last executing test programs: 24.636129506s ago: executing program 1 (id=2): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) socket$kcm(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000, @void, @value}, 0x10) socket$kcm(0xa, 0x2, 0x73) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x42043, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000100)) 24.594199009s ago: executing program 1 (id=6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @private}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000080)=0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) tkill(r3, 0x1c) sendmmsg(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5ab9782dc7a82258490def5a7b6f428869afbee3c64dc78a2d8ee6a268de1f8a338d5b32228052390105", 0x2a}, {&(0x7f0000000180)="076f7338eeabe0db9fc469998e498c448621f2d2196fbeb75df34886329cc44397dfa4f26c77a5774e51f33bc25b3021dfd029ec05e8f7fc22101f844017fb3d2b789c5dfc583ac8dee047a2058bb838d15c84517b80c4e79ebdb8241c2c1958e8f3564f01c23f146873689f22", 0x6d}], 0x2, &(0x7f0000000240)=[{0x80, 0x107, 0x6, "98e110b7f70f76403ec34a27f34381e92ad80795e4d842c193d4987ac735ff5cfb4cfe430a378e733e4dc9f313366e64854d310bba8a79012394efdf57e2266adf6c84b8c1fc75ea349c2647027248f42ddab8e0843a6e3fb9b939b71b6f013386ea4c6d419eafad948b792331ba"}, {0x1010, 0x107, 0xe8, "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"}, {0x1010, 0x10b, 0x7fff, "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"}, {0xb8, 0x10b, 0x3ff, "212dee1c4c1ab6697970610c011132f5ec910ea1ed3c26c367e0e6b7425c4027ff094e3b6b8713551020d7c87885e9ba0bafb1d779c2bcf3fc98e5be9a23c53ef5c9031c924bf4d9a4c773aea664a778068b92807ee75fd73de5985e9e52852b25103c8040ed1131a56c2e9160b7e43226f2136fe454bfcabed79faeab25271b5070e45e3ae488126045d58e52ba2c2d61fbad2e9edeb50ccbe17b92b6e8e3989c2633b0"}, {0x28, 0x113, 0x3, "aa37cfe95ba53ea4303eeb4c93d4fd41d682b591bf"}, {0x40, 0x114, 0x54, "9d3b5a897bff0e474a8b5de39eedc5e5bb322ce80a276503517e0fbaeb902da2312c52eab832c5f384834cf321d6"}, {0x88, 0x119, 0xca2e, "5c1871262f6a765928a84b8cd4636a9dd0e04cf8e61238a8b4160356fac1f1ab22b5dc26dc10275e6ca9deda4151f2f754f3952713301527657e16f07dffd2bedc8310137268c0499b0006b748adf9389194f75fec2e667d07b8d2c6a8d92b1e7d45460629772c3793c26e0f137e3f4966ff"}], 0x2248}}], 0x1, 0x4804) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000002500)={{0x84, @broadcast, 0x4e24, 0x3, 'rr\x00', 0x10, 0xfffffff0, 0xb}, {@multicast1, 0x4e22, 0x2, 0x1, 0x24, 0x9}}, 0x44) lremovexattr(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)=@random={'user.', 'veth0_to_hsr\x00'}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002600), 0x58442, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002640)=0x1, 0x4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002680)=@overlay={0x0, 0x1, 0x4, 0x4, 0x8000, {0x0, 0x2710}, {0x5, 0x0, 0x7, 0xc, 0x8, 0xff, "39a2c7ed"}, 0x2, 0x3, {}, 0xa, 0x0, r4}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000002700)={0x2e, 0x0, 0x0, 0x5, 0x3, {0xff, 0x1}}) mount(&(0x7f0000002740)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='hfs\x00', 0x200000, &(0x7f0000002800)='\xae') r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002880), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000028c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002bc0)={r4, 0xe0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000002940)=[0x0, 0x0, 0x0], &(0x7f0000002980)=[0x0], 0x0, 0x77, &(0x7f00000029c0)=[{}], 0x8, 0x10, &(0x7f0000002a00), &(0x7f0000002a40), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000002a80)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000002d00)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x84, r5, 0x810, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x3}, @ETHTOOL_A_COALESCE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x101}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x7}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000002e00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x34, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3ff}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c1}, 0x4c804) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000003000)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002e80)={0x12c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x12c}}, 0x48041) bpf$ENABLE_STATS(0x20, &(0x7f0000003040), 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000003080)=@sack_info={r2, 0xfffff000, 0x298}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) unlinkat(r4, &(0x7f00000030c0)='./file0\x00', 0x200) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f0000003140)={0x0, 0x0, 0x0, '\x00', &(0x7f0000003100)}) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000003180)=0x7, 0x4) writev(r1, &(0x7f00000033c0)=[{&(0x7f00000031c0)="a7da1d97921ee1783f49459b5fecf7e556bd8ccab9b63f10696cace3415af4bb153ab4028f3a20c856290f33ce0a351771792008756012b591a765891bdf780c2d9b75ad1cf912110f91160476cfdc15c353b5a25252b05eea7014726f0ba3c415ac43e3c8818debe79dd583d466fb7f658ceeaae2e44c1381", 0x79}, {&(0x7f0000003240)="b3082ccc07a21862c96ef9c9ffa6b611bd318f56955039f7c4aa23c1789663b912859035a106417134c6a4bca62d7e326fb6589d60d740e0c0fdfb83974b987e637f98e8be88b22d4d2614a71f5552ba2f850d087320f3edf931e827cb76cdfa259dac2332e62ef6fe84ffe4aff4cb338813cb08aca4", 0x76}, {&(0x7f00000032c0)="85f0", 0x2}, {&(0x7f0000003300)="c961d714e8c3ca3d67e817241ceb150e15cb1e1a487dbc60fd6c70ab17e36e491a0f2d194b3de0ba1a5b47edc18b727c2dde48352c0bacf5da99e79e8397c7c67cd0882b001a20e8e7836e5042db99076af4c157f99b3840ca85f71fafe02693c9d4fb2f5c34777fd1094679f04435ef9e08c6191bb6c5977221ef3a6c067f7af15f0ddb1c1e2c97e5873faf975d3514a7b5a7780b7384fbaa15f7", 0x9b}], 0x4) getsockopt$inet_opts(r0, 0x0, 0x16, &(0x7f0000003400)=""/255, &(0x7f0000003500)=0xff) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) 22.571470628s ago: executing program 1 (id=19): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x29, 0x3, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f00000001c0)=""/107, 0x6b}], 0x3, &(0x7f0000000380)=""/207, 0xcf}, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r2, 0xae7d, 0x0) read$hiddev(r2, &(0x7f0000002440)=""/132, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) (async, rerun: 64) umount2(&(0x7f0000000240)='./file0\x00', 0xc) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) (async, rerun: 32) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) (async, rerun: 32) syz_clone(0x0, 0x0, 0x2c, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000200)=0x2) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x40000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000040)=@reiserfs_2={0x8, 0x71, {0x4}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x7, 0x12) (async) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 16.007330513s ago: executing program 1 (id=19): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x29, 0x3, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f00000001c0)=""/107, 0x6b}], 0x3, &(0x7f0000000380)=""/207, 0xcf}, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r2, 0xae7d, 0x0) read$hiddev(r2, &(0x7f0000002440)=""/132, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) (async, rerun: 64) umount2(&(0x7f0000000240)='./file0\x00', 0xc) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) (async, rerun: 32) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) (async, rerun: 32) syz_clone(0x0, 0x0, 0x2c, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000200)=0x2) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x40000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000040)=@reiserfs_2={0x8, 0x71, {0x4}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x7, 0x12) (async) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 9.332366987s ago: executing program 1 (id=19): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x29, 0x3, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f00000001c0)=""/107, 0x6b}], 0x3, &(0x7f0000000380)=""/207, 0xcf}, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r2, 0xae7d, 0x0) read$hiddev(r2, &(0x7f0000002440)=""/132, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) (async, rerun: 64) umount2(&(0x7f0000000240)='./file0\x00', 0xc) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) (async, rerun: 32) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) (async, rerun: 32) syz_clone(0x0, 0x0, 0x2c, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000200)=0x2) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x40000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000040)=@reiserfs_2={0x8, 0x71, {0x4}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x7, 0x12) (async) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 3.481016553s ago: executing program 2 (id=200): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000500000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.477854861s ago: executing program 2 (id=202): socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x1000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYBLOB="0100000000100000000008000000"], 0x48}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) (async) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @dev}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c}}}]}, 0x48}}, 0x0) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffffffffffdba) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x7b94) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50) (async) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r7, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xfffffc01}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x8}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x81}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x20004880) (async) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') (async) socket(0x10, 0x2, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) write$binfmt_misc(r8, 0x0, 0xfffffecc) 3.473304014s ago: executing program 2 (id=203): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x0, 0x1, "a503a7b6", "d6c862b4"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x60, 0x1, 0xe7, 0xcc, 0x4, 0x1ff}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x0, 0x18, 0x32, "d3ec07e7ac6ab659882f89c0702651a292b57dbe78680db1004093530366c81db5fb01df7ab83c06411ff387b31e672114a6"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x20, 0x2, [0x8800]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x4fb3}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0xb, 0x2, "77e1"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x908}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "e60d"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xe8}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r5, 0x402, 0x23) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) readv(r6, &(0x7f0000003300)=[{&(0x7f0000000180)=""/194, 0xc2}], 0x1) fcntl$setsig(r5, 0xa, 0xb) readv(r4, 0x0, 0x0) 1.219658417s ago: executing program 0 (id=229): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000002000010000000000000000000a0000000000000000000000140011"], 0x38}}, 0x0) (async) prctl$PR_SET_UNALIGN(0x6, 0x0) 1.21910938s ago: executing program 0 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0x5c) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x2) prctl$PR_GET_NO_NEW_PRIVS(0x27) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r5, 0x0) mremap(&(0x7f000090e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000139000/0x4000)=nil) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0xa0, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "68e580e80e7a00ecd5c1959c8e26e00392e62d167e8d43e33453e6b58dd7bdb9bd8087cdf1c3c23ef18e188df67cc90436c50f2d2568dbb931"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, 0x0, 0x0) 1.157828463s ago: executing program 0 (id=231): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x204, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723d667ee8b42bce1f54f75594182aaef4c60652137869bdd0c4f23ccd6ef4362909ff466ef1986706bb3767cb6ef15"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x585c12051391dd80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x3000}, {}, {0x14002, 0xd000, 0x0, 0x0, 0x0, 0xeb}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x210090, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000]}) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x149000, 0x0) (async) r8 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0xc4c03d12, 0x0) (async) ioctl$PTP_EXTTS_REQUEST2(r8, 0xc4c03d12, 0x0) sendmsg$kcm(r1, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.157559505s ago: executing program 2 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) shutdown(r2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001800010000001000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007000000100016800c0001"], 0x3c}}, 0x0) 1.060027618s ago: executing program 0 (id=233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d3000000000000000000000001400010076657468305f746f5f687372"], 0xfc}, 0x1, 0x0, 0x0, 0x500}, 0x0) 1.059725506s ago: executing program 2 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000008001240fffffffd05000500020000000500040000000000050001000700000015000300686173683a69702c706f72742c6e657400000000"], 0x5c}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="8200001e04008000000000000008001600000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x3c4e, 0x4) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r10, 0xae9a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000000c0)=0xfffffc00, 0x4) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_FPU(r13, 0x41a0ae8d, &(0x7f0000000180)={'\x00', 0x9, 0x9, 0x3, 0x0, 0x3, 0x8080000, 0xffff1000, '\x00', 0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x2, 0x3a) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='fo\x00\v', 0x4, 0xffffffffffffffff) 1.059115471s ago: executing program 0 (id=235): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) (async) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)=0x102) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0x90) socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000007f000014001a80100005800c000780080001"], 0x34}}, 0x0) (async) r8 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r11 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) (async) ioctl$VIDIOC_S_PRIORITY(r11, 0x40045644, 0x20000000) (async) ioctl$VIDIOC_ENCODER_CMD(r11, 0xc028564d, &(0x7f0000000140)) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x2004, @fd, 0x0, 0x0, 0x0, 0x8, 0x0, {0x1}}) (async) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, &(0x7f0000000500)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3a) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.000871011s ago: executing program 0 (id=236): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x400402, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x400402, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x803, 0x4) socket(0x200000100000011, 0x3, 0x0) (async) socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001400b19f00000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe80000000000000000dd50000aa"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001400b19f00000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe80000000000000000dd50000aa"], 0x2c}}, 0x0) move_pages(0x0, 0x42, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030102000000fdffffffffffffff100800010001"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f000001040100"/28], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, &(0x7f0000000080)="990f38f12a0f3066b9690a000066b80000008066ba000000000f3066b8070000000f23d80f21f86635400000c00f23f80f01c20f009b4b423665660f38db280f20d86635080000000f22d866762c", 0x4e}], 0x1, 0x13, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, &(0x7f0000000080)="990f38f12a0f3066b9690a000066b80000008066ba000000000f3066b8070000000f23d80f21f86635400000c00f23f80f01c20f009b4b423665660f38db280f20d86635080000000f22d866762c", 0x4e}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0, 0x55}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0, 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)=ANY=[]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000044000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, 0x0, 0x0}, 0x20) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect(0x3, 0x1b, &(0x7f0000010140)=ANY=[@ANYBLOB="1201ad08034501020301090209000000000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000431f24b65fd50f6956ec4b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 811.28215ms ago: executing program 3 (id=239): io_setup(0x6, &(0x7f0000000040)=0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) io_getevents(r0, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000000)={0x0, 0x3938700}) 630.707863ms ago: executing program 3 (id=240): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f40fe72d66b9800000c00f326635000800000f303629615ff20f01d8660f3acff8000f01c30f20e06635000001000f22e0baf80c66b846079b8d66efbafc0ced66b8a16888040f23c00f21f86635010009000f23f8", 0x55}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000000800024000000000080005400000000d080003"], 0x9c}}, 0x0) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) (async) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0x7) (async) connect$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = dup(r11) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r12, 0x4068aea3, &(0x7f0000000340)={0xc7, 0x0, 0x1}) (async) getdents(r8, &(0x7f0000001fc0)=""/184, 0x20002078) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100, 0x2}) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000000)=0xaa07) 630.465862ms ago: executing program 2 (id=241): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x0, 0x1, "a503a7b6", "d6c862b4"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x60, 0x1, 0xe7, 0xcc, 0x4, 0x1ff}}}, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x0, 0x18, 0x32, "d3ec07e7ac6ab659882f89c0702651a292b57dbe78680db1004093530366c81db5fb01df7ab83c06411ff387b31e672114a6"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x20, 0x2, [0x8800]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x4fb3}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0xb, 0x2, "77e1"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x908}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "e60d"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xe8}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x23) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) readv(r5, &(0x7f0000003300)=[{&(0x7f0000000180)=""/194, 0xc2}], 0x1) fcntl$setsig(r4, 0xa, 0xb) readv(0xffffffffffffffff, 0x0, 0x0) 460.984306ms ago: executing program 3 (id=242): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x28011, r1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x7fd, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000080)="0d32818e", 0x4, 0x2}]) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000990000/0x1000)=nil) request_key(&(0x7f0000000540)='blacklist\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), 0x2, 0x6, 0x6}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001200)='Y', 0x1}], 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000280)={r4, 0x3, 0x800, 0x2, &(0x7f0000000240)=[{0x9, 0x401, 0xed, 0x5}, {0x5, 0x4, 0x2, 0xff01}]}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 210.677038ms ago: executing program 3 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d3000000000000000000000001400010076657468305f746f5f687372"], 0xfc}, 0x1, 0x0, 0x0, 0x700}, 0x0) 202.066332ms ago: executing program 3 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000000)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r3) (async) 0s ago: executing program 3 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="f3430f09440f01cb642e0f01c50f3566b869000f00d80f73f7b0410f3548b800800000000000000f23d00f21f8351000000c0f23f866baf80cb85a056086ef66bafc0cecb9800000c00f3235000400000f30", 0x52}], 0x1, 0x0, 0x0, 0x0) capset(0x0, &(0x7f0000000040)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x5}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ftruncate(r2, 0x7) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r0, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="f3430f09440f01cb642e0f01c50f3566b869000f00d80f73f7b0410f3548b800800000000000000f23d00f21f8351000000c0f23f866baf80cb85a056086ef66bafc0cecb9800000c00f3235000400000f30", 0x52}], 0x1, 0x0, 0x0, 0x0) (async) capset(0x0, &(0x7f0000000040)) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x5}}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ftruncate(r2, 0x7) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r0, 0x1000) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) kernel console output (not intermixed with test programs): [ 30.334213][ T39] audit: type=1400 audit(1730935544.085:81): avc: denied { rlimitinh } for pid=5856 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.339297][ T39] audit: type=1400 audit(1730935544.085:82): avc: denied { siginh } for pid=5856 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.350314][ T39] audit: type=1400 audit(1730935545.115:83): avc: denied { read } for pid=5345 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.356301][ T39] audit: type=1400 audit(1730935545.115:84): avc: denied { append } for pid=5345 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.363351][ T39] audit: type=1400 audit(1730935545.115:85): avc: denied { open } for pid=5345 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.369827][ T39] audit: type=1400 audit(1730935545.115:86): avc: denied { getattr } for pid=5345 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:64498' (ED25519) to the list of known hosts. [ 31.502297][ T39] audit: type=1400 audit(1730935545.265:87): avc: denied { name_bind } for pid=5860 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.056744][ T5862] cgroup: Unknown subsys name 'net' [ 33.279754][ T5862] cgroup: Unknown subsys name 'cpuset' [ 33.282889][ T5862] cgroup: Unknown subsys name 'rlimit' [ 33.460387][ T5873] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.082027][ T5862] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.922895][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 35.922904][ T39] audit: type=1400 audit(1730935549.685:105): avc: denied { execmem } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 36.050575][ T39] audit: type=1400 audit(1730935549.805:106): avc: denied { create } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.056162][ T39] audit: type=1400 audit(1730935549.815:107): avc: denied { read write } for pid=5940 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.062205][ T39] audit: type=1400 audit(1730935549.815:108): avc: denied { open } for pid=5940 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.068282][ T39] audit: type=1400 audit(1730935549.815:109): avc: denied { ioctl } for pid=5940 comm="syz-executor" path="socket:[6532]" dev="sockfs" ino=6532 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.069491][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.087838][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.089409][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.090193][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.092381][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.094466][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.096601][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.098082][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.100315][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.102478][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.103932][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.105296][ T5944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.107245][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.109553][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.111149][ T5953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.113151][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.115715][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.118686][ T39] audit: type=1400 audit(1730935549.885:110): avc: denied { read } for pid=5941 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.124048][ T39] audit: type=1400 audit(1730935549.885:111): avc: denied { open } for pid=5941 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.125943][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.128037][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.128400][ T5954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.128733][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.130013][ T39] audit: type=1400 audit(1730935549.885:112): avc: denied { mounton } for pid=5941 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 36.146844][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.148877][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.150971][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.255306][ T39] audit: type=1400 audit(1730935550.015:113): avc: denied { module_request } for pid=5941 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 36.280214][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 36.339002][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 36.344589][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 36.369520][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.371867][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.373858][ T5941] bridge_slave_0: entered allmulticast mode [ 36.376525][ T5941] bridge_slave_0: entered promiscuous mode [ 36.383514][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.385496][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.387930][ T5941] bridge_slave_1: entered allmulticast mode [ 36.390280][ T5941] bridge_slave_1: entered promiscuous mode [ 36.411482][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 36.458330][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.509581][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.582884][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.584748][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.586690][ T5940] bridge_slave_0: entered allmulticast mode [ 36.589292][ T5940] bridge_slave_0: entered promiscuous mode [ 36.605723][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.608167][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.610660][ T5949] bridge_slave_0: entered allmulticast mode [ 36.613251][ T5949] bridge_slave_0: entered promiscuous mode [ 36.633412][ T5941] team0: Port device team_slave_0 added [ 36.635436][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.637396][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.639256][ T5940] bridge_slave_1: entered allmulticast mode [ 36.642127][ T5940] bridge_slave_1: entered promiscuous mode [ 36.644222][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.646489][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.648867][ T5949] bridge_slave_1: entered allmulticast mode [ 36.650874][ T5949] bridge_slave_1: entered promiscuous mode [ 36.662691][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.664588][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.666432][ T5946] bridge_slave_0: entered allmulticast mode [ 36.668765][ T5946] bridge_slave_0: entered promiscuous mode [ 36.671426][ T5941] team0: Port device team_slave_1 added [ 36.687586][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.689447][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.691293][ T5946] bridge_slave_1: entered allmulticast mode [ 36.693267][ T5946] bridge_slave_1: entered promiscuous mode [ 36.719844][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.730224][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.732035][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.738558][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.743069][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.746132][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.763516][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.765300][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.771870][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.775817][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.786736][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.792502][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.803826][ T5949] team0: Port device team_slave_0 added [ 36.806479][ T5949] team0: Port device team_slave_1 added [ 36.832753][ T5940] team0: Port device team_slave_0 added [ 36.842656][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.844448][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.851512][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.878953][ T5940] team0: Port device team_slave_1 added [ 36.889169][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.891011][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.897692][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.902433][ T5946] team0: Port device team_slave_0 added [ 36.906098][ T5941] hsr_slave_0: entered promiscuous mode [ 36.908102][ T5941] hsr_slave_1: entered promiscuous mode [ 36.921014][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.922837][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.929453][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.933127][ T5946] team0: Port device team_slave_1 added [ 36.944336][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.946152][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.953039][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.972873][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.974786][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.981929][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.987970][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.989744][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.996314][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.032447][ T5949] hsr_slave_0: entered promiscuous mode [ 37.034303][ T5949] hsr_slave_1: entered promiscuous mode [ 37.036080][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.038496][ T5949] Cannot create hsr debugfs directory [ 37.078815][ T5940] hsr_slave_0: entered promiscuous mode [ 37.080749][ T5940] hsr_slave_1: entered promiscuous mode [ 37.082435][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.084378][ T5940] Cannot create hsr debugfs directory [ 37.088426][ T5946] hsr_slave_0: entered promiscuous mode [ 37.090233][ T5946] hsr_slave_1: entered promiscuous mode [ 37.091943][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.093941][ T5946] Cannot create hsr debugfs directory [ 37.242113][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.258782][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.263278][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.268023][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.305442][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.308829][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.313594][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.316533][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.339171][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.342221][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.346056][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.350092][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.378282][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.381679][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.384967][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.388204][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.410457][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.430251][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.441192][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.443903][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.445746][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.455014][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.456872][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.474261][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.481468][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.485834][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.487657][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.503530][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.505417][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.510827][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.511791][ T39] audit: type=1400 audit(1730935551.275:114): avc: denied { sys_module } for pid=5941 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.517082][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.524305][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.526100][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.530847][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.532689][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.544028][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.555024][ T5949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.558626][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.569957][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.571805][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.585178][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.587008][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.598791][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.624089][ T5941] veth0_vlan: entered promiscuous mode [ 37.631003][ T5941] veth1_vlan: entered promiscuous mode [ 37.644866][ T5941] veth0_macvtap: entered promiscuous mode [ 37.652517][ T5941] veth1_macvtap: entered promiscuous mode [ 37.656470][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.660698][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.675036][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.688956][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.693301][ T5941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.695672][ T5941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.698241][ T5941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.700735][ T5941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.707737][ T5949] veth0_vlan: entered promiscuous mode [ 37.718005][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.719976][ T5940] veth0_vlan: entered promiscuous mode [ 37.725586][ T5949] veth1_vlan: entered promiscuous mode [ 37.742091][ T5940] veth1_vlan: entered promiscuous mode [ 37.761518][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.763683][ T5940] veth0_macvtap: entered promiscuous mode [ 37.763885][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.771899][ T5949] veth0_macvtap: entered promiscuous mode [ 37.777532][ T5949] veth1_macvtap: entered promiscuous mode [ 37.781291][ T5940] veth1_macvtap: entered promiscuous mode [ 37.801860][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.801893][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.801906][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.804636][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.811937][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.815832][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.818842][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.821344][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.824016][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.827347][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.835586][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.840763][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.843943][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.846215][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.849552][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.852905][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.856354][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.861628][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.870102][ T5946] veth0_vlan: entered promiscuous mode [ 37.873231][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.874456][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.875523][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.882653][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.884898][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.892456][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.894707][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.897265][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.900486][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.905705][ T5946] veth1_vlan: entered promiscuous mode [ 37.939078][ T5946] veth0_macvtap: entered promiscuous mode [ 37.949366][ T5946] veth1_macvtap: entered promiscuous mode [ 37.954892][ T6007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 37.955176][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.957897][ T6007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 37.959592][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.018964][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.019402][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.021026][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.021929][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.023246][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.023255][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.025510][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.034350][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.036668][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.039268][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.042183][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.046307][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.047885][ T6007] Zero length message leads to an empty skb [ 38.049136][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.053035][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.055709][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.058411][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.061208][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.065585][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.073169][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.075390][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.077771][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.080702][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.099197][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.101461][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.119409][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.121381][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.124414][ T6010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.135273][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.138629][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.167733][ T5954] Bluetooth: hci2: command tx timeout [ 38.169725][ T5954] Bluetooth: hci3: command tx timeout [ 38.171452][ T5945] Bluetooth: hci1: command tx timeout [ 38.173228][ T66] Bluetooth: hci0: command tx timeout [ 38.220315][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.447027][ T1320] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 38.495993][ T6024] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 38.628759][ T1320] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 38.631970][ T1320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 38.634718][ T1320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 38.637591][ T1320] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.641072][ T1320] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.643396][ T1320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.648460][ T1320] usb 7-1: config 0 descriptor?? [ 38.651931][ T6018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 39.062263][ T1320] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 39.065216][ T1320] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 39.070044][ T1320] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 39.260832][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.263560][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.354353][ T6008] usb 7-1: USB disconnect, device number 2 [ 39.511716][ T6030] random: crng reseeded on system resumption [ 39.660638][ T6033] lo speed is unknown, defaulting to 1000 [ 39.662239][ T6033] lo speed is unknown, defaulting to 1000 [ 39.664580][ T6033] lo speed is unknown, defaulting to 1000 [ 39.667641][ T6033] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.671924][ T6033] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 39.681202][ T6033] lo speed is unknown, defaulting to 1000 [ 39.683271][ T6033] lo speed is unknown, defaulting to 1000 [ 39.685413][ T6033] lo speed is unknown, defaulting to 1000 [ 39.687875][ T6033] lo speed is unknown, defaulting to 1000 [ 39.850039][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 39.852444][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 39.941833][ T6047] netlink: 'syz.0.15': attribute type 2 has an invalid length. [ 39.943906][ T6047] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15'. [ 40.066897][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 40.198136][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.203761][ T6062] netlink: 48 bytes leftover after parsing attributes in process `syz.3.20'. [ 40.212054][ T6062] kernel read not supported for file /hugetlb.1GB.rsvd.usage_in_bytes (pid: 6062 comm: syz.3.20) [ 40.246924][ T66] Bluetooth: hci0: command tx timeout [ 40.248376][ T66] Bluetooth: hci1: command tx timeout [ 40.249865][ T66] Bluetooth: hci3: command tx timeout [ 40.266695][ T6065] Cannot find add_set index 0 as target [ 40.271089][ T6065] sctp: [Deprecated]: syz.3.21 (pid 6065) Use of int in max_burst socket option deprecated. [ 40.271089][ T6065] Use struct sctp_assoc_value instead [ 40.277145][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 40.292069][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.295372][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.297993][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.300780][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.302985][ T5947] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 40.305320][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.323710][ T6067] lo speed is unknown, defaulting to 1000 [ 40.381703][ T6067] chnl_net:caif_netlink_parms(): no params data found [ 40.404910][ T6073] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 40.430538][ T8] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 40.433192][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.435360][ T8] usb 7-1: Product: syz [ 40.436489][ T8] usb 7-1: Manufacturer: syz [ 40.438915][ T8] usb 7-1: SerialNumber: syz [ 40.453474][ T8] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 40.454286][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 40.462177][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.464035][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.465877][ T6067] bridge_slave_0: entered allmulticast mode [ 40.468346][ T6067] bridge_slave_0: entered promiscuous mode [ 40.470979][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.472838][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.475024][ T6067] bridge_slave_1: entered allmulticast mode [ 40.477392][ T6067] bridge_slave_1: entered promiscuous mode [ 40.477831][ T8] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 40.501023][ T6067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.505020][ T6067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.524694][ T6067] team0: Port device team_slave_0 added [ 40.529078][ T6067] team0: Port device team_slave_1 added [ 40.552217][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.554348][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.563103][ T6067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.569517][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.571744][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.580327][ T6067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.604050][ T6067] hsr_slave_0: entered promiscuous mode [ 40.605926][ T6067] hsr_slave_1: entered promiscuous mode [ 40.608547][ T6067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.610803][ T6067] Cannot create hsr debugfs directory [ 40.706945][ T5985] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 40.858427][ T5985] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 40.861034][ T5985] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.864194][ T5985] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 40.866739][ T5985] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.872383][ T5985] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 40.875267][ T5985] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 40.877974][ T5985] usb 8-1: Product: syz [ 40.879284][ T5985] usb 8-1: Manufacturer: syz [ 40.886859][ T5985] cdc_wdm 8-1:1.0: skipping garbage [ 40.888502][ T5985] cdc_wdm 8-1:1.0: skipping garbage [ 40.893749][ T5985] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 40.895325][ T5985] cdc_wdm 8-1:1.0: Unknown control protocol [ 41.131795][ T39] kauditd_printk_skb: 97 callbacks suppressed [ 41.131811][ T39] audit: type=1400 audit(1730935554.895:212): avc: denied { write } for pid=6055 comm="syz.2.18" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 41.140558][ T39] audit: type=1400 audit(1730935554.895:213): avc: denied { create } for pid=6055 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 41.145698][ T39] audit: type=1400 audit(1730935554.905:214): avc: denied { read } for pid=6055 comm="syz.2.18" path="socket:[11269]" dev="sockfs" ino=11269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 41.321161][ T6085] XFS (nullb0): Invalid superblock magic number [ 41.349867][ T39] audit: type=1400 audit(1730935555.115:215): avc: denied { write } for pid=6084 comm="syz.0.24" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.357917][ T39] audit: type=1400 audit(1730935555.125:216): avc: denied { execute } for pid=6084 comm="syz.0.24" name="file2" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.358043][ T6085] process 'syz.0.24' launched './file2' with NULL argv: empty string added [ 41.366103][ T39] audit: type=1400 audit(1730935555.125:217): avc: denied { execute_no_trans } for pid=6084 comm="syz.0.24" path="/7/file2" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.412039][ T39] audit: type=1400 audit(1730935555.175:218): avc: denied { create } for pid=6093 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 41.417288][ T39] audit: type=1400 audit(1730935555.175:219): avc: denied { setopt } for pid=6093 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 41.422029][ T39] audit: type=1400 audit(1730935555.175:220): avc: denied { bind } for pid=6093 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 41.470964][ T39] audit: type=1400 audit(1730935555.235:221): avc: denied { write } for pid=6093 comm="syz.0.25" path="socket:[10609]" dev="sockfs" ino=10609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 41.527133][ T8] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 41.529355][ T8] ath9k_htc: Failed to initialize the device [ 41.555461][ T8] usb 7-1: ath9k_htc: USB layer deinitialized [ 41.918315][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.037716][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.218392][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.329269][ T5947] Bluetooth: hci2: command tx timeout [ 42.331798][ T5945] Bluetooth: hci3: command tx timeout [ 42.333685][ T5945] Bluetooth: hci1: command tx timeout [ 42.335101][ T5945] Bluetooth: hci0: command tx timeout [ 42.337567][ T12] bridge_slave_1: left allmulticast mode [ 42.339215][ T12] bridge_slave_1: left promiscuous mode [ 42.341269][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.349831][ T12] bridge_slave_0: left allmulticast mode [ 42.351322][ T12] bridge_slave_0: left promiscuous mode [ 42.352889][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.391751][ T6099] kvm: emulating exchange as write [ 42.512226][ T6101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.629520][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.636119][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.641498][ T12] bond0 (unregistering): Released all slaves [ 42.971593][ T12] hsr_slave_0: left promiscuous mode [ 42.973376][ T12] hsr_slave_1: left promiscuous mode [ 42.975095][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.977632][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.980414][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.982270][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.999922][ T12] veth1_macvtap: left promiscuous mode [ 43.001516][ T12] veth0_macvtap: left promiscuous mode [ 43.002919][ T12] veth1_vlan: left promiscuous mode [ 43.004318][ T12] veth0_vlan: left promiscuous mode [ 43.142722][ T57] usb 7-1: USB disconnect, device number 3 [ 43.447972][ T66] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 43.464565][ T1490] usb 8-1: USB disconnect, device number 2 [ 43.532393][ T12] team0 (unregistering): Port device team_slave_1 removed [ 43.602323][ T12] team0 (unregistering): Port device team_slave_0 removed [ 44.010209][ T6067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.015867][ T6067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.019962][ T6067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.028889][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 44.030997][ T6067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.041775][ T6128] netlink: del zone limit has 4 unknown bytes [ 44.070623][ T6067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.077931][ T6067] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.082221][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.082261][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.085166][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.090099][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.111594][ T6067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.120264][ T6130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'. [ 44.204305][ T6067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.228631][ T6067] veth0_vlan: entered promiscuous mode [ 44.235312][ T6067] veth1_vlan: entered promiscuous mode [ 44.251181][ T6067] veth0_macvtap: entered promiscuous mode [ 44.254712][ T6067] veth1_macvtap: entered promiscuous mode [ 44.261591][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.264240][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.266737][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.269511][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.272301][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.274904][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.279263][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.283245][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.285994][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.289628][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.292265][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.294681][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.297320][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.300661][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.308137][ T6067] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.310541][ T6067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.312902][ T6067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.315316][ T6067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.343303][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.345281][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.356196][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.358591][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.407047][ T66] Bluetooth: hci0: command 0x0419 tx timeout [ 44.408705][ T66] Bluetooth: hci1: command tx timeout [ 44.410105][ T66] Bluetooth: hci3: command tx timeout [ 44.487141][ T25] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 44.656909][ T25] usb 5-1: Invalid ep0 maxpacket: 64 [ 44.786934][ T25] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 44.937254][ T25] usb 5-1: Invalid ep0 maxpacket: 64 [ 44.938752][ T25] usb usb5-port1: attempt power cycle [ 44.942061][ T6174] netlink: 732 bytes leftover after parsing attributes in process `syz.2.47'. [ 44.944424][ T6174] netlink: 732 bytes leftover after parsing attributes in process `syz.2.47'. [ 44.947711][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 44.985708][ T6177] kvm: kvm [6176]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4405e21d1201ffcc [ 45.072055][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.077909][ T6181] ipt_REJECT: ECHOREPLY no longer supported. [ 45.083180][ T6181] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 45.174954][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 45.276910][ T25] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 45.298033][ T25] usb 5-1: Invalid ep0 maxpacket: 64 [ 45.427023][ T25] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 45.447357][ T25] usb 5-1: Invalid ep0 maxpacket: 64 [ 45.449273][ T25] usb usb5-port1: unable to enumerate USB device [ 46.155458][ T6198] ./file0: Can't lookup blockdev [ 46.253584][ T39] kauditd_printk_skb: 48 callbacks suppressed [ 46.253596][ T39] audit: type=1400 audit(1730935560.015:270): avc: denied { attach_queue } for pid=6206 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.265653][ T39] audit: type=1400 audit(1730935560.025:271): avc: denied { sqpoll } for pid=6206 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 46.430156][ T39] audit: type=1400 audit(1730935560.195:272): avc: denied { read } for pid=6210 comm="syz.3.59" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 46.431927][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 46.437703][ T39] audit: type=1400 audit(1730935560.205:273): avc: denied { open } for pid=6210 comm="syz.3.59" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 46.450330][ T39] audit: type=1400 audit(1730935560.215:274): avc: denied { ioctl } for pid=6210 comm="syz.3.59" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 46.486750][ T39] audit: type=1400 audit(1730935560.245:275): avc: denied { module_load } for pid=6213 comm="syz.2.60" path="/13/bus" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 46.486882][ T5947] Bluetooth: hci0: command 0x0419 tx timeout [ 46.508381][ T39] audit: type=1400 audit(1730935560.275:276): avc: denied { create } for pid=6218 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.527354][ T39] audit: type=1400 audit(1730935560.295:277): avc: denied { write } for pid=6218 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.544045][ T39] audit: type=1400 audit(1730935560.305:278): avc: denied { block_suspend } for pid=6228 comm="syz.2.63" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.600369][ T39] audit: type=1400 audit(1730935560.365:279): avc: denied { name_bind } for pid=6235 comm="syz.3.65" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.633344][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 46.651275][ T6241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.66'. [ 46.796192][ T1238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.898931][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.901749][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.904258][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.908570][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.911423][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 46.913785][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.929612][ T6257] lo speed is unknown, defaulting to 1000 [ 46.982038][ T6257] chnl_net:caif_netlink_parms(): no params data found [ 47.016966][ T1320] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 47.022194][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.024189][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.026070][ T6257] bridge_slave_0: entered allmulticast mode [ 47.028188][ T6257] bridge_slave_0: entered promiscuous mode [ 47.030952][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.033148][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.035798][ T6257] bridge_slave_1: entered allmulticast mode [ 47.038259][ T6257] bridge_slave_1: entered promiscuous mode [ 47.058754][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.063197][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.084418][ T6257] team0: Port device team_slave_0 added [ 47.087269][ T6257] team0: Port device team_slave_1 added [ 47.107075][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.108933][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.115606][ T6257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.120731][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.122614][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.130970][ T6257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.164846][ T6257] hsr_slave_0: entered promiscuous mode [ 47.166950][ T6257] hsr_slave_1: entered promiscuous mode [ 47.168901][ T6257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.171685][ T6257] Cannot create hsr debugfs directory [ 47.180008][ T1320] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.182496][ T1320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.184683][ T1320] usb 7-1: Product: syz [ 47.185873][ T1320] usb 7-1: Manufacturer: syz [ 47.187357][ T1320] usb 7-1: SerialNumber: syz [ 47.192710][ T1320] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 47.203592][ T6005] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 47.371158][ T6276] tipc: Started in network mode [ 47.372494][ T6276] tipc: Node identity f7, cluster identity 4711 [ 47.374132][ T6276] tipc: Node number set to 247 [ 47.528108][ T6279] xt_time: unknown flags 0xc [ 47.530800][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 47.634675][ T6281] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 48.256864][ T6005] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 48.258806][ T6005] ath9k_htc: Failed to initialize the device [ 48.278019][ T6005] usb 7-1: ath9k_htc: USB layer deinitialized [ 48.414061][ T1238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.551461][ T1238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.622383][ T6005] usb 7-1: USB disconnect, device number 4 [ 48.697150][ T1238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.792835][ T1238] bridge_slave_1: left allmulticast mode [ 48.794814][ T1238] bridge_slave_1: left promiscuous mode [ 48.796739][ T1238] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.800064][ T1238] bridge_slave_0: left allmulticast mode [ 48.801506][ T1238] bridge_slave_0: left promiscuous mode [ 48.803003][ T1238] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.967037][ T5947] Bluetooth: hci2: command tx timeout [ 49.068802][ T1238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.073568][ T1238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.078352][ T1238] bond0 (unregistering): Released all slaves [ 49.398802][ T1238] hsr_slave_0: left promiscuous mode [ 49.406861][ T1238] hsr_slave_1: left promiscuous mode [ 49.407008][ T4574] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 49.410964][ T1238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.412856][ T1238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.416595][ T1238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.419719][ T1238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.435380][ T1238] veth1_macvtap: left promiscuous mode [ 49.437213][ T1238] veth0_macvtap: left promiscuous mode [ 49.438705][ T1238] veth1_vlan: left promiscuous mode [ 49.440146][ T1238] veth0_vlan: left promiscuous mode [ 49.569033][ T4574] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.574428][ T4574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 49.578469][ T4574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 49.582714][ T4574] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.587561][ T4574] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.590482][ T4574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.594699][ T4574] usb 7-1: config 0 descriptor?? [ 49.597457][ T6311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 49.856881][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.001632][ T1238] team0 (unregistering): Port device team_slave_1 removed [ 50.010475][ T4574] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 50.017556][ T4574] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 50.030161][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 50.037529][ T4574] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 50.046734][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 50.049363][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 50.051945][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 50.054632][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.058027][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 50.060205][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.082946][ T1238] team0 (unregistering): Port device team_slave_0 removed [ 50.206966][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.209939][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.277803][ T57] usb 7-1: USB disconnect, device number 5 [ 50.524406][ T25] usb 5-1: usb_control_msg returned -71 [ 50.525937][ T25] usbtmc 5-1:16.0: can't read capabilities [ 50.536934][ T25] usb 5-1: USB disconnect, device number 6 [ 50.561499][ T6336] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 50.571457][ T6338] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 50.622055][ T6257] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.625535][ T6257] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.628806][ T6257] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.631721][ T6257] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.669547][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.676580][ T6257] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.680430][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.682334][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.687556][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.689427][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.765586][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.783111][ T6257] veth0_vlan: entered promiscuous mode [ 50.788440][ T6257] veth1_vlan: entered promiscuous mode [ 50.800595][ T6257] veth0_macvtap: entered promiscuous mode [ 50.803674][ T6257] veth1_macvtap: entered promiscuous mode [ 50.812099][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.814967][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.817552][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.820272][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.822798][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.825827][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.826900][ T64] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 50.830216][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.835783][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.839595][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.842224][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.844989][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.848950][ T6257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.852489][ T6257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.856338][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.862510][ T6257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864835][ T6257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.867969][ T6257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.870184][ T6257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.893318][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.895345][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.909436][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.911514][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.986879][ T64] usb 8-1: Using ep0 maxpacket: 8 [ 50.989911][ T64] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 50.992060][ T64] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 50.994726][ T64] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 50.997809][ T64] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.000279][ T64] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.003529][ T64] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.005839][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.076942][ T1320] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 51.215750][ T64] usb 8-1: GET_CAPABILITIES returned 0 [ 51.219519][ T64] usbtmc 8-1:16.0: can't read capabilities [ 51.231579][ T1320] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 51.233823][ T1320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.235980][ T1320] usb 7-1: Product: syz [ 51.237333][ T1320] usb 7-1: Manufacturer: syz [ 51.238562][ T1320] usb 7-1: SerialNumber: syz [ 51.242560][ T1320] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 51.252702][ T57] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 51.275246][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 51.275258][ T39] audit: type=1400 audit(1730935565.035:302): avc: denied { read } for pid=6358 comm="syz.0.95" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 51.283665][ T39] audit: type=1400 audit(1730935565.035:303): avc: denied { open } for pid=6358 comm="syz.0.95" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 51.417366][ T39] audit: type=1400 audit(1730935565.185:304): avc: denied { append } for pid=6335 comm="syz.3.89" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.478066][ T830] usb 8-1: USB disconnect, device number 3 [ 51.502619][ T39] audit: type=1400 audit(1730935565.265:305): avc: denied { read } for pid=6366 comm="syz.3.96" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.509595][ T39] audit: type=1400 audit(1730935565.265:306): avc: denied { open } for pid=6366 comm="syz.3.96" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.510804][ T6367] hub 6-0:1.0: USB hub found [ 51.516697][ T6367] hub 6-0:1.0: 1 port detected [ 51.787442][ T6376] netlink: 'syz.3.98': attribute type 4 has an invalid length. [ 52.136999][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 52.170033][ T6359] syz.0.95 (6359) used greatest stack depth: 19680 bytes left [ 52.288511][ T25] usb 8-1: config 0 has no interfaces? [ 52.290841][ T25] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.293272][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.295527][ T25] usb 8-1: SerialNumber: syz [ 52.297968][ T25] usb 8-1: config 0 descriptor?? [ 52.326990][ T57] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 52.329043][ T57] ath9k_htc: Failed to initialize the device [ 52.352328][ T57] usb 7-1: ath9k_htc: USB layer deinitialized [ 52.392970][ T39] audit: type=1400 audit(1730935566.155:307): avc: denied { nlmsg_read } for pid=6397 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.398061][ T39] audit: type=1400 audit(1730935566.155:308): avc: denied { ioctl } for pid=6397 comm="syz.0.106" path="socket:[13627]" dev="sockfs" ino=13627 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.431942][ T39] audit: type=1400 audit(1730935566.195:309): avc: denied { mount } for pid=6399 comm="syz.0.107" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.502164][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.505056][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.560331][ T57] usb 8-1: USB disconnect, device number 4 [ 52.577171][ T39] audit: type=1400 audit(1730935566.335:310): avc: denied { create } for pid=6405 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.578576][ T6407] Bluetooth: MGMT ver 1.23 [ 52.581887][ T39] audit: type=1400 audit(1730935566.345:311): avc: denied { read } for pid=6405 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.632918][ T64] usb 7-1: USB disconnect, device number 6 [ 52.639326][ T6413] netlink: 'syz.0.111': attribute type 4 has an invalid length. [ 52.641428][ T6413] netlink: 'syz.0.111': attribute type 5 has an invalid length. [ 52.653769][ T6413] lo speed is unknown, defaulting to 1000 [ 53.489321][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.564596][ T6442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 53.586290][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.588806][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.591702][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.595195][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.598094][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.600095][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.616418][ T6443] lo speed is unknown, defaulting to 1000 [ 53.663894][ T6443] chnl_net:caif_netlink_parms(): no params data found [ 53.730279][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.732236][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.734138][ T6443] bridge_slave_0: entered allmulticast mode [ 53.736320][ T6443] bridge_slave_0: entered promiscuous mode [ 53.739550][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.741534][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.743611][ T6443] bridge_slave_1: entered allmulticast mode [ 53.745776][ T6443] bridge_slave_1: entered promiscuous mode [ 53.767329][ T6443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.771214][ T6443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.791971][ T6443] team0: Port device team_slave_0 added [ 53.795122][ T6443] team0: Port device team_slave_1 added [ 53.816054][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.819285][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.825950][ T6443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.829332][ T830] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 53.833030][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.834785][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.842984][ T6443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.864798][ T6443] hsr_slave_0: entered promiscuous mode [ 53.866714][ T6443] hsr_slave_1: entered promiscuous mode [ 53.869216][ T6443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.871223][ T6443] Cannot create hsr debugfs directory [ 53.990479][ T830] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 53.992978][ T830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.995083][ T830] usb 5-1: Product: syz [ 53.996202][ T830] usb 5-1: Manufacturer: syz [ 53.997641][ T830] usb 5-1: SerialNumber: syz [ 54.002855][ T830] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 54.014800][ T830] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 54.426663][ T6467] syzkaller1: entered promiscuous mode [ 54.428650][ T6467] syzkaller1: entered allmulticast mode [ 54.675192][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.680501][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.687402][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.689631][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.809429][ T6485] lo speed is unknown, defaulting to 1000 [ 54.945613][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 54.950471][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 54.964543][ T6500] lo speed is unknown, defaulting to 1000 [ 55.000670][ T6505] cgroup: none used incorrectly [ 55.047016][ T830] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 55.048986][ T830] ath9k_htc: Failed to initialize the device [ 55.072876][ T830] usb 5-1: ath9k_htc: USB layer deinitialized [ 55.092673][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.158893][ T6509] warning: `syz.2.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.187586][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.284613][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.302821][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.307190][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.312503][ T6521] deleting an unspecified loop device is not supported. [ 55.337961][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 55.404679][ T12] bridge_slave_1: left allmulticast mode [ 55.406271][ T12] bridge_slave_1: left promiscuous mode [ 55.408471][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.412203][ T830] usb 5-1: USB disconnect, device number 7 [ 55.418676][ T12] bridge_slave_0: left allmulticast mode [ 55.420775][ T12] bridge_slave_0: left promiscuous mode [ 55.423046][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.607087][ T5947] Bluetooth: hci2: command tx timeout [ 55.676642][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.681797][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.686544][ T12] bond0 (unregistering): Released all slaves [ 55.709152][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 56.042168][ T6555] netlink: 'syz.2.151': attribute type 10 has an invalid length. [ 56.047858][ T6555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.052472][ T6555] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.071660][ T12] hsr_slave_0: left promiscuous mode [ 56.074431][ T12] hsr_slave_1: left promiscuous mode [ 56.078816][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.081300][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.084161][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.086694][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.109213][ T6577] xt_l2tp: invalid flags combination: 0 [ 56.113416][ T12] veth1_macvtap: left promiscuous mode [ 56.115304][ T12] veth0_macvtap: left promiscuous mode [ 56.118372][ T12] veth1_vlan: left promiscuous mode [ 56.119791][ T12] veth0_vlan: left promiscuous mode [ 56.134753][ T6580] netlink: 44 bytes leftover after parsing attributes in process `syz.0.155'. [ 56.423131][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 56.423142][ T39] audit: type=1400 audit(1730935570.185:363): avc: denied { mounton } for pid=6588 comm="syz.3.158" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 56.435875][ T39] audit: type=1400 audit(1730935570.185:364): avc: denied { mount } for pid=6588 comm="syz.3.158" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 56.741066][ T12] team0 (unregistering): Port device team_slave_1 removed [ 56.795850][ T12] team0 (unregistering): Port device team_slave_0 removed [ 57.220659][ T6603] netlink: 188 bytes leftover after parsing attributes in process `syz.0.161'. [ 57.223581][ T6603] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 57.227112][ T6443] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.232744][ T6443] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.246768][ T6443] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.249872][ T6443] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.291051][ T6443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.298448][ T6443] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.302093][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.303911][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.318310][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.320359][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.322776][ T6614] xt_l2tp: v2 sid > 0xffff: 150994944 [ 57.325338][ T6614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'. [ 57.352859][ T39] audit: type=1400 audit(1730935571.115:365): avc: denied { ioctl } for pid=6615 comm="syz.2.166" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.421660][ T6443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.438444][ T6443] veth0_vlan: entered promiscuous mode [ 57.444151][ T6443] veth1_vlan: entered promiscuous mode [ 57.454636][ T6443] veth0_macvtap: entered promiscuous mode [ 57.461271][ T6443] veth1_macvtap: entered promiscuous mode [ 57.467073][ T6443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.470188][ T6443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.472600][ T6443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.475182][ T6443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.478769][ T6443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.481421][ T6443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.484590][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.487252][ T4574] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 57.497755][ T6443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.500380][ T6443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.502801][ T6443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.505367][ T6443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.508105][ T6443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.510693][ T6443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.513765][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.522440][ T6443] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.524688][ T6443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.527060][ T6443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.529181][ T6443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.532208][ T6629] bond0: entered promiscuous mode [ 57.533526][ T6629] bond_slave_0: entered promiscuous mode [ 57.535041][ T6629] bond_slave_1: entered promiscuous mode [ 57.536558][ T6629] batadv0: entered promiscuous mode [ 57.542845][ T6629] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 57.547460][ T6630] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 57.595221][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.597472][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.607689][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.609860][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.615838][ T39] audit: type=1400 audit(1730935571.375:366): avc: denied { mounton } for pid=6443 comm="syz-executor" path="/syzkaller.LjHfM4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.630903][ T6628] bond0: left promiscuous mode [ 57.632823][ T6628] bond_slave_0: left promiscuous mode [ 57.635719][ T6628] bond_slave_1: left promiscuous mode [ 57.637342][ T4574] usb 5-1: Using ep0 maxpacket: 32 [ 57.638675][ T6628] batadv0: left promiscuous mode [ 57.640572][ T4574] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.643557][ T4574] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.646338][ T4574] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.652683][ T4574] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 57.654899][ T4574] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 57.657056][ T4574] usb 5-1: Product: syz [ 57.658264][ T4574] usb 5-1: Manufacturer: syz [ 57.659432][ T4574] usb 5-1: SerialNumber: syz [ 57.663382][ T4574] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input7 [ 57.669799][ T39] audit: type=1400 audit(1730935571.435:367): avc: denied { read } for pid=5348 comm="acpid" name="mouse2" dev="devtmpfs" ino=2826 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.674992][ T6633] ipip0: entered promiscuous mode [ 57.675374][ T39] audit: type=1400 audit(1730935571.435:368): avc: denied { open } for pid=5348 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2826 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.678787][ T6633] autofs4:pid:6633:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(120.1), cmd(0xc018937e) [ 57.682738][ T39] audit: type=1400 audit(1730935571.435:369): avc: denied { ioctl } for pid=5348 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2826 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.689458][ T6633] autofs4:pid:6633:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 57.692341][ T39] audit: type=1400 audit(1730935571.435:370): avc: denied { read } for pid=6632 comm="syz.2.170" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.692409][ T66] Bluetooth: hci2: command tx timeout [ 57.704856][ T39] audit: type=1400 audit(1730935571.435:371): avc: denied { open } for pid=6632 comm="syz.2.170" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.710988][ T39] audit: type=1400 audit(1730935571.445:372): avc: denied { ioctl } for pid=6632 comm="syz.2.170" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.749451][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 57.753451][ T6633] netlink: 'syz.2.170': attribute type 4 has an invalid length. [ 57.836104][ T6640] xt_TCPMSS: Only works on TCP SYN packets [ 57.841153][ T6640] SELinux: policydb string length -919 does not match expected length 8 [ 57.843561][ T6640] SELinux: failed to load policy [ 57.845011][ T6641] SELinux: policydb string length -919 does not match expected length 8 [ 57.847385][ T6641] SELinux: failed to load policy [ 57.928355][ T6651] capability: warning: `syz.2.176' uses deprecated v2 capabilities in a way that may be insecure [ 57.941157][ T64] usb 5-1: USB disconnect, device number 8 [ 57.950683][ T64] appletouch 5-1:1.0: input: appletouch disconnected [ 58.054780][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 58.442034][ T6667] fuse: Bad value for 'fd' [ 58.682203][ T6690] No control pipe specified [ 58.691578][ T6690] lo speed is unknown, defaulting to 1000 [ 59.009139][ T6710] __nla_validate_parse: 1 callbacks suppressed [ 59.009149][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 59.034548][ T6710] netlink: 560 bytes leftover after parsing attributes in process `syz.3.193'. [ 59.556932][ T4574] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 59.574285][ T6747] x_tables: duplicate underflow at hook 1 [ 59.576247][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 59.716251][ T4574] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 59.718661][ T4574] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.720802][ T4574] usb 7-1: Product: syz [ 59.721871][ T4574] usb 7-1: Manufacturer: syz [ 59.723091][ T4574] usb 7-1: SerialNumber: syz [ 59.726495][ T4574] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 59.736770][ T5971] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 60.019739][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 60.021893][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 60.024156][ T6766] netlink: 'syz.0.215': attribute type 18 has an invalid length. [ 60.031534][ T6766] netlink: 'syz.0.215': attribute type 5 has an invalid length. [ 60.033867][ T6766] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 60.807153][ T5971] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 60.809460][ T5971] ath9k_htc: Failed to initialize the device [ 60.832582][ T5971] usb 7-1: ath9k_htc: USB layer deinitialized [ 61.012688][ T6791] ======================================================= [ 61.012688][ T6791] WARNING: The mand mount option has been deprecated and [ 61.012688][ T6791] and is ignored by this kernel. Remove the mand [ 61.012688][ T6791] option from the mount to silence this warning. [ 61.012688][ T6791] ======================================================= [ 61.065721][ T66] Bluetooth: hci0: Malformed Event: 0x02 [ 61.091969][ T1490] usb 7-1: USB disconnect, device number 7 [ 61.372929][ T6819] dccp_invalid_packet: invalid packet type [ 61.536180][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 61.565116][ T39] kauditd_printk_skb: 35 callbacks suppressed [ 61.565127][ T39] audit: type=1400 audit(1730935575.325:408): avc: denied { read } for pid=6829 comm="syz.0.230" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.572519][ T39] audit: type=1400 audit(1730935575.325:409): avc: denied { open } for pid=6829 comm="syz.0.230" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.578802][ T39] audit: type=1400 audit(1730935575.325:410): avc: denied { map } for pid=6829 comm="syz.0.230" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.698832][ T6838] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 61.772742][ T6853] netlink: 'syz.2.234': attribute type 11 has an invalid length. [ 61.775101][ T6853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.234'. [ 61.792608][ T39] audit: type=1400 audit(1730935575.555:411): avc: denied { getopt } for pid=6855 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.843377][ T39] audit: type=1400 audit(1730935575.605:412): avc: denied { map } for pid=6860 comm="syz.3.238" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.844990][ T6862] binder: transaction release 8 bad handle 1, ret = -22 [ 61.849538][ T39] audit: type=1400 audit(1730935575.605:413): avc: denied { call } for pid=6860 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 61.849556][ T39] audit: type=1400 audit(1730935575.605:414): avc: denied { transfer } for pid=6860 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 61.948833][ T6865] Bluetooth: MGMT ver 1.23 [ 62.150832][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 62.276975][ T5971] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 62.406957][ T5971] usb 5-1: device descriptor read/64, error -71 [ 62.416898][ T5994] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 62.592104][ T5994] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 62.595264][ T5994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.598413][ T5994] usb 7-1: Product: syz [ 62.599872][ T5994] usb 7-1: Manufacturer: syz [ 62.602189][ T5994] usb 7-1: SerialNumber: syz [ 62.607402][ T5994] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 62.621401][ T5994] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 62.656901][ T5971] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 62.796945][ T5971] usb 5-1: device descriptor read/64, error -71 [ 62.867456][ T6887] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 62.869280][ T6887] #PF: supervisor instruction fetch in kernel mode [ 62.870919][ T6887] #PF: error_code(0x0010) - not-present page [ 62.874028][ T6887] PGD 2afa1067 P4D 2afa1067 PUD 3366a067 PMD 0 [ 62.875516][ T6887] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI [ 62.876943][ T6887] CPU: 1 UID: 0 PID: 6887 Comm: syz.3.245 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 62.879341][ T6887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.881684][ T6887] RIP: 0010:0x0 [ 62.882522][ T6887] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 62.884180][ T6887] RSP: 0018:ffffc90005f779c8 EFLAGS: 00010293 [ 62.885564][ T6887] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81c26c0f [ 62.887329][ T6887] RDX: ffff8880263fc880 RSI: ffffea00006b28c0 RDI: ffff888043936e00 [ 62.889092][ T6887] RBP: ffffea00006b28c0 R08: 0000000000000007 R09: 0000000000000000 [ 62.890892][ T6887] R10: 0000000000000000 R11: ffffffff961cb450 R12: 1ffff92000beef3a [ 62.892673][ T6887] R13: ffff888043936e00 R14: 0000000000000000 R15: dffffc0000000000 [ 62.894457][ T6887] FS: 00007ff214b3d6c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 62.896518][ T6887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.898017][ T6887] CR2: ffffffffffffffd6 CR3: 00000000435cc000 CR4: 0000000000352ef0 [ 62.899827][ T6887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.901618][ T6887] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.903422][ T6887] Call Trace: [ 62.904516][ T6887] [ 62.905500][ T6887] ? __die+0x1e/0x60 [ 62.906757][ T6887] ? page_fault_oops+0x3b6/0xb80 [ 62.907974][ T6887] ? __pfx_page_fault_oops+0x10/0x10 [ 62.909136][ T6887] ? __pfx___lock_acquire+0x10/0x10 [ 62.910335][ T6887] ? __pfx_lock_release+0x10/0x10 [ 62.911498][ T6887] ? do_user_addr_fault+0xa90/0x13f0 [ 62.912745][ T6887] ? rcu_is_watching+0x12/0xc0 [ 62.913877][ T6887] ? exc_page_fault+0x5c/0xc0 [ 62.914993][ T6887] ? asm_exc_page_fault+0x26/0x30 [ 62.916170][ T6887] ? filemap_read_folio+0xaf/0x2a0 [ 62.917123][ T5971] usb usb5-port1: attempt power cycle [ 62.917332][ T6887] filemap_read_folio+0xc6/0x2a0 [ 62.919989][ T6887] ? __pfx_filemap_read_folio+0x10/0x10 [ 62.921317][ T6887] ? __filemap_get_folio+0x2a5/0xaf0 [ 62.922601][ T6887] do_read_cache_folio+0x263/0x5c0 [ 62.924100][ T6887] freader_get_folio+0x337/0x8e0 [ 62.925734][ T6887] freader_fetch+0xc2/0x5f0 [ 62.926989][ T6887] ? mt_find+0x4c8/0xa20 [ 62.927976][ T6887] __build_id_parse.isra.0+0xed/0x7a0 [ 62.929321][ T6887] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 62.930720][ T6887] ? __pfx_find_vma+0x10/0x10 [ 62.931819][ T6887] do_procmap_query+0xd62/0x1030 [ 62.932975][ T6887] ? __pfx_do_procmap_query+0x10/0x10 [ 62.934280][ T6887] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 62.935768][ T6887] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 62.937269][ T6887] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 62.938818][ T6887] ? selinux_file_ioctl+0x180/0x270 [ 62.940015][ T6887] ? selinux_file_ioctl+0xb4/0x270 [ 62.941178][ T6887] procfs_procmap_ioctl+0x7d/0xb0 [ 62.942337][ T6887] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 62.943833][ T6887] __x64_sys_ioctl+0x18f/0x220 [ 62.945378][ T6887] do_syscall_64+0xcd/0x250 [ 62.946689][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.948050][ T6887] RIP: 0033:0x7ff213d7e719 [ 62.949075][ T6887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.953566][ T6887] RSP: 002b:00007ff214b3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.955505][ T6887] RAX: ffffffffffffffda RBX: 00007ff213f35f80 RCX: 00007ff213d7e719 [ 62.957343][ T6887] RDX: 0000000020000180 RSI: 00000000c0686611 RDI: 0000000000000008 [ 62.959174][ T6887] RBP: 00007ff213df139e R08: 0000000000000000 R09: 0000000000000000 [ 62.960989][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.962812][ T6887] R13: 0000000000000000 R14: 00007ff213f35f80 R15: 00007ffc2e4ccf08 [ 62.965259][ T6887] [ 62.966285][ T6887] Modules linked in: [ 62.967189][ T6887] CR2: 0000000000000000 [ 62.968167][ T6887] ---[ end trace 0000000000000000 ]--- [ 62.969410][ T6887] RIP: 0010:0x0 [ 62.970226][ T6887] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 62.971873][ T6887] RSP: 0018:ffffc90005f779c8 EFLAGS: 00010293 [ 62.973276][ T6887] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81c26c0f [ 62.975121][ T6887] RDX: ffff8880263fc880 RSI: ffffea00006b28c0 RDI: ffff888043936e00 [ 62.976987][ T6887] RBP: ffffea00006b28c0 R08: 0000000000000007 R09: 0000000000000000 [ 62.978827][ T6887] R10: 0000000000000000 R11: ffffffff961cb450 R12: 1ffff92000beef3a [ 62.980613][ T6887] R13: ffff888043936e00 R14: 0000000000000000 R15: dffffc0000000000 [ 62.982413][ T6887] FS: 00007ff214b3d6c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 62.984660][ T6887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.986237][ T6887] CR2: ffffffffffffffd6 CR3: 00000000435cc000 CR4: 0000000000352ef0 [ 62.988092][ T6887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.989900][ T6887] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.991733][ T6887] Kernel panic - not syncing: Fatal exception [ 62.993781][ T6887] Kernel Offset: disabled [ 62.994837][ T6887] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:26:16 Registers: info registers vcpu 0 CPU#0 RAX=000000273159eb9c RBX=ffff88806a6283c0 RCX=00000000000006e0 RDX=0000000000000027 RSI=ffff88806a6283c0 RDI=0000000000173a03 RBP=0000000000173a03 RSP=ffffc90000007ec0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000019 R14=0000000000000000 R15=0000000e9d13ce57 RIP=ffffffff813ac865 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f21fffc CR3=0000000020b0c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2e4cd2a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff213df223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff213df2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff213df2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff213df2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff213df22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff213df23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b8545 RDI=ffffffff9aaeac40 RBP=ffffffff9aaeac00 RSP=ffffc90005f77278 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000078 R14=ffffffff850b84e0 R15=0000000000000000 RIP=ffffffff850b856f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007ff214b3d6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff88806a700000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000435cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=0000000000000007 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff214b3cf90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff213df22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff213df23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000006c1c4 RBX=0000000000000002 RCX=ffffffff8b236439 RDX=ffffed100d507026 RSI=ffffffff8bd1b300 RDI=ffffffff816477bc RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d507025 R10=ffff88806a83812b R11=ffffffff8b6f8740 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f5908 R15=0000000000000000 RIP=ffffffff8b23781f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff214b3cf98 CR3=000000000df7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c000c001 Opmask01=0000000000c00100 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2fae6ce0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000383030313520 3a657a6973202c77 00006463685f796d 6d756420676e6900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000323030313520 3065706373202677 0000646362557367 6775642067646300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d20373433353d64 6965202072696420 7320616c63202020 206465696e000031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3720373433353a63 5f20202067000020 3d20306655202020 206465206e000031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63683779796b6669 7e2a7e55676e6b79 7379307855676e6b 797379307e656578 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 376f7c6379796367 786f7a2a78636e37 79796b66697e2a7e 557e656578307855 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000756dd RBX=0000000000000003 RCX=ffffffff8b236439 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1b380 RBP=ffffed1003b5b488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801dada440 R14=ffffffff905f5908 R15=0000000000000000 RIP=ffffffff8b23781f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002099b000 CR3=0000000030a16000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb89c9af70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb88ff223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb88ff2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb88ff2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb88ff2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb88ff22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb88ff23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000322e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000