last executing test programs: 25.781147045s ago: executing program 2 (id=293): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000200)={0x0, 0x1, 0x3, 0x20000000002, r2}) (async) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) (async) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0xfffffffffffffee9, &(0x7f0000000000), 0x0, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) 25.780665525s ago: executing program 2 (id=295): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000081}, 0x80) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 25.721225829s ago: executing program 2 (id=296): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1000, 0x501000) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x4, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x218}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000480)=0x84) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d030000000000000000130000004c000980080002"], 0x60}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r5, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x894}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x59}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x800) 25.672006221s ago: executing program 2 (id=297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x38) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x10, 0x140c, 0x4fd59a55c87d66ab, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_emit_ethernet(0xfe53, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = dup(r6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5004d564b"]) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001b80)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x4001c00) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040fc16c44e6aa2b338f81003f060000000000000e000d000d6ed60012801900121f", 0x2a}], 0x1}, 0x0) 25.571968826s ago: executing program 2 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) write$tun(r0, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x46) 25.46176171s ago: executing program 2 (id=299): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000007c0)={0x1, @pix={0x38, 0x69a, 0x34565559, 0x9, 0xa, 0x50c, 0xc, 0x9, 0x0, 0x5, 0x0, 0x1}}) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r5, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000011c0)={'hsr0\x00', 0x0}) sendto$packet(r11, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x892f, r12, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0xc, 0xd6}}, './file0\x00'}) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000400)=ANY=[@ANYRES8=r10], &(0x7f0000000580)='syzkaller\x00', 0xd3d, 0x0, 0x0, 0x41100, 0x2, '\x00', r12, 0x1a, r3, 0x8, &(0x7f00000005c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xae3b, r2, 0x7, &(0x7f0000000680)=[r0, r0, r13, r0], &(0x7f0000000740)=[{0x1, 0x5, 0x0, 0x6}, {0x5, 0x3, 0x3, 0xc}, {0x3, 0x1, 0xe, 0xb}, {0x4, 0x1, 0x7, 0x3}, {0x4000005, 0x4, 0x0, 0x6}, {0x4, 0x5, 0x9, 0x7}, {0x5, 0x20005, 0x1, 0x2}], 0x10, 0xfff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r14, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 10.16703645s ago: executing program 32 (id=299): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000007c0)={0x1, @pix={0x38, 0x69a, 0x34565559, 0x9, 0xa, 0x50c, 0xc, 0x9, 0x0, 0x5, 0x0, 0x1}}) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r5, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000011c0)={'hsr0\x00', 0x0}) sendto$packet(r11, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x892f, r12, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0xc, 0xd6}}, './file0\x00'}) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000400)=ANY=[@ANYRES8=r10], &(0x7f0000000580)='syzkaller\x00', 0xd3d, 0x0, 0x0, 0x41100, 0x2, '\x00', r12, 0x1a, r3, 0x8, &(0x7f00000005c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xae3b, r2, 0x7, &(0x7f0000000680)=[r0, r0, r13, r0], &(0x7f0000000740)=[{0x1, 0x5, 0x0, 0x6}, {0x5, 0x3, 0x3, 0xc}, {0x3, 0x1, 0xe, 0xb}, {0x4, 0x1, 0x7, 0x3}, {0x4000005, 0x4, 0x0, 0x6}, {0x4, 0x5, 0x9, 0x7}, {0x5, 0x20005, 0x1, 0x2}], 0x10, 0xfff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r14, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 2.140294499s ago: executing program 3 (id=547): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x89, 0x0, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000000177fbac141416e000030afe079f03b180004404050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x183102, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000340)=r2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback, 0x80000001}, 0x1c) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xe0, 0x100) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000380)="1c22212a2cafc47a44ae9b404baa63f8b6b54b9d28", 0x15}], 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="d6d2e33357440fa587aea8879544e650f32bce4b3930dab3e7e660f42b277fe75c2380a61f2d273759cc97e59369e16dce837f7d4f7c335d4c24673f9c4d3c9dfb284fdf7d6e2db2b1cd08d6e41263544dd01217bd7c4c734be2866c6f02c01b6faa28a7fac300ccea63c3c9c671c05d7f078fdce32bcea15be6dd6ada7d5f9d21e0b3a31cf1a887720f9e31fb08362ace557f8dbe6f1e50c28d163e6826810454ee9870b3b028ce1c2113c64958cd96a6c83737c22292503bad1b67c38581f352a845e139f82a4dc00f51dce18678ca58c2a71761ffc03b72", @ANYRES64=r5, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYRES16, @ANYRES32=r3]) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 1.601347614s ago: executing program 3 (id=554): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000180)=r5, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYRES64=r0], 0x44}}, 0x0) 1.600917447s ago: executing program 3 (id=556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff40}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdc000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000340)="0fc779000f28ee66b9800000c00f326635008000000f30123abaf80c66b888436a8466efbafc0cb80d00efbaf80c66b89e04ad8066efbafc0cb00fee0f01d666b9800000c00f326635000800000f3036f3d3e6650f0055f9", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.468458158s ago: executing program 3 (id=558): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x672b02, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mlockall(0x1) 1.320395446s ago: executing program 1 (id=563): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x89, 0x0, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000000177fbac141416e000030afe079f03b180004404050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x183102, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000340)=r2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback, 0x80000001}, 0x1c) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xe0, 0x100) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000380)="1c22212a2cafc47a44ae9b404baa63f8b6b54b9d28", 0x15}], 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="d6d2e33357440fa587aea8879544e650f32bce4b3930dab3e7e660f42b277fe75c2380a61f2d273759cc97e59369e16dce837f7d4f7c335d4c24673f9c4d3c9dfb284fdf7d6e2db2b1cd08d6e41263544dd01217bd7c4c734be2866c6f02c01b6faa28a7fac300ccea63c3c9c671c05d7f078fdce32bcea15be6dd6ada7d5f9d21e0b3a31cf1a887720f9e31fb08362ace557f8dbe6f1e50c28d163e6826810454ee9870b3b028ce1c2113c64958cd96a6c83737c22292503bad1b67c38581f352a845e139f82a4dc00f51dce18678ca58c2a71761ffc03b72", @ANYRES64=r5, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYRES16, @ANYRES32=r3]) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 1.180998284s ago: executing program 3 (id=564): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000000)=0xd) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x32, 0x0, "a5b5d6cc282b96a389bf76f05ff178beaf0f3a3dc69ccd6d11d84c48706ab2a1ea2f9e0f75a417c957177701333c2bd556cffb8e216e2652053b84734547078f34ea279b498795149bf5d5f3e170e8b9"}, 0xd8) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb7AJ\n\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8\x1cXVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x62, 0x0, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x1, 0x0, "ddeec09856280c9fe310019f623b7b2cb9f9570f3b69527bea873eb4cd18bf2a7d88fe354f1b38ffdceee3860224eab04b2300d6572ba53cc29e55a6f7624a1fc49ee397ecec78f29eb5eb963aaae6de"}, 0xd8) close_range(r0, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8850}, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) 1.179470261s ago: executing program 3 (id=565): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, 0x0) ppoll(&(0x7f0000000580)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/73, 0x49) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xf, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="2e20cc51cc120473f0a45c74072354de92feaed22672f6a69c570718b95cfcf8558d87bc1d43f60c1353349e028d2dbf82ccda7f7f4ada0967680574f6735069de70423c7f82feb02e14d7d07e564f5f20d448d77299463f13381a542494dec38b514d1986e5604c30b486549d1d8aad917f11bd7076d75801ba4f4528a353eabf8df6a30a3d4b7d", 0x88}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x14, @val=@tracing={0x0, 0xfaf9}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r6}, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = epoll_create1(0x0) r10 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000300)) connect$unix(r10, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 1.071416325s ago: executing program 0 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="0300e4ff", @ANYRES16=r1, @ANYBLOB="000226bd7000fbdbdf25090000000a00090048153464dc8d00000800310002000000080031000f09000008003c00ae2800000500350004000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r4, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40014}, 0x240480a0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x81) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) 1.069629626s ago: executing program 0 (id=567): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x0, 0x4, 0x0, {0x3, 0x4b, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x1d, 0xe}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="83b32235092f"}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$tun(r4, &(0x7f00000003c0)={@val={0x0, 0x22f0}, @val={0x3, 0x3, 0x81, 0x9800, 0x6}, @eth={@random="649960f97307", @link_local, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0xa9, 0x2, "61c3", "7bcd76", 0xf9, "77c1ac61a9bf0778540ed6c20ffba3c45f8c7d4f128abd31917def9812b1db9f01aa462b81c4a9d5e2d5720a43e852dc3fcb0008b3ffc0954721bed99d1417238da215014e0056a5076d55fccf3c37af858501d687746208d2ab8965329e6dda72dc2977a30771ad92db9adf39d53b45522636414b807ac57db990eb"}}}}}}, 0xa9) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x23c, 0x7, 0xfffffffffffffff7, 0x7fff, 0xffffffffffffffff, 0xfff, 0x9, 0x1462, 0x8, 0x6, 0x3, 0xe, 0x0, 0x15c, 0x5, 0xe], 0x11001}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x10004, 0x3, 0x4, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x1ff, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0xc, 0x7, 0xc435, 0x400, 0x7, 0xfff, 0x2, 0x40, 0x101, 0x2, 0xc2af, 0x3], 0x0, 0x3}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000640)={'IDLETIMER\x00'}, &(0x7f0000000680)=0x1e) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000006c0)={'NETMAP\x00'}, &(0x7f0000000700)=0x1e) fanotify_mark(r0, 0x20, 0x21, r2, &(0x7f0000000740)='./file0\x00') setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000780)=0xd, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r4, {r0}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x94, r3, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dad8b625a5"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "703d94656e"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "696b113902425e546bae504970"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2a8cb8ec69"}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x4014080) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1, 0x2, 0x4, 0x2}}, 0x26) read$ptp(r6, &(0x7f00000009c0)=""/185, 0xb9) read$FUSE(r2, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002b00)={'wg0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000002d00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002b40)=@getae={0x168, 0x1f, 0x800, 0x70bd2a, 0x25dfdbfe, {{@in=@broadcast, 0x4d4, 0xa, 0x3c}, @in=@multicast1, 0x3}, [@algo_aead={0x7c, 0x12, {{'rfc4309(gcm(aes))\x00'}, 0x180, 0xa0, "057ca993a502a9fdaaa26af7c64994bf9ac6048a0ec8414c70d047a6d5ce977926c5acaabc91a37aeb671e1a86f4e854"}}, @policy={0xac, 0x7, {{@in=@loopback, @in6=@remote, 0x4e20, 0x1, 0x4e20, 0x0, 0x2, 0x80, 0x80, 0x67, r8, r7}, {0x6, 0xfffffffffffffff9, 0x574, 0x60ad, 0x80000000, 0xff, 0x5, 0xfffffffffffffffc}, {0x1, 0x379b6bd, 0xf6, 0x6}, 0x100, 0x6e6bbf, 0x1, 0x1, 0x1, 0x3}}]}, 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x4048001) accept4(r6, &(0x7f0000002d40), &(0x7f0000002dc0)=0x80, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000002e00)={@local, 0x4e}) ioctl$SNDRV_PCM_IOCTL_DELAY(r5, 0x80084121, &(0x7f0000002e40)) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x3c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "069e0803ce"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x28090) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000002f80)={0x0, 0xd6, "207cde7c529ab9a91dc97b54ee8b327732ab9444677499378a1c2d4a88048bd95f6901615ae54b9f4f94d2e451e02db352f232ddf514f781d586d960395170467fe0f90a507576f10f7aea5671a46f3f9b9e13feeec170572c3ed4b2dc51b0857420b6b72e5a5e0102fc05d5628caca631706885845babc0576440c0388286d08b4e36784095abbbc0eebf9b81ebbd2e3cfae205ef5504feec47b3b692bd0b3b205d13aa5b6b374a1e848e0a18729ac6daa5748e56dc20d5c8df338e4544b2d9efdd0ae1643188fdcc4793b5224bc9df2fc79554eb79"}, &(0x7f0000003080)=0xde) 1.011087352s ago: executing program 0 (id=568): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0xfffffffe, @mcast2, 0xfffffffd}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000380)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="bb1cdca1950d1b232ce0244d93aa106f2a499c9b5405eeda6af2450ff2b0bcd97c89fd5bb5f76ac8a9c573237275a8c10c6cf731f00d3229a3", 0x39}, {&(0x7f0000000540)="99e7441dd5d7c19d29ea7abd7a3268189f03e5e8d291177ed03e3c86d27a944ebcffc5ddba0a01709a80ebd34d37a7074699a1c102839733d3f85e22bf81d23594ee4c1b584446d04987892cb071156f3d7e41cfc05f941f6877cd7c6dcfa5b7a863afe4e9e8f634f5c4ef25ece96b62b15005b6dde2667acbae270613b6559c1bb0e2d4017a3d1deafa7817b69aaa685a9876bea763946ece87e97007d1ef34cf52eefdaa05ee1de14a60897f8a3a2019ec", 0xb2}, {&(0x7f0000000600)="ec2c6c1da17b6fd606fcf427333ba17df57a32f11e8c0aca79b6e8c2f6669b3848875bec013c81bfca6764485047c453f5d2ab74e1096017c216a6387cf637e5cfa23b2a66df17d1694194d44327b78d713ac4fcaea04cc551731260469ecee67bcd3df3dbd25d0723e491e875383596643f31d2be0ad9b5839217089f1323e76e34bbb8efd4b9563ab3611a9df4c268025b0ff7273cc6c6b53e54eeffa0cfcded3e487d3707b90d13900f3d7846f87d29cdc9c97e735160c313fae2fb961f7417050f5515bce2214c507530155606994191c89423777f594dd820780ca434c514aaedd5", 0xe4}, {&(0x7f0000000b40)="ae43fca408b50cc7d9a1725c2ef2932090a25a7d70e0313df3d0e2e7820008e231e83c86465164e4abcf4e24c3fc2db9f6fb89efefed5c1b47d9ac01381c7bbb6ab8a6b6f36bc0b68742ae9e8229b5b72aa83e3b9deb8762f45dfbf9b109a0fa6206166305673d0c05cfd2fbd994d050b67e6d9fb9a9527770d71734eb29583e6e9b7518c95d805aeac31d634b0efffe3d2b7178", 0x94}, {&(0x7f0000000940)="627f33009436c19975ccfa9385c8c4798fade4caeab322b77e7ec95e25d7c25e002e60344b1c2a51dff99867d73c331c75a68f8a6733f8f581eb762b2f132260198995a89d08060545ccf412d0faa7d850297588a08f40e90919c954970fd2d7598a317464c1f34637002b836c0ec527fc790be4f4755f90bb05c3b33a224a84cd276dc1dad4fb6e01f0355903e11fc51b25ea05d7ab7125f4cb9c4aedd64b0741c712491ad3ea0241704c98a49fd1c15e9585f797fcb03432561420014e692967191bb17c256b99bd891adc0d8d8ce93167e37adc4411931f859c262f4f20eb21f8323bf0", 0xe5}, {&(0x7f0000000400)="a756b3", 0x3}, {&(0x7f0000000a40)="f54bcf6dea0a0953773322b72583370e30f8b9a2711f0965888fbec9a590bac982bd385851df74753f21b138e3a0cb01befb5e5f501ff451923a89e7bf5d3368fe7aec72692530fabc7717316caac71eda0103f074cd7e430555fca5d00714a54c58f77dc9c67b5c13e0bac95e0c1a6f0ecabfbf5e31408f64f93f44cc2b6e3403943f5be6406c8bfdb90dec3f7f716caf94f4eab754612c7d189dcf96d3f0b2694202f7f4378a59474ccec503303bfe773f39322bf95aed675347401b117b022c52a18358dade3e4a6a5b8e486c10b14406", 0xd2}, {&(0x7f0000000480)="73cdfa0744e27653b929b65b3103098b78df6eb98c295fe3974cedbec9dc024acafcdc4cf4c408c1226d81b40597f14657ffedc90ffaa3df", 0x38}, {&(0x7f00000007c0)="80fb5010a1331b3fba6607e02da650e5b295534b907e163a83b74e46a6333eca012e324bf98922e2f008555e17ddba76eac48a9d105952fae6b2a68474259e34ebc60ed8188c420493281748430e8aaed72a7d5dfc3cf588adb55ce4d4dfe89d78a48949e46347e37809a3f102319304c3a08f315d96dddcb3a55417bca588243b83741f875a21fe0414fac5e7131382cc989f9240915e8d19c3d7d42be3d7c769aebbcb899bd7716c1194b3214dd986ddd3f7bc9bd184816b8711b57bd5d84180925634e82c8ac34aa6298ddb733b285871ca664cdadcba7c5fb9e6796cb2daefc70822756d", 0xe6}, {&(0x7f0000000c40)="6052aef8b889f6cca93b612aeaef0b7f463c844234448da6ca1d912df865b6c8cb1818a1b1e9f359018ab2fb5f2bb976593aed85a4d587f8f2d327e1cc37009caccd350cccd8", 0x46}], 0xa}}], 0x1, 0x0) 561.659066ms ago: executing program 4 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00000001c0)=""/138) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000840)={0x84, 0x2, 0x4, 0x1b, "dee89656233af0ec039e80db509bfc2ae69540d5674c11d806241d06a71d249ae53dbc7d5778822ab0b72315391d9d74bd44ad96f139008b2d27c9f0041d4bae42d1597ce8c9348ff0fa067cf42cd8f6495b3640a162a9c9a7f19dbbf87eb0f84aa31fd86e7c6198e9f9377e"}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="a051c87dcb7622f1b11b65dba1b33b19c2b4a7055bf659439b194d23d95f6a5c692e4648584f79a8d34767d2d7fda996a64f44ce2e1bc119ed6b230b30eedca09a72ccadc6f9e6dab94ad84aab4a2cfe6ac552e4491e6c50a4efee460df07d259d91723e70c25fb3d099c4ddd91ac65fa20abfdb12438fcad09b9b7dab9d2ca032a0cfdeada114dc637ec663b1c2d8e229dfd23e71a8005b1905e053e390684f08ad227cd9010e"], 0x40}}, 0x2400c080) (async) r6 = msgget$private(0x0, 0x6f6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14cc7351b44192bba9471a65c0a84200000010000100000000000000000000009bb444000000060a0000fdffffff000000000000000010b5a6800c00018007000100637400000900010073797a30000000000900020073797a320000000005"], 0x6c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014", 0x1d, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe000001000000"], 0xa0}}, 0x0) (async) msgsnd(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x401, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000180)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r8) 561.301216ms ago: executing program 4 (id=570): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1411, 0x2, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x440c0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x80a8, 0x8, 0xe, 0x1, {{0x2a, 0x4, 0x2, 0x6, 0xa8, 0x66, 0x0, 0x15, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@noop, @timestamp={0x44, 0x8, 0x64, 0x0, 0xd, [0x6]}, @timestamp={0x44, 0x14, 0x1a, 0x0, 0x0, [0x9, 0xfffffffd, 0x0, 0x7]}, @timestamp_prespec={0x44, 0x1c, 0x79, 0x3, 0x2, [{@multicast2, 0x6}, {@broadcast, 0x3}, {@broadcast, 0x10}]}, @timestamp={0x44, 0x20, 0xf, 0x0, 0x3, [0x2, 0xf21, 0x80000001, 0x7, 0xd06f, 0x9, 0xcc1]}, @lsrr={0x83, 0x17, 0x4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x2d}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0xc0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x25, 0x3, 0xa, [{@broadcast, 0x7ff}]}, @timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x4, [{@local, 0x3ff}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0xff40, 0x0, 0x2, 0x9, {{0xe, 0x4, 0x2, 0x3f, 0x38, 0x68, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @empty, {[@timestamp_addr={0x44, 0x24, 0x83, 0x1, 0x0, [{@empty, 0x5}, {@loopback}, {@empty, 0x7fffffff}, {@multicast2, 0x47597c1b}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @local}, &(0x7f0000000540)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2b, 0x1, 0x9d, 0xe5e, 0x44, @loopback, @private1, 0x8770, 0x7, 0x6, 0x81}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000640)={@rand_addr, 0x0}, &(0x7f0000000680)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x8, 0x1, 0x3, 0x8, {{0xa, 0x4, 0x2, 0x0, 0x28, 0x67, 0x0, 0x9, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x13, 0xc3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x194, r0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x4}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x713e4964}}, './file0\x00'}) r13 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x1402, 0x8, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r13}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r14}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) (async) ioctl$sock_inet_SIOCSIFNETMASK(r12, 0x891c, &(0x7f0000000bc0)={'macvlan1\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) (async, rerun: 64) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000000c00)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000c80)=""/54, 0x36}, {&(0x7f0000000cc0)=""/210, 0xd2}, {&(0x7f0000000dc0)=""/225, 0xe1}, {&(0x7f0000000ec0)=""/132, 0x84}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/174, 0xae}, {&(0x7f0000002040)=""/253, 0xfd}, {&(0x7f0000002140)=""/24, 0x18}], 0x8, &(0x7f0000002200)=""/134, 0x86}, 0x12160) (rerun: 64) getsockopt$inet_sctp_SCTP_ASSOCINFO(r14, 0x84, 0x1, &(0x7f0000002300)={0x0, 0xc0a, 0xe8f, 0x3, 0x7, 0x9}, &(0x7f0000002340)=0x14) getsockopt$bt_BT_FLUSHABLE(r12, 0x112, 0x8, &(0x7f0000002380)=0xc1, &(0x7f00000023c0)=0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002440)=@generic={&(0x7f0000002400)='./file0/file0\x00', r13}, 0x18) io_uring_enter(r12, 0x1b39, 0xdb6, 0x10, &(0x7f0000002480)={[0x7f]}, 0x8) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000024c0)) sendmsg$NFNL_MSG_CTHELPER_NEW(r14, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x54, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x85) (async) ioctl$KVM_XEN_HVM_CONFIG(r12, 0x4038ae7a, &(0x7f00000026c0)={0x0, 0xa4c, &(0x7f0000002640)="b753c437eb5b98726f85f58fcd4cb797f9b93c8b0257679900c0ab8a4f6f80799b1364b2", &(0x7f0000002680)="db7f7c2c2c2016afba2c61e92342bf875dbec86af369aa94c7c4e179d5f4405e669b42ff8356e96cb4b8fe708eac9c2d7f88b4652d6eec16c301679294", 0x24, 0x3d}) (async) openat$incfs(r12, &(0x7f0000002700)='.log\x00', 0x20900, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002740), 0x101400, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r12, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x18, 0x1410, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000090}, 0x800) (rerun: 32) 491.580592ms ago: executing program 4 (id=571): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000200)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000880)="ddbf2011806e6720f319cf7328576c5012720676d85458472c7917c125f116efb07ee27226c0ac5c7aba47d3f6e665f60114ea4f82ac49bee7813ccde3629e9d7f254299d90f2e826c6d08e90f2046578bf80e000000000000fbd504fe99a23b7917305c8b400da00d535dcbf7a1e900276e1edb9aeef5ba3985f6aef071325a378e1366e2b824a06fafc9296058a1436b274ecf4b0db3b4187f17893e87020000009ab228ce3bbb2ff0cb95f5dfa5ced7d6935e87cf3e5c1a3f9f0ed95115fcbbb636340c24b2353593bce2d65631a91848d54271fcf93ba3fe95cdb7b913e2e7f5afc7bfb28ac8f3f44acf1bc07264cc4e22c0f8f0358279050cf157b21369ace2507f39ca196fd095f0d62d3121b81158543e24b696e21939f6c97da0ebc253069d01bd594f87582ad04548925a965e3f59f922dc0cb06fabae453f1e3cb8beb1d6eb0f1b1479da2ced772d9da919c570b0554cce6cd3c8e5d5cfaeb1608eadd31272444c28d4b74ef652574be20d2d566e000000000000000000000000000000000000000000000056ea2e769ac1ee926e6dbb1ab86eb703d6c135094d9add77268f35fa6ac4ad17360d03cd0ec062385db98ee53d8dea9d4cf9f59a41e9432a578b38bf7e593fa6dd", 0x1cb}, {&(0x7f00000006c0)="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", 0x1a2}, {&(0x7f00000005c0)="a35a6475391547b8c6240f9f539c3e3c9492f93b0b112e5bbca5c2929eeb0b317a45151038b528d50cdd710182d245f39b5a78c31f001c1ff0dfe90ab16d5c464758eaf048f880b526f12c1d374b88fe7c4fdeae23ee30205074ebb4c67adc89a929aa83b34e6caf993843d908bfbe39fb604d1d6898146e1c9a2c99498efb16c7feafb527086e451edd5e0bf6113db7fc62e2c3c77d02b5681a1ed57028ce45043af14c420173625738dbe44150cf13574a640333c803e579dcc092300240d4a3", 0xc1}], 0x3, 0xf5, 0x4) 491.242608ms ago: executing program 4 (id=572): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x9}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x7000000) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000340)=""/4096) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) (async) fcntl$lock(r1, 0x26, &(0x7f0000000000)) (async) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x9}) (async) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x0) (async) pipe(&(0x7f0000000000)) (async) fcntl$setpipe(r2, 0x407, 0x7000000) (async) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000340)=""/4096) (async) 490.658224ms ago: executing program 1 (id=573): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaca, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r2}, 0x18) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x2394, 0x1800}], 0x1, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000002240)) (async) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) (async) r7 = semget$private(0x0, 0x2, 0x3) semop(r7, &(0x7f0000000c80)=[{0x2, 0xfff7, 0x1000}], 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x18) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000) close_range(r8, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) recvmsg$inet_nvme(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000006c0)=""/237, 0xed}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f00000007c0)=""/92, 0x5c}, {&(0x7f0000000840)=""/173, 0xad}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000a00)=""/6, 0x6}, {&(0x7f0000000a40)=""/120, 0x78}, {&(0x7f0000000ac0)=""/129, 0x81}, {&(0x7f0000000b80)=""/99, 0x63}, {&(0x7f0000000cc0)=""/137, 0x89}], 0xa, &(0x7f0000000c00)=""/57, 0x39}, 0x2001) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x1, 0xfffffffb, {0x0}, {}, 0xffffffffffff0000, 0x1}) get_robust_list(r9, &(0x7f0000000440)=&(0x7f0000000540)={&(0x7f0000000340)={&(0x7f0000000140)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x1000d, 0x0, 0x0, 0x40f00, 0x63, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) 430.471015ms ago: executing program 4 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='40::\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, &(0x7f0000000080)={@desc={0x40a1, 0x0, @desc3}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000001800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f00000009c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x3, 0x19}, @ptr={0x70742a85, 0x2, &(0x7f0000000600)=""/216, 0xd8, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x36}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) fstat(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = geteuid() stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) r17 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x4}, [{0x2, 0x5, r8}, {0x2, 0x1, r9}, {0x2, 0x2, 0xee00}, {0x2, 0x3, r10}, {0x2, 0x1, r11}, {0x2, 0x2, r12}], {0x4, 0x7}, [{0x8, 0x5, r13}, {0x8, 0x2, 0xee00}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r14}, {0x8, 0x2, r15}, {0x8, 0x4}, {0x8, 0x3, r16}, {0x8, 0x0, r17}], {0x10, 0x4}, {0x20, 0x2}}, 0x94, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 351.692792ms ago: executing program 1 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getpriority(0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x80000000}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x5c}, 0x1, 0xba01}, 0x810) 351.200816ms ago: executing program 4 (id=576): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="31030000efffffffffff04"], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="94010000", @ANYRES16=r2, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r3, @ANYBLOB="18007a800c000300784d106960256ff508000400070000004c007a8014000200e9c8b1ba7746ce2ef332bbc5c97a1b740c0003000d15107ef68d60c21400020064f1c7b9c21297fdc91a5ee15a74a83408000400da0000000c000300cb563cf9c3218fa120007a8008000400769a105808000400080000000c000300c38c1d74c2e200ef34007a800c00030082150e2f564a05fd240001004f2f145c8e994f9270345cd125444dad24f0229259a46df93ada14b60e56ea876c007a801400010080561a80fbcb61b368a6c1ea62d953380c000300ac6a00fe5cf7fa7d08000400fdffffff0c00030086191bb4280530d0140002"], 0x194}}, 0x0) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000040)={0x10}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) 351.100947ms ago: executing program 1 (id=577): open(&(0x7f0000000000)='.\x00', 0x400, 0x0) (async) open(&(0x7f0000000000)='.\x00', 0x400, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@getlink={0x20, 0x12, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10400}}, 0x20}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x4bfb, &(0x7f0000000000)) 290.514031ms ago: executing program 1 (id=578): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r1, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x80000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000280)) 290.32313ms ago: executing program 1 (id=579): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0xcbe, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x40004, 0x7, 0x148, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r2, 0x80000, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 161.762555ms ago: executing program 0 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 91.796371ms ago: executing program 0 (id=581): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x1, @multicast2}, 0x10) 0s ago: executing program 0 (id=582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pwritev(r0, &(0x7f0000000600)=[{0x0}], 0x1, 0x4, 0x400) 0s ago: executing program 0 (id=583): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x468, 0x308, 0x0, 0x308, 0x308, 0x220, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x48}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) waitid(0x1, 0xffffffffffffffff, 0x0, 0x40000000, 0x0) kernel console output (not intermixed with test programs): [ 38.309746][ T39] audit: type=1400 audit(1733714183.460:82): avc: denied { siginh } for pid=5923 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.203016][ T39] audit: type=1400 audit(1733714184.370:83): avc: denied { read } for pid=5335 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.208980][ T39] audit: type=1400 audit(1733714184.370:84): avc: denied { append } for pid=5335 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.215400][ T39] audit: type=1400 audit(1733714184.370:85): avc: denied { open } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.221692][ T39] audit: type=1400 audit(1733714184.370:86): avc: denied { getattr } for pid=5335 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:31350' (ED25519) to the list of known hosts. [ 39.362555][ T39] audit: type=1400 audit(1733714184.530:87): avc: denied { name_bind } for pid=5927 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.021015][ T5929] cgroup: Unknown subsys name 'net' [ 41.226795][ T5929] cgroup: Unknown subsys name 'cpuset' [ 41.230100][ T5929] cgroup: Unknown subsys name 'rlimit' [ 41.393249][ T5932] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.992872][ T5929] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.228995][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 44.229005][ T39] audit: type=1400 audit(1733714189.400:105): avc: denied { execmem } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.450403][ T39] audit: type=1400 audit(1733714189.620:106): avc: denied { create } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.458464][ T39] audit: type=1400 audit(1733714189.620:107): avc: denied { read write } for pid=5940 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.465207][ T39] audit: type=1400 audit(1733714189.620:108): avc: denied { open } for pid=5940 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.471577][ T39] audit: type=1400 audit(1733714189.630:109): avc: denied { ioctl } for pid=5940 comm="syz-executor" path="socket:[6770]" dev="sockfs" ino=6770 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.494546][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.496823][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.499880][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.501815][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.504112][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.506539][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.506559][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.509088][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.511578][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.512645][ T5945] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.515235][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.517036][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.518589][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.519253][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.519620][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.519636][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.520022][ T5950] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.520241][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.520400][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.521933][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.523016][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.525757][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.526449][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.528490][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.530210][ T39] audit: type=1400 audit(1733714189.700:110): avc: denied { read } for pid=5941 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.553742][ T39] audit: type=1400 audit(1733714189.700:111): avc: denied { open } for pid=5941 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.561878][ T39] audit: type=1400 audit(1733714189.700:112): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.663838][ T39] audit: type=1400 audit(1733714189.830:113): avc: denied { module_request } for pid=5948 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.689693][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 44.706797][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 44.724825][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 44.789009][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 44.894130][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.898307][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.901203][ T5948] bridge_slave_0: entered allmulticast mode [ 44.904232][ T5948] bridge_slave_0: entered promiscuous mode [ 44.908311][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.910779][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.913355][ T5952] bridge_slave_0: entered allmulticast mode [ 44.917477][ T5952] bridge_slave_0: entered promiscuous mode [ 44.921169][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.923614][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.926286][ T5952] bridge_slave_1: entered allmulticast mode [ 44.929062][ T5952] bridge_slave_1: entered promiscuous mode [ 44.946372][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.949004][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.951519][ T5941] bridge_slave_0: entered allmulticast mode [ 44.954683][ T5941] bridge_slave_0: entered promiscuous mode [ 44.958929][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.961475][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.964017][ T5941] bridge_slave_1: entered allmulticast mode [ 44.966997][ T5941] bridge_slave_1: entered promiscuous mode [ 44.969618][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.972160][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.974786][ T5948] bridge_slave_1: entered allmulticast mode [ 44.977669][ T5948] bridge_slave_1: entered promiscuous mode [ 45.064021][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.082646][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.087110][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.090401][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.093515][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.104498][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.106405][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.108300][ T5940] bridge_slave_0: entered allmulticast mode [ 45.110300][ T5940] bridge_slave_0: entered promiscuous mode [ 45.126042][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.142575][ T5952] team0: Port device team_slave_0 added [ 45.145140][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.147209][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.149474][ T5940] bridge_slave_1: entered allmulticast mode [ 45.151857][ T5940] bridge_slave_1: entered promiscuous mode [ 45.185028][ T5952] team0: Port device team_slave_1 added [ 45.197084][ T5941] team0: Port device team_slave_0 added [ 45.223814][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.227825][ T5941] team0: Port device team_slave_1 added [ 45.231129][ T5948] team0: Port device team_slave_0 added [ 45.233149][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.235557][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.245847][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.252019][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.272002][ T5948] team0: Port device team_slave_1 added [ 45.274088][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.276628][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.284563][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.334896][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.336817][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.344804][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.350071][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.352835][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.361278][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.365339][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.367207][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.373840][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.378143][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.380013][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.386717][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.391576][ T5940] team0: Port device team_slave_0 added [ 45.423761][ T5940] team0: Port device team_slave_1 added [ 45.457808][ T5952] hsr_slave_0: entered promiscuous mode [ 45.460216][ T5952] hsr_slave_1: entered promiscuous mode [ 45.482997][ T5941] hsr_slave_0: entered promiscuous mode [ 45.486260][ T5941] hsr_slave_1: entered promiscuous mode [ 45.488064][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.490442][ T5941] Cannot create hsr debugfs directory [ 45.492609][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.494472][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.501078][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.515919][ T5948] hsr_slave_0: entered promiscuous mode [ 45.517836][ T5948] hsr_slave_1: entered promiscuous mode [ 45.519662][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.521910][ T5948] Cannot create hsr debugfs directory [ 45.524207][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.526679][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.534686][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.636584][ T5940] hsr_slave_0: entered promiscuous mode [ 45.639035][ T5940] hsr_slave_1: entered promiscuous mode [ 45.641035][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.642957][ T5940] Cannot create hsr debugfs directory [ 45.818415][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.826667][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.829671][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.835384][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.866466][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.869955][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.873149][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.879552][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.902359][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.907673][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.910829][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.925906][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.947465][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.953356][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.956971][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.960823][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.967228][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.986596][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.991570][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.993540][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.001719][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.003560][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.017141][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.058248][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.060432][ T39] audit: type=1400 audit(1733714191.230:114): avc: denied { sys_module } for pid=5952 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.067014][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.073465][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.075386][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.083320][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.085803][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.098543][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.103814][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.113577][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.118307][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.120892][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.125334][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.127763][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.142853][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.145391][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.157793][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.159676][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.173437][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.222439][ T5952] veth0_vlan: entered promiscuous mode [ 46.229214][ T5952] veth1_vlan: entered promiscuous mode [ 46.247777][ T5952] veth0_macvtap: entered promiscuous mode [ 46.250810][ T5952] veth1_macvtap: entered promiscuous mode [ 46.257490][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.260267][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.267828][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.271783][ T5952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.274144][ T5952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.276531][ T5952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.278842][ T5952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.302311][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.312267][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.331886][ T5941] veth0_vlan: entered promiscuous mode [ 46.332182][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.335775][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.346651][ T5941] veth1_vlan: entered promiscuous mode [ 46.367256][ T5940] veth0_vlan: entered promiscuous mode [ 46.367493][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.370792][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.379172][ T5941] veth0_macvtap: entered promiscuous mode [ 46.383583][ T5941] veth1_macvtap: entered promiscuous mode [ 46.390119][ T5940] veth1_vlan: entered promiscuous mode [ 46.392194][ T5948] veth0_vlan: entered promiscuous mode [ 46.398701][ T5948] veth1_vlan: entered promiscuous mode [ 46.399769][ T5952] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.408563][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.411383][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.414740][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.421716][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.424534][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.427533][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.433483][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.436072][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.438340][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.440622][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.457210][ T5948] veth0_macvtap: entered promiscuous mode [ 46.463101][ T5940] veth0_macvtap: entered promiscuous mode [ 46.467320][ T5948] veth1_macvtap: entered promiscuous mode [ 46.471367][ T5940] veth1_macvtap: entered promiscuous mode [ 46.485653][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.486342][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.488488][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.491167][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.491174][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.491182][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.502405][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.516249][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.516978][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.518323][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.521061][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.521069][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.528913][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.531463][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.534194][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.537843][ T5947] Bluetooth: hci1: command tx timeout [ 46.542178][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.544992][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.547722][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.550254][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.552969][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.556602][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.561112][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.564014][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.567628][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.570356][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.572907][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.575848][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.578929][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.582380][ T5940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.585035][ T5940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.587363][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.589851][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.595024][ T5948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.597367][ T5948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.599603][ T5948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.601858][ T5948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.604955][ T5947] Bluetooth: hci2: command tx timeout [ 46.605307][ T5951] Bluetooth: hci0: command tx timeout [ 46.607084][ T5947] Bluetooth: hci3: command tx timeout [ 46.659804][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.662337][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.678929][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.681630][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.695747][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.699643][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.707566][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.710441][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.712178][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 46.924593][ T6030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.014733][ T5985] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 47.098242][ T6042] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 47.174590][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 47.178872][ T5985] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 47.181071][ T5985] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 47.185036][ T5985] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 47.188135][ T5985] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 47.190928][ T5985] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 47.195534][ T5985] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 47.197468][ T5985] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 47.200334][ T5985] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 47.203746][ T5985] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 47.206654][ T5985] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 47.210463][ T5985] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 47.212307][ T5985] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 47.215688][ T5985] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 47.218683][ T5985] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 47.221499][ T5985] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 47.227848][ T5985] usb 5-1: string descriptor 0 read error: -22 [ 47.229528][ T5985] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 47.231867][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.242382][ T5985] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 47.553593][ T30] usb 5-1: USB disconnect, device number 2 [ 47.554483][ T6045] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 47.574551][ T5986] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.736398][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.739644][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.742849][ T5986] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.746492][ T5986] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.749165][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.752549][ T5986] usb 6-1: config 0 descriptor?? [ 47.766181][ T6015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.162031][ T5986] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x2 [ 48.164527][ T5986] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.166488][ T5986] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.168377][ T5986] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.170244][ T5986] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.172180][ T5986] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 48.174956][ T5986] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 48.180243][ T5986] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 48.224452][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.375713][ T30] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.378623][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 48.381409][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.384198][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.389280][ T30] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.391596][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.395130][ T30] usb 7-1: config 0 descriptor?? [ 48.396808][ T6055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 48.484329][ T6063] delete_channel: no stack [ 48.558088][ T6071] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.605416][ T5947] Bluetooth: hci1: command tx timeout [ 48.684880][ T5947] Bluetooth: hci0: command tx timeout [ 48.685084][ T5951] Bluetooth: hci3: command tx timeout [ 48.685101][ T5955] Bluetooth: hci2: command tx timeout [ 48.761467][ T6078] overlayfs: failed to resolve './file0': -2 [ 48.805454][ T6055] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 48.807267][ T6055] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.809923][ T6055] vhci_hcd vhci_hcd.0: Device attached [ 48.812612][ T6081] vhci_hcd: cannot find the pending unlink 5 [ 48.813675][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.817407][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.821995][ T6081] vhci_hcd: connection closed [ 48.825632][ T11] vhci_hcd: stop threads [ 48.825989][ T30] usbhid 7-1:0.0: can't add hid device: -71 [ 48.827710][ T11] vhci_hcd: release socket [ 48.828464][ T30] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 48.830575][ T11] vhci_hcd: disconnect device [ 48.837132][ T30] usb 7-1: USB disconnect, device number 2 [ 49.011550][ T6086] ======================================================= [ 49.011550][ T6086] WARNING: The mand mount option has been deprecated and [ 49.011550][ T6086] and is ignored by this kernel. Remove the mand [ 49.011550][ T6086] option from the mount to silence this warning. [ 49.011550][ T6086] ======================================================= [ 49.348857][ T39] kauditd_printk_skb: 2161 callbacks suppressed [ 49.348867][ T39] audit: type=1400 audit(1733714194.520:2276): avc: denied { map } for pid=6087 comm="syz.2.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.353294][ T6088] xt_hashlimit: size too large, truncated to 1048576 [ 49.356776][ T39] audit: type=1400 audit(1733714194.520:2277): avc: denied { read write } for pid=6087 comm="syz.2.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.366695][ T39] audit: type=1400 audit(1733714194.520:2278): avc: denied { setopt } for pid=6087 comm="syz.2.22" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.822867][ T6093] netlink: 48 bytes leftover after parsing attributes in process `syz.0.23'. [ 49.940490][ T6093] kvm: emulating exchange as write [ 49.991022][ T39] audit: type=1400 audit(1733714195.160:2279): avc: denied { getopt } for pid=6097 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.016472][ T6098] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 50.046499][ T6103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25'. [ 50.051659][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 50.051714][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 50.073230][ T39] audit: type=1400 audit(1733714195.240:2280): avc: denied { execute } for pid=6102 comm="syz.1.25" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 50.087171][ T6107] process 'syz.3.26' launched './file2' with NULL argv: empty string added [ 50.089600][ T39] audit: type=1400 audit(1733714195.260:2281): avc: denied { execute } for pid=6106 comm="syz.3.26" name="file2" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.095425][ T39] audit: type=1400 audit(1733714195.260:2282): avc: denied { execute_no_trans } for pid=6106 comm="syz.3.26" path="/4/file2" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.111448][ T39] audit: type=1400 audit(1733714195.280:2283): avc: denied { write } for pid=6106 comm="syz.3.26" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.142984][ T39] audit: type=1400 audit(1733714195.310:2284): avc: denied { prog_run } for pid=6111 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.145374][ T6110] hsr_slave_1: Device is already in use. [ 50.150273][ T39] audit: type=1400 audit(1733714195.320:2285): avc: denied { read write } for pid=6111 comm="syz.3.29" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.192375][ T6119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49922 sclass=netlink_route_socket pid=6119 comm=syz.0.30 [ 50.227128][ T5979] usb 6-1: USB disconnect, device number 2 [ 50.344047][ T6137] sg_write: process 44 (syz.0.35) changed security contexts after opening file descriptor, this is not allowed. [ 50.389636][ T6141] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET) [ 50.418360][ T6144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.522524][ T6159] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 50.526053][ T6159] cramfs: wrong magic [ 50.528221][ T6159] sock: sock_set_timeout: `syz.2.44' (pid 6159) tries to set negative timeout [ 50.680942][ T6169] xt_hashlimit: size too large, truncated to 1048576 [ 50.684908][ T5951] Bluetooth: hci1: command tx timeout [ 50.722797][ T6172] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 50.725001][ T6172] netlink: 'syz.1.49': attribute type 3 has an invalid length. [ 50.726950][ T6172] netlink: 224 bytes leftover after parsing attributes in process `syz.1.49'. [ 50.729539][ T6172] NCSI netlink: No device for ifindex 0 [ 50.764635][ T5951] Bluetooth: hci2: command tx timeout [ 50.764904][ T5947] Bluetooth: hci3: command tx timeout [ 50.764932][ T5955] Bluetooth: hci0: command tx timeout [ 51.204566][ T5979] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.344555][ T6201] loop2: detected capacity change from 0 to 7 [ 51.354685][ T6201] Dev loop2: unable to read RDB block 7 [ 51.354782][ T5979] usb 5-1: Using ep0 maxpacket: 8 [ 51.356278][ T6201] loop2: unable to read partition table [ 51.359337][ T6201] loop2: partition table beyond EOD, truncated [ 51.360687][ T5979] usb 5-1: config 2 has an invalid descriptor of length 19, skipping remainder of the config [ 51.361108][ T6201] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 51.363675][ T5979] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 51.365574][ T5979] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 51.370966][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.373061][ T5979] usb 5-1: Product: syz [ 51.374233][ T5979] usb 5-1: Manufacturer: syz [ 51.375585][ T5979] usb 5-1: SerialNumber: syz [ 51.562199][ T6205] nbd: illegal input index -1996488704 [ 51.589126][ T6183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6183 comm=syz.0.53 [ 51.595590][ T5979] usb 5-1: USB disconnect, device number 3 [ 51.697019][ T6213] Invalid source name [ 51.698137][ T6213] UBIFS error (pid: 6213): cannot open "ubifs", error -22 [ 51.701403][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 51.709873][ T6213] netlink: 'syz.2.62': attribute type 4 has an invalid length. [ 51.711894][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 52.046150][ T6249] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 52.048245][ T6249] netlink: 'syz.1.73': attribute type 3 has an invalid length. [ 52.050278][ T6249] netlink: 224 bytes leftover after parsing attributes in process `syz.1.73'. [ 52.052640][ T6249] NCSI netlink: No device for ifindex 0 [ 52.179368][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 52.199901][ T6265] capability: warning: `syz.0.79' uses deprecated v2 capabilities in a way that may be insecure [ 52.339161][ T6263] syz.1.78 (6263) used greatest stack depth: 20944 bytes left [ 52.542140][ T6283] netlink: 'syz.0.85': attribute type 9 has an invalid length. [ 52.544133][ T6283] netlink: 244 bytes leftover after parsing attributes in process `syz.0.85'. [ 52.598221][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.88'. [ 52.671550][ T6295] raw_sendmsg: syz.0.88 forgot to set AF_INET. Fix it! [ 52.687049][ T6304] fuse: Unknown parameter ' n†šL®ï£'øþîñQÝ¥Nw{¥x«ú¶1ŒšI¸0x0000000000000004' [ 52.690516][ T6304] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.710152][ T6307] sit0: entered promiscuous mode [ 52.712875][ T6307] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 52.717286][ T6307] netlink: 1 bytes leftover after parsing attributes in process `syz.2.90'. [ 52.721085][ T6307] Zero length message leads to an empty skb [ 52.759930][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.3.93'. [ 52.764658][ T5947] Bluetooth: hci1: command tx timeout [ 52.839518][ T6329] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 52.842468][ T6329] trusted_key: encrypted_key: insufficient parameters specified [ 52.844729][ T5947] Bluetooth: hci0: command tx timeout [ 52.844752][ T5947] Bluetooth: hci3: command tx timeout [ 52.844768][ T5947] Bluetooth: hci2: command tx timeout [ 52.932865][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 53.105571][ T6355] can0: slcan on ptm0. [ 53.279274][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.281326][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.283369][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.285894][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.288204][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.290224][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.292276][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.294292][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.297018][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.299486][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.301563][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.303744][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.306135][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.308367][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.310525][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.312684][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.314992][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.317165][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.319261][ T6369] overlay: filesystem on ./bus not supported as upperdir [ 53.323280][ T6370] Bluetooth: MGMT ver 1.23 [ 53.350376][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 53.593747][ T6393] block nbd1: shutting down sockets [ 53.854496][ T5992] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.995526][ T6354] can0 (unregistered): slcan off ptm0. [ 54.014503][ T5992] usb 6-1: Using ep0 maxpacket: 8 [ 54.025184][ T5992] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 54.027286][ T5992] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 54.029763][ T5992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 54.032253][ T5992] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.034975][ T5992] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.038279][ T5992] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 54.040582][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.125874][ T6430] netlink: 204 bytes leftover after parsing attributes in process `syz.2.113'. [ 54.209536][ T6434] libceph: resolve '40' (ret=-3): failed [ 54.255223][ T5992] usb 6-1: usb_control_msg returned -32 [ 54.256745][ T5992] usbtmc 6-1:16.0: can't read capabilities [ 54.264631][ T6440] Cannot find add_set index 0 as target [ 54.405486][ T39] kauditd_printk_skb: 103 callbacks suppressed [ 54.405497][ T39] audit: type=1400 audit(1733714199.580:2389): avc: denied { write } for pid=6449 comm="syz.2.119" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.414450][ T39] audit: type=1400 audit(1733714199.580:2390): avc: denied { connect } for pid=6449 comm="syz.2.119" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.419192][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 54.419696][ T39] audit: type=1400 audit(1733714199.580:2391): avc: denied { name_connect } for pid=6449 comm="syz.2.119" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 54.428310][ T39] audit: type=1400 audit(1733714199.590:2392): avc: denied { create } for pid=6451 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.433373][ T39] audit: type=1400 audit(1733714199.590:2393): avc: denied { bind } for pid=6451 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.443269][ T39] audit: type=1400 audit(1733714199.610:2394): avc: denied { read } for pid=6449 comm="syz.2.119" laddr=fe80::f lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.507065][ T6457] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 54.509335][ T6457] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 54.730280][ T39] audit: type=1400 audit(1733714199.900:2395): avc: denied { read } for pid=6462 comm="syz.2.123" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 54.736705][ T39] audit: type=1400 audit(1733714199.900:2396): avc: denied { open } for pid=6462 comm="syz.2.123" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 54.770261][ T39] audit: type=1400 audit(1733714199.940:2397): avc: denied { create } for pid=6464 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.815786][ T1324] usb 6-1: USB disconnect, device number 3 [ 54.828454][ T6472] overlayfs: failed to resolve './file2': -2 [ 55.417881][ T6479] overlayfs: failed to get inode (-116) [ 55.419720][ T6479] overlayfs: failed to get inode (-116) [ 55.459237][ T6485] x_tables: duplicate underflow at hook 1 [ 55.490126][ T39] audit: type=1400 audit(1733714200.660:2398): avc: denied { read write } for pid=6488 comm="syz.0.132" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.714353][ T6498] xt_hashlimit: size too large, truncated to 1048576 [ 56.329235][ T6511] capability: warning: `syz.1.138' uses 32-bit capabilities (legacy support in use) [ 56.438845][ T6526] afs: Unknown parameter 'dn' [ 56.509038][ T6534] loop2: detected capacity change from 0 to 7 [ 56.511552][ T6534] Dev loop2: unable to read RDB block 7 [ 56.513141][ T6534] loop2: unable to read partition table [ 56.514859][ T6534] loop2: partition table beyond EOD, truncated [ 56.516489][ T6534] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 56.631554][ T6547] tipc: Started in network mode [ 56.633117][ T6547] tipc: Node identity 4, cluster identity 4711 [ 56.637624][ T6547] tipc: Node number set to 4 [ 56.675289][ T5985] IPVS: starting estimator thread 0... [ 56.676633][ T6551] input: syz1 as /devices/virtual/input/input8 [ 56.682867][ T6551] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 56.790511][ T6577] overlayfs: unescaped trailing colons in lowerdir mount option. [ 56.800750][ T6553] IPVS: using max 38 ests per chain, 91200 per kthread [ 56.823056][ T6587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6587 comm=syz.1.159 [ 56.948149][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 57.767482][ T6623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.842053][ T6623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.846875][ T6642] xfrm0: entered allmulticast mode [ 57.873528][ T6642] __nla_validate_parse: 4 callbacks suppressed [ 57.873539][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 57.877494][ T6642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.176'. [ 57.942485][ T6623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.079235][ T6623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.201085][ T6623] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.206306][ T6623] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.212725][ T6623] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.219704][ T6623] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.260268][ T6669] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.373364][ T6682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.188'. [ 58.535179][ T1456] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.696374][ T1456] usb 7-1: Using ep0 maxpacket: 16 [ 58.698975][ T1456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.701768][ T1456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.704262][ T1456] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.707675][ T1456] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 58.710652][ T1456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.713681][ T1456] usb 7-1: config 0 descriptor?? [ 58.717040][ T1456] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input9 [ 58.723118][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 58.727211][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 58.731546][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 58.734472][ T5979] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 58.737416][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 58.756839][ T5944] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 58.760625][ T6694] kvm: MONITOR instruction emulated as NOP! [ 58.760695][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 58.767021][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 58.769359][ T5338] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 58.899931][ T5979] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 58.902036][ T5979] usb 5-1: config 0 has no interface number 0 [ 58.903611][ T5979] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 58.906451][ T5979] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 58.909465][ T5979] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 58.912261][ T5979] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 58.915097][ T5979] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 58.918394][ T5979] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 58.920721][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.923654][ T5979] usb 5-1: config 0 descriptor?? [ 58.925267][ T6675] netlink: 48 bytes leftover after parsing attributes in process `syz.2.186'. [ 58.927407][ T6684] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 58.931273][ T6675] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 58.931370][ T5979] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 58.939284][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 59.138419][ T1324] usb 5-1: USB disconnect, device number 4 [ 59.142422][ T1324] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 59.298264][ T6697] can0: slcan on ptm1. [ 59.385381][ T6696] can0 (unregistered): slcan off ptm1. [ 59.463099][ T1324] usb 7-1: USB disconnect, device number 3 [ 59.486748][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 59.524125][ T6721] tmpfs: Bad value for 'nr_inodes' [ 59.550333][ T39] kauditd_printk_skb: 56 callbacks suppressed [ 59.550348][ T39] audit: type=1400 audit(1733714204.720:2455): avc: denied { read } for pid=6724 comm="syz.3.197" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.561052][ T39] audit: type=1400 audit(1733714204.720:2456): avc: denied { open } for pid=6724 comm="syz.3.197" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.569997][ T39] audit: type=1400 audit(1733714204.720:2457): avc: denied { ioctl } for pid=6724 comm="syz.3.197" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.577162][ T39] audit: type=1400 audit(1733714204.750:2458): avc: denied { create } for pid=6728 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 59.582192][ T39] audit: type=1400 audit(1733714204.750:2459): avc: denied { listen } for pid=6728 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 59.592781][ T39] audit: type=1400 audit(1733714204.750:2460): avc: denied { append } for pid=6728 comm="syz.1.199" name="nbd1" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.599643][ T39] audit: type=1400 audit(1733714204.750:2461): avc: denied { create } for pid=6728 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.600311][ T6727] 9p: Unknown uid 00000000004294967295 [ 59.606158][ T39] audit: type=1400 audit(1733714204.770:2462): avc: denied { map } for pid=6724 comm="syz.3.197" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.655316][ T39] audit: type=1400 audit(1733714204.830:2463): avc: denied { call } for pid=6724 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 59.717611][ T39] audit: type=1400 audit(1733714204.890:2464): avc: denied { ioctl } for pid=6734 comm="syz.2.200" path="socket:[12002]" dev="sockfs" ino=12002 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.788500][ T6739] binder: BINDER_SET_CONTEXT_MGR already set [ 59.790192][ T6739] binder: 6738:6739 ioctl 4018620d 20000100 returned -16 [ 59.792049][ T6739] binder: BINDER_SET_CONTEXT_MGR already set [ 59.793621][ T6739] binder: 6738:6739 ioctl 4018620d 20000100 returned -16 [ 59.796568][ T6739] binder: BINDER_SET_CONTEXT_MGR already set [ 59.798501][ T6739] binder: 6738:6739 ioctl 4018620d 20000100 returned -16 [ 59.800636][ T6739] binder: BINDER_SET_CONTEXT_MGR already set [ 59.802197][ T6739] binder: 6738:6739 ioctl 4018620d 20000100 returned -16 [ 59.804012][ T6739] binder: BINDER_SET_CONTEXT_MGR already set [ 59.809876][ T6739] binder: 6738:6739 ioctl 4018620d 20000100 returned -16 [ 59.811741][ T6739] binder: BINDER_SET_CONTEXT_MGR already set [ 59.813295][ T6739] binder: 6738:6739 ioctl 4018620d 20000100 returned -16 [ 59.817750][ T6739] binder: BINDER_SET_CONTEXT_MGR already set [ 59.819384][ T6739] binder: 6738:6739 ioctl 4018620d 20000100 returned -16 [ 59.821234][ T6739] binder: BINDER_SET_CONTEXT_MGR already set [ 59.822797][ T6739] binder: 6738:6739 ioctl 4018620d 20000100 returned -16 [ 59.859118][ T6759] nfs: Unknown parameter 'udp ' [ 59.987955][ T6771] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 59.993821][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 60.002352][ T6771] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 60.005774][ T6771] bond0: (slave lo): Error: Device can not be enslaved while up [ 60.061541][ T6779] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 60.061923][ T6779] SELinux: Context P is not valid (left unmapped). [ 60.077724][ T6781] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 60.316509][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 60.508830][ T6818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 60.518532][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.228'. [ 60.625882][ T6834] ALSA: seq fatal error: cannot create timer (-22) [ 61.432200][ T6856] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 61.455780][ T6856] overlayfs: invalid redirect ((null)) [ 61.457907][ T6855] overlayfs: invalid redirect ((null)) [ 61.499025][ T6867] cgroup: Unknown subsys name 'cpuset' [ 61.586112][ T6877] xt_hashlimit: size too large, truncated to 1048576 [ 61.636265][ T6874] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.649948][ T6874] kvm: pic: non byte read [ 61.652190][ T6874] kvm: pic: level sensitive irq not supported [ 61.652439][ T6874] kvm: pic: non byte read [ 61.658765][ T6874] kvm: pic: level sensitive irq not supported [ 61.658985][ T6874] kvm: pic: non byte read [ 61.662770][ T6874] kvm: pic: level sensitive irq not supported [ 61.662988][ T6874] kvm: pic: non byte read [ 62.046081][ T5955] Bluetooth: hci2: command 0x0406 tx timeout [ 62.114816][ T5947] Bluetooth: Wrong link type (-22) [ 62.203808][ T6926] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 62.205544][ T6926] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.208537][ T6926] vhci_hcd vhci_hcd.0: Device attached [ 62.213074][ T6927] usbip_core: unknown command [ 62.214305][ T6927] vhci_hcd: unknown pdu 0 [ 62.216315][ T6927] usbip_core: unknown command [ 62.218725][ T45] vhci_hcd: stop threads [ 62.220001][ T45] vhci_hcd: release socket [ 62.221167][ T45] vhci_hcd: disconnect device [ 62.783627][ T6950] sd 0:0:0:0: PR command failed: 1026 [ 62.785330][ T6950] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 62.787174][ T6950] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 63.130566][ T6964] xt_hashlimit: size too large, truncated to 1048576 [ 63.503693][ T6999] netlink: 'syz.1.269': attribute type 5 has an invalid length. [ 63.507641][ T6999] netlink: 'syz.1.269': attribute type 33 has an invalid length. [ 63.672345][ T7018] mac80211_hwsim hwsim3 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 63.678241][ T7018] tmpfs: Unknown parameter 'obj_role' [ 63.816737][ T7025] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 63.818466][ T7025] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.820964][ T7025] vhci_hcd vhci_hcd.0: Device attached [ 63.824334][ T7026] usbip_core: unknown command [ 63.826284][ T7026] vhci_hcd: unknown pdu 0 [ 63.828484][ T7026] usbip_core: unknown command [ 63.833208][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.833388][ T1138] vhci_hcd: stop threads [ 63.836573][ T1138] vhci_hcd: release socket [ 63.837291][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.837848][ T1138] vhci_hcd: disconnect device [ 63.839682][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.839696][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.839708][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.846809][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.848754][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.850645][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.852581][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.854599][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.856504][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.858390][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 63.860291][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.862176][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.864095][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.866062][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.867977][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.869866][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.871755][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.873663][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.875996][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.877906][ T1456] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.882776][ T1456] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 64.064482][ T5979] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.225849][ T5979] usb 6-1: config 0 has no interfaces? [ 64.227333][ T5979] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 64.229686][ T5979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.232690][ T5979] usb 6-1: config 0 descriptor?? [ 64.411233][ T7010] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 64.436117][ T7046] kAFS: Can only specify source 'none' with -o dyn [ 64.443414][ T5979] usb 6-1: USB disconnect, device number 4 [ 64.444282][ T7046] can0: slcan on ptm0. [ 64.467633][ T7046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7046 comm=syz.0.281 [ 64.488731][ T7046] bond1: entered promiscuous mode [ 64.490012][ T7046] bond1: entered allmulticast mode [ 64.491483][ T7046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.020710][ T39] kauditd_printk_skb: 62 callbacks suppressed [ 65.020720][ T39] audit: type=1400 audit(1733714210.190:2527): avc: denied { create } for pid=7059 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 65.033988][ T7060] __nla_validate_parse: 1 callbacks suppressed [ 65.033998][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 65.039682][ T7060] IPVS: Error joining to the multicast group [ 65.139401][ T7068] xt_hashlimit: size too large, truncated to 1048576 [ 65.187200][ T39] audit: type=1400 audit(1733714210.360:2528): avc: denied { remount } for pid=7075 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.192616][ T39] audit: type=1400 audit(1733714210.360:2529): avc: denied { mount } for pid=7075 comm="syz.3.288" name="/" dev="hugetlbfs" ino=14145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 65.198970][ T39] audit: type=1400 audit(1733714210.370:2530): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 65.200000][ T7063] could not allocate digest TFM handle sha384-arm64 [ 65.216622][ T30] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 65.227716][ T39] audit: type=1400 audit(1733714210.400:2531): avc: denied { mount } for pid=7080 comm="syz.3.289" name="/" dev="autofs" ino=17447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 65.367477][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 65.370537][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 65.373909][ T30] usb 6-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 65.376855][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.381526][ T30] usb 6-1: config 0 descriptor?? [ 65.386874][ T7058] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 65.490499][ T39] audit: type=1400 audit(1733714210.650:2532): avc: denied { setattr } for pid=7086 comm="syz.0.290" name="" dev="pipefs" ino=16511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 65.498357][ T39] audit: type=1400 audit(1733714210.660:2533): avc: denied { ioctl } for pid=7086 comm="syz.0.290" path="socket:[14156]" dev="sockfs" ino=14156 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.706462][ T39] audit: type=1400 audit(1733714210.880:2534): avc: denied { lock } for pid=7104 comm="syz.2.293" path="socket:[17449]" dev="sockfs" ino=17449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.712302][ T39] audit: type=1400 audit(1733714210.880:2535): avc: denied { connect } for pid=7104 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.781390][ T39] audit: type=1400 audit(1733714210.950:2536): avc: denied { getopt } for pid=7114 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 65.782694][ T7115] netlink: 64 bytes leftover after parsing attributes in process `syz.2.296'. [ 65.791678][ T7115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.296'. [ 65.836189][ T7117] Dead loop on virtual device ip6_vti0, fix it urgently! [ 66.474646][ T7124] syz.3.301 (7124): drop_caches: 2 [ 66.583405][ T7128] xt_hashlimit: size too large, truncated to 1048576 [ 66.634101][ T7130] FAULT_INJECTION: forcing a failure. [ 66.634101][ T7130] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.638192][ T7130] CPU: 3 UID: 0 PID: 7130 Comm: syz.3.303 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 66.641272][ T7130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.644141][ T7130] Call Trace: [ 66.645054][ T7130] [ 66.645896][ T7130] dump_stack_lvl+0x16c/0x1f0 [ 66.647196][ T7130] should_fail_ex+0x497/0x5b0 [ 66.648520][ T7130] _copy_to_user+0x32/0xd0 [ 66.649724][ T7130] simple_read_from_buffer+0xd0/0x160 [ 66.651138][ T7130] proc_fail_nth_read+0x198/0x270 [ 66.652693][ T7132] xt_hashlimit: size too large, truncated to 1048576 [ 66.652765][ T7130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.657060][ T7130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.659036][ T7130] vfs_read+0x1df/0xbe0 [ 66.660566][ T7130] ? __fget_files+0x1fc/0x3a0 [ 66.662281][ T7130] ? __pfx___mutex_lock+0x10/0x10 [ 66.664106][ T7130] ? __pfx_vfs_read+0x10/0x10 [ 66.665840][ T7130] ? __fget_files+0x206/0x3a0 [ 66.667309][ T7130] ksys_read+0x12b/0x250 [ 66.668893][ T7130] ? __pfx_ksys_read+0x10/0x10 [ 66.670639][ T7130] do_syscall_64+0xcd/0x250 [ 66.672342][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.674475][ T7130] RIP: 0033:0x7fcea617e8ec [ 66.676106][ T7130] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.683093][ T7130] RSP: 002b:00007fcea6fa5050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.686142][ T7130] RAX: ffffffffffffffda RBX: 00007fcea6346080 RCX: 00007fcea617e8ec [ 66.688760][ T7130] RDX: 000000000000000f RSI: 00007fcea6fa50b0 RDI: 0000000000000004 [ 66.690843][ T7130] RBP: 00007fcea6fa50a0 R08: 0000000000000000 R09: 0000000000000000 [ 66.692891][ T7130] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000001 [ 66.694920][ T7130] R13: 0000000000000001 R14: 00007fcea6346080 R15: 00007ffd37defd98 [ 66.696961][ T7130] [ 66.697861][ C3] vkms_vblank_simulate: vblank timer overrun [ 67.488715][ T7146] netlink: 72 bytes leftover after parsing attributes in process `syz.0.307'. [ 67.616660][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 67.714209][ T7154] ALSA: mixer_oss: invalid OSS volume '' [ 67.983270][ T30] usbhid 6-1:0.0: can't add hid device: -71 [ 67.985848][ T30] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 67.992675][ T30] usb 6-1: USB disconnect, device number 5 [ 68.238137][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.315'. [ 69.000680][ T7183] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 69.002578][ T7185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.002964][ T7183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 69.009596][ T7183] vhci_hcd vhci_hcd.0: Device attached [ 69.025877][ T7186] vhci_hcd: connection closed [ 69.026430][ T12] vhci_hcd: stop threads [ 69.028647][ T12] vhci_hcd: release socket [ 69.029749][ T12] vhci_hcd: disconnect device [ 69.059549][ T7192] program syz.1.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.198281][ T7197] binder: 7196:7197 ioctl 54a0 0 returned -22 [ 69.200546][ T7197] binder: 7196:7197 ioctl c0306201 200002c0 returned -14 [ 70.175824][ T7226] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 70.182613][ T7226] CIFS mount error: No usable UNC path provided in device string! [ 70.182613][ T7226] [ 70.185685][ T7226] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 70.414599][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 70.414615][ T39] audit: type=1400 audit(1733714215.580:2562): avc: denied { nlmsg_read } for pid=7234 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.479699][ T39] audit: type=1400 audit(1733714215.650:2563): avc: denied { listen } for pid=7234 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.559679][ T39] audit: type=1400 audit(1733714215.730:2564): avc: denied { map } for pid=7234 comm="syz.0.332" path="socket:[17579]" dev="sockfs" ino=17579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.613608][ T39] audit: type=1400 audit(1733714215.780:2565): avc: denied { read } for pid=7245 comm="syz.0.334" path="socket:[18530]" dev="sockfs" ino=18530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.760704][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 70.762623][ T7258] xt_hashlimit: max too large, truncated to 1048576 [ 70.843231][ T39] audit: type=1400 audit(1733714216.010:2566): avc: denied { create } for pid=7262 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.849600][ T39] audit: type=1400 audit(1733714216.010:2567): avc: denied { getopt } for pid=7262 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.930700][ T7268] gretap1: entered allmulticast mode [ 70.934096][ T7268] bridge0: port 3(gretap1) entered blocking state [ 70.935967][ T7268] bridge0: port 3(gretap1) entered disabled state [ 70.938231][ T7268] gretap1: entered promiscuous mode [ 70.940125][ T7268] bridge0: port 3(gretap1) entered blocking state [ 70.942690][ T7268] bridge0: port 3(gretap1) entered forwarding state [ 70.975218][ C0] bridge0: received packet on gretap1 with own address as source address (addr:12:28:74:7c:b4:a1, vlan:0) [ 70.980107][ T7271] syz.3.343: attempt to access beyond end of device [ 70.980107][ T7271] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 70.984330][ T7271] syz.3.343: attempt to access beyond end of device [ 70.984330][ T7271] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 70.988831][ T7271] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 70.993051][ T7271] syz.3.343: attempt to access beyond end of device [ 70.993051][ T7271] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 70.997352][ T7271] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 70.999788][ T7271] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 71.002366][ T7271] UDF-fs: Scanning with blocksize 512 failed [ 71.007992][ T7271] syz.3.343: attempt to access beyond end of device [ 71.007992][ T7271] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 71.008305][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.012313][ T7271] syz.3.343: attempt to access beyond end of device [ 71.012313][ T7271] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 71.014096][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.017802][ T7271] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 71.022283][ T7271] syz.3.343: attempt to access beyond end of device [ 71.022283][ T7271] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 71.025954][ T7271] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 71.029085][ T7271] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 71.031068][ T7271] UDF-fs: Scanning with blocksize 1024 failed [ 71.032864][ T7271] syz.3.343: attempt to access beyond end of device [ 71.032864][ T7271] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 71.037169][ T7271] syz.3.343: attempt to access beyond end of device [ 71.037169][ T7271] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 71.040368][ T7271] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 71.042880][ T7271] syz.3.343: attempt to access beyond end of device [ 71.042880][ T7271] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 71.046805][ T7271] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 71.049229][ T7271] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 71.051341][ T7271] UDF-fs: Scanning with blocksize 2048 failed [ 71.053138][ T7271] syz.3.343: attempt to access beyond end of device [ 71.053138][ T7271] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 71.057533][ T7271] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 71.059964][ T7271] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 71.062629][ T7271] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 71.064721][ T7271] UDF-fs: Scanning with blocksize 4096 failed [ 71.066249][ T7271] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 71.071119][ T39] audit: type=1400 audit(1733714216.240:2568): avc: denied { map } for pid=7270 comm="syz.3.343" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 71.077646][ T39] audit: type=1400 audit(1733714216.240:2569): avc: denied { write execute } for pid=7270 comm="syz.3.343" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 71.425869][ T7287] xt_hashlimit: size too large, truncated to 1048576 [ 71.475100][ C3] bridge0: received packet on gretap1 with own address as source address (addr:12:28:74:7c:b4:a1, vlan:0) [ 71.804965][ C0] bridge0: received packet on gretap1 with own address as source address (addr:12:28:74:7c:b4:a1, vlan:0) [ 72.198308][ T39] audit: type=1400 audit(1733714217.370:2570): avc: denied { listen } for pid=7300 comm="syz.3.350" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 72.207492][ T39] audit: type=1400 audit(1733714217.370:2571): avc: denied { accept } for pid=7300 comm="syz.3.350" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 72.289402][ T7306] xt_hashlimit: size too large, truncated to 1048576 [ 72.524959][ C2] bridge0: received packet on gretap1 with own address as source address (addr:12:28:74:7c:b4:a1, vlan:0) [ 72.528103][ C2] bridge0: received packet on gretap1 with own address as source address (addr:12:28:74:7c:b4:a1, vlan:0) [ 72.549194][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.352'. [ 72.554793][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.557607][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.641676][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.355'. [ 72.644484][ T7320] netlink: 92 bytes leftover after parsing attributes in process `syz.0.355'. [ 72.669691][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 72.711062][ T7329] xt_hashlimit: size too large, truncated to 1048576 [ 72.788386][ T7333] fuse: Bad value for 'user_id' [ 72.789724][ T7333] fuse: Bad value for 'user_id' [ 72.827774][ T7336] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 72.861986][ C2] sr 2:0:0:0: [sr0] tag#24 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 72.864600][ C2] sr 2:0:0:0: [sr0] tag#24 CDB: Xdwrite(16) 80 a3 3c 25 fa d6 ec c2 82 8d 87 d5 92 20 41 0a [ 72.870375][ T7339] syzkaller1: entered allmulticast mode [ 72.914860][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.084431][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 73.087122][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 73.090043][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 73.092668][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.095447][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.098854][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.101279][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.307743][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 73.311529][ T8] usbtmc 5-1:16.0: can't read capabilities [ 73.327533][ T7352] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 73.337964][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.340608][ T7352] team0: Port device batadv0 added [ 73.397932][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.365'. [ 73.566461][ C2] bridge0: received packet on gretap1 with own address as source address (addr:12:28:74:7c:b4:a1, vlan:0) [ 73.807767][ T7367] 9p: Unknown Cache mode or invalid value mmap" [ 74.467803][ T7392] binder: BINDER_SET_CONTEXT_MGR already set [ 74.469722][ T7392] binder: 7390:7392 ioctl 4018620d 20000100 returned -16 [ 74.475308][ T7392] binder: BINDER_SET_CONTEXT_MGR already set [ 74.477508][ T7392] binder: 7390:7392 ioctl 4018620d 20000040 returned -16 [ 74.564035][ T7398] trusted_key: encrypted_key: key trusted:syz not found [ 74.587368][ T7400] xt_hashlimit: size too large, truncated to 1048576 [ 75.485493][ C0] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.503936][ T7406] Cannot find add_set index 0 as target [ 75.540194][ T7410] netlink: 'syz.1.379': attribute type 3 has an invalid length. [ 75.542204][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 75.578055][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 75.578066][ T39] audit: type=1400 audit(1733714220.750:2576): avc: denied { map } for pid=7414 comm="syz.1.380" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.700745][ T30] usb 5-1: USB disconnect, device number 5 [ 75.812571][ T39] audit: type=1400 audit(1733714220.980:2577): avc: denied { write } for pid=7419 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 75.875520][ T7422] netlink: 'syz.1.384': attribute type 10 has an invalid length. [ 75.899451][ T7422] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 75.942748][ T7426] netlink: 48 bytes leftover after parsing attributes in process `syz.0.381'. [ 75.945687][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'. [ 75.950450][ T7426] geneve0: entered promiscuous mode [ 75.952244][ T7426] geneve0: entered allmulticast mode [ 76.129268][ T57] cfg80211: failed to load regulatory.db [ 76.620798][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 76.765663][ C2] bridge0: received packet on gretap1 with own address as source address (addr:12:28:74:7c:b4:a1, vlan:0) [ 76.767547][ T39] audit: type=1400 audit(1733714221.940:2578): avc: denied { bind } for pid=7454 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.776695][ T39] audit: type=1400 audit(1733714221.940:2579): avc: denied { write } for pid=7454 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.783693][ T39] audit: type=1400 audit(1733714221.940:2580): avc: denied { bind } for pid=7454 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.234026][ T39] audit: type=1400 audit(1733714222.400:2581): avc: denied { read write } for pid=7478 comm="syz.0.401" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.241031][ T39] audit: type=1400 audit(1733714222.410:2582): avc: denied { open } for pid=7478 comm="syz.0.401" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.243204][ T7490] netlink: 'syz.1.404': attribute type 28 has an invalid length. [ 77.252118][ T7490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.404'. [ 77.281683][ T7494] xt_hashlimit: size too large, truncated to 1048576 [ 77.355744][ T39] audit: type=1400 audit(1733714222.530:2583): avc: denied { getopt } for pid=7497 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.363313][ T39] audit: type=1400 audit(1733714222.530:2584): avc: denied { setopt } for pid=7497 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.377949][ T39] audit: type=1400 audit(1733714222.550:2585): avc: denied { append } for pid=7502 comm="syz.0.407" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.378094][ T7503] random: crng reseeded on system resumption [ 77.484702][ T7505] netlink: 'syz.0.407': attribute type 1 has an invalid length. [ 77.634132][ T7517] block nbd3: not configured, cannot reconfigure [ 78.347553][ T7542] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 78.421167][ T7552] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 78.422916][ T7552] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.425587][ T7552] vhci_hcd vhci_hcd.0: Device attached [ 78.429153][ T7553] vhci_hcd: unknown pdu 2 [ 78.431083][ T11] vhci_hcd: stop threads [ 78.432208][ T11] vhci_hcd: release socket [ 78.433387][ T11] vhci_hcd: disconnect device [ 78.457213][ T7547] bio_check_eod: 2 callbacks suppressed [ 78.457226][ T7547] syz.1.417: attempt to access beyond end of device [ 78.457226][ T7547] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 78.462116][ T7547] syz.1.417: attempt to access beyond end of device [ 78.462116][ T7547] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 78.466028][ T7547] syz.1.417: attempt to access beyond end of device [ 78.466028][ T7547] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 78.469574][ T7547] syz.1.417: attempt to access beyond end of device [ 78.469574][ T7547] nbd1: rw=0, sector=18, nr_sectors = 2 limit=0 [ 78.473505][ T7547] syz.1.417: attempt to access beyond end of device [ 78.473505][ T7547] nbd1: rw=0, sector=30, nr_sectors = 2 limit=0 [ 78.477000][ T7547] syz.1.417: attempt to access beyond end of device [ 78.477000][ T7547] nbd1: rw=0, sector=36, nr_sectors = 2 limit=0 [ 78.480241][ T7547] VFS: unable to find oldfs superblock on device nbd1 [ 78.499938][ T7557] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.502471][ T7557] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.505565][ T7557] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.508097][ T7557] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.510475][ T7557] geneve2: entered promiscuous mode [ 78.511878][ T7557] geneve2: entered allmulticast mode [ 78.776783][ T7562] __nla_validate_parse: 1 callbacks suppressed [ 78.776793][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 78.780666][ T7562] netlink: 'syz.0.422': attribute type 3 has an invalid length. [ 78.870310][ T7566] Cannot find add_set index 0 as target [ 78.995240][ T7568] serio: Serial port ptm1 [ 79.049781][ T7572] xt_hashlimit: size too large, truncated to 1048576 [ 79.845787][ T7577] xt_hashlimit: size too large, truncated to 1048576 [ 80.730451][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 80.730463][ T39] audit: type=1400 audit(1733714225.900:2597): avc: denied { setopt } for pid=7615 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.738482][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 80.740894][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 81.359751][ T39] audit: type=1400 audit(1733714226.530:2598): avc: denied { execute } for pid=7628 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.368410][ T39] audit: type=1400 audit(1733714226.530:2599): avc: denied { execute_no_trans } for pid=7628 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.409601][ T39] audit: type=1326 audit(1733714226.580:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea617fed9 code=0x7ffc0000 [ 81.418279][ T39] audit: type=1326 audit(1733714226.580:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea617fed9 code=0x7ffc0000 [ 81.429773][ T39] audit: type=1326 audit(1733714226.590:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.442" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fcea617fed9 code=0x7ffc0000 [ 81.439324][ T39] audit: type=1326 audit(1733714226.590:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea617fed9 code=0x7ffc0000 [ 81.449662][ T39] audit: type=1326 audit(1733714226.590:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea617fed9 code=0x7ffc0000 [ 81.455749][ T39] audit: type=1326 audit(1733714226.590:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.442" exe="/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fcea617fed9 code=0x7ffc0000 [ 81.461736][ T39] audit: type=1326 audit(1733714226.590:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea617fed9 code=0x7ffc0000 [ 81.484359][ T5955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.488138][ T5955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.490848][ T5955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.495792][ T5955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.498390][ T5955] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.500747][ T5955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.611179][ T7632] chnl_net:caif_netlink_parms(): no params data found [ 81.673742][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.676438][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.678424][ T7632] bridge_slave_0: entered allmulticast mode [ 81.680710][ T7632] bridge_slave_0: entered promiscuous mode [ 81.684478][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.687572][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.689565][ T7632] bridge_slave_1: entered allmulticast mode [ 81.691448][ T7632] bridge_slave_1: entered promiscuous mode [ 81.721908][ T7632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.722180][ T7652] netlink: 44 bytes leftover after parsing attributes in process `syz.3.446'. [ 81.725937][ T7632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.728327][ T7652] netlink: 43 bytes leftover after parsing attributes in process `syz.3.446'. [ 81.731156][ T7652] netlink: 'syz.3.446': attribute type 6 has an invalid length. [ 81.734470][ T7652] netlink: 'syz.3.446': attribute type 5 has an invalid length. [ 81.736508][ T7652] netlink: 43 bytes leftover after parsing attributes in process `syz.3.446'. [ 81.755091][ T7632] team0: Port device team_slave_0 added [ 81.757662][ T7632] team0: Port device team_slave_1 added [ 81.777586][ T7656] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 81.787047][ T7661] xt_hashlimit: size too large, truncated to 1048576 [ 81.801342][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.803208][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.811307][ T7632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.811884][ T7664] Attempt to restore checkpoint with obsolete wellknown handles [ 81.817894][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.819725][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.826637][ T7632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.851120][ T7632] hsr_slave_0: entered promiscuous mode [ 81.853158][ T7632] hsr_slave_1: entered promiscuous mode [ 81.858157][ T7632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.860190][ T7632] Cannot create hsr debugfs directory [ 81.862792][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 81.871660][ T7668] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 81.874282][ T7668] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 81.937950][ T7632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.943183][ T7632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.946677][ T7632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.949588][ T7632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.959282][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.961249][ T7632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.963546][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.965434][ T7632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.970369][ T7668] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 81.975792][ T7668] bond1 (unregistering): Released all slaves [ 82.000886][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.008424][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.011141][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.021922][ T7632] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.027892][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.029744][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.040806][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.042686][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.115815][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.205246][ T1456] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.214137][ T7632] veth0_vlan: entered promiscuous mode [ 82.221018][ T7632] veth1_vlan: entered promiscuous mode [ 82.231867][ T7632] veth0_macvtap: entered promiscuous mode [ 82.235242][ T7632] veth1_macvtap: entered promiscuous mode [ 82.241371][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.244788][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.247357][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.250006][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.252553][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.255695][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.258252][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.261111][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.265208][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.268380][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.271058][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.273597][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.276633][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.279283][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.282156][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.284986][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.287773][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.292173][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.297999][ T7632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.300693][ T7632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.303019][ T7632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.306283][ T7632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.334128][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.336811][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.345867][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.347959][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.364635][ T1456] usb 6-1: Using ep0 maxpacket: 16 [ 82.368243][ T1456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.373820][ T1456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58879, setting to 1024 [ 82.377004][ T1456] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 82.379330][ T1456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.379396][ T7683] usb 2-1: USB disconnect, device number 2 [ 82.382266][ T1456] usb 6-1: config 0 descriptor?? [ 82.389426][ T7670] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 82.597095][ T1456] usbhid 6-1:0.0: can't add hid device: -71 [ 82.598738][ T1456] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 82.604691][ T1456] usb 6-1: USB disconnect, device number 6 [ 82.616075][ T5955] Bluetooth: hci2: command 0x0406 tx timeout [ 82.646503][ T7702] netlink: 'syz.3.457': attribute type 29 has an invalid length. [ 82.748882][ T7707] xt_hashlimit: size too large, truncated to 1048576 [ 82.912525][ T5955] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 82.912815][ T7717] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 83.383246][ T7732] netlink: 23 bytes leftover after parsing attributes in process `syz.3.468'. [ 83.392917][ T7732] program syz.3.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.564500][ T5955] Bluetooth: hci4: command tx timeout [ 83.752863][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 83.755383][ T7776] netlink: 'syz.0.476': attribute type 2 has an invalid length. [ 83.757760][ T7776] netlink: 44 bytes leftover after parsing attributes in process `syz.0.476'. [ 83.763297][ T7776] xt_hashlimit: size too large, truncated to 1048576 [ 83.955191][ C3] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.958176][ C3] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.445259][ T7814] __nla_validate_parse: 1 callbacks suppressed [ 84.445271][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.486'. [ 84.459482][ T7816] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 84.502737][ T7823] evm: overlay not supported [ 84.582531][ T7831] Process accounting resumed [ 84.771023][ T7837] netlink: 'syz.0.493': attribute type 4 has an invalid length. [ 84.775840][ T5955] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 84.779351][ T5955] Bluetooth: hci3: Injecting HCI hardware error event [ 84.784336][ T5947] Bluetooth: hci3: hardware error 0x00 [ 84.861193][ T7841] netlink: 277 bytes leftover after parsing attributes in process `syz.3.495'. [ 84.873847][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 85.361864][ T7874] netlink: 'syz.4.505': attribute type 10 has an invalid length. [ 85.367666][ T7874] batman_adv: batadv0: Adding interface: team0 [ 85.369974][ T7874] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.379337][ T7874] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 85.386503][ T7874] netlink: 'syz.4.505': attribute type 10 has an invalid length. [ 85.387442][ T7883] can: request_module (can-proto-4) failed. [ 85.389325][ T7874] netlink: 2 bytes leftover after parsing attributes in process `syz.4.505'. [ 85.389446][ T7874] team0: entered promiscuous mode [ 85.396129][ T7874] team_slave_0: entered promiscuous mode [ 85.398274][ T7874] team_slave_1: entered promiscuous mode [ 85.402651][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.405565][ T7874] batman_adv: batadv0: Interface activated: team0 [ 85.407965][ T7874] batman_adv: batadv0: Interface deactivated: team0 [ 85.408379][ T7888] can: request_module (can-proto-4) failed. [ 85.410398][ T7874] batman_adv: batadv0: Removing interface: team0 [ 85.417481][ T7874] bridge0: port 3(team0) entered blocking state [ 85.419502][ T7874] bridge0: port 3(team0) entered disabled state [ 85.421641][ T7874] team0: entered allmulticast mode [ 85.423646][ T7874] team_slave_0: entered allmulticast mode [ 85.426557][ T7874] team_slave_1: entered allmulticast mode [ 85.430155][ T7874] bridge0: port 3(team0) entered blocking state [ 85.432133][ T7874] bridge0: port 3(team0) entered forwarding state [ 85.593730][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 85.655166][ T5955] Bluetooth: hci4: command tx timeout [ 85.726242][ C2] bridge0: received packet on gretap1 with own address as source address (addr:12:28:74:7c:b4:a1, vlan:0) [ 85.778146][ T39] kauditd_printk_skb: 59 callbacks suppressed [ 85.778158][ T39] audit: type=1400 audit(1733714230.950:2666): avc: denied { mount } for pid=7934 comm="syz.4.520" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 85.785458][ T833] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.787984][ T39] audit: type=1400 audit(1733714230.950:2667): avc: denied { getopt } for pid=7934 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 85.800993][ T7938] xt_hashlimit: size too large, truncated to 1048576 [ 85.916273][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.524'. [ 85.918584][ T7948] netlink: 228 bytes leftover after parsing attributes in process `syz.4.524'. [ 85.920882][ T7948] netlink: 64 bytes leftover after parsing attributes in process `syz.4.524'. [ 85.926998][ T833] usb 5-1: device descriptor read/64, error -71 [ 86.184496][ T833] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 86.314461][ T833] usb 5-1: device descriptor read/64, error -71 [ 86.437155][ T833] usb usb5-port1: attempt power cycle [ 86.437857][ T39] audit: type=1326 audit(1733714231.610:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.4.529" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d7b37fed9 code=0x0 [ 86.538598][ T7966] mmap: syz.4.529 (7966) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.724687][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 86.784476][ T833] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.815534][ T833] usb 5-1: device descriptor read/8, error -71 [ 86.845139][ T5947] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 86.865986][ T39] audit: type=1400 audit(1733714232.040:2669): avc: denied { setopt } for pid=7982 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.897424][ T7983] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 87.087303][ T833] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 87.105302][ T833] usb 5-1: device descriptor read/8, error -71 [ 87.214490][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 87.216689][ T833] usb usb5-port1: unable to enumerate USB device [ 87.322674][ T8004] xt_hashlimit: size too large, truncated to 1048576 [ 87.377086][ T8] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 87.379429][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.381523][ T8] usb 6-1: Product: syz [ 87.382629][ T8] usb 6-1: Manufacturer: syz [ 87.383845][ T8] usb 6-1: SerialNumber: syz [ 87.391132][ T8] usb 6-1: config 0 descriptor?? [ 87.595604][ T5985] usb 6-1: USB disconnect, device number 7 [ 87.724534][ T5947] Bluetooth: hci4: command tx timeout [ 88.137606][ T5947] Bluetooth: hci1: SCO packet for unknown connection handle 25 [ 88.144527][ T5985] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 88.207865][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 88.314469][ T5985] usb 9-1: Using ep0 maxpacket: 8 [ 88.317910][ T5985] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 88.320029][ T5985] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.322498][ T5985] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.325221][ T5985] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.327947][ T5985] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.331214][ T5985] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.333580][ T5985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.344495][ T8016] syzkaller0: entered promiscuous mode [ 88.345908][ T8016] syzkaller0: entered allmulticast mode [ 88.351122][ T39] audit: type=1400 audit(1733714233.520:2670): avc: denied { relabelfrom } for pid=8015 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 88.355617][ T8016] syzkaller0: create flow: hash 1325698281 index 1 [ 88.358525][ T39] audit: type=1400 audit(1733714233.530:2671): avc: denied { relabelto } for pid=8015 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 88.408806][ T8015] syzkaller0: delete flow: hash 1325698281 index 1 [ 88.542492][ T5985] usb 9-1: usb_control_msg returned -32 [ 88.544093][ T5985] usbtmc 9-1:16.0: can't read capabilities [ 88.638326][ T39] audit: type=1400 audit(1733714233.810:2672): avc: denied { setattr } for pid=8022 comm="syz.0.544" name="/" dev="9p" ino=36449031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.898660][ T8026] usb 9-1: usbtmc_ioctl_clear_in_halt returned -32 [ 89.005805][ C3] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.382490][ T8033] xt_hashlimit: size too large, truncated to 1048576 [ 89.461143][ T39] audit: type=1400 audit(1733714234.630:2673): avc: denied { write } for pid=8043 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.582385][ T39] audit: type=1400 audit(1733714234.750:2674): avc: denied { audit_read } for pid=8051 comm="syz.1.551" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.805045][ T5947] Bluetooth: hci4: command tx timeout [ 89.827027][ T8065] cdrom: dropping to single frame dma [ 89.887797][ T8069] __nla_validate_parse: 2 callbacks suppressed [ 89.887809][ T8069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.554'. [ 90.055064][ C3] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.115358][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 90.171994][ T8090] xt_hashlimit: size too large, truncated to 1048576 [ 90.417817][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 90.420196][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 90.422541][ T8099] netlink: 'syz.0.566': attribute type 5 has an invalid length. [ 90.919012][ T5985] usb 9-1: USB disconnect, device number 2 [ 90.942261][ T8106] netlink: 44 bytes leftover after parsing attributes in process `syz.4.569'. [ 91.073327][ T8130] libceph: resolve '40' (ret=-3): failed [ 91.077516][ T8130] ipip0: entered allmulticast mode [ 91.084767][ C3] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.152487][ T8134] netlink: 84 bytes leftover after parsing attributes in process `syz.4.576'. [ 91.154880][ T8134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.576'. [ 91.374630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.377652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.394548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.574537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.577091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.639725][ T8152] ------------[ cut here ]------------ [ 91.641218][ T8152] WARNING: CPU: 2 PID: 8152 at net/core/skbuff.c:1216 sk_skb_reason_drop+0x97/0x1a0 [ 91.643836][ T8152] Modules linked in: [ 91.645179][ T8152] CPU: 2 UID: 0 PID: 8152 Comm: syz.0.583 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 91.649707][ T8152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.652467][ T8152] RIP: 0010:sk_skb_reason_drop+0x97/0x1a0 [ 91.653958][ T8152] Code: 5d 41 5c 41 5d 41 5e e9 b7 e6 94 f8 e8 b2 e6 94 f8 31 ff 44 89 e6 e8 e8 e8 94 f8 45 85 e4 0f 85 b2 00 00 00 e8 9a e6 94 f8 90 <0f> 0b 90 e8 91 e6 94 f8 44 89 e6 bf 01 00 00 00 e8 c4 e8 94 f8 41 [ 91.658897][ T8152] RSP: 0018:ffffc900034af228 EFLAGS: 00010283 [ 91.660482][ T8152] RAX: 000000000000864f RBX: ffff888055ec0140 RCX: ffffc90007a13000 [ 91.662425][ T8152] RDX: 0000000000080000 RSI: ffffffff89051fa6 RDI: 0000000000000007 [ 91.664461][ T8152] RBP: 000000000000ffff R08: 0000000000000007 R09: 0000000000000003 [ 91.666483][ T8152] R10: 000000000000ffff R11: 0000000000000002 R12: 00000000ffffffea [ 91.668581][ T8152] R13: 0000000000000000 R14: ffff888055ec0224 R15: ffff888055ec0198 [ 91.670654][ T8152] FS: 00007fe01d2516c0(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 91.672991][ T8152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.674802][ T8152] CR2: 0000000000000000 CR3: 0000000051fde000 CR4: 0000000000352ef0 [ 91.676845][ T8152] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.678910][ T8152] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.680998][ T8152] Call Trace: [ 91.681908][ T8152] [ 91.682712][ T8152] ? __warn+0xea/0x3c0 [ 91.683811][ T8152] ? sk_skb_reason_drop+0x97/0x1a0 [ 91.685217][ T8152] ? report_bug+0x3c0/0x580 [ 91.686445][ T8152] ? handle_bug+0x54/0xa0 [ 91.687611][ T8152] ? exc_invalid_op+0x17/0x50 [ 91.688840][ T8152] ? asm_exc_invalid_op+0x1a/0x20 [ 91.690175][ T8152] ? sk_skb_reason_drop+0x96/0x1a0 [ 91.691542][ T8152] ? sk_skb_reason_drop+0x97/0x1a0 [ 91.692903][ T8152] ? sk_skb_reason_drop+0x96/0x1a0 [ 91.694268][ T8152] ip_rcv_finish_core.constprop.0+0x11d2/0x2290 [ 91.695978][ T8152] ip_list_rcv_finish.constprop.0+0x1be/0x720 [ 91.697591][ T8152] ? __pfx_ip_list_rcv_finish.constprop.0+0x10/0x10 [ 91.699325][ T8152] ? __pfx_ip_rcv_finish+0x10/0x10 [ 91.700681][ T8152] ip_list_rcv+0x339/0x450 [ 91.701888][ T8152] ? __pfx_ip_list_rcv+0x10/0x10 [ 91.703208][ T8152] ? __pfx___lock_acquire+0x10/0x10 [ 91.704713][ T8152] ? __pfx_ip_list_rcv+0x10/0x10 [ 91.706046][ T8152] __netif_receive_skb_list_core+0x755/0x950 [ 91.707647][ T8152] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 91.709330][ T8152] ? rcu_is_watching+0x12/0xc0 [ 91.710601][ T8152] ? ktime_get_with_offset+0x273/0x3a0 [ 91.712027][ T8152] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.713373][ T8152] ? lock_acquire+0x2f/0xb0 [ 91.714619][ T8152] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.716312][ T8152] netif_receive_skb_list_internal+0x753/0xdb0 [ 91.717927][ T8152] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 91.719660][ T8152] ? __pfx_eth_type_trans+0x10/0x10 [ 91.721012][ T8152] ? __build_skb_around+0x278/0x3b0 [ 91.722362][ T8152] ? kmem_cache_alloc_bulk_noprof+0x405/0xb10 [ 91.723927][ T8152] netif_receive_skb_list+0x4d/0x4b0 [ 91.725388][ T8152] xdp_test_run_batch.constprop.0+0x1799/0x1e40 [ 91.727030][ T8152] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 91.728766][ T8152] ? __pfx_lock_release+0x10/0x10 [ 91.730113][ T8152] ? trace_lock_acquire+0x14e/0x1f0 [ 91.731536][ T8152] ? read_tsc+0x9/0x20 [ 91.732651][ T8152] ? ktime_get+0x1ac/0x300 [ 91.733863][ T8152] bpf_test_run_xdp_live+0x365/0x500 [ 91.735321][ T8152] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 91.736852][ T8152] ? find_held_lock+0x2d/0x110 [ 91.738118][ T8152] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.739665][ T8152] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 91.741206][ T8152] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.742738][ T8152] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 91.744130][ T8152] ? 0xffffffffa00045c0 [ 91.745281][ T8152] ? 0xffffffffa00045c0 [ 91.746382][ T8152] ? 0xffffffffa00045c0 [ 91.747473][ T8152] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.749011][ T8152] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.750418][ T8152] ? lock_acquire+0x2f/0xb0 [ 91.751635][ T8152] ? __fget_files+0x40/0x3a0 [ 91.752895][ T8152] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.754475][ T8152] ? __fget_files+0x206/0x3a0 [ 91.755754][ T8152] ? fput+0x67/0x440 [ 91.756808][ T8152] ? __bpf_prog_get+0xa0/0x290 [ 91.758081][ T8152] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.759791][ T8152] __sys_bpf+0xfc6/0x49c0 [ 91.760966][ T8152] ? __pfx___sys_bpf+0x10/0x10 [ 91.762263][ T8152] ? vfs_write+0x80f/0x1150 [ 91.763462][ T8152] ? vfs_write+0x306/0x1150 [ 91.764715][ T8152] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 91.766199][ T8152] ? do_futex+0x123/0x350 [ 91.767338][ T8152] ? __pfx_do_futex+0x10/0x10 [ 91.768590][ T8152] ? fput+0x67/0x440 [ 91.769630][ T8152] ? __pfx___x64_sys_futex+0x10/0x10 [ 91.771022][ T8152] ? ksys_write+0x1ba/0x250 [ 91.772238][ T8152] ? __pfx_ksys_write+0x10/0x10 [ 91.773563][ T8152] __x64_sys_bpf+0x78/0xc0 [ 91.774806][ T8152] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.776190][ T8152] do_syscall_64+0xcd/0x250 [ 91.777406][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.778952][ T8152] RIP: 0033:0x7fe01c37fed9 [ 91.780140][ T8152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.785032][ T8152] RSP: 002b:00007fe01d251058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.787196][ T8152] RAX: ffffffffffffffda RBX: 00007fe01c545fa0 RCX: 00007fe01c37fed9 [ 91.789248][ T8152] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 91.791286][ T8152] RBP: 00007fe01c3f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 91.793350][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.795443][ T8152] R13: 0000000000000000 R14: 00007fe01c545fa0 R15: 00007ffc0b19cd68 [ 91.797519][ T8152] [ 91.798355][ T8152] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.800212][ T8152] CPU: 2 UID: 0 PID: 8152 Comm: syz.0.583 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 91.802872][ T8152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.805599][ T8152] Call Trace: [ 91.806468][ T8152] [ 91.807237][ T8152] dump_stack_lvl+0x3d/0x1f0 [ 91.808447][ T8152] panic+0x71d/0x800 [ 91.809441][ T8152] ? __pfx_panic+0x10/0x10 [ 91.810598][ T8152] ? show_trace_log_lvl+0x29d/0x3d0 [ 91.811937][ T8152] ? sk_skb_reason_drop+0x97/0x1a0 [ 91.813244][ T8152] check_panic_on_warn+0xab/0xb0 [ 91.814515][ T8152] __warn+0xf6/0x3c0 [ 91.815538][ T8152] ? sk_skb_reason_drop+0x97/0x1a0 [ 91.816863][ T8152] report_bug+0x3c0/0x580 [ 91.817993][ T8152] handle_bug+0x54/0xa0 [ 91.819084][ T8152] exc_invalid_op+0x17/0x50 [ 91.820252][ T8152] asm_exc_invalid_op+0x1a/0x20 [ 91.821484][ T8152] RIP: 0010:sk_skb_reason_drop+0x97/0x1a0 [ 91.822953][ T8152] Code: 5d 41 5c 41 5d 41 5e e9 b7 e6 94 f8 e8 b2 e6 94 f8 31 ff 44 89 e6 e8 e8 e8 94 f8 45 85 e4 0f 85 b2 00 00 00 e8 9a e6 94 f8 90 <0f> 0b 90 e8 91 e6 94 f8 44 89 e6 bf 01 00 00 00 e8 c4 e8 94 f8 41 [ 91.827860][ T8152] RSP: 0018:ffffc900034af228 EFLAGS: 00010283 [ 91.829436][ T8152] RAX: 000000000000864f RBX: ffff888055ec0140 RCX: ffffc90007a13000 [ 91.831459][ T8152] RDX: 0000000000080000 RSI: ffffffff89051fa6 RDI: 0000000000000007 [ 91.833534][ T8152] RBP: 000000000000ffff R08: 0000000000000007 R09: 0000000000000003 [ 91.835579][ T8152] R10: 000000000000ffff R11: 0000000000000002 R12: 00000000ffffffea [ 91.837622][ T8152] R13: 0000000000000000 R14: ffff888055ec0224 R15: ffff888055ec0198 [ 91.839674][ T8152] ? sk_skb_reason_drop+0x96/0x1a0 [ 91.841013][ T8152] ? sk_skb_reason_drop+0x96/0x1a0 [ 91.842359][ T8152] ip_rcv_finish_core.constprop.0+0x11d2/0x2290 [ 91.843984][ T8152] ip_list_rcv_finish.constprop.0+0x1be/0x720 [ 91.845565][ T8152] ? __pfx_ip_list_rcv_finish.constprop.0+0x10/0x10 [ 91.847267][ T8152] ? __pfx_ip_rcv_finish+0x10/0x10 [ 91.848601][ T8152] ip_list_rcv+0x339/0x450 [ 91.849767][ T8152] ? __pfx_ip_list_rcv+0x10/0x10 [ 91.851057][ T8152] ? __pfx___lock_acquire+0x10/0x10 [ 91.852416][ T8152] ? __pfx_ip_list_rcv+0x10/0x10 [ 91.853706][ T8152] __netif_receive_skb_list_core+0x755/0x950 [ 91.855267][ T8152] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 91.856950][ T8152] ? rcu_is_watching+0x12/0xc0 [ 91.858217][ T8152] ? ktime_get_with_offset+0x273/0x3a0 [ 91.859636][ T8152] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.860987][ T8152] ? lock_acquire+0x2f/0xb0 [ 91.862180][ T8152] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 91.863827][ T8152] netif_receive_skb_list_internal+0x753/0xdb0 [ 91.865428][ T8152] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 91.867154][ T8152] ? __pfx_eth_type_trans+0x10/0x10 [ 91.868515][ T8152] ? __build_skb_around+0x278/0x3b0 [ 91.869874][ T8152] ? kmem_cache_alloc_bulk_noprof+0x405/0xb10 [ 91.871465][ T8152] netif_receive_skb_list+0x4d/0x4b0 [ 91.872850][ T8152] xdp_test_run_batch.constprop.0+0x1799/0x1e40 [ 91.874488][ T8152] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 91.876195][ T8152] ? __pfx_lock_release+0x10/0x10 [ 91.877510][ T8152] ? trace_lock_acquire+0x14e/0x1f0 [ 91.878873][ T8152] ? read_tsc+0x9/0x20 [ 91.879950][ T8152] ? ktime_get+0x1ac/0x300 [ 91.881119][ T8152] bpf_test_run_xdp_live+0x365/0x500 [ 91.882489][ T8152] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 91.884007][ T8152] ? find_held_lock+0x2d/0x110 [ 91.885263][ T8152] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.886812][ T8152] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 91.888354][ T8152] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.889873][ T8152] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 91.891245][ T8152] ? 0xffffffffa00045c0 [ 91.892338][ T8152] ? 0xffffffffa00045c0 [ 91.893422][ T8152] ? 0xffffffffa00045c0 [ 91.894515][ T8152] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 91.896058][ T8152] bpf_prog_test_run_xdp+0x827/0x1580 [ 91.897455][ T8152] ? lock_acquire+0x2f/0xb0 [ 91.898639][ T8152] ? __fget_files+0x40/0x3a0 [ 91.899852][ T8152] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.901369][ T8152] ? __fget_files+0x206/0x3a0 [ 91.902590][ T8152] ? fput+0x67/0x440 [ 91.903615][ T8152] ? __bpf_prog_get+0xa0/0x290 [ 91.904860][ T8152] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 91.906379][ T8152] __sys_bpf+0xfc6/0x49c0 [ 91.907508][ T8152] ? __pfx___sys_bpf+0x10/0x10 [ 91.908763][ T8152] ? vfs_write+0x80f/0x1150 [ 91.909949][ T8152] ? vfs_write+0x306/0x1150 [ 91.911147][ T8152] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 91.912594][ T8152] ? do_futex+0x123/0x350 [ 91.913732][ T8152] ? __pfx_do_futex+0x10/0x10 [ 91.914968][ T8152] ? fput+0x67/0x440 [ 91.915988][ T8152] ? __pfx___x64_sys_futex+0x10/0x10 [ 91.917357][ T8152] ? ksys_write+0x1ba/0x250 [ 91.918544][ T8152] ? __pfx_ksys_write+0x10/0x10 [ 91.919832][ T8152] __x64_sys_bpf+0x78/0xc0 [ 91.920960][ T8152] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.922321][ T8152] do_syscall_64+0xcd/0x250 [ 91.923501][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.925055][ T8152] RIP: 0033:0x7fe01c37fed9 [ 91.926214][ T8152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.931146][ T8152] RSP: 002b:00007fe01d251058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.933314][ T8152] RAX: ffffffffffffffda RBX: 00007fe01c545fa0 RCX: 00007fe01c37fed9 [ 91.935348][ T8152] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 91.937380][ T8152] RBP: 00007fe01c3f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 91.939401][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.941432][ T8152] R13: 0000000000000000 R14: 00007fe01c545fa0 R15: 00007ffc0b19cd68 [ 91.943474][ T8152] [ 91.944787][ T8152] Kernel Offset: disabled [ 91.945947][ T8152] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:17:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff8880244e8b30 RCX=0000000000000004 RDX=1ffff1100489d16a RSI=ffff8880244e8b30 RDI=ffff8880244e8b50 RBP=ffffc90004bcec08 RSP=ffffc90004bceac0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff96e52d8f R11=0000000000000002 R12=ffff8880244e8000 R13=0000000000000200 R14=0000000000000009 R15=1ffff92000979d60 RIP=ffffffff8175c34d RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5e880436c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005141e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8eace0e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=00000000000007de RCX=ffffffff8175c37e RDX=fffffbfff2dca5b8 RSI=0000000000000008 RDI=ffffffff96e52db8 RBP=dffffc0000000000 RSP=ffffc90006247948 R8 =0000000000000000 R9 =fffffbfff2dca5b7 R10=ffffffff96e52dbf R11=0000000000000002 R12=ffffed1004e57a6b R13=ffff8880272bc880 R14=0000000000000005 R15=0000000000000000 RIP=ffffffff8175c386 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000030000000e CR3=000000002bd46000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=7489838ec96f9dd4 85dc8382e3e06fb5 7489838ec96f9dd4 85dc8382e3e06fb5 7489838ec96f9dd4 85dc8382e3e06fb5 7489838ec96f9dd4 85dc8382e3e06fb5 ZMM18=5239398c2b5a084c 5d57b207bf1845b0 5239398c2b5a084c 5d57b207bf1845b0 5239398c2b5a084c 5d57b207bf1845b0 5239398c2b5a084c 5d57b207bf1845b0 ZMM19=b705000000000000 0000000000000004 b705000000000000 0000000000000003 b705000000000000 0000000000000002 b705000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=2351f3ff2351f3ff 2351f3ff2351f3ff 2351f3ff2351f3ff 2351f3ff2351f3ff 2351f3ff2351f3ff 2351f3ff2351f3ff 2351f3ff2351f3ff 2351f3ff2351f3ff ZMM22=b1f0d6d4b1f0d6d4 b1f0d6d4b1f0d6d4 b1f0d6d4b1f0d6d4 b1f0d6d4b1f0d6d4 b1f0d6d4b1f0d6d4 b1f0d6d4b1f0d6d4 b1f0d6d4b1f0d6d4 b1f0d6d4b1f0d6d4 ZMM23=de0099d7de0099d7 de0099d7de0099d7 de0099d7de0099d7 de0099d7de0099d7 de0099d7de0099d7 de0099d7de0099d7 de0099d7de0099d7 de0099d7de0099d7 ZMM24=85c4330b85c4330b 85c4330b85c4330b 85c4330b85c4330b 85c4330b85c4330b 85c4330b85c4330b 85c4330b85c4330b 85c4330b85c4330b 85c4330b85c4330b ZMM25=55a3d51f55a3d51f 55a3d51f55a3d51f 55a3d51f55a3d51f 55a3d51f55a3d51f 55a3d51f55a3d51f 55a3d51f55a3d51f 55a3d51f55a3d51f 55a3d51f55a3d51f ZMM26=a8cda5caa8cda5ca a8cda5caa8cda5ca a8cda5caa8cda5ca a8cda5caa8cda5ca a8cda5caa8cda5ca a8cda5caa8cda5ca a8cda5caa8cda5ca a8cda5caa8cda5ca ZMM27=ee895400ee895400 ee895400ee895400 ee895400ee895400 ee895400ee895400 ee895400ee895400 ee895400ee895400 ee895400ee895400 ee895400ee895400 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8203000082030000 8203000082030000 8203000082030000 8203000082030000 8203000082030000 8203000082030000 8203000082030000 8203000082030000 info registers vcpu 2 CPU#2 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851ca555 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc900034aeb88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=0000000000000044 R14=ffffffff851ca4f0 R15=0000000000000000 RIP=ffffffff851ca57f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe01d2516c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000051fde000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe01c3f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe01c3f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe01c3f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe01c3f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe01c3f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe01c3f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe01c510488 00007fe01c510480 00007fe01c510478 00007fe01c510450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe01d07d100 00007fe01c510440 00007fe01c510458 00007fe01c5104a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe01c510498 00007fe01c510490 00007fe01c510488 00007fe01c510480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000d1869 RBX=0000000000000003 RCX=ffffffff8b2a0759 RDX=0000000000000000 RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b6a0 RBP=ffffed1003a56488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d2b2440 R14=ffffffff905f12d0 R15=0000000000000000 RIP=ffffffff8b2a1b3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c28e278 CR3=0000000050a98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e871f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e87310488 00007f5e87310480 00007f5e87310478 00007f5e87310450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e87e7d100 00007f5e87310440 00007f5e87310004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e87310498 00007f5e87310490 00007f5e87310488 00007f5e87310480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000