95.159890][ T8148] RDX: ffff8880271bba00 RSI: 0000000000000025 RDI: ffffffff90e46c60 [ 95.162460][ T8148] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 95.165008][ T8148] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 95.167830][ T8148] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888037cb9c00 [ 95.170378][ T8148] FS: 00007f7ea6d976c0(0000) GS:ffff8880d6647000(0000) knlGS:0000000000000000 [ 95.173432][ T8148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.176235][ T8148] CR2: 000055d4278f5da8 CR3: 000000005a857000 CR4: 0000000000352ef0 [ 95.178816][ T8148] Call Trace: [ 95.179932][ T8148] [ 95.180946][ T8148] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 95.183458][ T8148] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 95.185451][ T8148] ? lockdep_hardirqs_on+0x78/0x100 [ 95.187277][ T8148] ? __pfx_autoremove_wake_function+0x10/0x10 [ 95.189378][ T8148] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 95.191537][ T8148] drm_atomic_helper_commit_tail+0xff/0x130 [ 95.193547][ T8148] commit_tail+0x338/0x430 [ 95.195057][ T8148] drm_atomic_helper_commit+0x303/0x380 [ 95.197138][ T8148] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 95.199136][ T8148] drm_atomic_commit+0x230/0x300 [ 95.201105][ T8148] ? __pfx_drm_atomic_commit+0x10/0x10 [ 95.203034][ T8148] ? __pfx___drm_printfn_info+0x10/0x10 [ 95.204949][ T8148] ? drm_client_rotation+0x451/0x6a0 [ 95.207104][ T8148] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 95.209208][ T8148] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 95.211457][ T8148] drm_client_modeset_commit_locked+0x14d/0x580 [ 95.213672][ T8148] drm_client_modeset_commit+0x4f/0x80 [ 95.215512][ T8148] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 95.218192][ T8148] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 95.220407][ T8148] drm_fbdev_client_restore+0x1b/0x30 [ 95.222264][ T8148] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 95.224249][ T8148] drm_client_dev_restore+0x205/0x2a0 [ 95.226127][ T8148] drm_release+0x2c6/0x360 [ 95.227623][ T8148] ? __pfx_drm_release+0x10/0x10 [ 95.229272][ T8148] __fput+0x3ff/0xb40 [ 95.230632][ T8148] task_work_run+0x150/0x240 [ 95.232153][ T8148] ? __pfx_task_work_run+0x10/0x10 [ 95.233850][ T8148] get_signal+0x1bd/0x21e0 [ 95.235351][ T8148] ? __pfx_get_signal+0x10/0x10 [ 95.237428][ T8148] ? task_work_add+0x201/0x3b0 [ 95.239105][ T8148] arch_do_signal_or_restart+0x91/0x7a0 [ 95.241001][ T8148] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 95.243119][ T8148] ? selinux_file_ioctl+0x139/0x290 [ 95.244831][ T8148] ? selinux_file_ioctl+0xb4/0x290 [ 95.246666][ T8148] exit_to_user_mode_loop+0x86/0x4a0 [ 95.248461][ T8148] do_syscall_64+0x67c/0xf80 [ 95.250006][ T8148] ? clear_bhb_loop+0x40/0x90 [ 95.251588][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.253689][ T8148] RIP: 0033:0x7f7ea5f9c629 [ 95.255256][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.261715][ T8148] RSP: 002b:00007f7ea6d97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.264508][ T8148] RAX: fffffffffffffe00 RBX: 00007f7ea6215fa0 RCX: 00007f7ea5f9c629 [ 95.267282][ T8148] RDX: 0000200000000180 RSI: 00000000c03064ca RDI: 0000000000000003 [ 95.270018][ T8148] RBP: 00007f7ea6032b39 R08: 0000000000000000 R09: 0000000000000000 [ 95.272675][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.275279][ T8148] R13: 00007f7ea6216038 R14: 00007f7ea6215fa0 R15: 00007fff12014be8 [ 95.278060][ T8148] [ 95.279223][ T8148] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.281625][ T8148] CPU: 3 UID: 0 PID: 8148 Comm: syz.3.613 Not tainted syzkaller #0 PREEMPT(full) [ 95.284570][ T8148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.287863][ T8148] Call Trace: [ 95.288970][ T8148] [ 95.289953][ T8148] dump_stack_lvl+0x100/0x190 [ 95.291506][ T8148] vpanic+0x552/0x970 [ 95.292926][ T8148] ? __pfx_vpanic+0x10/0x10 [ 95.294393][ T8148] panic+0xd1/0xe0 [ 95.295667][ T8148] ? __pfx_panic+0x10/0x10 [ 95.297210][ T8148] ? check_panic_on_warn+0x1f/0x90 [ 95.298893][ T8148] check_panic_on_warn.cold+0x19/0x34 [ 95.300645][ T8148] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 95.303070][ T8148] __warn.cold+0x191/0x348 [ 95.304524][ T8148] __report_bug+0x296/0x3d0 [ 95.306036][ T8148] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 95.308361][ T8148] ? __pfx___report_bug+0x10/0x10 [ 95.310115][ T8148] ? lockdep_hardirqs_on+0x78/0x100 [ 95.311828][ T8148] report_bug_entry+0xe1/0x290 [ 95.313489][ T8148] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 95.315851][ T8148] handle_bug+0x1c9/0x2a0 [ 95.317330][ T8148] exc_invalid_op+0x17/0x50 [ 95.318888][ T8148] asm_exc_invalid_op+0x1a/0x20 [ 95.320500][ T8148] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 95.323154][ T8148] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 68 fb 41 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 f3 2a 66 fc e9 7c fe ff ff e8 d9 [ 95.329626][ T8148] RSP: 0018:ffffc90003c07580 EFLAGS: 00010246 [ 95.331618][ T8148] RAX: 0000000000000000 RBX: ffff888100f40040 RCX: 1ffff110201e8023 [ 95.334313][ T8148] RDX: ffff8880271bba00 RSI: 0000000000000025 RDI: ffffffff90e46c60 [ 95.337022][ T8148] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 95.339663][ T8148] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 95.342258][ T8148] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888037cb9c00 [ 95.344887][ T8148] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 95.347471][ T8148] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 95.349420][ T8148] ? lockdep_hardirqs_on+0x78/0x100 [ 95.351167][ T8148] ? __pfx_autoremove_wake_function+0x10/0x10 [ 95.353197][ T8148] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 95.355408][ T8148] drm_atomic_helper_commit_tail+0xff/0x130 [ 95.357527][ T8148] commit_tail+0x338/0x430 [ 95.359018][ T8148] drm_atomic_helper_commit+0x303/0x380 [ 95.360867][ T8148] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 95.362921][ T8148] drm_atomic_commit+0x230/0x300 [ 95.364583][ T8148] ? __pfx_drm_atomic_commit+0x10/0x10 [ 95.366490][ T8148] ? __pfx___drm_printfn_info+0x10/0x10 [ 95.368336][ T8148] ? drm_client_rotation+0x451/0x6a0 [ 95.370111][ T8148] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 95.372211][ T8148] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 95.374527][ T8148] drm_client_modeset_commit_locked+0x14d/0x580 [ 95.376665][ T8148] drm_client_modeset_commit+0x4f/0x80 [ 95.378542][ T8148] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 95.381065][ T8148] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 95.383334][ T8148] drm_fbdev_client_restore+0x1b/0x30 [ 95.385130][ T8148] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 95.387258][ T8148] drm_client_dev_restore+0x205/0x2a0 [ 95.389073][ T8148] drm_release+0x2c6/0x360 [ 95.390558][ T8148] ? __pfx_drm_release+0x10/0x10 [ 95.392182][ T8148] __fput+0x3ff/0xb40 [ 95.393573][ T8148] task_work_run+0x150/0x240 [ 95.395094][ T8148] ? __pfx_task_work_run+0x10/0x10 [ 95.396809][ T8148] get_signal+0x1bd/0x21e0 [ 95.398287][ T8148] ? __pfx_get_signal+0x10/0x10 [ 95.399876][ T8148] ? task_work_add+0x201/0x3b0 [ 95.401474][ T8148] arch_do_signal_or_restart+0x91/0x7a0 [ 95.403298][ T8148] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 95.405509][ T8148] ? selinux_file_ioctl+0x139/0x290 [ 95.407357][ T8148] ? selinux_file_ioctl+0xb4/0x290 [ 95.409100][ T8148] exit_to_user_mode_loop+0x86/0x4a0 [ 95.411040][ T8148] do_syscall_64+0x67c/0xf80 [ 95.412659][ T8148] ? clear_bhb_loop+0x40/0x90 [ 95.414738][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.417277][ T8148] RIP: 0033:0x7f7ea5f9c629 [ 95.418910][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.425746][ T8148] RSP: 002b:00007f7ea6d97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.428469][ T8148] RAX: fffffffffffffe00 RBX: 00007f7ea6215fa0 RCX: 00007f7ea5f9c629 [ 95.431022][ T8148] RDX: 0000200000000180 RSI: 00000000c03064ca RDI: 0000000000000003 [ 95.433997][ T8148] RBP: 00007f7ea6032b39 R08: 0000000000000000 R09: 0000000000000000 [ 95.437477][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.441002][ T8148] R13: 00007f7ea6216038 R14: 00007f7ea6215fa0 R15: 00007fff12014be8 [ 95.444424][ T8148] [ 95.446561][ T8148] Kernel Offset: disabled [ 95.448444][ T8148] Rebooting in 86400 seconds..