last executing test programs: 1.129570514s ago: executing program 0 (id=629): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x4) accept4(r0, &(0x7f00000001c0)=@hci, &(0x7f0000000240)=0x80, 0x80000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000101401002cbd7000fedbdf25080003000100000008004a0001000000080001000000000008004b001300100008004c0001000000b0d9500510efcdb4f364a131a53d9835cc8a8aeaa94660ef6a37d4b5bc5329e301368206b5225207c86883149bfcd94fb915e7a8331a5a199699df86b229248da5db358bbe74bdc9e4d43f3c71a705efc8acf89f2764538ba2c55194104a79336654f31826b51bb71d146a0db446572e44"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xadec8bef09c7803b}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 879.287418ms ago: executing program 1 (id=636): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000080)="ee", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r2}, &(0x7f0000000240)=""/121, 0x79, &(0x7f0000000200)={&(0x7f0000000140)={'sha256-avx\x00'}}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 740.165663ms ago: executing program 1 (id=640): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r0, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 735.342207ms ago: executing program 1 (id=641): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) rt_sigsuspend(0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000140)={0x0, "13f20afd86c17f9dfa507069d5076684154bc7ec29050001bd8e5900", 0x2, 0x11, 0x0, 0x0, 0x4, 0x0, 0x40, 0x1}) (async) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000140)={0x0, "13f20afd86c17f9dfa507069d5076684154bc7ec29050001bd8e5900", 0x2, 0x11, 0x0, 0x0, 0x4, 0x0, 0x40, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x80, 0xd, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000888}, 0x4010) preadv(r3, &(0x7f0000000780)=[{&(0x7f0000000180)=""/2, 0x2}], 0x1, 0xfffffffd, 0x7) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x70d083, 0x0) (async) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x70d083, 0x0) read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000000340)={0x2020}, 0xcb0a) 610.594544ms ago: executing program 1 (id=645): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x13c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x21a9}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "46e0fc983d329412fb52e0002795d9b66e0746efe7b8108244021dc04fddc282236527ade264ae38c29e23d99837b2c152e9b381bfdc80335e3ef3398c4100188650e4871b"}, @ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "1cf72130031d2195389c5e5239aede9cd0b35fbe87f3cb02c0bf8d674a6fbfe44067a8709f8daef435f4c37187cec7dca9fd27d61d7dfc8da3d74e7a906ea19f0d9efa818f53abc91bb2cd7160929c4d524a0146924023"}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007600110a00400000000000000700000000000000080001000040"], 0x20}}, 0x24004800) 609.534734ms ago: executing program 1 (id=647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x228041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0xd0, 0x0, &(0x7f0000000100)) socket$unix(0x1, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0x7}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 439.678992ms ago: executing program 1 (id=650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=@framed={{}, [@call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x4, 0x0, 0x6000, 0x1000, &(0x7f0000004000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000017000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 369.650519ms ago: executing program 2 (id=654): fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x100) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c010000100013070000000000000000ffffffff0000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000007000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016007d0000"], 0x14c}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x111, 0x2, 0x4, 0x0, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@local, @multicast1, 0x0}, &(0x7f0000000440)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', r4, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x73c}, 0x8) 289.882297ms ago: executing program 2 (id=655): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x1010, r0, 0x23c000) (async) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)) (async) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @none={0x0, 0x1}}, 0x14) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x19) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', r1, 0x4000, r0}, 0x18) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) pread64(r2, &(0x7f0000000200)=""/162, 0xa2, 0x41) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f00000002c0)=0x4, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x44400, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340)=@gcm_128={{0x303}, "19b8fb1def0f4b45", "9b9389c745ca73d4f0dedab7ef365972", "0a7aac57", "b556eaac6cd35aae"}, 0x28) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000380), 0x40400, 0x0) ioctl$CDROMREADMODE1(r4, 0x530d, &(0x7f00000003c0)={0x5, 0x0, 0x1, 0xa0, 0x5, 0x8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = accept(r3, &(0x7f0000000e40)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000ec0)=0x80) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000f00)={0x24, 0x2}) (async) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000f40)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@func={0x10, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x2e, 0x5f, 0x0, 0x5f, 0x0, 0x2e, 0x61]}}, &(0x7f0000001040), 0x2e, 0x0, 0x0, 0xb, 0x0, @void, @value}, 0x28) (async) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000010c0), 0x1) syncfs(r4) (async) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001100), 0x41a573522d83e345, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000001180)={0x5, &(0x7f0000001140)=[{}, {0x0}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f00000011c0)={r8, 0x3}) connect$unix(r5, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001280), 0xc4000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r9, 0x40086425, &(0x7f00000012c0)={r7, 0x2}) (async) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f0000001300)=0xc, 0x1) 287.020944ms ago: executing program 0 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040000000500018006000600800a000008001887010000ffbe626b7bb5a6bb5b6809386e07c315e10151d242ec48ca49a4089928b9281660937476f91db657"], 0x2c}}, 0x8004) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x94, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_notify_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0xffffffffffffff28, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x94}}, 0x10) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) 285.829833ms ago: executing program 0 (id=657): r0 = inotify_init() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0xa0005a4) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x48000, &(0x7f00000000c0)={0x11, 0x2, r3, 0x1, 0x6, 0x6, @random="d0520f38c4ca"}, 0x14) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002100010006bd7000000000000a00000000000000000000000800100018000000259b20d9dcbc9e1e8f98c3a03558bd66bf4fe5515a339d69635ae1d743c54a0aa4cb174b081db7fe28708b04d2b63329ed158939c6badc92be457a8876055ac225e51debcbd24e72aca53512"], 0x24}}, 0x20000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 210.601369ms ago: executing program 0 (id=658): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000000)={0x10, 0x7, 0x1, 0x7}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4}]}]}, 0x13c}}, 0x0) 210.117834ms ago: executing program 2 (id=659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r0, 0x80000000) close_range(r0, 0xffffffffffffffff, 0x0) 205.271474ms ago: executing program 2 (id=660): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000040)) 204.727173ms ago: executing program 2 (id=661): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xcb0a) 147.427263ms ago: executing program 3 (id=662): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x7ff, 0x2d26cc3e, 0x5, 0x1400000, 0x8, 0xb, 0x0, 0x100}) (async) creat(&(0x7f00000005c0)='./file0\x00', 0xecf86c37d53049cc) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc300, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000e, 0x10, r1, 0x100000000) 146.828803ms ago: executing program 2 (id=663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaedf, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x2, "fcd1ca9a0967216a"}}}, 0x10) (async, rerun: 32) landlock_restrict_self(0xffffffffffffffff, 0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5396ebcfacd993b0}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x94, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000014}, 0x54) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8}) 146.027889ms ago: executing program 3 (id=664): ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x25}, 0x60) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x4101, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @local}, 0x2}}, 0x26) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000070000001400080000000000000000000000000000000000050013"], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000050039ad8e1d000008000300", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x4091}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000b00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r10 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0xf8, 0x81, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7800, 0x20, 0xb67f, 0x4}}) r13 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r13, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="bbd4bbbbbbbbaaaaaaaaaa0086dd60003a04001c3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21000080}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x43c, r11, 0x1, 0xf, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_FEATURES_WANTED={0x3ac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "65ec7e0de7ba6804298d65a8f7eb0a6228d35689e1954a7a20ac1bbc0132d891e349173814ce9d801568ecb9b4f46289855c7fccfcaa16ddf72067c3f01646b0209a9e3a20d507c081bfad4afac41a8511970f158966e1ca8da6b278590d10e12a7badb459b265b00e7e7d54c050f38c28918413143acf01d13eb2128b4c67ac419da90c11e615e1f5b3f8f537059eb1c942b170bf86a13efa62dc07c1d7817449b9ee81104ba4fac09cb162ad447ddef713458edbb4e9fc212ccdf5ad09e9a879b37f9d615640cb9ddd7d8f4e6e7c0b5c4578b49aada30d449c6cd3ec783d91dc3971bf0e3e9c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x24}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "9b341e189a3ab14fc437ec86e21941a4cace22170c8ae3ea76a38b74e229ca2f175ff8c732ec606819ea969ec22e22a1c8a0"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "253c4d245043b92f7b95eb462fb15be0a1adb13ef91505923ed4de5843c0d66a8308879b82d20f4254ced8bb97616b8f2186e1fed3c1dce0fab18283f212f7fcf71ee47145c752a73ca7ace22f15853e6a4e076f89941c1ed737eac24346919b71244c63123bfc33800bf3e5bc5cc5db05d542fd55560228df4e4fff1cb842b3341be8e81cfed6d74126cd434f70b0a0cfad8e39e20bd0e2c6fd5ac902df3dba1eda63ee72370003349eccc8740f0364faa2f55e2bb52cb5d98dd53adcac9d1bd162d4f676f63f8d73c6c9936a0724f736db76c8a0891ed655787665"}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '${\xcf#9\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1e, 0x5, "8fc30eb88c94cc9a2a26c59a78344d5efe7b4709c52d0862fc12"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x88a8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!%#f,\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x383}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xa6)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff4df}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40884) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 80.647225ms ago: executing program 0 (id=665): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="8d0000008000"}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f0000000640), 0x100000006, 0x4bc2) ioctl$EVIOCGABS0(r3, 0x80184540, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x4b) (async) mknodat(r0, &(0x7f00000006c0)='./file0\x00', 0x10, 0x7) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000700000000000000000000000100000009000100737b7a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000002f1600000000000c0a010300000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e74657200040002801400018006000100636f756e7465720080040280140000001000010000000000000000000000000a017f52d9e8f822f5190f662aaf1ae399cf53693685475bba677c45c9bb8c71735bb9fcecad923d4ae1ccb110d4bae477765ad9f159b4cfb258618514d7027a7c0a59cabb7b2b44713509c54ee8ce7b7aededeff1b656a3d4e310919be5b77e63f5ed44f74e689c3c774775418c0a0d8623bf4c67d8c878df0348596fe7ee3dcfbf6946806a0a5a5176452ad256ef68e816d0c10c6701902bfdcffcd5bd9d14e632154eeb4543b9de2bc556c873352e18533f983d7f86dd744757a026e67dff4658e05b1bd51dba2c0047592434c7bf5b544d212affe944eddbecc8a5746c7ddb00000000000000"], 0xe4}}, 0x0) (async, rerun: 64) socket(0x2a, 0x1, 0x1) (async, rerun: 64) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000012c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x4800) r10 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r11 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) close_range(r10, r11, 0x0) (async) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) (async) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) (rerun: 64) ioctl$sock_SIOCBRDELBR(r12, 0x89a1, &(0x7f0000000680)='macvlan1\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000080)={0x1d, r14}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, r13, {0xfff8, 0xf}, {0xfff3}, {0xffff, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 80.277767ms ago: executing program 3 (id=666): r0 = socket(0x2c, 0x5, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYRES8=r3, @ANYRESOCT=r2, @ANYRESOCT=r0, @ANYRESHEX=r3, @ANYRES8=r1, @ANYRESDEC=r1], 0x20}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) (async) r5 = signalfd4(r0, &(0x7f0000000180)={[0x96]}, 0x8, 0x80800) (async) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$UHID_CREATE2(r6, 0x0, 0x138) (async) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r7}) 79.936203ms ago: executing program 0 (id=667): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="71b44d", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)='&rc', 0x3}], 0x1}}], 0x2, 0x400c404) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x108) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x1, 0x9c199a8, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r2) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r7, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x20, 0x8, 0xfffffffc}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000000206030000000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000002726b80aebe57f8b51a73e11e558f2ea010339ece3e749e790428df1311029e822731d0dfdda26a8babf872f2dc39b340df02d93ec490f74609dcfaa28a8706d907f78f20159eed20345dd1b364ec427dfbb44"], 0x48}}, 0x0) 75.696159ms ago: executing program 3 (id=668): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @remote, 0x81}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000640)={&(0x7f0000000700)="f266180f6438faf5a4954fda4571a1235ba77a392a39bbf1d719cf8451e8d5f110e34108ab5fa7d9b642dc15d3db2f4ab63bbf07f65bdfac157fc520c839fa7430a59c7c4ca435671cc7d1bbfc398ee26a4c300f74e3e73f6d56add86266604009446ac2a22ba423aaafc714ca0ae4aff4cefd3849d463e177f7f2c48f3f3322002487abfd78aa78309b0d00c052fd02802aeb9b5d5456d2a1eff91069142c21f6c3357bbd19a61c89093b14e4544c503ec1da5048f59bd51c6109481f73357cec08a78e41adb6c006e5dbe65a7cdc2e5a4753", 0xd3, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000900)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000009c0)={0x301, 0x2, &(0x7f0000000800)=[r5, r6], &(0x7f0000000840)=[0x10001, 0x5, 0x8, 0x31b5], &(0x7f0000000940)=[r7], &(0x7f0000000980)=[0x80, 0x2, 0x0, 0x100, 0x2, 0xe647, 0x8000000000000000], 0x0, 0x40}) clock_settime(0x0, &(0x7f0000009ac0)) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 897.477µs ago: executing program 3 (id=669): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000005f4f010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000f616a4a99e45aa1e7d71ae422ba2e4096b0ebdc06a8f2a0236a7a91ec3f13a71ba62efdaf94fb8ec9c972289e2dbead2132350ded1d03234"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r3, 0x7}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=670): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0xd, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x3, 0x4, 0x7aba, 0x2, 0x4, 0x9, 0x4, 0x6]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r3, 0x4200}], 0x1, &(0x7f00000001c0)={r4, r5+10000000}, &(0x7f0000000200)={[0x9]}, 0x8) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000003c0)={0x0, 0xffffffff, 0x12}) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000070000000900000001"], 0x50) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x24, r6, 0xdb43cfec9695d2d7, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): [ 38.272235][ T40] audit: type=1400 audit(1744276565.558:82): avc: denied { siginh } for pid=5867 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.708959][ T40] audit: type=1400 audit(1744276566.018:83): avc: denied { read } for pid=5336 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.715236][ T40] audit: type=1400 audit(1744276566.018:84): avc: denied { append } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.721287][ T40] audit: type=1400 audit(1744276566.018:85): avc: denied { open } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.727360][ T40] audit: type=1400 audit(1744276566.018:86): avc: denied { getattr } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:13941' (ED25519) to the list of known hosts. [ 40.360068][ T40] audit: type=1400 audit(1744276567.668:87): avc: denied { name_bind } for pid=5923 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.234417][ T5925] cgroup: Unknown subsys name 'net' [ 42.338309][ T5925] cgroup: Unknown subsys name 'cpuset' [ 42.341717][ T5925] cgroup: Unknown subsys name 'rlimit' [ 42.526100][ T5932] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.254596][ T5925] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.210703][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 46.210714][ T40] audit: type=1400 audit(1744276573.518:105): avc: denied { execmem } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.397810][ T40] audit: type=1400 audit(1744276573.708:106): avc: denied { create } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.403865][ T40] audit: type=1400 audit(1744276573.708:107): avc: denied { read write } for pid=5938 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.410320][ T40] audit: type=1400 audit(1744276573.708:108): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.417068][ T40] audit: type=1400 audit(1744276573.718:109): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="socket:[6555]" dev="sockfs" ino=6555 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.452730][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.452890][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.454306][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.455995][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.456059][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.456362][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.456764][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.457084][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.458335][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.459694][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.461360][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.467886][ T40] audit: type=1400 audit(1744276573.778:110): avc: denied { read } for pid=5945 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.469994][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.471297][ T40] audit: type=1400 audit(1744276573.778:111): avc: denied { open } for pid=5945 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.471376][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.472116][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.472384][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.472853][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.473105][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.477814][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.483052][ T40] audit: type=1400 audit(1744276573.778:112): avc: denied { mounton } for pid=5945 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.505586][ T5294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.509143][ T5294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.657785][ T40] audit: type=1400 audit(1744276573.968:113): avc: denied { module_request } for pid=5946 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.740075][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 46.761944][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 46.770090][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 46.800325][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 46.950173][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.952603][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.954800][ T5946] bridge_slave_0: entered allmulticast mode [ 46.957206][ T5946] bridge_slave_0: entered promiscuous mode [ 46.963243][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.965058][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.967328][ T5945] bridge_slave_0: entered allmulticast mode [ 46.970623][ T5945] bridge_slave_0: entered promiscuous mode [ 46.973651][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.975516][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.977384][ T5945] bridge_slave_1: entered allmulticast mode [ 46.979516][ T5945] bridge_slave_1: entered promiscuous mode [ 47.002910][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.005077][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.007085][ T5946] bridge_slave_1: entered allmulticast mode [ 47.009466][ T5946] bridge_slave_1: entered promiscuous mode [ 47.048748][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.050774][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.052838][ T5938] bridge_slave_0: entered allmulticast mode [ 47.055566][ T5938] bridge_slave_0: entered promiscuous mode [ 47.113783][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.115787][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.117781][ T5938] bridge_slave_1: entered allmulticast mode [ 47.120415][ T5938] bridge_slave_1: entered promiscuous mode [ 47.125793][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.151842][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.156068][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.172557][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.175244][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.177286][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.179762][ T5941] bridge_slave_0: entered allmulticast mode [ 47.182109][ T5941] bridge_slave_0: entered promiscuous mode [ 47.247573][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.249310][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.251031][ T5941] bridge_slave_1: entered allmulticast mode [ 47.253232][ T5941] bridge_slave_1: entered promiscuous mode [ 47.281037][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.285789][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.291550][ T5946] team0: Port device team_slave_0 added [ 47.316230][ T5945] team0: Port device team_slave_0 added [ 47.333900][ T5946] team0: Port device team_slave_1 added [ 47.351583][ T5945] team0: Port device team_slave_1 added [ 47.407087][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.429938][ T5938] team0: Port device team_slave_0 added [ 47.447642][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.451244][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.453615][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.461767][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.468005][ T5938] team0: Port device team_slave_1 added [ 47.470096][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.472644][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.482503][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.504491][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.506752][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.515186][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.531277][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.533464][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.542871][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.564589][ T5941] team0: Port device team_slave_0 added [ 47.591003][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.593902][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.603098][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.609613][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.612190][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.623263][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.630901][ T5941] team0: Port device team_slave_1 added [ 47.674579][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.676541][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.683670][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.727108][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.729493][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.740743][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.752780][ T5945] hsr_slave_0: entered promiscuous mode [ 47.756509][ T5945] hsr_slave_1: entered promiscuous mode [ 47.811106][ T5938] hsr_slave_0: entered promiscuous mode [ 47.813233][ T5938] hsr_slave_1: entered promiscuous mode [ 47.815067][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.817397][ T5938] Cannot create hsr debugfs directory [ 47.821946][ T5946] hsr_slave_0: entered promiscuous mode [ 47.824042][ T5946] hsr_slave_1: entered promiscuous mode [ 47.826017][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.828120][ T5946] Cannot create hsr debugfs directory [ 47.905059][ T5941] hsr_slave_0: entered promiscuous mode [ 47.907196][ T5941] hsr_slave_1: entered promiscuous mode [ 47.909109][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.911308][ T5941] Cannot create hsr debugfs directory [ 48.261732][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.267688][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.272695][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.281671][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.307772][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.314232][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.325233][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.329213][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.372516][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.379222][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.385490][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.390845][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.440003][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.444967][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.451151][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.456207][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.491927][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.503711][ T5294] Bluetooth: hci0: command tx timeout [ 48.514645][ T5294] Bluetooth: hci3: command tx timeout [ 48.514913][ T67] Bluetooth: hci2: command tx timeout [ 48.529417][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.535132][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.545293][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.547821][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.564264][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.566994][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.576020][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.579402][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.583923][ T67] Bluetooth: hci1: command tx timeout [ 48.595315][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.597464][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.607343][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.609377][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.644832][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.654273][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.656923][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.670937][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.688422][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.697046][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.699796][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.713597][ T40] audit: type=1400 audit(1744276576.028:114): avc: denied { sys_module } for pid=5945 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.716159][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.725945][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.728275][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.741923][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.744702][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.801095][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.811830][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.850713][ T5945] veth0_vlan: entered promiscuous mode [ 48.855806][ T5946] veth0_vlan: entered promiscuous mode [ 48.861945][ T5945] veth1_vlan: entered promiscuous mode [ 48.870293][ T5946] veth1_vlan: entered promiscuous mode [ 48.880167][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.892631][ T5945] veth0_macvtap: entered promiscuous mode [ 48.900381][ T5945] veth1_macvtap: entered promiscuous mode [ 48.906036][ T5946] veth0_macvtap: entered promiscuous mode [ 48.912427][ T5946] veth1_macvtap: entered promiscuous mode [ 48.927851][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.939949][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.943056][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.946208][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.949594][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.954702][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.957561][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.960868][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.965215][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.969753][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.972816][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.975833][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.978150][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.986722][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.989091][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.991442][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.994212][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.006723][ T5938] veth0_vlan: entered promiscuous mode [ 49.012622][ T5938] veth1_vlan: entered promiscuous mode [ 49.057379][ T5938] veth0_macvtap: entered promiscuous mode [ 49.070945][ T5941] veth0_vlan: entered promiscuous mode [ 49.076327][ T5938] veth1_macvtap: entered promiscuous mode [ 49.093790][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.096723][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.097810][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.098371][ T5941] veth1_vlan: entered promiscuous mode [ 49.103361][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.125009][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.125994][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.127974][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.130911][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.136835][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.140364][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.144259][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.148154][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.150837][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.153701][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.156523][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.161054][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.170925][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.173982][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.186390][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.189045][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192115][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.195345][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.202988][ T5941] veth0_macvtap: entered promiscuous mode [ 49.211897][ T5941] veth1_macvtap: entered promiscuous mode [ 49.236200][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.237277][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.245945][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.249089][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.251951][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.254752][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.257582][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.261170][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.271500][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.274629][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.277320][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.280148][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.283104][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.287041][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.290533][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.294956][ T5941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.297402][ T5941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.299757][ T5941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.302115][ T5941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.308113][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.310585][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.340187][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.342384][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.366738][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.368928][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.397002][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.399162][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.440629][ T67] Bluetooth: Wrong link type (-71) [ 49.450693][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.519579][ T6033] 9pnet_fd: Insufficient options for proto=fd [ 49.555964][ T6036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13'. [ 49.568905][ T6041] netlink: 196 bytes leftover after parsing attributes in process `syz.1.15'. [ 49.571631][ T6041] netlink: 196 bytes leftover after parsing attributes in process `syz.1.15'. [ 49.578051][ T6041] netlink: 19 bytes leftover after parsing attributes in process `syz.1.15'. [ 49.633907][ T6053] mmap: syz.0.17 (6053) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.727970][ T67] Bluetooth: Wrong link type (-71) [ 49.730485][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 49.783779][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.899492][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 49.903648][ T6082] tmpfs: Bad value for 'huge' [ 49.933356][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 49.936234][ T34] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 49.938965][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 49.941953][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 49.951104][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 49.955733][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 49.959683][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 49.966302][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.000737][ T6089] capability: warning: `syz.1.31' uses 32-bit capabilities (legacy support in use) [ 50.030881][ T6087] kvm: apic: phys broadcast and lowest prio [ 50.179674][ T34] usb 7-1: usb_control_msg returned -32 [ 50.181306][ T34] usbtmc 7-1:16.0: can't read capabilities [ 50.204507][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 50.249309][ T6099] hsr_slave_1 (unregistering): left promiscuous mode [ 50.353618][ T5981] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.453347][ T5660] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.505089][ T5981] usb 8-1: Using ep0 maxpacket: 16 [ 50.508716][ T5981] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.513662][ T5981] usb 8-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 50.517126][ T5981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.522537][ T5981] usb 8-1: config 0 descriptor?? [ 50.583743][ T67] Bluetooth: hci2: command tx timeout [ 50.593340][ T67] Bluetooth: hci3: command tx timeout [ 50.593627][ T5294] Bluetooth: hci0: command tx timeout [ 50.604886][ T5660] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 50.608891][ T5660] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 50.611632][ T5660] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 50.615033][ T5660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.620329][ T6101] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 50.624906][ T5660] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 50.647462][ T6103] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 50.663768][ T5294] Bluetooth: hci1: command tx timeout [ 50.736867][ T34] usb 7-1: USB disconnect, device number 2 [ 50.736976][ T6087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.743020][ T6087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.832004][ T64] usb 5-1: USB disconnect, device number 2 [ 50.949969][ T5981] usbhid 8-1:0.0: can't add hid device: -71 [ 50.951755][ T5981] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 50.955571][ T5981] usb 8-1: USB disconnect, device number 2 [ 50.959743][ T6012] udevd[6012]: setting mode of /dev/bus/usb/008/002 to 020664 failed: No such file or directory [ 50.964689][ T6012] udevd[6012]: setting owner of /dev/bus/usb/008/002 to uid=0, gid=0 failed: No such file or directory [ 51.453286][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 51.453300][ T40] audit: type=1400 audit(1744276578.758:233): avc: denied { ioctl } for pid=6115 comm="syz.1.38" path="socket:[7898]" dev="sockfs" ino=7898 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.562826][ T40] audit: type=1400 audit(1744276578.868:234): avc: denied { ioctl } for pid=6120 comm="syz.1.39" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 51.571793][ T40] audit: type=1400 audit(1744276578.878:235): avc: denied { accept } for pid=6123 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.597812][ T6124] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.599586][ T40] audit: type=1400 audit(1744276578.908:236): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 51.607291][ T40] audit: type=1400 audit(1744276578.908:237): avc: denied { write } for pid=6123 comm="syz.0.41" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 51.610321][ T6133] Zero length message leads to an empty skb [ 51.616370][ T40] audit: type=1400 audit(1744276578.918:238): avc: denied { create } for pid=6131 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.623515][ T40] audit: type=1400 audit(1744276578.918:239): avc: denied { map } for pid=6123 comm="syz.0.41" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 51.628864][ T6135] process 'syz.3.42' launched '/dev/fd/3' with NULL argv: empty string added [ 51.632070][ T40] audit: type=1400 audit(1744276578.918:240): avc: denied { write } for pid=6123 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.639853][ T40] audit: type=1400 audit(1744276578.938:241): avc: denied { execute } for pid=6131 comm="syz.3.42" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.648090][ T40] audit: type=1400 audit(1744276578.948:242): avc: denied { execute_no_trans } for pid=6131 comm="syz.3.42" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.686565][ T6143] syz.3.45 uses obsolete (PF_INET,SOCK_PACKET) [ 51.782399][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 51.785001][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 51.843294][ T5660] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.994400][ T5660] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 51.997494][ T5660] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.000346][ T6184] sctp: failed to load transform for md5: -2 [ 52.003476][ T5660] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 52.006063][ T5660] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 52.008233][ T5660] usb 5-1: Manufacturer: syz [ 52.009859][ T6196] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.013749][ T5660] usb 5-1: config 0 descriptor?? [ 52.083392][ T5660] rc_core: IR keymap rc-hauppauge not found [ 52.085734][ T5660] Registered IR keymap rc-empty [ 52.088280][ T5660] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 52.093301][ T5660] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 52.222708][ T5660] usb 5-1: USB disconnect, device number 3 [ 52.663992][ T5294] Bluetooth: hci0: command tx timeout [ 52.673270][ T5294] Bluetooth: hci3: command tx timeout [ 52.673363][ T67] Bluetooth: hci2: command tx timeout [ 52.689023][ T6207] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 52.743415][ T67] Bluetooth: hci1: command tx timeout [ 52.972780][ T6241] input: syz1 as /devices/virtual/input/input7 [ 53.011528][ T6240] raw_sendmsg: syz.1.65 forgot to set AF_INET. Fix it! [ 53.393227][ T34] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 53.523215][ T34] usb 8-1: device descriptor read/64, error -71 [ 53.600472][ T6279] warning: `syz.2.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.773301][ T34] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 53.864058][ T1468] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 53.903309][ T34] usb 8-1: device descriptor read/64, error -71 [ 54.013831][ T34] usb usb8-port1: attempt power cycle [ 54.017362][ T1468] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.020220][ T1468] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 54.022727][ T1468] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.027767][ T1468] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12912, setting to 8 [ 54.030754][ T1468] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 54.033362][ T1468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.037804][ T6281] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 54.041234][ T1468] hub 5-1:1.0: bad descriptor, ignoring hub [ 54.042913][ T1468] hub 5-1:1.0: probe with driver hub failed with error -5 [ 54.045686][ T1468] cdc_wdm 5-1:1.0: skipping garbage [ 54.047203][ T1468] cdc_wdm 5-1:1.0: skipping garbage [ 54.050308][ T1468] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 54.051901][ T1468] cdc_wdm 5-1:1.0: Unknown control protocol [ 54.353879][ T34] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 54.384679][ T34] usb 8-1: device descriptor read/8, error -71 [ 54.531000][ T6322] xt_recent: Unsupported userspace flags (00000042) [ 54.551595][ T6324] __nla_validate_parse: 2 callbacks suppressed [ 54.551605][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 54.556089][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 54.619031][ T6329] ======================================================= [ 54.619031][ T6329] WARNING: The mand mount option has been deprecated and [ 54.619031][ T6329] and is ignored by this kernel. Remove the mand [ 54.619031][ T6329] option from the mount to silence this warning. [ 54.619031][ T6329] ======================================================= [ 54.629022][ T6329] 9pnet_virtio: no channels available for device syz [ 54.633322][ T34] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 54.654259][ T34] usb 8-1: device descriptor read/8, error -71 [ 54.734815][ T6281] usb 5-1: reset low-speed USB device number 4 using dummy_hcd [ 54.754297][ T67] Bluetooth: hci3: command tx timeout [ 54.755729][ T5294] Bluetooth: hci0: command tx timeout [ 54.773761][ T34] usb usb8-port1: unable to enumerate USB device [ 54.811078][ T6335] : renamed from macvlan0 (while UP) [ 54.819158][ T6335] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 54.823539][ T5294] Bluetooth: hci1: command tx timeout [ 54.836234][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.85'. [ 54.857562][ T6339] netlink: 25 bytes leftover after parsing attributes in process `syz.1.87'. [ 54.860062][ T6339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.87'. [ 54.904696][ T6341] trusted_key: encrypted_key: master key parameter 'a`–-ùrw‰²,ø,î=GÕÚZæ¹Ý—"Òø¶ Œx(“’™Ø;A.¸ëÀŒRf]@ØûègüÌhöçjZ»çé;}%`‘õ„Š´„=˜ïç—ª [ 54.904696][ T6341] [Ÿ$õ¼ÂÿxzËëÄÙ€Ú&ü~h¬œRîQð' is invalid [ 54.949519][ T6353] sctp: [Deprecated]: syz.2.91 (pid 6353) Use of int in maxseg socket option. [ 54.949519][ T6353] Use struct sctp_assoc_value instead [ 55.044483][ T6359] input: syz0 as /devices/virtual/input/input9 [ 55.066438][ T6363] ieee802154 phy0 wpan0: encryption failed: -22 [ 55.216469][ T6374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.96'. [ 55.490164][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.497715][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.499762][ T6398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.618948][ T6403] syzkaller0: entered allmulticast mode [ 55.853215][ T58] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 56.004569][ T58] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 56.007455][ T58] usb 7-1: config 0 has no interface number 0 [ 56.009642][ T58] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 56.013601][ T58] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 56.017374][ T58] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 56.021444][ T58] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 56.029418][ T58] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 56.033299][ T58] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.037699][ T58] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 56.040703][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.050311][ T58] usb 7-1: config 0 descriptor?? [ 56.052923][ T6403] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 56.055645][ T6403] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 56.066803][ T6414] vxcan1: tx address claim with dlc 0 [ 56.136674][ T6416] Bluetooth: (null): Invalid header checksum [ 56.262000][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.265420][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.963224][ T34] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 56.986028][ T6436] syz.1.113 (6436): drop_caches: 1 [ 57.094527][ T34] usb 8-1: device descriptor read/64, error -71 [ 57.293263][ T64] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.333242][ T34] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 57.463318][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 57.466177][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.469167][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.471897][ T64] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 57.474506][ T34] usb 8-1: device descriptor read/64, error -71 [ 57.476289][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.480620][ T64] usb 6-1: config 0 descriptor?? [ 57.583383][ T34] usb usb8-port1: attempt power cycle [ 57.889825][ T64] kye 0003:0458:5016.0002: control desc unexpectedly large [ 57.896129][ T64] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5016.0002/input/input10 [ 57.933246][ T34] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 57.954150][ T34] usb 8-1: device descriptor read/8, error -71 [ 57.958769][ T64] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5016.0002/input/input11 [ 58.193288][ T34] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 58.213634][ T34] usb 8-1: device descriptor read/8, error -71 [ 58.333425][ T34] usb usb8-port1: unable to enumerate USB device [ 58.746309][ T6457] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 58.749152][ T6457] netlink: 228 bytes leftover after parsing attributes in process `syz.1.119'. [ 58.838243][ T6459] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 58.844122][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 59.949958][ T6495] Invalid option length (1047906) for dns_resolver key [ 59.974879][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 59.974893][ T40] audit: type=1400 audit(1744276587.278:330): avc: denied { create } for pid=6494 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 59.984907][ T40] audit: type=1400 audit(1744276587.288:331): avc: denied { sys_admin } for pid=6494 comm="syz.1.126" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 60.063280][ T6281] usb 5-1: device descriptor read/64, error -110 [ 60.077462][ T40] audit: type=1400 audit(1744276587.388:332): avc: denied { ioctl } for pid=6498 comm="syz.1.127" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.100808][ T40] audit: type=1400 audit(1744276587.408:333): avc: denied { setopt } for pid=6503 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.108242][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 60.112161][ T40] audit: type=1400 audit(1744276587.418:334): avc: denied { getopt } for pid=6503 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.115669][ T6504] tipc: Started in network mode [ 60.119227][ T6504] tipc: Node identity 4, cluster identity 4711 [ 60.121407][ T6504] tipc: Node number set to 4 [ 60.129030][ T40] audit: type=1400 audit(1744276587.438:335): avc: denied { write } for pid=6503 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.168769][ T6506] 8021q: VLANs not supported on ip_vti0 [ 60.223305][ T6454] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 60.393330][ T6454] usb 8-1: Using ep0 maxpacket: 32 [ 60.396341][ T6454] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 60.398646][ T6454] usb 8-1: config 0 has no interface number 0 [ 60.400369][ T6454] usb 8-1: config 0 interface 184 has no altsetting 0 [ 60.403892][ T6454] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 60.406523][ T6454] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.409384][ T6454] usb 8-1: Product: syz [ 60.410583][ T6454] usb 8-1: Manufacturer: syz [ 60.411974][ T6454] usb 8-1: SerialNumber: syz [ 60.415349][ T6454] usb 8-1: config 0 descriptor?? [ 60.418830][ T6454] smsc75xx v1.0.0 [ 60.419941][ T6454] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 60.422966][ T6454] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -22 [ 60.453228][ T6281] usb 5-1: reset low-speed USB device number 4 using dummy_hcd [ 60.503365][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 60.674998][ T1335] usb 8-1: USB disconnect, device number 11 [ 60.733271][ T6281] usb 5-1: device descriptor read/64, error -32 [ 61.113275][ T6281] usb 5-1: reset low-speed USB device number 4 using dummy_hcd [ 61.116516][ T5982] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 61.134623][ T6281] usb 5-1: device descriptor read/8, error -32 [ 61.283301][ T5982] usb 8-1: Using ep0 maxpacket: 32 [ 61.286920][ T5982] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 61.289199][ T5982] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 61.291532][ T5982] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 61.294393][ T5982] usb 8-1: config 1 has no interface number 0 [ 61.296120][ T5982] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.299025][ T5982] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 61.302401][ T5982] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 61.305871][ T5982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.312970][ T5982] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 61.468356][ T6281] raw-gadget.1 gadget.0: failed to queue resume event [ 61.523333][ T6281] usb 5-1: reset low-speed USB device number 4 using dummy_hcd [ 61.543646][ C3] raw-gadget.1 gadget.0: ignoring, device is not running [ 61.546762][ T6281] usb 5-1: device descriptor read/8, error -32 [ 61.656025][ T6281] raw-gadget.1 gadget.0: failed to queue suspend event [ 61.658309][ T6281] cdc_wdm 5-1:1.0: Error autopm - -16 [ 61.658409][ T5981] usb 5-1: USB disconnect, device number 4 [ 61.663240][ T58] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 61.663398][ T6403] cdc_wdm 5-1:1.0: Error autopm - -16 [ 61.674204][ T6281] raw-gadget.1 gadget.0: failed to queue disconnect event [ 61.684804][ T64] kye 0003:0458:5016.0002: input,hiddev2,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 61.689241][ T58] usb 7-1: USB disconnect, device number 3 [ 61.706425][ T58] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 61.710020][ T64] usb 6-1: USB disconnect, device number 2 [ 61.746451][ T6528] input: syz0 as /devices/virtual/input/input12 [ 61.867124][ T5982] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 61.929105][ T40] audit: type=1400 audit(1744276589.238:336): avc: denied { bind } for pid=6539 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.005718][ T40] audit: type=1400 audit(1744276589.318:337): avc: denied { setopt } for pid=6539 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.073766][ T64] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 62.082145][ T5982] usb 8-1: USB disconnect, device number 12 [ 62.084517][ T5982] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 62.183220][ T58] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.213264][ T64] usb 6-1: device descriptor read/64, error -71 [ 62.271147][ T40] audit: type=1400 audit(1744276589.578:338): avc: denied { bind } for pid=6552 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.276578][ T40] audit: type=1400 audit(1744276589.578:339): avc: denied { name_bind } for pid=6552 comm="syz.0.142" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 62.315126][ T6558] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 62.363339][ T58] usb 7-1: Using ep0 maxpacket: 16 [ 62.366671][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.371214][ T58] usb 7-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 62.374552][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.379021][ T58] usb 7-1: config 0 descriptor?? [ 62.463223][ T64] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 62.593272][ T64] usb 6-1: device descriptor read/64, error -71 [ 62.649571][ T6536] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 62.654695][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.657981][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.703899][ T64] usb usb6-port1: attempt power cycle [ 63.043274][ T64] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 63.064117][ T64] usb 6-1: device descriptor read/8, error -71 [ 63.086846][ T58] usbhid 7-1:0.0: can't add hid device: -71 [ 63.089109][ T58] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 63.094408][ T58] usb 7-1: USB disconnect, device number 4 [ 63.312409][ T6587] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.313554][ T64] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 63.477751][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.152'. [ 63.546703][ T64] usb 6-1: device not accepting address 6, error -71 [ 63.546922][ T64] usb usb6-port1: unable to enumerate USB device [ 63.625191][ T6608] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 63.631441][ T6610] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 63.646244][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 63.655713][ T6612] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 63.660689][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 63.783928][ T6624] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 63.786232][ T6624] netlink: 180 bytes leftover after parsing attributes in process `syz.0.159'. [ 64.306971][ T6639] netlink: 'syz.0.164': attribute type 1 has an invalid length. [ 64.309120][ T6639] netlink: 228 bytes leftover after parsing attributes in process `syz.0.164'. [ 64.568096][ T6648] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 64.600770][ T6652] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 64.604076][ T6651] x_tables: ip6_tables: TCPOPTSTRIP.0 target: invalid size 32 (kernel) != (user) 22 [ 64.607601][ T6652] x_tables: ip6_tables: TCPOPTSTRIP.0 target: invalid size 32 (kernel) != (user) 22 [ 64.765856][ T6654] Bluetooth: MGMT ver 1.23 [ 64.770047][ T6667] dlm: no locking on control device [ 64.925546][ T6672] kvm: kvm [6671]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001f) [ 64.985788][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 64.985797][ T40] audit: type=1400 audit(1744276592.298:368): avc: denied { append } for pid=6677 comm="syz.0.178" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.007530][ T5946] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 65.010924][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 65.010938][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.010944][ T5946] Call Trace: [ 65.010948][ T5946] [ 65.010952][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 65.010982][ T5946] dump_header+0x101/0x930 [ 65.010996][ T5946] oom_kill_process+0x270/0xa60 [ 65.011009][ T5946] out_of_memory+0x350/0x1700 [ 65.011023][ T5946] ? __pfx_out_of_memory+0x10/0x10 [ 65.011038][ T5946] mem_cgroup_out_of_memory+0x205/0x270 [ 65.011053][ T5946] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 65.011070][ T5946] ? do_raw_spin_unlock+0x172/0x230 [ 65.011083][ T5946] try_charge_memcg+0x8ca/0xfa0 [ 65.011109][ T5946] ? __pfx_try_charge_memcg+0x10/0x10 [ 65.011122][ T5946] ? find_held_lock+0x2b/0x80 [ 65.011137][ T5946] charge_memcg+0x8a/0x230 [ 65.011147][ T5946] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 65.011162][ T5946] __read_swap_cache_async+0x43e/0x5a0 [ 65.011179][ T5946] ? __pfx___read_swap_cache_async+0x10/0x10 [ 65.011194][ T5946] ? swp_swap_info+0xce/0x130 [ 65.011206][ T5946] ? __pfx_swp_swap_info+0x10/0x10 [ 65.011220][ T5946] swap_cluster_readahead+0x4e1/0x710 [ 65.011237][ T5946] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 65.011260][ T5946] ? get_vma_policy+0x242/0x3c0 [ 65.011273][ T5946] swapin_readahead+0x13a/0xd60 [ 65.011291][ T5946] ? __pfx_swapin_readahead+0x10/0x10 [ 65.011305][ T5946] ? __filemap_get_folio+0x333/0xc10 [ 65.011321][ T5946] ? swap_cache_get_folio+0x1df/0x450 [ 65.011335][ T5946] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 65.011349][ T5946] ? __pfx_get_swap_device+0x10/0x10 [ 65.011360][ T5946] ? do_swap_page+0x127/0x6030 [ 65.011375][ T5946] do_swap_page+0x67e/0x6030 [ 65.011394][ T5946] ? __pfx_do_swap_page+0x10/0x10 [ 65.011405][ T5946] ? find_held_lock+0x2b/0x80 [ 65.011419][ T5946] ? __pfx_default_wake_function+0x10/0x10 [ 65.011432][ T5946] ? ___pte_offset_map+0x1bc/0x540 [ 65.011447][ T5946] __handle_mm_fault+0x1056/0x2a40 [ 65.011471][ T5946] ? __pfx___handle_mm_fault+0x10/0x10 [ 65.011485][ T5946] ? lock_vma_under_rcu+0x47d/0x970 [ 65.011497][ T5946] ? lock_vma_under_rcu+0x47d/0x970 [ 65.011520][ T5946] handle_mm_fault+0x3fe/0xad0 [ 65.011537][ T5946] do_user_addr_fault+0x60c/0x1370 [ 65.011553][ T5946] exc_page_fault+0x5c/0xc0 [ 65.011565][ T5946] asm_exc_page_fault+0x26/0x30 [ 65.011574][ T5946] RIP: 0033:0x7fdc3b9bfa28 [ 65.011582][ T5946] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 65.011591][ T5946] RSP: 002b:00007ffff08566f0 EFLAGS: 00010293 [ 65.011599][ T5946] RAX: 0000000000000000 RBX: 0000000000000066 RCX: 00007fdc3b9bfa25 [ 65.011605][ T5946] RDX: 00007ffff0856730 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.011610][ T5946] RBP: 00007ffff085679c R08: 0000000000000000 R09: 0000000000000000 [ 65.011615][ T5946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 65.011621][ T5946] R13: 00000000000927c0 R14: 000000000000f874 R15: 00007ffff08567f0 [ 65.011633][ T5946] [ 65.011637][ T5946] memory: usage 307200kB, limit 307200kB, failcnt 158 [ 65.020860][ T40] audit: type=1400 audit(1744276592.328:369): avc: denied { write } for pid=5336 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.021661][ T5946] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 65.022818][ T40] audit: type=1400 audit(1744276592.328:370): avc: denied { remove_name } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.027307][ T5946] kmem: usage 2188kB, limit 9007199254740988kB, failcnt 0 [ 65.029939][ T40] audit: type=1400 audit(1744276592.328:371): avc: denied { rename } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.030454][ T5946] Memory cgroup stats for [ 65.032694][ T40] audit: type=1400 audit(1744276592.328:372): avc: denied { add_name } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.034727][ T5946] /syz3 [ 65.036012][ T40] audit: type=1400 audit(1744276592.328:373): avc: denied { unlink } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.037837][ T5946] : [ 65.037940][ T5946] cache 312328192 [ 65.039147][ T40] audit: type=1400 audit(1744276592.328:374): avc: denied { create } for pid=5336 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.040367][ T5946] rss 0 [ 65.040373][ T5946] rss_huge 0 [ 65.040377][ T5946] shmem 312328192 [ 65.040381][ T5946] mapped_file 413696 [ 65.040385][ T5946] dirty 0 [ 65.040388][ T5946] writeback 0 [ 65.040392][ T5946] workingset_refault_anon 7 [ 65.040396][ T5946] workingset_refault_file 0 [ 65.040400][ T5946] swap 196608 [ 65.196463][ T5946] swapcached 0 [ 65.197890][ T5946] pgpgin 79637 [ 65.199242][ T5946] pgpgout 3385 [ 65.200598][ T5946] pgfault 8513 [ 65.201892][ T5946] pgmajfault 11 [ 65.203314][ T5946] inactive_anon 0 [ 65.204690][ T5946] active_anon 80965632 [ 65.206133][ T5946] inactive_file 0 [ 65.207246][ T5946] active_file 0 [ 65.208280][ T5946] unevictable 231358464 [ 65.209513][ T5946] hierarchical_memory_limit 314572800 [ 65.211101][ T5946] hierarchical_memsw_limit 9223372036854771712 [ 65.212925][ T5946] total_cache 312328192 [ 65.217844][ T5946] total_rss 0 [ 65.217851][ T5946] total_rss_huge 0 [ 65.217855][ T5946] total_shmem 312328192 [ 65.217859][ T5946] total_mapped_file 413696 [ 65.217863][ T5946] total_dirty 0 [ 65.217867][ T5946] total_writeback 0 [ 65.217871][ T5946] total_workingset_refault_anon 7 [ 65.217875][ T5946] total_workingset_refault_file 0 [ 65.217879][ T5946] total_swap 196608 [ 65.217883][ T5946] total_swapcached 0 [ 65.217887][ T5946] total_pgpgin 79637 [ 65.217891][ T5946] total_pgpgout 3385 [ 65.217894][ T5946] total_pgfault 8513 [ 65.217898][ T5946] total_pgmajfault 11 [ 65.217913][ T5946] total_inactive_anon 0 [ 65.217917][ T5946] total_active_anon 80965632 [ 65.217921][ T5946] total_inactive_file 0 [ 65.217925][ T5946] total_active_file 0 [ 65.217929][ T5946] total_unevictable 231358464 [ 65.217933][ T5946] anon_cost 0 [ 65.217937][ T5946] file_cost 0 [ 65.217941][ T5946] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.157,pid=6613,uid=0 [ 65.218525][ T5946] Memory cgroup out of memory: Killed process 6613 (syz.3.157) total-vm:102104kB, anon-rss:1052kB, file-rss:23616kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 65.457497][ T40] audit: type=1400 audit(1744276592.768:375): avc: denied { connect } for pid=6683 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.465496][ T40] audit: type=1400 audit(1744276592.778:376): avc: denied { lock } for pid=6683 comm="syz.0.180" path="socket:[13464]" dev="sockfs" ino=13464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 65.467240][ T40] audit: type=1400 audit(1744276592.778:377): avc: denied { mounton } for pid=6683 comm="syz.0.180" path="mnt:[4026533156]" dev="nsfs" ino=4026533156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.469308][ T5979] hid-generic 0005:10CF:5703.0003: unknown main item tag 0x0 [ 65.469355][ T5979] hid-generic 0005:10CF:5703.0003: unknown main item tag 0x2 [ 65.469369][ T5979] hid-generic 0005:10CF:5703.0003: unknown main item tag 0x1 [ 65.469386][ T5979] hid-generic 0005:10CF:5703.0003: reserved main item tag 0xd [ 65.469403][ T5979] hid-generic 0005:10CF:5703.0003: item fetching failed at offset 27/153 [ 65.469766][ T5979] hid-generic 0005:10CF:5703.0003: probe with driver hid-generic failed with error -22 [ 65.569780][ T6689] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 65.571712][ T6689] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 65.573848][ T6688] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 65.576217][ T6688] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.580228][ T6689] vhci_hcd vhci_hcd.0: Device attached [ 65.580238][ T6688] vhci_hcd vhci_hcd.0: Device attached [ 65.584999][ T6691] vhci_hcd: connection closed [ 65.585072][ T6692] vhci_hcd: connection closed [ 65.589803][ T6218] vhci_hcd: stop threads [ 65.592921][ T6218] vhci_hcd: release socket [ 65.595059][ T6218] vhci_hcd: disconnect device [ 65.599239][ T6218] vhci_hcd: stop threads [ 65.600847][ T6218] vhci_hcd: release socket [ 65.602506][ T6218] vhci_hcd: disconnect device [ 66.035920][ T6705] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.056217][ T6614] syz.3.157 (6614) used greatest stack depth: 20056 bytes left [ 66.124993][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'. [ 66.127504][ T6709] netlink: 72 bytes leftover after parsing attributes in process `syz.2.186'. [ 66.176278][ T6710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=6710 comm=syz.2.186 [ 66.178567][ T6711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=6711 comm=syz.2.186 [ 66.469879][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 66.522023][ T6720] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 66.580453][ T6728] nbd: couldn't find a device at index 1024 [ 66.637529][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.194'. [ 66.760247][ T6745] xt_hashlimit: size too large, truncated to 1048576 [ 67.492696][ T6739] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.494900][ T6739] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.500336][ T6739] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.503979][ T6739] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.506275][ T6739] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.509228][ T6739] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.511136][ T6739] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.515230][ T6739] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.518260][ T6739] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 67.520936][ T6739] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.532412][ T6739] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.559252][ T6752] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 67.561153][ T6752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.565693][ T6752] vhci_hcd vhci_hcd.0: Device attached [ 67.568934][ T6752] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 67.570746][ T6752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.572972][ T6752] vhci_hcd vhci_hcd.0: Device attached [ 67.577466][ T6752] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(27) [ 67.579286][ T6752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.581872][ T6752] vhci_hcd vhci_hcd.0: Device attached [ 67.586753][ T6752] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(42) [ 67.589184][ T6752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.591919][ T6752] vhci_hcd vhci_hcd.0: Device attached [ 67.595990][ T6752] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(44) [ 67.598517][ T6752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.601464][ T6752] vhci_hcd vhci_hcd.0: Device attached [ 67.620211][ T6766] vhci_hcd: connection closed [ 67.620563][ T6218] vhci_hcd: stop threads [ 67.621790][ T6760] vhci_hcd: connection closed [ 67.622375][ T6218] vhci_hcd: release socket [ 67.623274][ T6762] vhci_hcd: connection closed [ 67.623698][ T6757] vhci_hcd: connection closed [ 67.624925][ T6754] vhci_hcd: connection closed [ 67.625639][ T6218] vhci_hcd: disconnect device [ 67.634420][ T6218] vhci_hcd: stop threads [ 67.636026][ T6218] vhci_hcd: release socket [ 67.637717][ T6218] vhci_hcd: disconnect device [ 67.639999][ T6218] vhci_hcd: stop threads [ 67.641616][ T6218] vhci_hcd: release socket [ 67.643395][ T6218] vhci_hcd: disconnect device [ 67.645827][ T6218] vhci_hcd: stop threads [ 67.647449][ T6218] vhci_hcd: release socket [ 67.649121][ T6218] vhci_hcd: disconnect device [ 67.651563][ T6218] vhci_hcd: stop threads [ 67.653822][ T6218] vhci_hcd: release socket [ 67.655565][ T6218] vhci_hcd: disconnect device [ 67.711565][ T6774] can: request_module (can-proto-0) failed. [ 67.750564][ T6782] netlink: 'syz.1.205': attribute type 4 has an invalid length. [ 67.759175][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 67.762498][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.205'. [ 67.773634][ T1335] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.789379][ T6779] netlink: 'syz.0.206': attribute type 10 has an invalid length. [ 67.793385][ T58] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 67.797749][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.804754][ T6779] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 67.933260][ T58] usb 8-1: device descriptor read/64, error -71 [ 67.935069][ T1335] usb 7-1: Using ep0 maxpacket: 8 [ 67.938045][ T1335] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.940905][ T1335] usb 7-1: config 0 has no interfaces? [ 67.942955][ T1335] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.945537][ T1335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.951163][ T1335] usb 7-1: config 0 descriptor?? [ 68.051479][ T6793] netlink: 84 bytes leftover after parsing attributes in process `syz.1.208'. [ 68.054894][ T6793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.208'. [ 68.157996][ T1468] usb 7-1: USB disconnect, device number 5 [ 68.162932][ T6740] dccp_close: ABORT with 232 bytes unread [ 68.173239][ T58] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 68.313307][ T58] usb 8-1: device descriptor read/64, error -71 [ 68.436424][ T58] usb usb8-port1: attempt power cycle [ 68.541512][ T6825] netlink: 292 bytes leftover after parsing attributes in process `syz.1.216'. [ 68.589336][ T6827] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 68.606975][ T6827] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 68.704976][ T6833] capability: warning: `syz.2.219' uses deprecated v2 capabilities in a way that may be insecure [ 68.743236][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.803228][ T58] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 68.826421][ T58] usb 8-1: device descriptor read/8, error -71 [ 68.857723][ T6843] pimreg3: entered allmulticast mode [ 68.912160][ T6856] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=6856 comm=syz.1.227 [ 68.917955][ T6856] netlink: 256 bytes leftover after parsing attributes in process `syz.1.227'. [ 68.921051][ T6856] unsupported nlmsg_type 40 [ 69.093251][ T58] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 69.115363][ T58] usb 8-1: device descriptor read/8, error -71 [ 69.234121][ T58] usb usb8-port1: unable to enumerate USB device [ 69.363241][ T5982] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 69.443224][ T5981] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 69.493340][ T5982] usb 8-1: device descriptor read/64, error -71 [ 69.543311][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.543421][ T5294] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.545037][ T5942] Bluetooth: hci1: command 0x0406 tx timeout [ 69.593231][ T5981] usb 5-1: Using ep0 maxpacket: 32 [ 69.596571][ T5981] usb 5-1: config index 0 descriptor too short (expected 28964, got 36) [ 69.599395][ T5981] usb 5-1: config 194 has too many interfaces: 100, using maximum allowed: 32 [ 69.601892][ T5981] usb 5-1: config 194 has an invalid descriptor of length 182, skipping remainder of the config [ 69.605164][ T5981] usb 5-1: config 194 has 0 interfaces, different from the descriptor's value: 100 [ 69.607901][ T5981] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 69.610719][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.743282][ T5982] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 69.873330][ T5982] usb 8-1: device descriptor read/64, error -71 [ 69.936348][ T6880] block nbd1: NBD_DISCONNECT [ 69.993339][ T5982] usb usb8-port1: attempt power cycle [ 70.040753][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 70.040763][ T40] audit: type=1400 audit(1744276597.348:416): avc: denied { ioctl } for pid=6887 comm="syz.3.237" path="socket:[11621]" dev="sockfs" ino=11621 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.042208][ T6890] tmpfs: Unknown parameter 'obj_user' [ 70.090318][ T6890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6890 comm=syz.1.238 [ 70.204577][ T40] audit: type=1400 audit(1744276597.518:417): avc: denied { create } for pid=6892 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.210835][ T40] audit: type=1400 audit(1744276597.518:418): avc: denied { ioctl } for pid=6892 comm="syz.3.239" path="socket:[13730]" dev="sockfs" ino=13730 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.217615][ T40] audit: type=1400 audit(1744276597.518:419): avc: denied { bind } for pid=6892 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.222879][ T40] audit: type=1400 audit(1744276597.518:420): avc: denied { name_bind } for pid=6892 comm="syz.3.239" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 70.229081][ T40] audit: type=1400 audit(1744276597.518:421): avc: denied { node_bind } for pid=6892 comm="syz.3.239" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 70.234667][ T40] audit: type=1400 audit(1744276597.518:422): avc: denied { read } for pid=6892 comm="syz.3.239" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.255016][ T5981] usb 5-1: string descriptor 0 read error: -71 [ 70.257352][ T5981] usb 5-1: USB disconnect, device number 6 [ 70.348452][ T40] audit: type=1400 audit(1744276597.658:423): avc: denied { listen } for pid=6899 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.400265][ T40] audit: type=1400 audit(1744276597.708:424): avc: denied { accept } for pid=6899 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.446367][ T40] audit: type=1400 audit(1744276597.758:425): avc: denied { map } for pid=6904 comm="syz.0.243" path="socket:[12850]" dev="sockfs" ino=12850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 70.530447][ T6913] tmpfs: Unknown parameter 'hug' [ 70.533777][ T6913] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 70.536694][ T6913] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 70.539490][ T6913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.643527][ T6916] ptrace attach of "/syz-executor exec"[5941] was attempted by "/syz-executor exec"[6916] [ 70.824019][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.079739][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.170545][ T6966] __nla_validate_parse: 3 callbacks suppressed [ 71.170559][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 71.178187][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 71.453250][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 71.613254][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 71.615865][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 71.618925][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 71.621765][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.623375][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.624724][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.626526][ T5942] Bluetooth: hci1: command 0x0406 tx timeout [ 71.630023][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.630035][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.633197][ T5294] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.677555][ T6973] IPVS: Scheduler module ip_vs_non not found [ 71.761585][ T6983] netlink: 60 bytes leftover after parsing attributes in process `syz.0.268'. [ 71.832218][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 71.835296][ T9] usbtmc 6-1:16.0: can't read capabilities [ 71.857899][ T6994] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 71.860413][ T6994] overlayfs: missing 'lowerdir' [ 71.968171][ T7007] netlink: 108 bytes leftover after parsing attributes in process `syz.0.277'. [ 72.036202][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 72.039901][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 72.046007][ T6966] usbtmc 6-1:16.0: Unable to send data, error -71 [ 72.090478][ T7038] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 72.098019][ T1468] usb 6-1: USB disconnect, device number 7 [ 72.120097][ T7038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.172722][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 72.891077][ T7079] unknown channel width for channel at 909000KHz? [ 72.893384][ T7079] unknown channel width for channel at 909000KHz? [ 72.903385][ T5294] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.981413][ T7087] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 73.209104][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.308'. [ 73.212366][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 73.216329][ T7125] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 73.396969][ T7150] can0: slcan on ptm1. [ 73.455895][ T7149] can0 (unregistered): slcan off ptm1. [ 73.482461][ T7165] IPv6: sit1: Disabled Multicast RS [ 73.485882][ T7165] sit1: entered allmulticast mode [ 73.524528][ T7163] netlink: 76 bytes leftover after parsing attributes in process `syz.0.314'. [ 73.703300][ T5294] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.703325][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.750023][ T7188] sctp: [Deprecated]: syz.3.320 (pid 7188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.750023][ T7188] Use struct sctp_sack_info instead [ 73.807006][ T7191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.321'. [ 73.864670][ T7197] Cannot find add_set index 0 as target [ 74.051072][ T7216] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 74.055245][ T7216] SELinux: failed to load policy [ 74.055696][ T7219] xt_hashlimit: size too large, truncated to 1048576 [ 74.245498][ T7232] netlink: zone id is out of range [ 74.246975][ T7232] netlink: zone id is out of range [ 74.248398][ T7232] netlink: zone id is out of range [ 74.250001][ T7232] netlink: zone id is out of range [ 74.251589][ T7232] netlink: zone id is out of range [ 74.253048][ T7232] netlink: zone id is out of range [ 74.256005][ T7232] netlink: zone id is out of range [ 74.257509][ T7232] netlink: zone id is out of range [ 74.258965][ T7232] netlink: zone id is out of range [ 74.264473][ T7232] xt_hashlimit: size too large, truncated to 1048576 [ 74.323735][ T58] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 74.479313][ T58] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 74.482165][ T58] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.485313][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.498934][ T7245] input: syz0 as /devices/virtual/input/input15 [ 74.620401][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 74.887214][ T7268] netlink: 'syz.0.346': attribute type 59 has an invalid length. [ 75.155586][ T7277] input: syz1 as /devices/virtual/input/input16 [ 75.163081][ T7277] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 75.165477][ T7277] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.169697][ T7277] vhci_hcd vhci_hcd.0: Device attached [ 75.172548][ T7280] vhci_hcd: unknown pdu 2 [ 75.175524][ T6250] vhci_hcd: stop threads [ 75.178667][ T6250] vhci_hcd: release socket [ 75.180375][ T6250] vhci_hcd: disconnect device [ 75.503128][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 75.505873][ T40] audit: type=1400 audit(1744276602.808:472): avc: denied { getopt } for pid=7283 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.530639][ T7287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21776 sclass=netlink_route_socket pid=7287 comm=syz.2.351 [ 75.783334][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.873408][ T40] audit: type=1400 audit(1744276603.188:473): avc: denied { accept } for pid=7320 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.925703][ T40] audit: type=1400 audit(1744276603.238:474): avc: denied { write } for pid=7320 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 75.996277][ T7331] bridge_slave_0: default FDB implementation only supports local addresses [ 76.036665][ T40] audit: type=1400 audit(1744276603.348:475): avc: denied { mounton } for pid=7334 comm="syz.0.367" path="/bus" dev="ramfs" ino=15401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 76.135167][ T7348] overlay: filesystem on ./file0 not supported as upperdir [ 76.153925][ T40] audit: type=1400 audit(1744276603.468:476): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.174767][ T7350] __nla_validate_parse: 4 callbacks suppressed [ 76.174777][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 76.201127][ T7339] overlayfs: statfs failed on './file0' [ 76.464086][ T7360] program syz.0.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.473240][ T5983] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 76.512970][ T7365] netlink: 68 bytes leftover after parsing attributes in process `syz.0.377'. [ 76.513583][ T40] audit: type=1400 audit(1744276603.818:477): avc: denied { read write } for pid=7364 comm="syz.0.377" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.519428][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.522739][ T40] audit: type=1400 audit(1744276603.818:478): avc: denied { open } for pid=7364 comm="syz.0.377" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.531571][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.534163][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.536272][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.536601][ T7366] syz.0.377: vmalloc error: size 5234688, failed to allocated page array size 10224, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 76.538283][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.538297][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.545156][ T7366] ,cpuset= [ 76.547572][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.549398][ T7366] / [ 76.550534][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.552819][ T7366] ,mems_allowed=0-1 [ 76.553823][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.553842][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.553858][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.553875][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.553890][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.553905][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.553920][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.553933][ T58] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.556310][ T58] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz1 [ 76.556913][ T7366] CPU: 3 UID: 0 PID: 7366 Comm: syz.0.377 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 76.556927][ T7366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.556933][ T7366] Call Trace: [ 76.556937][ T7366] [ 76.556940][ T7366] dump_stack_lvl+0x16c/0x1f0 [ 76.556968][ T7366] warn_alloc+0x248/0x3a0 [ 76.556979][ T7366] ? __pfx_warn_alloc+0x10/0x10 [ 76.556993][ T7366] ? __get_vm_area_node+0x1b9/0x300 [ 76.557006][ T7366] ? __get_vm_area_node+0x1e5/0x300 [ 76.557021][ T7366] __vmalloc_node_range_noprof+0x1110/0x1540 [ 76.557037][ T7366] ? find_held_lock+0x2b/0x80 [ 76.557053][ T7366] ? bpf_check+0x1d6/0xbbc0 [ 76.557066][ T7366] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 76.557081][ T7366] ? rcu_is_watching+0x12/0xc0 [ 76.557093][ T7366] ? trace_kmalloc+0x2b/0xd0 [ 76.557104][ T7366] ? __kvmalloc_node_noprof.cold+0x60/0x65 [ 76.557117][ T7366] ? rcu_is_watching+0x12/0xc0 [ 76.557127][ T7366] ? ktime_get+0x200/0x310 [ 76.557140][ T7366] ? bpf_check+0x1d6/0xbbc0 [ 76.557149][ T7366] vzalloc_noprof+0x6b/0x90 [ 76.557163][ T7366] ? bpf_check+0x1d6/0xbbc0 [ 76.557171][ T7366] bpf_check+0x1d6/0xbbc0 [ 76.557183][ T7366] ? kasan_save_stack+0x42/0x60 [ 76.557192][ T7366] ? kasan_save_stack+0x33/0x60 [ 76.557200][ T7366] ? kasan_save_track+0x14/0x30 [ 76.557208][ T7366] ? __kasan_kmalloc+0xaa/0xb0 [ 76.557216][ T7366] ? bpf_prog_load+0xde7/0x2490 [ 76.557227][ T7366] ? __sys_bpf+0x433c/0x4d80 [ 76.557238][ T7366] ? __x64_sys_bpf+0x78/0xc0 [ 76.557250][ T7366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.557262][ T7366] ? __pfx_bpf_check+0x10/0x10 [ 76.557286][ T7366] ? kasan_save_track+0x14/0x30 [ 76.557295][ T7366] ? __kasan_kmalloc+0xaa/0xb0 [ 76.557304][ T7366] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 76.557319][ T7366] bpf_prog_load+0xe41/0x2490 [ 76.557333][ T7366] ? __pfx_bpf_prog_load+0x10/0x10 [ 76.557344][ T7366] ? avc_has_perm_noaudit+0x149/0x3b0 [ 76.557363][ T7366] ? selinux_bpf+0xde/0x130 [ 76.557371][ T7366] ? bpf_lsm_bpf+0x9/0x10 [ 76.557381][ T7366] __sys_bpf+0x433c/0x4d80 [ 76.557395][ T7366] ? __pfx___sys_bpf+0x10/0x10 [ 76.557410][ T7366] ? do_futex+0x122/0x350 [ 76.557424][ T7366] ? __pfx_do_futex+0x10/0x10 [ 76.557443][ T7366] ? xfd_validate_state+0x5d/0x180 [ 76.557454][ T7366] ? rcu_is_watching+0x12/0xc0 [ 76.557467][ T7366] __x64_sys_bpf+0x78/0xc0 [ 76.557480][ T7366] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.557492][ T7366] do_syscall_64+0xcd/0x260 [ 76.557505][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.557514][ T7366] RIP: 0033:0x7fca5498d169 [ 76.557523][ T7366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.557532][ T7366] RSP: 002b:00007fca527d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.557541][ T7366] RAX: ffffffffffffffda RBX: 00007fca54ba6080 RCX: 00007fca5498d169 [ 76.557546][ T7366] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 76.557552][ T7366] RBP: 00007fca54a0e730 R08: 0000000000000000 R09: 0000000000000000 [ 76.557557][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.557562][ T7366] R13: 0000000000000000 R14: 00007fca54ba6080 R15: 00007ffddac0b228 [ 76.557574][ T7366] [ 76.557577][ T7366] Mem-Info: [ 76.625302][ T5983] usb 7-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 76.626057][ T7366] active_anon:27877 inactive_anon:0 isolated_anon:0 [ 76.626057][ T7366] active_file:13621 inactive_file:2726 isolated_file:0 [ 76.626057][ T7366] unevictable:1772 dirty:64 writeback:0 [ 76.626057][ T7366] slab_reclaimable:11239 slab_unreclaimable:72666 [ 76.626057][ T7366] mapped:24031 shmem:21649 pagetables:993 [ 76.626057][ T7366] sec_pagetables:305 bounce:0 [ 76.626057][ T7366] kernel_misc_reclaimable:0 [ 76.626057][ T7366] free:480403 free_pcp:1446 free_cma:0 [ 76.627401][ T5983] usb 7-1: config 1 interface 0 has no altsetting 0 [ 76.629143][ T7366] Node 0 active_anon:111508kB inactive_anon:0kB active_file:54484kB inactive_file:10876kB unevictable:3552kB isolated(anon):0kB isolated(file):0kB mapped:96124kB dirty:256kB writeback:0kB shmem:83060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13104kB pagetables:3972kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 76.632095][ T5983] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.632910][ T7366] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:28kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 76.634398][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.634409][ T5983] usb 7-1: Product: syz [ 76.634416][ T5983] usb 7-1: Manufacturer: syz [ 76.636296][ T7366] Node 0 [ 76.637621][ T5983] usb 7-1: SerialNumber: syz [ 76.639268][ T7355] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.639703][ T7366] DMA free:13312kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 76.748302][ T7366] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 76.750164][ T7366] Node 0 DMA32 free:329060kB boost:4096kB min:31644kB low:38528kB high:45412kB reserved_highatomic:0KB active_anon:111508kB inactive_anon:0kB active_file:54484kB inactive_file:10876kB unevictable:3552kB writepending:256kB present:2080628kB managed:1265916kB mlocked:16kB bounce:0kB free_pcp:5176kB local_pcp:2240kB free_cma:0kB [ 76.754381][ T5982] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.758699][ T7366] lowmem_reserve[]: 0 0 0 0 0 [ 76.763611][ T7366] Node 1 Normal free:1579240kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:28kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:268kB local_pcp:100kB free_cma:0kB [ 76.773523][ T7366] lowmem_reserve[]: 0 0 0 0 0 [ 76.775278][ T7366] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 13312kB [ 76.779246][ T7366] Node 0 DMA32: 98*4kB (UME) 66*8kB (UME) 167*16kB (UME) 181*32kB (UME) 329*64kB (UME) 239*128kB (UME) 206*256kB (UME) 123*512kB (UME) 81*1024kB (UME) 26*2048kB (UM) 4*4096kB (M) = 329320kB [ 76.784609][ T7366] Node 1 Normal: 12*4kB (UME) 25*8kB (UME) 63*16kB (UME) 172*32kB (UME) 58*64kB (UME) 20*128kB (UME) 4*256kB (U) 7*512kB (UME) 1*1024kB (E) 4*2048kB (UM) 379*4096kB (UM) = 1579240kB [ 76.790598][ T7366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.795269][ T7366] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.798675][ T7366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.801534][ T7366] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.804541][ T7366] 37996 total pagecache pages [ 76.806272][ T7366] 0 pages in swap cache [ 76.807853][ T7366] Free swap = 124996kB [ 76.809301][ T7366] Total swap = 124996kB [ 76.810804][ T7366] 1048443 pages RAM [ 76.812197][ T7366] 0 pages HighMem/MovableOnly [ 76.814004][ T7366] 282633 pages reserved [ 76.815566][ T7366] 0 pages cma reserved [ 76.845614][ T7355] [U] à€E`ÞØÊ_òïÈTvß=æ¼B¥ ²›UÒôQ;Ö®Y±\9ž©Pþâ [ 76.848382][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.851759][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.863715][ T5983] usb 7-1: USB disconnect, device number 6 [ 76.881126][ T7375] syz_tun: entered allmulticast mode [ 76.995891][ T7374] syz_tun: left allmulticast mode [ 77.023477][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 77.076966][ T58] usb 6-1: USB disconnect, device number 8 [ 77.095934][ T7384] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 77.200827][ T40] audit: type=1400 audit(1744276604.508:479): avc: denied { mount } for pid=7395 comm="syz.1.386" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.203984][ T7396] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.210908][ T7396] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 77.233084][ T40] audit: type=1400 audit(1744276604.538:480): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.298329][ T7400] netlink: 168 bytes leftover after parsing attributes in process `syz.1.388'. [ 77.481293][ T40] audit: type=1400 audit(1744276604.788:481): avc: denied { setopt } for pid=7413 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.487121][ T7414] IPv6: sit1: Disabled Multicast RS [ 77.489043][ T7414] sit1: entered allmulticast mode [ 77.597604][ T7422] evm: overlay not supported [ 77.615430][ T64] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 77.704297][ T5983] IPVS: starting estimator thread 0... [ 77.732737][ T7447] program syz.3.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.787265][ T64] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 77.791248][ T64] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.794891][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.799472][ T7457] cgroup: Invalid name [ 77.803308][ T7445] IPVS: using max 46 ests per chain, 110400 per kthread [ 78.143299][ T58] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 78.208135][ T7480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.413'. [ 78.210731][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.413'. [ 78.213409][ T7480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.413'. [ 78.215876][ T7480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.413'. [ 78.305301][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.310368][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.312909][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.315567][ T58] usb 5-1: Product: syz [ 78.316775][ T58] usb 5-1: Manufacturer: syz [ 78.318058][ T58] usb 5-1: SerialNumber: syz [ 78.459625][ T7492] ALSA: seq fatal error: cannot create timer (-19) [ 78.526834][ T58] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 78.727163][ T5981] usb 5-1: USB disconnect, device number 8 [ 79.155011][ T7528] netlink: 'syz.2.425': attribute type 10 has an invalid length. [ 79.158218][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.161245][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.170830][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.172859][ T7528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.175046][ T7528] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.177078][ T7528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.181572][ T7528] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 79.872156][ T7569] netlink: 152 bytes leftover after parsing attributes in process `syz.2.435'. [ 79.874723][ T7569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'. [ 79.900690][ T7573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7573 comm=syz.2.436 [ 80.023251][ T7579] ptrace attach of "/syz-executor exec"[5945] was attempted by "/syz-executor exec"[7579] [ 80.390063][ T7406] usblp0: removed [ 80.391920][ T5981] usb 6-1: USB disconnect, device number 9 [ 80.517650][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 80.517664][ T40] audit: type=1400 audit(1744276607.828:509): avc: denied { create } for pid=7604 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.541770][ T7608] xt_hashlimit: max too large, truncated to 1048576 [ 80.545790][ T7609] xt_hashlimit: max too large, truncated to 1048576 [ 80.551395][ T7611] FAT-fs (nullb0): bogus number of reserved sectors [ 80.553904][ T7611] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 80.569591][ T7613] overlayfs: missing 'workdir' [ 80.594614][ T40] audit: type=1400 audit(1744276607.908:510): avc: denied { ioctl } for pid=7614 comm="syz.2.451" path="socket:[18624]" dev="sockfs" ino=18624 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.951087][ T40] audit: type=1400 audit(1744276608.258:511): avc: denied { getopt } for pid=7631 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 80.951504][ T7632] sg_write: process 408 (syz.2.457) changed security contexts after opening file descriptor, this is not allowed. [ 80.961908][ T40] audit: type=1400 audit(1744276608.268:512): avc: denied { associate } for pid=7633 comm="syz.0.458" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.981447][ T40] audit: type=1400 audit(1744276608.288:513): avc: denied { mounton } for pid=7633 comm="syz.0.458" path="/124/file0" dev="9p" ino=39977043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.982664][ T7634] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 80.990210][ T40] audit: type=1400 audit(1744276608.298:514): avc: denied { watch_sb } for pid=7635 comm="syz.2.459" path="/128" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.996787][ T40] audit: type=1400 audit(1744276608.298:515): avc: denied { ioctl } for pid=7633 comm="syz.0.458" path="socket:[17749]" dev="sockfs" ino=17749 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.253253][ T5981] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 81.305356][ T836] cfg80211: failed to load regulatory.db [ 81.358341][ T5942] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 81.383272][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 81.433233][ T5981] usb 7-1: Using ep0 maxpacket: 8 [ 81.435740][ T5981] usb 7-1: config 0 has no interfaces? [ 81.437879][ T5981] usb 7-1: config 0 has no interfaces? [ 81.440101][ T5981] usb 7-1: config 0 has no interfaces? [ 81.442248][ T5981] usb 7-1: config 0 has no interfaces? [ 81.443740][ T5981] usb 7-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 81.446258][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.450240][ T5981] usb 7-1: config 0 descriptor?? [ 81.535819][ T29] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 81.538333][ T29] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.541644][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 81.545044][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 81.547392][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.549477][ T29] usb 5-1: Product: syz [ 81.550578][ T29] usb 5-1: Manufacturer: syz [ 81.551827][ T29] usb 5-1: SerialNumber: syz [ 81.555659][ T7644] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 81.671425][ T40] audit: type=1400 audit(1744276608.978:516): avc: denied { setopt } for pid=7635 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 81.736228][ T836] usb 7-1: USB disconnect, device number 7 [ 81.761391][ T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 81.785497][ T9] usb 5-1: USB disconnect, device number 9 [ 81.790495][ T9] usblp0: removed [ 81.899619][ T40] audit: type=1400 audit(1744276609.208:517): avc: denied { map } for pid=7683 comm="syz.0.471" path="socket:[15784]" dev="sockfs" ino=15784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.933217][ T5981] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 82.029105][ T7690] netlink: 'syz.0.472': attribute type 16 has an invalid length. [ 82.031410][ T7690] __nla_validate_parse: 1 callbacks suppressed [ 82.031417][ T7690] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.472'. [ 82.049021][ T40] audit: type=1400 audit(1744276609.358:518): avc: denied { remount } for pid=7689 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.083210][ T5981] usb 8-1: Using ep0 maxpacket: 32 [ 82.083834][ T7693] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 82.085830][ T5981] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.087950][ T7693] macsec1: entered allmulticast mode [ 82.089367][ T5981] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.090804][ T7693] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 82.094009][ T5981] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.099080][ T5981] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 82.099414][ T7693] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 82.102517][ T5981] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.102555][ T5981] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 82.106253][ T7693] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 82.107868][ T5981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.115884][ T5981] usb 8-1: config 0 descriptor?? [ 82.322280][ T5981] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 82.327210][ T7700] net_ratelimit: 396 callbacks suppressed [ 82.327219][ T7700] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 82.332102][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 82.335129][ T7701] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 82.425030][ T7707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.478'. [ 82.607489][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 82.670974][ T7711] team0 (unregistering): Port device team_slave_0 removed [ 82.677470][ T7711] team0 (unregistering): Port device team_slave_1 removed [ 82.708875][ T7718] afs: Unknown parameter 'dyn0211' [ 82.764116][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 82.818028][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 82.861179][ T5942] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 83.037427][ T7696] overlayfs: statfs failed on './file0' [ 83.078403][ T7738] new mount options do not match the existing superblock, will be ignored [ 83.083533][ T7738] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 83.087306][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 83.099250][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 83.139956][ T7740] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.491'. [ 83.413201][ T836] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 83.573200][ T836] usb 5-1: Using ep0 maxpacket: 16 [ 83.576020][ T836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.580307][ T836] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 83.583637][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.588795][ T836] usb 5-1: config 0 descriptor?? [ 83.801286][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.805964][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.836443][ T7785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.507'. [ 83.861605][ T7789] netlink: 'syz.1.508': attribute type 11 has an invalid length. [ 84.134128][ T5982] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 84.192992][ T7807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.283230][ T5982] usb 6-1: Using ep0 maxpacket: 32 [ 84.286367][ T5982] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 84.288497][ T5982] usb 6-1: config 0 has no interface number 0 [ 84.291526][ T5982] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 84.294001][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.296067][ T5982] usb 6-1: Product: syz [ 84.297183][ T5982] usb 6-1: Manufacturer: syz [ 84.298416][ T5982] usb 6-1: SerialNumber: syz [ 84.300919][ T5982] usb 6-1: config 0 descriptor?? [ 84.303509][ T5982] smsc95xx v2.0.0 [ 84.304492][ T5982] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 84.307238][ T5982] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 84.433407][ T64] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 84.504674][ T1468] usb 6-1: USB disconnect, device number 10 [ 84.584868][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.587787][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.590652][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.594432][ T64] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.596877][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.600091][ T64] usb 7-1: config 0 descriptor?? [ 84.700981][ T5981] usb 8-1: USB disconnect, device number 20 [ 84.712033][ T5981] usblp0: removed [ 84.886473][ T7811] ptrace attach of "/syz-executor exec"[7812] was attempted by "/syz-executor exec"[7811] [ 84.890586][ T7811] SELinux: syz.3.515 (7811) set checkreqprot to 1. This is no longer supported. [ 85.009352][ T64] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 85.018910][ T64] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.063392][ T5294] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.419202][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.425454][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.427656][ T7847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.535674][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 85.535778][ T40] audit: type=1400 audit(1744276612.848:595): avc: denied { accept } for pid=7854 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 85.547386][ T40] audit: type=1400 audit(1744276612.858:596): avc: denied { create } for pid=7854 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.598495][ T40] audit: type=1400 audit(1744276612.908:597): avc: denied { read } for pid=7857 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.605779][ T40] audit: type=1400 audit(1744276612.918:598): avc: denied { ioctl } for pid=7857 comm="syz.1.527" path="socket:[19048]" dev="sockfs" ino=19048 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.612498][ T40] audit: type=1400 audit(1744276612.918:599): avc: denied { create } for pid=7857 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 85.617998][ T40] audit: type=1400 audit(1744276612.918:600): avc: denied { ioctl } for pid=7857 comm="syz.1.527" path="socket:[19050]" dev="sockfs" ino=19050 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 85.647357][ T40] audit: type=1400 audit(1744276612.958:601): avc: denied { ioctl } for pid=7861 comm="syz.1.528" path="socket:[16146]" dev="sockfs" ino=16146 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.654146][ T40] audit: type=1400 audit(1744276612.968:602): avc: denied { read write } for pid=7860 comm="syz.3.525" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.660582][ T40] audit: type=1400 audit(1744276612.968:603): avc: denied { open } for pid=7860 comm="syz.3.525" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.671216][ T40] audit: type=1400 audit(1744276612.968:604): avc: denied { create } for pid=7860 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.700457][ T7862] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.130114][ T5942] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 86.256331][ T836] usbhid 5-1:0.0: can't add hid device: -71 [ 86.258072][ T836] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 86.260127][ T7900] lo: entered promiscuous mode [ 86.262439][ T836] usb 5-1: USB disconnect, device number 10 [ 86.367652][ T7903] 9pnet: Found fid 0 not clunked [ 86.383772][ T1468] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 86.443688][ T7906] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 86.449333][ T7906] team0: Device hsr_slave_0 failed to register rx_handler [ 86.513916][ T1468] usb 7-1: device descriptor read/64, error -32 [ 86.689373][ T7922] syzkaller0: entered promiscuous mode [ 86.691365][ T7922] syzkaller0: entered allmulticast mode [ 86.755328][ T1468] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 86.903432][ T1468] usb 7-1: device descriptor read/64, error -32 [ 87.140766][ T7933] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 87.143041][ T7933] __nla_validate_parse: 93 callbacks suppressed [ 87.143049][ T7933] netlink: 232 bytes leftover after parsing attributes in process `syz.1.549'. [ 87.147925][ T1468] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 87.184787][ T1468] usb 7-1: device descriptor read/8, error -32 [ 87.327670][ T7941] netlink: 'syz.1.550': attribute type 4 has an invalid length. [ 87.370206][ T7942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7942 comm=syz.2.551 [ 87.379204][ T7943] netlink: 'syz.1.550': attribute type 4 has an invalid length. [ 87.509353][ T7945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.517872][ T7926] netlink: 'syz.3.547': attribute type 3 has an invalid length. [ 87.520141][ T7926] netlink: 566 bytes leftover after parsing attributes in process `syz.3.547'. [ 87.704562][ T7965] sp0: Synchronizing with TNC [ 87.704982][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.709153][ T7964] [U] è [ 87.868654][ T7989] fuse: Bad value for 'fd' [ 87.927486][ T64] usb 7-1: USB disconnect, device number 8 [ 87.981939][ T8004] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 87.984290][ T8004] SELinux: failed to load policy [ 87.986081][ T8004] netlink: 'syz.3.571': attribute type 2 has an invalid length. [ 88.043215][ T58] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 88.045338][ T8007] 9p: Unknown access argument 18446744073709551615: -34 [ 88.103318][ T64] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 88.194495][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 88.198078][ T58] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.200683][ T58] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 88.204862][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.208866][ T58] usb 6-1: config 0 descriptor?? [ 88.265278][ T64] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 88.268199][ T64] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.271728][ T64] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.274774][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.279562][ T64] usbtmc 7-1:16.0: bulk endpoints not found [ 88.353051][ T8033] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 88.429919][ T7982] netlink: 68 bytes leftover after parsing attributes in process `syz.1.563'. [ 88.432506][ T7982] netlink: 'syz.1.563': attribute type 21 has an invalid length. [ 88.434676][ T8039] syzkaller0: create flow: hash 3129704165 index 0 [ 88.434794][ T7982] netlink: 156 bytes leftover after parsing attributes in process `syz.1.563'. [ 88.438947][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 88.457162][ T5982] usb 6-1: USB disconnect, device number 11 [ 89.011498][ T8043] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.121495][ T8048] 9p: Unknown uid 00000000004294967295 [ 89.273937][ T8039] syzkaller0 (unregistered): delete flow: hash 3129704165 index 0 [ 90.562012][ T5983] usb 7-1: USB disconnect, device number 9 [ 90.770826][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.591'. [ 90.772731][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 90.772740][ T40] audit: type=1400 audit(1744276618.078:703): avc: denied { execute_no_trans } for pid=8082 comm="syz.2.592" path="/147/file2" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.794608][ T40] audit: type=1400 audit(1744276618.098:704): avc: denied { create } for pid=8082 comm="syz.2.592" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.800490][ T40] audit: type=1400 audit(1744276618.098:705): avc: denied { read write } for pid=8082 comm="syz.2.592" name="file0" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.806640][ T40] audit: type=1400 audit(1744276618.098:706): avc: denied { open } for pid=8082 comm="syz.2.592" path="/147/file0" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.812677][ T40] audit: type=1400 audit(1744276618.098:707): avc: denied { getopt } for pid=8082 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.819195][ T40] audit: type=1400 audit(1744276618.118:708): avc: denied { unlink } for pid=5945 comm="syz-executor" name="file0" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.826272][ T8090] overlayfs: unescaped trailing colons in lowerdir mount option. [ 90.832416][ T40] audit: type=1400 audit(1744276618.138:709): avc: denied { create } for pid=8089 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.841575][ T40] audit: type=1400 audit(1744276618.138:710): avc: denied { bind } for pid=8089 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.872946][ T8090] trusted_key: syz.0.594 sent an empty control message without MSG_MORE. [ 90.900423][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.902672][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.960445][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 90.962881][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 90.965543][ T8111] netlink: 'syz.2.598': attribute type 15 has an invalid length. [ 91.007065][ T8113] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 91.020221][ T40] audit: type=1400 audit(1744276618.328:711): avc: denied { write } for pid=8119 comm="syz.1.601" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.033471][ T40] audit: type=1400 audit(1744276618.328:712): avc: denied { open } for pid=8119 comm="syz.1.601" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.045723][ T8120] sp0: Synchronizing with TNC [ 91.227669][ T8131] kvm: MWAIT instruction emulated as NOP! [ 91.256738][ T8132] [U]  [ 91.332248][ T8144] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 91.336093][ T8144] lo: entered promiscuous mode [ 91.394296][ T8155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 91.398304][ T8155] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.614'. [ 91.409143][ T5942] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 91.454862][ T8153] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4008ae89, magic ae != 6b] [ 91.606865][ T8178] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.731940][ T8184] netlink: 'syz.2.625': attribute type 10 has an invalid length. [ 91.737210][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.739823][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.748171][ T8201] openvswitch: netlink: Flow key attribute not present in set flow. [ 91.750904][ T5942] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 91.970752][ T8220] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 92.230104][ T8253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=8253 comm=syz.1.645 [ 92.235525][ T8255] ipvlan0: entered promiscuous mode [ 92.237022][ T8255] ipvlan0: entered allmulticast mode [ 92.238549][ T8255] veth0_vlan: entered allmulticast mode [ 92.395756][ T8263] __nla_validate_parse: 12 callbacks suppressed [ 92.395767][ T8263] netlink: 48 bytes leftover after parsing attributes in process `syz.2.648'. [ 92.469963][ T8271] can: request_module (can-proto-4) failed. [ 92.517620][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 92.564723][ T8284] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 92.673896][ T64] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 92.740034][ T8313] netlink: 44 bytes leftover after parsing attributes in process `syz.3.664'. [ 92.836058][ T64] usb 6-1: Using ep0 maxpacket: 8 [ 92.839292][ T64] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 92.848083][ T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.851011][ T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.855407][ T64] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.859735][ T64] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.862660][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.069352][ T64] usb 6-1: GET_CAPABILITIES returned 0 [ 93.071303][ T64] usbtmc 6-1:16.0: can't read capabilities [ 93.278219][ T5942] ================================================================== [ 93.280482][ T5942] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x16a/0x170 [ 93.282714][ T5942] Read of size 8 at addr ffff88804df91188 by task kworker/u33:2/5942 [ 93.286480][ T5942] [ 93.287679][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: kworker/u33:2 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 93.287707][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.287715][ T5942] Workqueue: hci1 hci_rx_work [ 93.287730][ T5942] Call Trace: [ 93.287734][ T5942] [ 93.287739][ T5942] dump_stack_lvl+0x116/0x1f0 [ 93.287754][ T5942] print_report+0xc3/0x670 [ 93.287766][ T5942] ? __virt_addr_valid+0x5e/0x590 [ 93.287781][ T5942] ? __phys_addr+0xc6/0x150 [ 93.287795][ T5942] ? l2cap_sock_ready_cb+0x16a/0x170 [ 93.287805][ T5942] kasan_report+0xe0/0x110 [ 93.287815][ T5942] ? l2cap_sock_ready_cb+0x16a/0x170 [ 93.287827][ T5942] l2cap_sock_ready_cb+0x16a/0x170 [ 93.287838][ T5942] l2cap_le_start+0x1ea/0xe40 [ 93.287851][ T5942] ? l2cap_connect_cfm+0x819/0xf80 [ 93.287866][ T5942] ? __pfx_l2cap_le_start+0x10/0x10 [ 93.287881][ T5942] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 93.287900][ T5942] ? __l2cap_chan_add+0x3e6/0xa20 [ 93.287915][ T5942] l2cap_connect_cfm+0x8f4/0xf80 [ 93.287931][ T5942] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.287946][ T5942] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.287961][ T5942] le_conn_complete_evt+0x1662/0x1d70 [ 93.287979][ T5942] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 93.287996][ T5942] ? hci_event_packet+0x43c/0x1190 [ 93.288007][ T5942] hci_le_conn_complete_evt+0x23c/0x370 [ 93.288019][ T5942] hci_le_meta_evt+0x2f3/0x5e0 [ 93.288029][ T5942] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 93.288039][ T5942] hci_event_packet+0x669/0x1190 [ 93.288048][ T5942] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 93.288058][ T5942] ? __pfx_hci_event_packet+0x10/0x10 [ 93.288067][ T5942] ? kcov_remote_start+0x3c9/0x6d0 [ 93.288077][ T5942] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.288090][ T5942] hci_rx_work+0x2c5/0x16b0 [ 93.288100][ T5942] ? rcu_is_watching+0x12/0xc0 [ 93.288113][ T5942] process_one_work+0x9cc/0x1b70 [ 93.288127][ T5942] ? __pfx_process_one_work+0x10/0x10 [ 93.288141][ T5942] ? assign_work+0x1a0/0x250 [ 93.288151][ T5942] worker_thread+0x6c8/0xf10 [ 93.288165][ T5942] ? __pfx_worker_thread+0x10/0x10 [ 93.288175][ T5942] kthread+0x3c2/0x780 [ 93.288185][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.288194][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.288202][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.288211][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.288220][ T5942] ? rcu_is_watching+0x12/0xc0 [ 93.288231][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.288240][ T5942] ret_from_fork+0x45/0x80 [ 93.288279][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.288290][ T5942] ret_from_fork_asm+0x1a/0x30 [ 93.288309][ T5942] [ 93.288314][ T5942] [ 93.363826][ T5942] Allocated by task 8267: [ 93.365080][ T5942] kasan_save_stack+0x33/0x60 [ 93.366414][ T5942] kasan_save_track+0x14/0x30 [ 93.367731][ T5942] __kasan_kmalloc+0xaa/0xb0 [ 93.369026][ T5942] __kmalloc_noprof+0x223/0x510 [ 93.370360][ T5942] sk_prot_alloc+0x1a8/0x2a0 [ 93.371614][ T5942] sk_alloc+0x36/0xc20 [ 93.372723][ T5942] bt_sock_alloc+0x3b/0x3a0 [ 93.373989][ T5942] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 93.375536][ T5942] l2cap_sock_create+0x123/0x1f0 [ 93.376925][ T5942] bt_sock_create+0x182/0x350 [ 93.378228][ T5942] __sock_create+0x335/0x8d0 [ 93.379516][ T5942] __sys_socket+0x14d/0x260 [ 93.380756][ T5942] __x64_sys_socket+0x72/0xb0 [ 93.382015][ T5942] do_syscall_64+0xcd/0x260 [ 93.383273][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.384832][ T5942] [ 93.385514][ T5942] Freed by task 8267: [ 93.386616][ T5942] kasan_save_stack+0x33/0x60 [ 93.387867][ T5942] kasan_save_track+0x14/0x30 [ 93.389115][ T5942] kasan_save_free_info+0x3b/0x60 [ 93.390445][ T5942] __kasan_slab_free+0x51/0x70 [ 93.391741][ T5942] kfree+0x2b6/0x4d0 [ 93.392826][ T5942] __sk_destruct+0x718/0x950 [ 93.394126][ T5942] sk_destruct+0xc2/0xf0 [ 93.395295][ T5942] __sk_free+0xf4/0x3e0 [ 93.396451][ T5942] sk_free+0x6a/0x90 [ 93.397532][ T5942] l2cap_sock_kill+0x171/0x2d0 [ 93.398849][ T5942] l2cap_sock_release+0x189/0x210 [ 93.400234][ T5942] __sock_release+0xb0/0x270 [ 93.401535][ T5942] sock_close+0x1c/0x30 [ 93.402719][ T5942] __fput+0x3ff/0xb70 [ 93.403871][ T5942] task_work_run+0x14d/0x240 [ 93.405183][ T5942] syscall_exit_to_user_mode+0x27b/0x2a0 [ 93.406732][ T5942] do_syscall_64+0xda/0x260 [ 93.407996][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.409654][ T5942] [ 93.410330][ T5942] The buggy address belongs to the object at ffff88804df91000 [ 93.410330][ T5942] which belongs to the cache kmalloc-2k of size 2048 [ 93.414181][ T5942] The buggy address is located 392 bytes inside of [ 93.414181][ T5942] freed 2048-byte region [ffff88804df91000, ffff88804df91800) [ 93.418296][ T5942] [ 93.419018][ T5942] The buggy address belongs to the physical page: [ 93.420810][ T5942] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804df95000 pfn:0x4df90 [ 93.423560][ T5942] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 93.425863][ T5942] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 93.428142][ T5942] page_type: f5(slab) [ 93.429267][ T5942] raw: 00fff00000000240 ffff88801b442f00 ffffea0000c65c10 ffffea0000d65810 [ 93.431601][ T5942] raw: ffff88804df95000 0000000000080007 00000000f5000000 0000000000000000 [ 93.433985][ T5942] head: 00fff00000000240 ffff88801b442f00 ffffea0000c65c10 ffffea0000d65810 [ 93.436331][ T5942] head: ffff88804df95000 0000000000080007 00000000f5000000 0000000000000000 [ 93.438661][ T5942] head: 00fff00000000003 ffffea000137e401 00000000ffffffff 00000000ffffffff [ 93.441013][ T5942] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 93.443351][ T5942] page dumped because: kasan: bad access detected [ 93.445112][ T5942] page_owner tracks the page as allocated [ 93.446684][ T5942] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5945, tgid 5945 (syz-executor), ts 46493789863, free_ts 0 [ 93.451637][ T5942] post_alloc_hook+0x181/0x1b0 [ 93.453001][ T5942] get_page_from_freelist+0x1193/0x39b0 [ 93.454464][ T5942] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 93.456099][ T5942] alloc_pages_mpol+0x1fb/0x550 [ 93.457472][ T5942] new_slab+0x23c/0x330 [ 93.458639][ T5942] ___slab_alloc+0xd9c/0x1940 [ 93.459956][ T5942] __slab_alloc.constprop.0+0x56/0xb0 [ 93.461457][ T5942] __kmalloc_cache_noprof+0xfb/0x3e0 [ 93.462925][ T5942] cfctrl_create+0x9a/0x320 [ 93.464303][ T5942] cfcnfg_create+0xb2/0x500 [ 93.465558][ T5942] caif_init_net+0x7d/0xe0 [ 93.466806][ T5942] ops_init+0x1df/0x5f0 [ 93.467996][ T5942] setup_net+0x21e/0x850 [ 93.469204][ T5942] copy_net_ns+0x2a6/0x5f0 [ 93.470470][ T5942] create_new_namespaces+0x3ea/0xad0 [ 93.471971][ T5942] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 93.473593][ T5942] page_owner free stack trace missing [ 93.475119][ T5942] [ 93.475800][ T5942] Memory state around the buggy address: [ 93.477362][ T5942] ffff88804df91080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.479547][ T5942] ffff88804df91100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.481693][ T5942] >ffff88804df91180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.483867][ T5942] ^ [ 93.485082][ T5942] ffff88804df91200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.487195][ T5942] ffff88804df91280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.489276][ T5942] ================================================================== [ 93.491400][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.493439][ T5942] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.495443][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: kworker/u33:2 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 93.498719][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.501561][ T5942] Workqueue: hci1 hci_rx_work [ 93.502820][ T5942] Call Trace: [ 93.503730][ T5942] [ 93.504562][ T5942] dump_stack_lvl+0x3d/0x1f0 [ 93.505802][ T5942] panic+0x71c/0x800 [ 93.506873][ T5942] ? __pfx_panic+0x10/0x10 [ 93.508088][ T5942] ? irqentry_exit+0x3b/0x90 [ 93.509346][ T5942] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.510777][ T5942] ? preempt_schedule_thunk+0x16/0x30 [ 93.512435][ T5942] ? l2cap_sock_ready_cb+0x16a/0x170 [ 93.514129][ T5942] ? preempt_schedule_common+0x44/0xc0 [ 93.515975][ T5942] ? l2cap_sock_ready_cb+0x16a/0x170 [ 93.517406][ T5942] check_panic_on_warn+0xab/0xb0 [ 93.518740][ T5942] end_report+0x107/0x170 [ 93.520001][ T5942] kasan_report+0xee/0x110 [ 93.521241][ T5942] ? l2cap_sock_ready_cb+0x16a/0x170 [ 93.522677][ T5942] l2cap_sock_ready_cb+0x16a/0x170 [ 93.524052][ T5942] l2cap_le_start+0x1ea/0xe40 [ 93.525335][ T5942] ? l2cap_connect_cfm+0x819/0xf80 [ 93.526666][ T5942] ? __pfx_l2cap_le_start+0x10/0x10 [ 93.528018][ T5942] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 93.529591][ T5942] ? __l2cap_chan_add+0x3e6/0xa20 [ 93.530922][ T5942] l2cap_connect_cfm+0x8f4/0xf80 [ 93.532215][ T5942] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.533612][ T5942] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.535020][ T5942] le_conn_complete_evt+0x1662/0x1d70 [ 93.536434][ T5942] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 93.537941][ T5942] ? hci_event_packet+0x43c/0x1190 [ 93.539316][ T5942] hci_le_conn_complete_evt+0x23c/0x370 [ 93.540796][ T5942] hci_le_meta_evt+0x2f3/0x5e0 [ 93.542090][ T5942] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 93.543716][ T5942] hci_event_packet+0x669/0x1190 [ 93.545209][ T5942] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 93.546624][ T5942] ? __pfx_hci_event_packet+0x10/0x10 [ 93.548086][ T5942] ? kcov_remote_start+0x3c9/0x6d0 [ 93.549481][ T5942] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.550909][ T5942] hci_rx_work+0x2c5/0x16b0 [ 93.552152][ T5942] ? rcu_is_watching+0x12/0xc0 [ 93.553473][ T5942] process_one_work+0x9cc/0x1b70 [ 93.554794][ T5942] ? __pfx_process_one_work+0x10/0x10 [ 93.556229][ T5942] ? assign_work+0x1a0/0x250 [ 93.557471][ T5942] worker_thread+0x6c8/0xf10 [ 93.558715][ T5942] ? __pfx_worker_thread+0x10/0x10 [ 93.560091][ T5942] kthread+0x3c2/0x780 [ 93.561212][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.562455][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.563700][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.564969][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.566232][ T5942] ? rcu_is_watching+0x12/0xc0 [ 93.567522][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.568784][ T5942] ret_from_fork+0x45/0x80 [ 93.569997][ T5942] ? __pfx_kthread+0x10/0x10 [ 93.571257][ T5942] ret_from_fork_asm+0x1a/0x30 [ 93.572573][ T5942] [ 93.573886][ T5942] Kernel Offset: disabled [ 93.575038][ T5942] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:17:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e0a85 RDI=ffffffff9ae254e0 RBP=ffffffff9ae254a0 RSP=ffffc9000397f148 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6664343038386552 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9ae254a0 R15=ffffffff854e0a20 RIP=ffffffff854e0aaf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555934873070 CR3=0000000061a0e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010008000 Opmask01=0000000000000021 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01010100ffffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d454d4f4800336e 617077002d2d0071 2d0065626f727064 6f6d2f6e6962732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=ffff88806a4415c0 RCX=ffffffff81af26b9 RDX=ffff8880623a0000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004b47a50 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d4882b9 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a53b040 RIP=ffffffff81af26b9 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f94483286c0 ffffffff 00c00000 GS =0000 ffff8880d6ab3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2774e9 CR3=000000003556a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9448327bf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f944760f712 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f944760f71f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f944760f719 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f944760f72d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f944760f7b3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f944760f891 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000003 RBX=0000000000000001 RCX=ffffffff91194980 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff91194982 RBP=ffffc900040df9b0 RSP=ffffc900040df8a8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000060fe R12=ffffc900040df9b8 R13=ffffc900040df968 R14=ffffc900040dfa08 R15=ffffc900040df99c RIP=ffffffff8169eebd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f504895c000 CR3=0000000024fc4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 00000000ff000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000013e34f RBX=0000000000000003 RCX=ffffffff8b723439 RDX=0000000000000000 RSI=ffffffff8dbeef8e RDI=ffffffff8bf465c0 RBP=ffffed1003b55000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801daa8000 R14=ffffffff90865310 R15=0000000000000000 RIP=ffffffff8b721ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0dc7854440 CR3=0000000063438000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa491c0f712 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa491c0f71f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa491c0f719 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa491c0f72d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa491c0f7b3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa491c0f891 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa491d7d488 00007fa491d7d480 00007fa491d7d478 00007fa491d7d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa4928dd100 00007fa491d7d440 00007fa491d7d458 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa491d7d498 00007fa491d7d490 00007fa491d7d488 00007fa491d7d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000