last executing test programs: 13.639989529s ago: executing program 2 (id=489): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000040)={"fa3a64d663ffd2b03aad82ced1f26081ee3cc5ebeb12b380d14ecd8785d4", 0x5, 0x0, 0x0, 0xff, 0x0, 0x3, 0x1, 0x2, [0x1, 0x8, 0x3, 0x100, 0x2, 0x8001, 0x5, 0x54a0, 0x8, 0x8, 0x40, 0xf, 0x9, 0x1, 0x2, 0x4, 0x2, 0xef, 0x7ff]}) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) close_range(r0, r0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000100)="893668d6c93e", &(0x7f0000000140)=""/70, &(0x7f00000001c0)="5853917ef6671d2090cb329e51dbbfdc4229aa2ca785c781cda629558ebc400c8fd24ff04202268d862e66cb6357b2b254f816ee055b95dd4c4f2545fbb43bc67d0518d362be90c1afde1345b74e0b8d88a6319337809ec036635985e60c2c16b9c65c4220fd01ccc11e644750fdca574eabe5a3745593f886c486e274def5", &(0x7f0000000240)="6dc00be7d92cac84c1a9992db104563e018d3fa91e05b149dd1cc241d4c3bd22c5e8c66777c8461992eeb2bb7ce61329904a03bb6088364cfc6d9c62d1a7fdb360b20a4091b56248212ab7260715c0f8e9cc1465ad3a33be278a159f174b1290d4198a4c4d2eb8cf332783cf3817347347b57e34f49ad2368d697b70c6f56f2c234621aeb6e2c717ec35d6e5553dc3a9e5dc64065fdfc7b1bd80ab79604cd8faaf5b04886fdaddc5d5c7bc6abec446592e7b00030ca68b702ed1a4b832d2022f42e8a95500cf2616d5bfe7078a49d81a34927a5c5a44", 0x3, r1}, 0x38) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) getpeername$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x200000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xe, &(0x7f0000000580)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x2, 0x20, 0x1}, @call={0x85, 0x0, 0x0, 0x85}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0x3, 0x7, 0x6, 0xfffffffffffffffe, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000600)='syzkaller\x00', 0xca1, 0xb0, &(0x7f0000000640)=""/176, 0x40f00, 0x4, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r1, r1, r5, r1, r1, r1, r1], &(0x7f0000000880)=[{0x5, 0x3, 0xb, 0x4}, {0x2, 0x4, 0x8, 0x2}], 0x10, 0xd4}, 0x94) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000980)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f00000009c0)={0x2000}) ioctl$CDROMSTOP(r4, 0x5307) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x210000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r8, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xf8f4}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7fffffff}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)=@can_delroute={0xa4, 0x19, 0x100, 0x70bd25, 0x25dfdbfb, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x1, 0x0, 0x1}, 0x6, 0x3, 0x0, 0x0, "1124447fe306942b"}, 0x4}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "eae6f47065814a0e"}, 0x4}}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "37e0390d52bb8cbc"}, 0x6}}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "c3e8d4a74e4c20c0"}, 0x3}}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "eb85db9f38a78f1a"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x3, 0x5, 0x0, 0x0, "d22553aac964f6fa"}, 0x1}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e40)={r7, &(0x7f0000000d40)="7de5bbdac85546c1b18653502c5bf39d2d5a7eb6f83fabf924", &(0x7f0000000d80)=""/130}, 0x20) socket$kcm(0x29, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000e80), 0x40000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r7, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001040)={r10, &(0x7f0000000f80)="6f75bec95a79ad1e287d29c1549ab9518042c5f7ac9744e4f9a1b066a7d893e55ea5f32d155f868e3588ed40", &(0x7f0000000fc0)=""/67}, 0x20) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000010c0)={0x3, 0x2, 0x4, 0x0, 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r6, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0xc1, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x14, 0x7, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000001140)='GPL\x00', 0x10000, 0x2b, &(0x7f0000001180)=""/43, 0x41000, 0x10, '\x00', r3, @lirc_mode2, r4, 0x8, &(0x7f00000011c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x1, 0xd, 0x3, 0x7}, 0x10, r12, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001540)=[{0x3, 0x2, 0xb, 0x2}, {0x0, 0x4, 0xd, 0x6}], 0x10, 0x5}, 0x94) 13.639593783s ago: executing program 2 (id=490): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10, 0x0) 13.550349832s ago: executing program 2 (id=493): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x100, 0x0, 0xa0363159, 0x0, 0x0, [{0x3, 0x81}, {0xfffffffb, 0x5}, {0x8e5d, 0x4e670b6f}, {0x8, 0x3}, {0xd, 0xffffffff}, {0x7, 0xc000}, {0x60000000, 0x6}, {0x5ba, 0x10}], 0x10, 0xb, 0x1, 0x2, 0x6}}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000003c0)={0x0, 0x0, 0x0, r5}) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000001cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@delchain={0x1b1c, 0x65, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x8}, {0xb, 0xfff2}, {0xd, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x8f, 0x1}}, @filter_kind_options=@f_bpf={{0x8}, {0x1ac0, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x96f, 0x6, 0x10, 0x8}, {0x1, 0x6, 0x7, 0x7}, {0x6, 0x2, 0x3, 0x8000}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xc, 0xe}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0x7}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1234, 0x1, [@m_vlan={0xe4, 0x1a, 0x0, 0x0, {{0x9}, {0x9c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x4, 0x1b5, 0x6}, 0xfffffffd}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x86f9, 0x7fffffff, 0x4, 0x3, 0xffff}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffd, 0x5, 0x2, 0x9, 0xd}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x748}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x80, 0x8, 0x1ffe, 0xe}, 0x3}}]}, {0x1f, 0x6, "23106dc8974d46fb2c54755a8cb76d37d6a432f473c4dab74b2e26"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x118, 0xd, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x15c}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x401, 0x2, 0xad, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x236d, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2300, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x522, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2399, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2494, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1bef, 0x10000000}}]}, {0x7f, 0x6, "c04a1345e14d2d661108c98d7613627eb09ac9d1379293314f5a30ebc3354176e950dc5a5c4a65626c62f72ab22171788df11e05b46338cc17b8ae6161633453dfff9321b5076a1d38e4e74bcf16db994ab4fcb7d6043ad8cd1c3d1c36d11dd5ccc2ad64b97811af41578c36cddee9f08a65bb8ef4848041ac09d5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x1034, 0x20, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x1004, 0x6, "9d662d2ee33b1b6066b2e67b23b3782ea386b2ed6ac90409d55364876eda04cd6c24447e78ba48776b247c122ea0e388d07fa306c471329ec2fb46e9dfa0c970ef3237be62799b22bdb6063b1e72338626972301446d46f748acaa3c7a4c032845a0e550a6d7f045ebb5dda4a5ff2540cb3b419cfc3943cc8eda701a2a52f4ef6ceebf7491d613b03607004ccefe2bded930c688897599a95308f7b897ae28e046e0502d3191f14505f3e14f2a45e1af840edc8a5a205b187eb38faac9118c919aab87fb99929885ddc0e0b46855fcc64bd4ef415145ad385e2d414604dc67d141cc5beb8902791d77da1c81573fc8d2050d498027e831c899643c1782421af71f230f8500bf41d980cea7c442e7583396da16d486e426f6af4dfcbec9d1f95d0a427b8effdbff330ff4a7e1d3dcad4589b23d95c9eb8e752c5dc40ee81ee81d5bb5fbc0c71c91eace535614141e0606a1a4070c0b965060a5c1bee28fd90ef504213d52d3e2dfe8fb562bc944ef87f87773a1d38e0142f174d3e1767a25f59da8d2402ce22df4f9340958e482c433c78c4302de6342dc77cc9e82fffc4abe76f21e1114b5ef86a173e07e0a1a165fc3a91717e2c062e04c76f0b71790a12e328cde6b27f0bd8dbe10a866b11c419f7eb0a05feb3366aa50343e2244e8bb35fc5a6c89f7ac6e7d9120aafd58219d261bcdf8a2602661d0965b9411ee9e2c0b8b8069c6c292d6298955d0311a0172cd7fb2ae179406426c4baea1d3b89232a4cf89e3aef082c1d475f8c589ead7d3a276dc76e5d41776a90d8e756a01b1cadac934b0b4005e3aeea0cc1e5b38c621b7862160b22c8e9e4602698d478f4a2ab2a46cced3ea4827f6b6138b3de2950807b17bb60ea81cd7ebb53c60dd9aa349bcf41dbcf2198dd779ae16f1e60f175eaec51d4cd8059e14ccb6f57af238854c3522f9c3016457ff659a2ed3daa17130d0e50d15205682fce7cf4e1d1df8571e3ea5638e67beb9b1a7cc0154945c16b6e1f96dcd7b6761338a1b9980c2900411310b6d6f14f1c14616e158348af043149a0f2c20f5126c4518d19a17629506497d6dfb1d25d3f118a7d68a3de33c3380dc90995cf421e2eeefa73de47bfa2c8e04682a3aa9b1269fc7490b8f553b0e8ef8efa47924ff362ffa33a3390b8ec63ea5e44338626ed7919320e8abf6c1407a9ddfd77e30dce8900288040936dd7ae118d7aa31e6b2ecd077c6d010518a77a35d497e83a25acf6f1da5040f4a07b48f6512f3f6450d841b0bfaa9e341b177518e46a65b52bc041c4ca60bdbffce2eff7b0a7b180ca0212fff9a0a4b8f07568c53d6c700d00dfba8600a5becb56a7a8025d5064b68f33861e5e3257ae662e8de17b6180462f6c0fca31c9fe3ca0f820c548acbadfa5d94552dbe24f164455537d8bd4f704e78349ebee380da33873a028a8d2d3d35ab02f3e78bb218227cab660d26851300e636d2641ec6425474dd61b2686e0583e4de70acff50a396973ccc0cb4088a25dd17d1f0fc882dd43ef7448a535c2d70d06eb4c11adda0912c2bed5972dde69889d0a728efb5f99995ee4c051d499d40c3b311195758362437504860ca86c1c5edf4581b2668a3c9e3bc1b73e62c2d74251ca4e5156a8df921da57064289d8cb5c832d299a7013e5f37b511ac2f65b5bb0f6f2bc19c56613c6efe6869d6a2d449b3e6731682851dbda320930c0a49beb1834f15e739599cf4a728231a18c14f384cb2417214302148aaba5d234730a1eefcd3aaaba0d86f2e16d30d271d6a4b29872600c22391729ea928a5ad28050d4a6789938ecb65a7ca5b70be898a34d94b7a7e9c235a9cf11799bea0b70b5ecd2ba98de9e66725b9e6b2bbe5a2036ea6ce417688b457f13339aa86dd879241d7be6242eb24830121e17539253b7745140dc1687855b323f359876a95b559002ba8aa1787db32c9935cc16cadc9f7a3dbf22b1a2b9573cd33151c554b08b053073ec8cbca126b5bddfd872b50b175f512daa5416d7884f761bc0607f3b497aec47a2ee174d114567d5266d1831f14027384341f87bc122fb448ea708bd30ce51e0306bb62e027879dc527d8f52af4347f5bb8851976383e0a083d9d8952498d12177a0d61fc00585b48bdb39eb798fc5c7220b19e1b6950c5421e1e93a4d89e345d4c871fb166dc81f8076e56122d3515dd04fd8a394d96bc4f725dde0efe30b41cd198ccde8af9032f957b2a1247517e392b63cfa3e493c6a21777f4926ce3148013a4426b037e45989d2812b27e97396af84e2113323649a591add1f81f5a9fd43d0fd12387354bce1ff83d0e06990e9f05c069644f5800d122ec9334ba4fd219d935ea10afad26a6d1dd208b9152a0d8bbd7db82a5489fcd71cfd086744cf229c5f1631b529e1a247adb9f21830137518491606030adffdc37273367a8f80eaeb555b50d3f7473295d608d344f2943ed58886dc96a6425c986ef1767fdcb86c115f6d6702f17c017bdadf1a1efd632ea5a4c9708fd4ea792fddf6fce2d5ea76bd15c833a61ca8d344076787a57bce7e843cfada236849a35189a6a505bdbe6992c1ae4c392da8b63779577e6c04d78f0cf130ad10ebc41add9e2ae7152f9407b0cd61f608c43c1ed85249f11fca81caba62466660c861cfeb132c53ac77be190e48bdcec88d9f0a52640376c2ce8961a42c9332bb0885ce58cb0af486cd3b4a81cffb6d089f94eb39d188e96a3510e239061ea4211d2e6d13dbf54c2cd6911031b970c5e93d73a14f696fb47db985ac3823e57164f45e7a19f1080f821bea9e1790c7c9329c40ac138d4f12b0b84fa39b8d0fb28da62898f8e98793d8746580cb922aad9254861acf4e7908d6d00a63c12836f6b7780c3d61fb1529950a45051cbcf2dab6f6aa11e6480ee83d090d2eb8b6908956a161367b4dc59856f75cfee93a6afc539c449c21e1dc56e94db379f2e35911cf19ce2b8f0f0f7b173e264e30e210f1b3969f50f6178aa376dbf6b613caae178b15195effc18d977b020f55922c5d5dd428e7e145d0744e26fdd58e69e7ec51a7335297302f45f25acd10567a30fa7be24b3a7e260a6d2f6a9eb0ce01beca3ab6450ab563b91baeb89b7d121d7d2dcfdb0677b73f94061c359f6c409513cba3e84dd7ccbc2d88f1a926b6c87d36361de5b8b140799cc1e9791304dbfb1d260cbeb3aa53dadcc19ab6aedaec37fa2f19ac601196b5cbf240a90281f13e484b54021c505d37cc56e14da6f3a6c2d75aec1f981b54eb1bed2e59a9805e4f33c2f5e595f46d835a7f8978bef3f983130764819dd4f60d8320098aea363187701701a395f9dd0a12585b33a1b9c5d95f4b5c024c1b49056f2a2d797a6dcbf3f9539fc69d0fcf2ded146c796151b3ccdbfd553434e85e6567483212498094928c0681c61dcc396bec767a0ce56768501733257f50ea891187aeb2f6315d1c47abde0a66a666171d50f1825efea5609c62b4d2fff364e208adaa3a793965387464e38d973cd562cb6be8b394f4b97a8952e2943188582a30bfa34bc033875af51169f1256a87090c849147b6b45e86aaf68a2fac529fe32563c62bd0c79113f3559e5137dbcd2571ab171e163b13b3abaf0e349175bd9fc7a781d39ad2532cc9a749bee07e123445f42b7049444797ee17fdf492264107fbd26c3042c7628f8792c5940baa36cde09417f97df06b01c4b11ea95529afc92b831a2e2c3d047bed105602d40f897d441b99c038be7f8a87e5d4099670aef6183cd55175879009695d6553f6966b63ac2bff9f296f476acffc89591e0bb9ed1b47435fc8bf5f594ca928033f4d7b7a992003c6f01c7f8dff579c91a106f75c2fa8f4685d54b5b82b4a7a40e7185264a49544253d898ff765d1c1b8b67f1e1b333fba0fb06a83226275a38ac8841f885a76b2fd19d08a028bef8c4b3d5fe9ad1479b3fce566835f4475304174b708029c40127ec64dd9ae9021257a57ae930cb978c74dbe827ba8c77653f78269417acc50982afa519bd06300c52e7792be8cd106dda4844e1f42b51523bca83c791ce4bc6d23de1cb4998ab6ac72f51c40ec98d2d5c1fcffe1a94a0f0620c5a587e795826467d420e3c65248fc759bf06374993249f269b81ccfbd49dbb99f8add325097c64e0f6980131d70c1e6f1cb8c78e7cd358a8960a0cedbe6fd2cef18e9c40073a37601818439b997062b4f5b9781eac34d7c405de8738753f7632fb0d5254a43146dcaaf088193299fae74d077b7cbedc7576fbe1d21846c5388d682b98907aabac7f517d2d33a959b23dab20e300f0928a82e77ecd2ae6afaf3f2a47707fd06fb11fa8bc71fc2f9482f35d99a10af467b8bb82c864d1374aebcb62c115e78a22b5c4178fd04fba90b847fdb93723a6f9b585e82ac91e1ccf1ea99fe9cca10634e9359e2d5ca394045cf0f471f9e7fabe73deb702fa7ef2808e44dc241b297aff1ebfc10b28c585844989683444e8e1656ff3a274cad6e9b06ddf3ae25a968c4a29336b14f0be6bb3e6ddfe192d905bdc7081572f907a6e205cc9127986d0dfec6b37af4626480f99052559fe114471ba2cfb305fd72490f9adb3ad9d8db9c8383863bc0e86f595b5c8ed3dea7ed611f958af55ab972def87d9644e03423e3cb8cf1c6b629ec1e0dc571948f70d5d14b09828755701e7d6399db70562ca75113cf19c5ae04ec2a4bfc9bf9e901a7aff26f5966af43f36a3c393048873d3ea5f46cb8154823ec1fd42c653cd547459e33b1dbc6c59b5f7a9f34d3089f63ede8ec6db428e88537816e182f4a83abb044c35f34fadc421a3f6a81ba87174abcdf912aae8bc41ebfc914a25f92e1cffb2b5ffcaf6e77b97903ac50c601d8fe119e26415050d6f8afad34ca7d6fb23af7af466926e156f405210977e7aa59fd779572e0a524c90b83be5355fae9d213313fe2c0c2b25c9eac74871a55f8dc867797ac8376f097cc4fba458435cb9e4e710ee676ed3e588fa5b93414fc19b111f784276da4f4756ed6e3a0df6e61d1591cf018551651678504d31c39b5897d54714974c10a040c8e29b6838ee93607d7166a9f8f0f77ad218c3f21ae2c4cce0e4beac46039086e31d71c09ebae00c03f082c6d4cdb77336aa858735d02e8f65e4fef58fba6f39998d5f516c20e8516d073f611959b2b15ba33a27b610ad3c28aa9b740d559bfc1fb0413879ab7932128fa025a1de2da1212313477d1598ba43f489e57bb3e276c7cb4230e30d0a2944a38803a7ea0d3fc67d97c9f1e647c0c7c4a5afed9c209b7202e4566d9862ecaf87d227db0cb155371faabc637a3bd2b84abe030cebcd265e9f705b81fb1d93c2a148eedacbe9e3c453bebc12378e3f147b736b079ad9e8e647661f8a2f4ddab8a16b54c308317ed7d15b9e86c7096fa3f661bb7cbd00bb4cc06fe636f8e546b919b8ceb447410017fd738515fc8c20fe3749aee25cbd05f1d7be79caf810af3bc706a7f4f5594c2e10fd099a02f8e35e423d4b95f1292a01f88b51ee4f19259cb2f9af9db82fc63b816388ff13265b2be2186c52a5b4a3001e47e9e175bf4d4693a9c26993b0902b466404db7e33fd05fcdee6f13322afefe320660dc0e2ed3eadd7c4f328203c3ccf75357e2396f05823324eeeea6885834e84894cf69e827bdc00dba32d39e4bd16098c721609e7986d70e4c2c3b9034133a0e4e25ca848d26b00adde03c348cdfeda3557f2089d74dc93acf3efd9496ecf36fb63f922a1de8f7fd9fd75b039394857fd8df4d4edb23208995f2544d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_POLICE={0x824, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5e63, 0x8000, 0x3, 0x8, 0x6bac, 0xdbab, 0x8001, 0x2, 0xa6, 0x7, 0x0, 0xfffffffe, 0x3, 0x4, 0x2, 0x3, 0x3, 0xff, 0x8, 0x1, 0x0, 0x2e6, 0x0, 0xd, 0x89, 0x8b5, 0x9, 0x9, 0x7fff, 0x3, 0x3, 0x4, 0xf8, 0x3, 0x3, 0xeb, 0x3, 0x8, 0x2, 0x2, 0x4b, 0x1, 0x81, 0x67, 0xffffff44, 0x1, 0x8, 0x5c0, 0x5, 0x10000, 0x1, 0x6, 0x9, 0x81, 0x3ff, 0x0, 0x80000001, 0x1, 0x3, 0x0, 0xfffffffa, 0x9, 0x7fff, 0xb, 0x8, 0x401, 0x401, 0xeae8, 0xf99, 0x10000, 0xfffffff7, 0x0, 0x3, 0x2, 0x0, 0x0, 0x9, 0x3, 0xfffffffb, 0x4, 0x0, 0x8, 0x6, 0x80, 0x5, 0x139, 0x4, 0x24000000, 0x4, 0xc, 0x8, 0x1, 0xb852, 0x6, 0x0, 0xfffffffe, 0x2, 0xfffffffe, 0x9, 0x4, 0x7fffffff, 0x1, 0xffff, 0x916d, 0x1ff, 0xc, 0x3, 0x6, 0x7, 0x4, 0xe5af, 0x9, 0x1a, 0x15, 0x612352dd, 0x6, 0x8, 0x7, 0xfffffffc, 0x8, 0x8, 0x7, 0x8, 0x6, 0x7db2, 0x6, 0xc97, 0xd214, 0x7, 0xa6, 0x8, 0x3, 0x3, 0xd, 0x8, 0x9, 0x8, 0x81, 0x44, 0xfffffffc, 0x7fff, 0x6, 0x3, 0x5, 0x1, 0x2, 0x254, 0x2, 0xe, 0xffffff80, 0x6, 0x3, 0xcb, 0x3, 0x6, 0x8, 0x10001, 0x8, 0x0, 0x7, 0x8001, 0x9, 0x9, 0x2, 0x1, 0x9, 0x80000000, 0x4, 0xca, 0x3, 0xde5e, 0x81, 0xfeb, 0x8, 0x0, 0x700, 0x0, 0x8001, 0x80000001, 0x8cca, 0x15, 0x2, 0x2, 0x3, 0xe, 0x83dc, 0x7, 0x7, 0x10000, 0x2b, 0x3, 0x5, 0x200000, 0xe, 0x736d, 0x7fff, 0x6, 0x6, 0x9, 0x8, 0x8, 0x4, 0x2, 0x6, 0x10000, 0x35ef2e1a, 0x401, 0xff, 0xdd, 0x61, 0x3, 0x9, 0x5, 0x3, 0x5, 0x1, 0x7, 0x6, 0x6, 0xa3f7, 0x8, 0x2, 0x7, 0x1ff, 0x8, 0xa, 0xfffffffd, 0xffff, 0x40c, 0x1, 0x9, 0xa, 0x2d, 0x4, 0x6, 0x3, 0x200, 0x16, 0x3, 0xa89, 0x5, 0x9aa, 0x61f, 0x9, 0x35ae, 0x6, 0x5, 0x3, 0xb71f, 0x3, 0x1, 0xf8d, 0x7f, 0x5, 0xed23]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x2, 0x3, 0x8, 0x0, 0x99d, 0x2, 0x2, 0x2, 0x4, 0x80, 0x1ff, 0xd, 0x1, 0x6, 0xe, 0x4, 0xff, 0x78, 0x5, 0x9, 0x3, 0x1, 0x8, 0x6, 0x3, 0x5, 0x401, 0x80000000, 0x0, 0x4f98, 0xffffff81, 0x5, 0x1325, 0xbf1, 0xb, 0x8, 0x7, 0x78, 0x4, 0x5, 0x8, 0xa6e, 0x7, 0x4, 0x0, 0xf, 0x8, 0x1, 0x7, 0x1, 0x10000, 0x8, 0x2, 0x240000, 0xffffffff, 0x4, 0x200, 0x3, 0x1, 0x0, 0x0, 0x2, 0x1, 0x4, 0x0, 0x3, 0x2, 0x80, 0x7ff, 0x7, 0x1f2, 0x3, 0x10, 0x5, 0x9, 0x7, 0x2, 0x5, 0x8, 0x0, 0x2, 0x1000, 0x1, 0x8, 0x1eb2, 0x6, 0x10001, 0x5, 0x7fffffff, 0xffff8000, 0x139, 0xfffffff8, 0x2, 0x2, 0x4, 0x180000, 0x8, 0xf2, 0x3, 0x10000, 0xffff, 0x0, 0x7, 0x0, 0x3, 0x22, 0x2, 0x8, 0x5, 0x4, 0x0, 0xc, 0x4, 0x9, 0x8, 0x3, 0x3, 0x7, 0x5, 0x7a6, 0x4, 0x2, 0xe102, 0x4, 0x500000, 0x4, 0x2, 0xec0a, 0x6, 0x6, 0x6, 0x8, 0xba6d, 0x9, 0x7c, 0x9, 0x8, 0x9b3, 0x4, 0x8, 0x8, 0x4, 0x1, 0x9, 0xfffffffb, 0x60dc, 0x0, 0x4c61, 0x9, 0xd239, 0xff, 0xfffffffa, 0x81, 0x2, 0x7, 0x6, 0x200, 0x7, 0x8, 0x81, 0x1, 0x3ff, 0x895, 0x6, 0x0, 0x8, 0xf9, 0x4, 0x7, 0x5, 0x5, 0x300000, 0x4, 0x2, 0x7, 0x1, 0x3, 0x2, 0x2, 0x4, 0x3, 0x9, 0x6, 0xc612, 0x6, 0x40, 0x2, 0xed4, 0x1, 0xfffffff9, 0x8, 0x1, 0x6, 0x8, 0xfffffffd, 0x9, 0x7, 0x0, 0x9, 0x6, 0x3, 0x9, 0x5, 0x4000000, 0x80000001, 0x1000, 0x80, 0x441f, 0x5, 0x9, 0x2, 0x3, 0x9, 0xf, 0xffff3139, 0x0, 0x5, 0xc, 0x7, 0x7fff, 0xcb05, 0x4, 0x7ff, 0x1, 0x8, 0xb3c, 0x90, 0x5, 0x7, 0xc479, 0x0, 0x9, 0x1, 0xf3d4, 0x0, 0x3, 0x6d0, 0x9, 0x3, 0x9, 0x6, 0x9, 0x7, 0x8, 0x80, 0x3, 0xc5, 0x6, 0x3, 0x4, 0x1ff, 0x0, 0x401, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0xff, 0x7, 0x7, 0xf}, {0x3d20, 0x7f, 0x7, 0xffffffff}, {0x6, 0x2, 0x0, 0xf}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x1b1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000200c20508001b8000000000cff90e98cbc6e056"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 13.419937348s ago: executing program 2 (id=500): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) (async) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="230000000100a7", 0x7) 13.352503241s ago: executing program 2 (id=503): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x1000000, 0x6031, 0xffffffffffffffff, 0xe38a5000) munlock(&(0x7f0000ba1000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000df9000/0x3000)=nil, 0x3000, 0x1) munlockall() r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000001240)=""/4089, &(0x7f00000001c0)=0xff9) 13.198293536s ago: executing program 2 (id=509): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0xd, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async, rerun: 32) setresuid(0x0, 0xee00, 0xffffffffffffffff) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) r3 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) (rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001500010028bd3000fcdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000004e2300004e210009020020a06c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b56b6e00000000000000000002000000"], 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r7, &(0x7f0000000140)="24000000010006", 0x7) (rerun: 32) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010700000000000000000700000008000300", @ANYRES16=r9], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x60, r10, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9a9}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x40) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 13.059781913s ago: executing program 32 (id=509): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0xd, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async, rerun: 32) setresuid(0x0, 0xee00, 0xffffffffffffffff) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) r3 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) (rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001500010028bd3000fcdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000004e2300004e210009020020a06c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b56b6e00000000000000000002000000"], 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r7, &(0x7f0000000140)="24000000010006", 0x7) (rerun: 32) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010700000000000000000700000008000300", @ANYRES16=r9], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x60, r10, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9a9}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x40) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 2.137159954s ago: executing program 4 (id=683): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000040)=""/102) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r1}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='ipvlan0\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) (async) ioctl$EVIOCGREP(r0, 0x80284504, &(0x7f0000000040)=""/102) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r1}, 0x38) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0) (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='ipvlan0\x00') (async) 2.117355953s ago: executing program 4 (id=687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000000000095000040"]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.047669266s ago: executing program 4 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8947, &(0x7f00000000c0)={'bond0\x00', 0x10004}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 2.046860295s ago: executing program 4 (id=691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x0, 0x8, 0xfffffe3f, 0x0, 0xfd, "4d3611000000000008000000497549e7ffffff", 0x9, 0xfff}) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtclass={0x48, 0x28, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0x0, 0x2}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x9}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x48}}, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) (async) acct(&(0x7f0000000100)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') (async, rerun: 32) umount2(&(0x7f0000000280)='./file0\x00', 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x11) (async) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) connect$llc(r7, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) (async, rerun: 32) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) (rerun: 32) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) ioctl$TCFLSH(r6, 0x8910, 0x2) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) (rerun: 64) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x300, 0x0, 0x1ff, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) 1.919215014s ago: executing program 4 (id=694): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x100000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05fd00000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003"], 0x24}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce0102829709021200010000000009040000000202"], 0x0) (rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\t\x00', @ANYRES16=r6, @ANYBLOB="000228bd7000fbdbdf250200000005003d000600000008003f"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) (async, rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010020000000000000000200000008000300", @ANYRES32=r7], 0x28}}, 0x0) (rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x3c, r8, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @mon_options]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24004080) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.779686749s ago: executing program 3 (id=695): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@uname={'uname', 0x3d, '['}}]}}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5c4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x25}, 0x4814) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fcf7ffff000000000300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f00000000c0)={0x1, 0x6}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', r8, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r8, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x20c1, 0x0) ioctl$CDROM_SELECT_DISK(r9, 0x5322, 0x4) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0xe22, 0x7, @empty, 0x10000}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f00000001c0)=ANY=[@ANYBLOB="99177fa54f2900000000000086dd60000000006411fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22006490"], 0x0) 1.730156238s ago: executing program 3 (id=696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40040) ioctl$DRM_IOCTL_MODE_SETGAMMA(r7, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a0002040000000000000000"], 0x50}}, 0xc085) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000080)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) close(r3) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40040) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r7, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a0002040000000000000000"], 0x50}}, 0xc085) (async) 1.200212821s ago: executing program 0 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000000c0)={@private=0xa010101, @rand_addr=0x64010102}, 0x8) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b000000", @ANYRES16=r1, @ANYBLOB="79610000100000001a5500007e0000000800", @ANYRES32=0x0, @ANYBLOB="0c0099000500000028000000"], 0x28}}, 0x0) 510.676563ms ago: executing program 1 (id=706): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x11}, {&(0x7f0000000100)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f030a050cf0d63424bf2c3af800eb6368ed559a85603b007f", 0x2f}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xfffffffffffffffe) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x60004040) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r7, 0x1, 0x2, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0xffffff43, 0x2, 'geneve1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044057}, 0x40000) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, 0x0, &(0x7f0000000040)) 510.275873ms ago: executing program 0 (id=707): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000003200), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000000)={0x20000009, "fe1814002189dec0bfffff0800000000000200", 0x5, 0x1000, 0x9, 0x80, 0x4, 0x3, 0xfffefffb, 0x8}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0xa, 0x7}, {0x5, 0x3}, 0x1, 0x5, 0x5b}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000380), 0x1000a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, r4, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x900) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r7, 0x6000000) copy_file_range(r7, 0x0, r7, &(0x7f00000004c0)=0x100, 0x9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lseek(r6, 0x2004, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r8, 0x80984120, &(0x7f0000000080)) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003a77bac70e9d38cecadbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 509.955149ms ago: executing program 4 (id=708): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1e06, &(0x7f0000000080)={0x0, 0x4ae2, 0x1000, 0x1, 0x25a}, &(0x7f0000000140), &(0x7f0000000180)=0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x20, 0x0, r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) syz_usb_connect(0x1, 0xfffffffffffffef5, &(0x7f0000000ec0)={{0x12, 0x1, 0x110, 0x79, 0xba, 0x75, 0x10, 0x4c5, 0x2028, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a5, 0x3, 0x0, 0x3, 0x40, 0x1, [{{0x9, 0x4, 0x19, 0x0, 0x3, 0xc, 0x6f, 0x19, 0xef, [], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x9, 0xb1, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x7, 0x7, 0x1, [@generic={0x14, 0x30, "762e519d16f7f681a2a90413ecb4d7a59e73"}, @generic={0x74, 0x22, "0d34bdcd1458430749f11ffb89a49f5caa8fa7c224eb743628e889a43ecead60c78564fd5cdf2b4a5448a7e78f756a6f887a544707ed68f46c3447c316ffc93fab01bdc58a39f7f8dc2b969f99262beda35099cdb9d38f92bfe0b6c42cea81f6cbffa9d6e908e8704b2fa141c9e8445dea74"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x8, 0x7, 0x9, [@generic={0x5c, 0x5, "af18944b6bac71f1c918c0b84c71ab1065edd4e3cc63d8bf6c40a1c8430f029083ff131f7909a28099749438cb3867ef8920ca4f18cde222be04f600717cae9c3a06d4f8da7130de4a647ead4c33a03c0a18e1334ad9ce0fc930"}]}}]}}, {{0x9, 0x4, 0x29, 0x8, 0xe, 0x11, 0x6b, 0xb1, 0x3, [], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0xc8, 0x3, 0x45, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xfff0}]}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x81, 0x2, 0x4, [@generic={0xe0, 0x5, "2cd5f78081142ab1f5401803cdc51df40eb6349ef606181b71e96911275663653185ff9a2f39fd92d7cebdfed934f88ca6d4dc1814fa017a58a55a754a480f21de97470d66cd006cba2de4da6aa5f4ab8e18ccb56c144edc1725750fbb31fc2d935203df37bbe857cf2d774d33aea44ab43ebd75d7bdea7ca5b37dda0fc9f0f693ea423c4bc0949d80b34bc49848ef93ca12246c38de6475eab7460e7fc0f09597b27df8ef5714fe541f3fc1402875955eacc631de41e498675ae69d1ce30bf7e3113089b39b17496de22b95926565e3c7fa289a9676caeb2c5832dd2471"}, @generic={0xa5, 0xf, "97381a75c4da1622548028802f98c04050f48f658c62a902b748300154e3787b8ce02852bbe516d8d174532b10bcecd5e0b54f2bb54ec232dc6494667c6a16785015b3656ffd4bf4a6ef6e23a98d459ac437b26a0d7bbca3a59d1bc316b8c604929c535276deaebb05c235b1b767ce258ebd779a4b5cb8d7789ac2806cbe25c51f0ee55aead23ef77b9661caabc70a41bfcc434e4fdb8f7460cf8a4309b614d2a29b24"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x3, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x5}]}}, {{0x9, 0x5, 0xc, 0x1f, 0x8, 0x9, 0x10}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x5, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x2}, @generic={0x25, 0x24, "f906d864753c77849bd02973220b1a2f12379bb6378ed5ae3750e6549abe416d7dec63"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x7f, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0xa}, @generic={0x67, 0x7, "794038862cc007efd8ce55446e8413afd919b27bf04ab7c575b472676f2d5e4cc868bc4e54c1d521360cb9c85bf598b53e155d629bfeb8059a06734ef6550dc36db2e05331ac9e8b4a1c0b3da68718c3c468d53cc4dad4dcd01add59013ddb7a864dc2fe90"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x26, 0x4, 0x3}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0xc6, 0xc2, 0xa, [@generic={0x83, 0x9, "849b1224e5f879434eed22ff839ddcf806b05505c83d3dc48dbd408a797148d3a17e0d33b0008024e397a5390943aab2653a6f270dd76310b128b4f3028027026c3bfa3e0b88a156806a5c4bede083f2ba7429003656862e108ab5b91d8c406c3bc1a544518526fdbe284016ac7c8f453ae35d43fb8b7692b902c242ffa2be1b52"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x9}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x5, 0xa, 0xfb, [@generic={0x25, 0x2, "47ce5f18b6072efec019598471305b4aa103a06bb684fbb71eb25f62ff52f83d3b26c9"}, @generic={0xaa, 0x1, "1b20ff882109a21dde5f48835c2da93a420b927e1f5bda09674811ba078ebc9e04bb4a60b5f05f7655d32115c6165b779375fc3c2671837514082b75d334c9265b5669771177878a98a7a907398865f5615a1b410a33b7ccbe806a815fa98e9b9f87d7eb43e8d4c1c0ada9772a6eae3cbd9ad82056719309360450915d459418b94d41f4248c9858fd055a2d7361b55833fae78f1a7073a60bd5ab9be1d58a343831499ec463f337"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xf9, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x6, 0x11, 0x7}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xb, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0xa}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x9, 0xff, 0x80}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xa, 0x7}}]}}, {{0x9, 0x4, 0x11, 0x4, 0xb, 0x9f, 0x45, 0xb8, 0x4, [@uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x7, 0x6, "d2"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0xcf, 0xd8, '.'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x33, 0x1, '<\\'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0xeb, 0x80, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0xdbe4a2a8c9231639}]}], [{{0x9, 0x5, 0xa, 0x10, 0x10, 0x1, 0x1, 0xcf, [@generic={0xe1, 0x4, "60d1b5c05842bfe895206d313782c20a304e39a7ab9f8e86696f217a24415312041f16cbe5f224527aba3f7ffa935486a8d89f1d1628f9faded394d8d8bb0f983502b685908de325c61d13f10e39a9d4535a423f2a431113510deb75fb1bacee5333ec89364c664f96401fa3740112dbf172e2cc10da39449c80b33be88f863e8f831a742083c26d2d7ee899a4cb1b4571261cc0cc41a97ea2e600dd4d98c166784070e932ecf7f9e17f13729393e9e7f30a1a3d248b90e1594bfb5b6301e085c333d76835f3ac260d1c71416a7ff035dcd41f69d757744c75d6edfe603d37"}, @generic={0x9e, 0x4, "edbcf59a1c6fbfc81ca23c4cd319d6070547faea25302787ec383deef6b78457783ad32a7e961f0e7f18d9b49be41053f2897a730582854031b80b808929267956ea25f46b650e6ccfb40107e87e1d5e1652dacb1ba14884e276fdc7007a265e1460ea9d99f8cfe022e50228ab8470a6e1f219a0c7aec7f27b864a03493fd21cbbf1d121cfa1b0916a471abb8d6e0457586ab96377dc72c42a77fe42"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x5, 0x3, 0xc}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0xd, 0x3, 0xb6, [@generic={0x76, 0x23, "02deffda8ca5cf439ed5193e8263fcb44d4d0af8e0aae1e51c7b1a15752fdd9d41f12fd87fefbc996b5e0e3183457ff8e690bef8f500c810f558b8f5d62d20983cafe97f43b45d6a1663e4d95d890de21de4ca7251cffb320e610b7d2b3f7806fa81d94e2a951c2401e488561f043e1919de13c3"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x9, 0x7, 0x3, [@generic={0x5c, 0x23, "17d52040f39ac380ed43583c02604ad74970d222cabff2aee8ce58852b124b4511f4c2968a5ee6a1809356d113aa385e0b30f96d03161b58645fede0d83f4e71110194885a504f03319bff5a7899587da88ceb737ed1b3407d19"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x8, 0xd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x39}, @generic={0x61, 0x8, "e1794fad0162ed413135fc1f46bf9315d95d3c555ad1d74ea26d786befdf713e0c67945cf9dd4bc20f1452ab291e08347b9f185e4a9b2618b1c5be018e44f1e6e393397b23433ddf9c9417d07a47f7af3b28f5595c3990126fab8a9501069a"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x30, 0x45, 0x0, 0x5, [@generic={0x13, 0x2, "dea9a8acdec6daa78f12706aca16967fc3"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x1, 0x5, 0x4, [@generic={0xaa, 0x0, "687de08d246fef5739e543d7a7bff15e73922da7ad32867e687e69d2c4f6abf2f119e4b98bb22276300efdaf5d13d241e2f8505d65cd24f161576a3d516495e40a8d9b355c21509ab7bbbd9f1b90de75990478b1c0d5c328ea822a81548a29f995da4be3b63463daa97cad7a0b4e993cd291c57855f63d58b20f7a3159c1a91f779ff8c260b76a6a1458eea37025c0ff8f0a25c09a175c5f2e2bfad901f03afd1a5dad257df3db1c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}, @generic={0x56, 0x30, "19bb22378907056a192870f01d623217144d03e818cc147f52bef1ab7717bed231b03103c16b1f006db4c3f182e70679b52087c36bfe900408abf038d7a69f8a9484d7ce32b1d783323f8af5ba203a7dc680122e"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x99, 0x1, 0x4}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x34, 0x4, 0xd}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x5, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x8}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x8, 0x8, 0x9, 0xff, 0x82}, 0x27, &(0x7f0000000340)={0x5, 0xf, 0x27, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x40, 0x3, 0xff, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x0, 0xf8, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xfb, 0x8, 0x6}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40f}}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000240), 0x4) 509.645386ms ago: executing program 3 (id=709): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r2, 0x403, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "7a96"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x8c00) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8f\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\xea-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae\x00'/144, 0xfeffffff00000000) pipe2$watch_queue(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffffffd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r6, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000540)={r0, 0x6, 0x7fffffffffffffff, 0x9}) r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x44000, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r13, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000000a01"]) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r15, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r16 = dup(r11) write$FUSE_BMAP(r16, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r14, @ANYBLOB=',wfdno', @ANYRESHEX=r16]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x0, &(0x7f0000000200), &(0x7f0000000280)='syzkaller\x00', 0xbcee, 0x84, &(0x7f00000002c0)=""/132, 0x41100, 0x20, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000003c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xb, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r8, r9, 0xffffffffffffffff, r10, r11, r12, r13, 0xffffffffffffffff, r16], 0x0, 0x10, 0xfffff801}, 0x94) 429.15851ms ago: executing program 3 (id=710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x1, 0x470bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x64e10, 0x36a01}}, 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x4882) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f0000000b00)="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", 0x1a9}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e", 0x13}], 0x6, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 428.80181ms ago: executing program 3 (id=711): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000a00"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) futex(&(0x7f0000000340)=0x1, 0x8, 0x1, 0x0, 0x0, 0x2) r6 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0) r7 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000400)) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000240)=0x7a3, 0x4) (async) sendmmsg$inet(r8, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r8, 0x0, 0x0, 0x12162, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r5, @ANYBLOB="000329bd7000ffdbdf256500000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x88d2}, 0x4002018) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="11f2cbe330808f925a8305020e943ecc439662243ced1aefdb7c42a8c73de3c2fd4b058d15bb17dc609ea9f8c382f7b0e5108ec5658024ede636c7a1bf16a960c194f71bef6b5075caf7fb4a0510d4af11bc84150e740000000000000000c055b1cd474ad381f47372a698835e6ecfe1fc02b97dfbda0c59d884dfb7e1371caf94994f811376a9ca9c5cbcb5123c1b7a3472d7b5b3b0eeb9af5de1ab1a34747e83f93d44d28d5c49753423c0fb73d42a5ff07a5c334f5492c9cecf4bc200fa49178b5b58e318beb1a23c24587c1cb45ede731b22fb9bf1a2eac87bb298dff83a33e7b0a6c168d2f8f31a73c844b8201700"/255, @ANYRES16=r5, @ANYBLOB="01002701000300ff7f00000008000300b78ac17a00000000cad703d5757feea02c3cc2c3834c013a7ce6c0345c45806f15c8c6cb6e9ac96dd1aae4b0455434e2cd866a0f721cd57b9d56b3887aed70796e814f946d1eb679b034c1c2af44ef36984393a7e569e74442beb83755aa01aaf4b31e1541d152a68f089ade5dcfe660aaa61fedcd82dc04", @ANYRES32=r9, @ANYBLOB="06003600feff000004005f00"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc0) (async) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x98400, 0x0) ioctl$CDROM_MEDIA_CHANGED(r10, 0x5325, 0x5) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000240)={0x0, 'wg2\x00', {0x2}, 0x1}) 427.059621ms ago: executing program 0 (id=712): setreuid(0xffffffffffffffff, 0xee00) io_uring_setup(0x2f71, &(0x7f0000000040)={0x0, 0xf94a, 0x400, 0x0, 0x1b2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xb4ee, 0x800, 0x2, 0x19d}, &(0x7f00000000c0), &(0x7f0000000180)) 359.857629ms ago: executing program 1 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 359.637031ms ago: executing program 3 (id=714): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x1b, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x4, 0x3}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x28) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r2 = socket(0x18, 0x0, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000400)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r3, &(0x7f00000082c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x0, 0x0) 359.466938ms ago: executing program 0 (id=715): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0xc, 0x7}}, 0x30) 355.011343ms ago: executing program 1 (id=716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lseek(r4, 0x2004, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') creat(&(0x7f00000005c0)='./file0\x00', 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002effff0000000000"], 0x14}}, 0x0) 220.376439ms ago: executing program 0 (id=717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60080, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5883, 0x100, 0x0, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x4c00000000000000}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10041ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x19, 0x1, 0x1, "3a8e07ca5de21f0077ab7a4d8601acc620004b5c000000000000002100", 0x3231564e}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x24, r8, 0x100, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc2}]}, 0x24}}, 0x0) sendmmsg$unix(r4, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22040881}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000}}], 0x2, 0x0) r14 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x61]}}, 0x0, 0x1b}, 0x28) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r14, r15, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000280)="0f01c82e66400ffb250a000000c462e99afe3e3e45d1b9c2000000430f79ae00000000c74424007c000000c7442402d14d0000ff1c24c4834141e10266baf80cb838f57b80ef66bafc0c66b8cd7f66ef360f0f87d4a200001c66b848008ee8", 0x5f}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) 219.909411ms ago: executing program 1 (id=718): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8f\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\xea-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae\x00'/144, 0xfeffffff00000000) pipe2$watch_queue(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffffd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000540)={r0, 0x6, 0x7fffffffffffffff, 0x9}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x44000, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000000a01"]) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r5, @ANYBLOB=',wfdno', @ANYRESHEX=r7]) 150.193994ms ago: executing program 1 (id=719): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000100)={0x3, 0x1, 0x2, 0x8, 0xe3, 0x80}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') syz_fuse_handle_req(r3, &(0x7f0000001500)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r2}, 0x20) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r6) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty}}}, &(0x7f0000000000)=0x9c) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000002c0)="14d43b2add00"/16, 0x10) recvmmsg(r2, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2100, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 256.84µs ago: executing program 0 (id=720): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0x3, 0x5, 0x3}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x80d, 0x2000000, 0xffffffff, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="8367f8b72e1c"}) 0s ago: executing program 1 (id=721): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) ioctl$BLKDISCARD(r0, 0x80041284, &(0x7f0000000080)=0x800) (async, rerun: 32) mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='qnx6\x00', 0x20000a, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): ontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.997110][ T40] audit: type=1400 audit(1753591098.615:65): avc: denied { execute_no_trans } for pid=5885 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.989298][ T40] audit: type=1400 audit(1753591100.615:66): avc: denied { mounton } for pid=5885 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.993182][ T5885] cgroup: Unknown subsys name 'net' [ 48.147151][ T5885] cgroup: Unknown subsys name 'cpuset' [ 48.154089][ T5885] cgroup: Unknown subsys name 'rlimit' [ 48.391040][ T5937] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.284281][ T5885] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.053054][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 53.053064][ T40] audit: type=1400 audit(1753591105.685:80): avc: denied { execmem } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.269558][ T40] audit: type=1400 audit(1753591105.895:81): avc: denied { create } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.275813][ T40] audit: type=1400 audit(1753591105.895:82): avc: denied { read write } for pid=5949 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.283310][ T40] audit: type=1400 audit(1753591105.895:83): avc: denied { open } for pid=5949 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.290631][ T40] audit: type=1400 audit(1753591105.915:84): avc: denied { ioctl } for pid=5949 comm="syz-executor" path="socket:[5504]" dev="sockfs" ino=5504 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.321279][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.324416][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.327218][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.328913][ T5962] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.330762][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.332673][ T5962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.334983][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.337622][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.339207][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.342320][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.344833][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.347950][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.350500][ T5965] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.350585][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.353370][ T40] audit: type=1400 audit(1753591105.975:85): avc: denied { read } for pid=5950 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.356064][ T5965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.356473][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.356764][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.357285][ T40] audit: type=1400 audit(1753591105.985:86): avc: denied { open } for pid=5950 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.358101][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.358846][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.359179][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.392320][ T40] audit: type=1400 audit(1753591105.985:87): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.650190][ T40] audit: type=1400 audit(1753591106.275:88): avc: denied { module_request } for pid=5949 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.713220][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 53.742513][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 53.805574][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 53.894808][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.897894][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.900261][ T5949] bridge_slave_0: entered allmulticast mode [ 53.903128][ T5949] bridge_slave_0: entered promiscuous mode [ 53.939263][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.941549][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.944055][ T5949] bridge_slave_1: entered allmulticast mode [ 53.946962][ T5949] bridge_slave_1: entered promiscuous mode [ 53.963829][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 54.080758][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.088672][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.109783][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.112142][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.116455][ T5950] bridge_slave_0: entered allmulticast mode [ 54.119600][ T5950] bridge_slave_0: entered promiscuous mode [ 54.126702][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.129681][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.133584][ T5950] bridge_slave_1: entered allmulticast mode [ 54.137500][ T5950] bridge_slave_1: entered promiscuous mode [ 54.167532][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.169826][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.172373][ T5951] bridge_slave_0: entered allmulticast mode [ 54.176421][ T5951] bridge_slave_0: entered promiscuous mode [ 54.251711][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.254192][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.256458][ T5951] bridge_slave_1: entered allmulticast mode [ 54.259028][ T5951] bridge_slave_1: entered promiscuous mode [ 54.271448][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.276639][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.283179][ T5949] team0: Port device team_slave_0 added [ 54.333915][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.364121][ T5949] team0: Port device team_slave_1 added [ 54.374607][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.493948][ T5950] team0: Port device team_slave_0 added [ 54.499035][ T5950] team0: Port device team_slave_1 added [ 54.547517][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.550573][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.554076][ T5964] bridge_slave_0: entered allmulticast mode [ 54.557921][ T5964] bridge_slave_0: entered promiscuous mode [ 54.565210][ T5951] team0: Port device team_slave_0 added [ 54.595899][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.598536][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.609329][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.615044][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.618104][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.621088][ T5964] bridge_slave_1: entered allmulticast mode [ 54.625099][ T5964] bridge_slave_1: entered promiscuous mode [ 54.653669][ T5951] team0: Port device team_slave_1 added [ 54.681949][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.685003][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.695566][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.765505][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.768323][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.778902][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.785690][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.788530][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.798766][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.806617][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.845152][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.847939][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.857995][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.863935][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.926964][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.929885][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.940557][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.952289][ T5964] team0: Port device team_slave_0 added [ 54.996456][ T5964] team0: Port device team_slave_1 added [ 55.003582][ T5949] hsr_slave_0: entered promiscuous mode [ 55.006706][ T5949] hsr_slave_1: entered promiscuous mode [ 55.032577][ T5950] hsr_slave_0: entered promiscuous mode [ 55.035318][ T5950] hsr_slave_1: entered promiscuous mode [ 55.037813][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.040894][ T5950] Cannot create hsr debugfs directory [ 55.104608][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.107401][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.116103][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.140224][ T5951] hsr_slave_0: entered promiscuous mode [ 55.142446][ T5951] hsr_slave_1: entered promiscuous mode [ 55.144829][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.147564][ T5951] Cannot create hsr debugfs directory [ 55.169832][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.172663][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.180654][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.359488][ T5964] hsr_slave_0: entered promiscuous mode [ 55.361639][ T5964] hsr_slave_1: entered promiscuous mode [ 55.363862][ T5964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.366227][ T5964] Cannot create hsr debugfs directory [ 55.383878][ T5965] Bluetooth: hci1: command tx timeout [ 55.393173][ T5958] Bluetooth: hci0: command tx timeout [ 55.393350][ T5960] Bluetooth: hci2: command tx timeout [ 55.395693][ T5965] Bluetooth: hci3: command tx timeout [ 55.652919][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.663613][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.668245][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.678990][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.719861][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.728151][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.734228][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.740104][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.823550][ T5950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.832056][ T5950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.839149][ T5950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.846014][ T5950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.910032][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.926747][ T5964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.930770][ T5964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.938968][ T5964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.944587][ T5964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.955425][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.982332][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.984778][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.993147][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.996234][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.019663][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.072601][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.099607][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.111623][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.114721][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.133636][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.136444][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.147583][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.159654][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.162637][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.167778][ T40] audit: type=1400 audit(1753591108.795:89): avc: denied { sys_module } for pid=5951 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.169885][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.177787][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.225855][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.245572][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.259778][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.262858][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.268821][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.271820][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.291134][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.341258][ T5951] veth0_vlan: entered promiscuous mode [ 56.356525][ T5951] veth1_vlan: entered promiscuous mode [ 56.381297][ T5951] veth0_macvtap: entered promiscuous mode [ 56.391493][ T5951] veth1_macvtap: entered promiscuous mode [ 56.400470][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.409860][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.419168][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.423330][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.427015][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.430503][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.434756][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.469156][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.491333][ T5949] veth0_vlan: entered promiscuous mode [ 56.511101][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.524129][ T5949] veth1_vlan: entered promiscuous mode [ 56.524644][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.529106][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.552220][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.557109][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.557241][ T5950] veth0_vlan: entered promiscuous mode [ 56.574598][ T5949] veth0_macvtap: entered promiscuous mode [ 56.578135][ T5950] veth1_vlan: entered promiscuous mode [ 56.585521][ T5964] veth0_vlan: entered promiscuous mode [ 56.595492][ T5949] veth1_macvtap: entered promiscuous mode [ 56.600401][ T5964] veth1_vlan: entered promiscuous mode [ 56.600848][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.610913][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.618302][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.625238][ T5950] veth0_macvtap: entered promiscuous mode [ 56.632289][ T5950] veth1_macvtap: entered promiscuous mode [ 56.637845][ T5949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.640679][ T5949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.644019][ T5949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.646936][ T5949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.666797][ T6038] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 56.712612][ T5964] veth0_macvtap: entered promiscuous mode [ 56.716777][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.725351][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.728466][ T5964] veth1_macvtap: entered promiscuous mode [ 56.735338][ T5950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.738213][ T5950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.741007][ T5950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.744660][ T5950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.764903][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.768119][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.772928][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.783173][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.801296][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.807105][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.809119][ T6040] syz.2.5: attempt to access beyond end of device [ 56.809119][ T6040] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 56.810757][ T5964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.814425][ T6040] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 56.820702][ T5964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.825337][ T5964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.828150][ T5964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.866802][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.869452][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.897300][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.897308][ T6044] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 56.899905][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.920060][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.926770][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.929926][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.954288][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.970358][ T6046] Zero length message leads to an empty skb [ 57.018168][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 57.025809][ T6056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 57.032078][ T6056] geneve2: entered promiscuous mode [ 57.034823][ T6056] geneve2: entered allmulticast mode [ 57.048183][ T6061] gfs2: gfs2 mount does not exist [ 57.099145][ T6051] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.268037][ T6084] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 57.270881][ T6083] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 57.299811][ T6090] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 57.309664][ T6090] CIFS mount error: No usable UNC path provided in device string! [ 57.309664][ T6090] [ 57.314285][ T6090] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.319373][ T6094] CIFS mount error: No usable UNC path provided in device string! [ 57.319373][ T6094] [ 57.323738][ T6094] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.382006][ T6101] 9p: Unknown uid 00000000004294967295 [ 57.428277][ T6107] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.463197][ T5965] Bluetooth: hci3: command tx timeout [ 57.463256][ T5960] Bluetooth: hci0: command tx timeout [ 57.466001][ T5958] Bluetooth: hci2: command tx timeout [ 57.472907][ T5965] Bluetooth: hci1: command tx timeout [ 57.967242][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 57.971148][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 58.025330][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 58.030382][ T6125] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 58.032880][ T6125] netlink: 'syz.2.28': attribute type 2 has an invalid length. [ 58.037411][ T6125] No such timeout policy "syz1" [ 58.071113][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.111753][ T6134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6134 comm=syz.2.30 [ 58.112708][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 58.112804][ T40] audit: type=1400 audit(1753591110.735:177): avc: denied { mount } for pid=6132 comm="syz.2.30" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.128542][ T40] audit: type=1400 audit(1753591110.755:178): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.150485][ T40] audit: type=1400 audit(1753591110.775:179): avc: denied { write } for pid=6137 comm="syz.2.31" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.157802][ T40] audit: type=1400 audit(1753591110.775:180): avc: denied { getopt } for pid=6137 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.166118][ T40] audit: type=1400 audit(1753591110.775:181): avc: denied { read } for pid=6137 comm="syz.2.31" path="socket:[10248]" dev="sockfs" ino=10248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.246134][ T6101] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 58.253125][ T6101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 58.356821][ T40] audit: type=1400 audit(1753591110.985:182): avc: denied { setopt } for pid=6147 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.396523][ T40] audit: type=1400 audit(1753591111.025:183): avc: denied { create } for pid=6151 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.423938][ T40] audit: type=1400 audit(1753591111.055:184): avc: denied { ioctl } for pid=6149 comm="syz.0.35" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9162 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.438099][ T40] audit: type=1400 audit(1753591111.065:185): avc: denied { read } for pid=6157 comm="syz.1.37" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 58.450556][ T40] audit: type=1400 audit(1753591111.065:186): avc: denied { open } for pid=6157 comm="syz.1.37" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 58.682297][ T6172] libceph: resolve ' [ 58.682297][ T6172] -&fYǝa2i [ 58.682297][ T6172] .?&*&' (ret=-3): failed [ 58.832519][ T6183] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 59.047441][ T6201] gfs2: Unknown parameter 'trans' [ 59.203102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.206865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.212507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.331226][ T6236] futex_wake_op: syz.3.62 tries to shift op by -1; fix this program [ 59.355107][ T6237] block device autoloading is deprecated and will be removed. [ 59.404155][ T6226] md2: using deprecated bitmap file support [ 59.405944][ T6226] md2: error: bitmap file must be a regular file [ 59.487750][ T6248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 59.523706][ T5965] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 59.526610][ T5965] CPU: 1 UID: 0 PID: 5965 Comm: kworker/u33:7 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 59.526625][ T5965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.526631][ T5965] Workqueue: hci2 hci_rx_work [ 59.526650][ T5965] Call Trace: [ 59.526654][ T5965] [ 59.526658][ T5965] dump_stack_lvl+0x16c/0x1f0 [ 59.526678][ T5965] sysfs_warn_dup+0x7f/0xa0 [ 59.526696][ T5965] sysfs_create_dir_ns+0x24b/0x2b0 [ 59.526713][ T5965] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 59.526728][ T5965] ? find_held_lock+0x2b/0x80 [ 59.526743][ T5965] ? do_raw_spin_unlock+0x172/0x230 [ 59.526755][ T5965] kobject_add_internal+0x2c4/0x9b0 [ 59.526773][ T5965] kobject_add+0x16e/0x240 [ 59.526784][ T5965] ? __pfx_kobject_add+0x10/0x10 [ 59.526795][ T5965] ? do_raw_spin_unlock+0x172/0x230 [ 59.526806][ T5965] ? kobject_put+0xab/0x5a0 [ 59.526820][ T5965] device_add+0x288/0x1a70 [ 59.526834][ T5965] ? __pfx_dev_set_name+0x10/0x10 [ 59.526848][ T5965] ? __pfx_device_add+0x10/0x10 [ 59.526860][ T5965] ? mgmt_send_event_skb+0x2fb/0x460 [ 59.526879][ T5965] hci_conn_add_sysfs+0x17e/0x230 [ 59.526891][ T5965] le_conn_complete_evt+0x1075/0x1d70 [ 59.526910][ T5965] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 59.526925][ T5965] ? hci_event_packet+0x459/0x11c0 [ 59.526943][ T5965] hci_le_conn_complete_evt+0x23c/0x370 [ 59.526962][ T5965] hci_le_meta_evt+0x357/0x5e0 [ 59.526971][ T5965] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 59.526988][ T5965] hci_event_packet+0x682/0x11c0 [ 59.527003][ T5965] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 59.527014][ T5965] ? __pfx_hci_event_packet+0x10/0x10 [ 59.527030][ T5965] ? kcov_remote_start+0x3c9/0x6d0 [ 59.527041][ T5965] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.527059][ T5965] hci_rx_work+0x2c5/0x16b0 [ 59.527070][ T5965] ? rcu_is_watching+0x12/0xc0 [ 59.527084][ T5965] process_one_work+0x9cc/0x1b70 [ 59.527101][ T5965] ? __pfx_process_one_work+0x10/0x10 [ 59.527115][ T5965] ? assign_work+0x1a0/0x250 [ 59.527126][ T5965] worker_thread+0x6c8/0xf10 [ 59.527140][ T5965] ? __kthread_parkme+0x19e/0x250 [ 59.527155][ T5965] ? __pfx_worker_thread+0x10/0x10 [ 59.527166][ T5965] kthread+0x3c2/0x780 [ 59.527176][ T5965] ? __pfx_kthread+0x10/0x10 [ 59.527186][ T5965] ? rcu_is_watching+0x12/0xc0 [ 59.527198][ T5965] ? __pfx_kthread+0x10/0x10 [ 59.527208][ T5965] ret_from_fork+0x5d4/0x6f0 [ 59.527222][ T5965] ? __pfx_kthread+0x10/0x10 [ 59.527232][ T5965] ret_from_fork_asm+0x1a/0x30 [ 59.527250][ T5965] [ 59.527263][ T5965] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 59.546362][ T5958] Bluetooth: hci1: command tx timeout [ 59.546396][ T5960] Bluetooth: hci3: command tx timeout [ 59.547982][ T5965] Bluetooth: hci2: failed to register connection device [ 59.554111][ T5958] Bluetooth: hci0: command tx timeout [ 59.559568][ T5965] Bluetooth: hci2: command tx timeout [ 59.610029][ T6260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6260 comm=syz.2.66 [ 59.675074][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 59.816799][ T6274] romfs: Unknown parameter 'discard' [ 60.059333][ T6289] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 60.078128][ T6289] 9p: Unknown Cache mode or invalid value fs [ 60.358749][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.80'. [ 60.408722][ T6316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6316 comm=syz.3.80 [ 60.459492][ T6321] tap0: tun_chr_ioctl cmd 1074025675 [ 60.461219][ T6321] tap0: persist enabled [ 60.462687][ T6321] tap0: tun_chr_ioctl cmd 1074025675 [ 60.465372][ T6321] tap0: persist disabled [ 60.467943][ T6321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.82'. [ 60.585078][ T6334] netlink: 'syz.3.87': attribute type 11 has an invalid length. [ 60.755376][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.782899][ T839] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.903652][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 60.908456][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.913094][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.917135][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 60.922330][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 60.926476][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.932856][ T839] usb 7-1: Using ep0 maxpacket: 8 [ 60.936310][ T10] usb 6-1: config 0 descriptor?? [ 60.942186][ T839] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 60.945163][ T839] usb 7-1: config 179 has no interface number 0 [ 60.947307][ T839] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 60.950683][ T839] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 60.954509][ T839] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 60.959060][ T839] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 60.962941][ T839] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 60.967770][ T839] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 60.970829][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.977746][ T6330] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 61.383631][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.386565][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.393995][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 61.396763][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 61.399744][ T839] usb 7-1: USB disconnect, device number 2 [ 61.432970][ T6364] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 61.435488][ T6364] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.556035][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 61.558742][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 61.566861][ T10] usb 6-1: USB disconnect, device number 2 [ 61.624397][ T5965] Bluetooth: hci2: command tx timeout [ 61.624428][ T5958] Bluetooth: hci1: command tx timeout [ 61.633489][ T5958] Bluetooth: hci0: command tx timeout [ 61.633938][ T5965] Bluetooth: hci3: command tx timeout [ 61.642150][ T6368] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 61.646064][ T6368] netlink: 'syz.3.98': attribute type 2 has an invalid length. [ 61.648802][ T6368] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.98'. [ 61.652071][ T6368] nbd: must specify a device to reconfigure [ 61.961977][ T6374] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 61.980763][ T6374] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 61.984738][ T6374] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 62.033602][ T6376] gretap1: entered promiscuous mode [ 62.038496][ T6376] bond1: (slave gretap1): making interface the new active one [ 62.042324][ T6376] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 62.051495][ T6374] macvlan2: entered promiscuous mode [ 62.053815][ T6374] macvlan2: entered allmulticast mode [ 62.055863][ T6374] bond1: entered promiscuous mode [ 62.057826][ T6374] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 62.061475][ T6374] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 62.066606][ T6374] bond1: left promiscuous mode [ 62.107992][ T6376] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 62.126382][ T6380] libceph: resolve ' [ 62.126382][ T6380] -&fYǝa2i [ 62.126382][ T6380] .?&*&' (ret=-3): failed [ 62.592783][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.975899][ T6410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.109'. [ 63.063225][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.110'. [ 63.109730][ T6415] libceph: resolve ' [ 63.109730][ T6415] -&fYǝa2i [ 63.109730][ T6415] .?&*&' (ret=-3): failed [ 63.165476][ T6417] process 'syz.3.112' launched './file0' with NULL argv: empty string added [ 63.171676][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 63.171685][ T40] audit: type=1400 audit(1753591115.795:302): avc: denied { execute } for pid=6416 comm="syz.3.112" name="file0" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.180791][ T40] audit: type=1400 audit(1753591115.795:303): avc: denied { execute_no_trans } for pid=6416 comm="syz.3.112" path="/47/file0" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.248955][ T40] audit: type=1400 audit(1753591115.875:304): avc: denied { create } for pid=6420 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.256462][ T40] audit: type=1400 audit(1753591115.875:305): avc: denied { ioctl } for pid=6420 comm="syz.3.114" path="socket:[11548]" dev="sockfs" ino=11548 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.264333][ T40] audit: type=1400 audit(1753591115.885:306): avc: denied { read } for pid=6420 comm="syz.3.114" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.274699][ T40] audit: type=1400 audit(1753591115.885:307): avc: denied { open } for pid=6420 comm="syz.3.114" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.282835][ T40] audit: type=1400 audit(1753591115.885:308): avc: denied { ioctl } for pid=6420 comm="syz.3.114" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x5731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.413809][ T6424] netlink: 830 bytes leftover after parsing attributes in process `syz.3.115'. [ 63.417963][ T6423] netlink: 152 bytes leftover after parsing attributes in process `syz.3.115'. [ 63.421698][ T6423] : renamed from bond0 (while UP) [ 63.492499][ T40] audit: type=1400 audit(1753591116.115:309): avc: denied { create } for pid=6426 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.595784][ T6432] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.599305][ T6432] IPv6: NLM_F_REPLACE set, but no existing node found! [ 63.710911][ T40] audit: type=1400 audit(1753591116.337:310): avc: denied { read } for pid=6437 comm="syz.0.119" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 63.718570][ T40] audit: type=1400 audit(1753591116.337:311): avc: denied { open } for pid=6437 comm="syz.0.119" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 63.719310][ T6404] Set syz1 is full, maxelem 65536 reached [ 63.754045][ T5965] Bluetooth: hci3: unexpected subevent 0x01 length: 23 > 18 [ 63.785368][ T6447] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 63.852063][ T6455] x_tables: duplicate underflow at hook 3 [ 64.518260][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 64.580768][ T6483] hsr_slave_1 (unregistering): left promiscuous mode [ 64.771120][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 64.774328][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 64.890559][ T6495] ======================================================= [ 64.890559][ T6495] WARNING: The mand mount option has been deprecated and [ 64.890559][ T6495] and is ignored by this kernel. Remove the mand [ 64.890559][ T6495] option from the mount to silence this warning. [ 64.890559][ T6495] ======================================================= [ 65.267768][ T6515] xt_connbytes: Forcing CT accounting to be enabled [ 65.269860][ T6515] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 65.340864][ T6519] libceph: resolve ' [ 65.340864][ T6519] -&fYǝa2i [ 65.340864][ T6519] .?&*&' (ret=-3): failed [ 65.465286][ T6527] fuse: Unknown parameter 'gru_id' [ 65.465991][ T6528] fuse: Unknown parameter 'gru_id' [ 65.566618][ T6535] netlink: 240 bytes leftover after parsing attributes in process `syz.0.143'. [ 65.574924][ T6526] netlink: 'syz.0.143': attribute type 4 has an invalid length. [ 65.892819][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.045755][ T29] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.050003][ T29] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 66.054460][ T29] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 66.058340][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.061853][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.068962][ T6540] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.075600][ T29] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.489053][ T5991] usb 8-1: USB disconnect, device number 2 [ 66.538058][ T6548] syzkaller1: entered promiscuous mode [ 66.540318][ T6548] syzkaller1: entered allmulticast mode [ 66.582883][ T5958] Bluetooth: hci2: command 0x0406 tx timeout [ 66.910717][ T6552] openvswitch: netlink: IPv6 tunnel dst address is zero [ 66.922820][ T839] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.970309][ T6557] libceph: resolve ' [ 66.970309][ T6557] -&fYǝa2i [ 66.970309][ T6557] .?&*&' (ret=-3): failed [ 67.023815][ T6559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=6559 comm=syz.2.155 [ 67.084646][ T839] usb 5-1: Using ep0 maxpacket: 8 [ 67.087886][ T839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.091439][ T839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.094803][ T839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.098094][ T839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.102456][ T839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.105571][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.312570][ T839] usb 5-1: GET_CAPABILITIES returned 0 [ 67.314472][ T839] usbtmc 5-1:16.0: can't read capabilities [ 67.520839][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.525600][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.528762][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.531797][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.534731][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.538280][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.541880][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.545581][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.549088][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.553642][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.557392][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.561162][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.565257][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.569028][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.572750][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.576534][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 67.582920][ T5991] usb 5-1: USB disconnect, device number 2 [ 67.728440][ T6637] netlink: 248 bytes leftover after parsing attributes in process `syz.3.162'. [ 67.732172][ T6638] netlink: 248 bytes leftover after parsing attributes in process `syz.3.162'. [ 67.754562][ T6638] tipc: Enabling of bearer rejected, failed to enable media [ 67.767015][ T6641] tipc: Enabling of bearer rejected, failed to enable media [ 67.787807][ T6638] tipc: Started in network mode [ 67.789453][ T6638] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 67.791756][ T6638] tipc: Enabled bearer , priority 0 [ 67.820457][ T6649] libceph: resolve ' [ 67.820457][ T6649] -&fYǝa2i [ 67.820457][ T6649] .?&*&' (ret=-3): failed [ 68.029838][ T6668] netlink: ct family unspecified [ 68.031501][ T6668] openvswitch: netlink: Actions may not be safe on all matching packets [ 68.199317][ T6676] libceph: resolve ' [ 68.199317][ T6676] -&fYǝa2i [ 68.199317][ T6676] .?&*&' (ret=-3): failed [ 68.267376][ T6680] IPVS: persistence engine module ip_vs_pe_s not found [ 68.312218][ T6689] __nla_validate_parse: 5 callbacks suppressed [ 68.312235][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.177'. [ 68.350047][ T6689] netlink: 156 bytes leftover after parsing attributes in process `syz.0.177'. [ 68.353443][ T6689] netlink: 'syz.0.177': attribute type 5 has an invalid length. [ 68.356659][ T6689] netlink: 'syz.0.177': attribute type 6 has an invalid length. [ 68.359219][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 68.385252][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 68.385267][ T40] audit: type=1400 audit(1753591121.017:342): avc: denied { connect } for pid=6693 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.410712][ T6696] overlayfs: upper fs does not support file handles, falling back to index=off. [ 68.477547][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 68.480444][ T6698] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 68.487642][ T40] audit: type=1400 audit(1753591121.117:343): avc: denied { read } for pid=6697 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.499494][ T6703] usb usb8: usbfs: process 6703 (syz.0.182) did not claim interface 0 before use [ 68.506276][ T6703] IPv6: Can't replace route, no match found [ 68.538833][ T6705] libceph: resolve ' [ 68.538833][ T6705] -&fYǝa2i [ 68.538833][ T6705] .?&*&' (ret=-3): failed [ 68.542764][ T40] audit: type=1400 audit(1753591121.167:344): avc: denied { read } for pid=6697 comm="syz.2.180" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.588475][ T6709] syz.0.184: attempt to access beyond end of device [ 68.588475][ T6709] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 68.594553][ T6709] EXT4-fs (nbd0): unable to read superblock [ 68.676118][ T40] audit: type=1400 audit(1753591121.307:345): avc: denied { append } for pid=6714 comm="syz.0.186" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.712953][ T59] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 68.783300][ T6720] hub 9-0:1.0: USB hub found [ 68.785846][ T6720] hub 9-0:1.0: 1 port detected [ 68.839123][ T40] audit: type=1400 audit(1753591121.467:346): avc: denied { ioctl } for pid=6719 comm="syz.0.187" path="socket:[11981]" dev="sockfs" ino=11981 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.892904][ T59] usb 6-1: Using ep0 maxpacket: 16 [ 68.896464][ T59] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 68.899415][ T59] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 68.903128][ T59] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 68.906513][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 68.910655][ T59] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 68.914149][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.917000][ T59] usb 6-1: Product: syz [ 68.918315][ T59] usb 6-1: Manufacturer: syz [ 68.919821][ T59] usb 6-1: SerialNumber: syz [ 68.923375][ T59] usb 6-1: config 0 descriptor?? [ 68.923762][ T6005] tipc: Node number set to 11578026 [ 68.949298][ T40] audit: type=1400 audit(1753591121.577:347): avc: denied { create } for pid=6724 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.955625][ T40] audit: type=1400 audit(1753591121.577:348): avc: denied { listen } for pid=6724 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 68.961740][ T40] audit: type=1400 audit(1753591121.577:349): avc: denied { write } for pid=6724 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.996357][ T6731] netlink: 9 bytes leftover after parsing attributes in process `syz.0.190'. [ 68.999895][ T6731] gretap0: entered promiscuous mode [ 69.006321][ T6731] netlink: 5 bytes leftover after parsing attributes in process `syz.0.190'. [ 69.010151][ T6731] 0{X: renamed from gretap0 [ 69.014379][ T6731] 0{X: left promiscuous mode [ 69.016508][ T6731] 0{X: entered allmulticast mode [ 69.020445][ T6731] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 69.026893][ T6733] dlm: plock device version mismatch: kernel (1.2.0), user (10.0.0) [ 69.035164][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 69.039382][ T40] audit: type=1400 audit(1753591121.667:350): avc: denied { read } for pid=6728 comm="syz.3.189" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 69.048445][ T40] audit: type=1400 audit(1753591121.667:351): avc: denied { open } for pid=6728 comm="syz.3.189" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 69.133443][ T59] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 69.216256][ T6740] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 69.242530][ T6740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.248934][ T6740] bond1: (slave bond2): making interface the new active one [ 69.252402][ T6740] bond1: (slave bond2): Enslaving as an active interface with an up link [ 69.294574][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 69.298293][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 69.400070][ T6753] loop2: detected capacity change from 0 to 7 [ 69.408232][ T6753] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 69.410622][ T6753] loop2: partition table partially beyond EOD, truncated [ 69.415916][ T6753] loop2: p1 size 872559382 extends beyond EOD, truncated [ 69.422251][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 69.459693][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 69.468768][ T6763] nfs: Bad value for 'source' [ 69.785294][ T5998] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.868380][ T6780] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 69.912807][ T5998] usb 5-1: device descriptor read/64, error -71 [ 70.162846][ T5998] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.303420][ T5998] usb 5-1: device descriptor read/64, error -71 [ 70.413036][ T5998] usb usb5-port1: attempt power cycle [ 70.487167][ T6794] overlayfs: failed to resolve './file1': -2 [ 70.752734][ T5998] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.774110][ T5998] usb 5-1: device descriptor read/8, error -71 [ 71.012726][ T5998] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 71.034254][ T5998] usb 5-1: device descriptor read/8, error -71 [ 71.069240][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.071853][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.142762][ T5958] Bluetooth: hci1: command tx timeout [ 71.146027][ T5998] usb usb5-port1: unable to enumerate USB device [ 71.496498][ T5953] usb 6-1: USB disconnect, device number 3 [ 71.517706][ T6808] libceph: resolve ' [ 71.517706][ T6808] -&fYǝa2i [ 71.517706][ T6808] .?&*&' (ret=-3): failed [ 71.626256][ T6812] evm: overlay not supported [ 71.644062][ T6812] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 71.909158][ T6824] capability: warning: `syz.1.218' uses deprecated v2 capabilities in a way that may be insecure [ 71.962035][ T6838] libceph: resolve ' [ 71.962035][ T6838] -&fYǝa2i [ 71.962035][ T6838] .?&*&' (ret=-3): failed [ 71.998509][ T6840] netlink: 'syz.2.222': attribute type 27 has an invalid length. [ 72.033550][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.037050][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.108836][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.115664][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.165428][ T6840] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.168549][ T6840] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.171480][ T6840] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.178709][ T6840] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.230477][ T6841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.233649][ T6841] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.238052][ T6841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.265941][ T6849] syzkaller1: entered promiscuous mode [ 72.268294][ T6849] syzkaller1: entered allmulticast mode [ 72.655511][ T6871] libceph: resolve ' [ 72.655511][ T6871] -&fYǝa2i [ 72.655511][ T6871] .?&*&' (ret=-3): failed [ 72.696184][ T6874] netlink: 'syz.3.232': attribute type 21 has an invalid length. [ 72.799748][ T5991] hid-generic 0000:0004:0009.0002: unknown main item tag 0x0 [ 72.803002][ T5991] hid-generic 0000:0004:0009.0002: unknown main item tag 0x0 [ 72.806105][ T5991] hid-generic 0000:0004:0009.0002: unknown main item tag 0x0 [ 72.811186][ T6877] fuse: Unknown parameter '0x0000000000000005' [ 72.824559][ T5991] hid-generic 0000:0004:0009.0002: hidraw1: HID v0.04 Device [syz0] on syz1 [ 73.209320][ T6887] capability: warning: `syz.2.233' uses 32-bit capabilities (legacy support in use) [ 73.255497][ T6903] libceph: resolve ' [ 73.255497][ T6903] -&fYǝa2i [ 73.255497][ T6903] .?&*&' (ret=-3): failed [ 73.316917][ T6910] fuse: Bad value for 'rootmode' [ 73.382521][ T6916] netlink: 'syz.1.244': attribute type 10 has an invalid length. [ 73.388438][ T6916] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 73.392743][ T6916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.400976][ T6916] tipc: Trying to set illegal importance in message [ 73.401295][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 73.401304][ T40] audit: type=1400 audit(1753591126.027:378): avc: denied { setopt } for pid=6915 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.446540][ T40] audit: type=1400 audit(1753591126.077:379): avc: denied { create } for pid=6918 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.452896][ T40] audit: type=1400 audit(1753591126.077:380): avc: denied { write } for pid=6918 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.461829][ T40] audit: type=1400 audit(1753591126.087:381): avc: denied { connect } for pid=6918 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.469986][ T6922] __nla_validate_parse: 4 callbacks suppressed [ 73.470001][ T6922] netlink: 72 bytes leftover after parsing attributes in process `syz.0.246'. [ 73.538391][ T6929] netlink: 'syz.1.248': attribute type 25 has an invalid length. [ 73.574437][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 73.659527][ T6938] libceph: resolve ' [ 73.659527][ T6938] -&fYǝa2i [ 73.659527][ T6938] .?&*&' (ret=-3): failed [ 73.698288][ T6941] binder: BINDER_SET_CONTEXT_MGR already set [ 73.700770][ T6941] binder: 6940:6941 ioctl 4018620d 200000000040 returned -16 [ 73.844577][ T40] audit: type=1400 audit(1753591126.477:382): avc: denied { read } for pid=6952 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.935159][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 74.028903][ T40] audit: type=1400 audit(1753591126.657:383): avc: denied { map } for pid=6957 comm="syz.0.259" path="socket:[14443]" dev="sockfs" ino=14443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.038105][ T40] audit: type=1400 audit(1753591126.657:384): avc: denied { bind } for pid=6957 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.139632][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 74.235524][ T6970] libceph: resolve ' [ 74.235524][ T6970] -&fYǝa2i [ 74.235524][ T6970] .?&*&' (ret=-3): failed [ 74.275692][ T6974] netlink: 56 bytes leftover after parsing attributes in process `syz.3.264'. [ 74.335122][ T40] audit: type=1400 audit(1753591126.967:385): avc: denied { mount } for pid=6979 comm="syz.3.266" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.344419][ T40] audit: type=1400 audit(1753591126.977:386): avc: denied { getopt } for pid=6979 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.352764][ T40] audit: type=1400 audit(1753591126.977:387): avc: denied { append } for pid=6979 comm="syz.3.266" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.465131][ T6982] mmap: syz.1.268 (6982) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.470694][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'. [ 74.516688][ T6987] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 74.561292][ T6997] libceph: resolve ' [ 74.561292][ T6997] -&fYǝa2i [ 74.561292][ T6997] .?&*&' (ret=-3): failed [ 74.754654][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 74.764286][ T7005] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.767332][ T7005] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.770067][ T7005] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.772922][ T7005] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.779045][ T7005] vxlan0: entered promiscuous mode [ 75.600309][ T7016] Illegal XDP return value 3476351448 on prog (id 27) dev N/A, expect packet loss! [ 75.670939][ T7022] libceph: resolve ' [ 75.670939][ T7022] -&fYǝa2i [ 75.670939][ T7022] .?&*&' (ret=-3): failed [ 75.784164][ T7027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7027 comm=syz.0.284 [ 75.793887][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 75.828421][ T7027] vlan2: entered allmulticast mode [ 75.830099][ T7027] bond3: entered allmulticast mode [ 75.855289][ T7025] mkiss: ax0: crc mode is auto. [ 76.066555][ T7043] overlay: Bad value for 'workdir' [ 76.112305][ T7045] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 76.114499][ T7045] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.122686][ T7045] vhci_hcd vhci_hcd.0: Device attached [ 76.146231][ T7049] option changes via remount are deprecated (pid=7048 comm=syz.1.288) [ 76.149562][ T7049] tmpfs: Unknown parameter '//K}-%\' [ 76.274299][ T7053] overlayfs: overlapping lowerdir path [ 76.310449][ T7049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.312595][ T7049] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.318574][ T7049] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.323577][ T7049] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.325493][ T7049] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.328906][ T7049] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.332580][ T7049] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.337148][ T7049] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.339712][ T7049] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.344883][ T7049] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.349842][ T7049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.351846][ T7049] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.353810][ T5991] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 76.358232][ T7049] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.362797][ T6005] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.451109][ T7058] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 76.514108][ T6005] usb 5-1: config 0 has no interfaces? [ 76.515895][ T6005] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 76.518667][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.525134][ T6005] usb 5-1: config 0 descriptor?? [ 76.602834][ T59] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.740202][ T7046] vhci_hcd: connection closed [ 76.741839][ T837] usb 5-1: USB disconnect, device number 7 [ 76.749039][ T61] vhci_hcd: stop threads [ 76.751063][ T61] vhci_hcd: release socket [ 76.754018][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 76.757126][ T59] usb 6-1: config 0 has no interfaces? [ 76.761024][ T59] usb 6-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=cc.40 [ 76.761283][ T61] vhci_hcd: disconnect device [ 76.767180][ T7063] binder: 7062:7063 ioctl c0306201 200000000240 returned -11 [ 76.772760][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.775947][ T59] usb 6-1: Product: syz [ 76.777514][ T59] usb 6-1: Manufacturer: syz [ 76.778992][ T59] usb 6-1: SerialNumber: syz [ 76.781740][ T59] usb 6-1: config 0 descriptor?? [ 76.802934][ T5991] vhci_hcd: vhci_device speed not set [ 76.996213][ T34] usb 6-1: USB disconnect, device number 4 [ 77.517419][ T7075] xt_l2tp: v2 tid > 0xffff: 150994944 [ 77.612759][ T7083] Bluetooth: MGMT ver 1.23 [ 77.915299][ T7079] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 77.926769][ T7079] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 77.937707][ T7079] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 77.963046][ T7079] overlayfs: conflicting lowerdir path [ 78.002138][ T7095] netlink: 52 bytes leftover after parsing attributes in process `syz.3.302'. [ 78.194182][ T7109] UHID_CREATE from different security context by process 294 (syz.3.305), this is not allowed. [ 78.264000][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.352876][ T5958] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.355031][ T5958] Bluetooth: hci2: command 0x0406 tx timeout [ 78.420974][ T7122] libceph: resolve ' [ 78.420974][ T7122] -&fYǝa2i [ 78.420974][ T7122] .?&*&' (ret=-3): failed [ 78.432748][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.475575][ T40] kauditd_printk_skb: 53045 callbacks suppressed [ 78.475589][ T40] audit: type=1400 audit(1753591131.107:53433): avc: denied { setopt } for pid=7123 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.529843][ T7126] overlay: ./file0 is not a directory [ 79.198723][ T7136] fuseblk: Bad value for 'group_id' [ 79.200493][ T7136] fuseblk: Bad value for 'group_id' [ 79.361726][ T7151] Cannot find add_set index 3 as target [ 79.468383][ T7158] libceph: resolve ' [ 79.468383][ T7158] -&fYǝa2i [ 79.468383][ T7158] .?&*&' (ret=-3): failed [ 79.512142][ T7160] netlink: 132 bytes leftover after parsing attributes in process `syz.2.319'. [ 79.538102][ T7162] block device autoloading is deprecated and will be removed. [ 80.148755][ T40] audit: type=1400 audit(1753591132.777:53434): avc: denied { getopt } for pid=7168 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.217082][ T7115] usb usb8: usbfs: process 7115 (syz.0.304) did not claim interface 0 before use [ 80.235305][ T7177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7177 comm=syz.3.324 [ 80.240641][ T7177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7177 comm=syz.3.324 [ 80.289585][ T40] audit: type=1400 audit(1753591132.917:53435): avc: denied { read } for pid=7178 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.342809][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.397262][ T7187] libceph: resolve ' [ 80.397262][ T7187] -&fYǝa2i [ 80.397262][ T7187] .?&*&' (ret=-3): failed [ 80.435303][ T5958] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.435330][ T5960] Bluetooth: hci2: command 0x0406 tx timeout [ 80.458934][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 80.465267][ T7194] veth1_to_batadv: entered promiscuous mode [ 80.467877][ T7194] veth1_to_batadv: entered allmulticast mode [ 80.475137][ T40] audit: type=1400 audit(1753591133.097:53436): avc: denied { audit_write } for pid=7193 comm="syz.2.330" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 80.502746][ T5965] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.551766][ T7207] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 80.567192][ T7208] netlink: 'syz.0.335': attribute type 4 has an invalid length. [ 80.593445][ T7210] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.337'. [ 80.602184][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 80.649925][ T7221] libceph: resolve ' [ 80.649925][ T7221] -&fYǝa2i [ 80.649925][ T7221] .?&*&' (ret=-3): failed [ 80.674572][ T7220] sp0: Synchronizing with TNC [ 80.685767][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.343'. [ 80.688155][ T7225] syzkaller0: entered promiscuous mode [ 80.690332][ T7225] syzkaller0: entered allmulticast mode [ 80.700331][ T7231] netlink: 'syz.0.344': attribute type 5 has an invalid length. [ 80.705264][ T7231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.344'. [ 80.738750][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 80.740063][ T40] audit: type=1400 audit(1753591133.367:53437): avc: denied { read write } for pid=7240 comm="syz.2.346" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.748899][ T40] audit: type=1400 audit(1753591133.367:53438): avc: denied { open } for pid=7240 comm="syz.2.346" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.757856][ T40] audit: type=1400 audit(1753591133.367:53439): avc: denied { ioctl } for pid=7240 comm="syz.2.346" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.787754][ T7243] netlink: 'syz.2.347': attribute type 39 has an invalid length. [ 80.862688][ T40] audit: type=1400 audit(1753591133.487:53440): avc: denied { associate } for pid=7249 comm="syz.0.350" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.878971][ T40] audit: type=1804 audit(1753591133.507:53441): pid=7250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.350" name="/newroot/90/file0/file0" dev="9p" ino=35913935 res=1 errno=0 [ 80.886328][ T40] audit: type=1400 audit(1753591133.507:53442): avc: denied { lock } for pid=7249 comm="syz.0.350" path="/90/file0/file0" dev="9p" ino=35913935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.940641][ T7260] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 80.943865][ T7260] SELinux: failed to load policy [ 81.030997][ T7269] netlink: 48 bytes leftover after parsing attributes in process `syz.1.357'. [ 81.043471][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.082571][ T7275] sock: sock_set_timeout: `syz.2.360' (pid 7275) tries to set negative timeout [ 81.111391][ T5965] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 81.147173][ T7281] IPv6: addrconf: prefix option has invalid lifetime [ 81.191584][ T7288] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.356'. [ 81.297545][ T7299] syz.1.367: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 81.302409][ T7299] CPU: 0 UID: 0 PID: 7299 Comm: syz.1.367 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 81.302423][ T7299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.302430][ T7299] Call Trace: [ 81.302434][ T7299] [ 81.302439][ T7299] dump_stack_lvl+0x16c/0x1f0 [ 81.302479][ T7299] warn_alloc+0x248/0x3a0 [ 81.302496][ T7299] ? __pfx_warn_alloc+0x10/0x10 [ 81.302510][ T7299] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.302527][ T7299] ? stack_depot_save_flags+0x3e0/0xa40 [ 81.302550][ T7299] ? kasan_save_stack+0x42/0x60 [ 81.302565][ T7299] ? kasan_save_stack+0x33/0x60 [ 81.302578][ T7299] ? kasan_save_track+0x14/0x30 [ 81.302591][ T7299] ? xskq_create+0x52/0x1d0 [ 81.302604][ T7299] ? xsk_setsockopt+0x640/0x840 [ 81.302616][ T7299] ? do_sock_setsockopt+0xf0/0x1d0 [ 81.302642][ T7299] ? xskq_create+0xfb/0x1d0 [ 81.302659][ T7299] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 81.302678][ T7299] ? xskq_create+0xfb/0x1d0 [ 81.302696][ T7299] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 81.302715][ T7299] ? xskq_create+0xfb/0x1d0 [ 81.302730][ T7299] vmalloc_user_noprof+0x9e/0xe0 [ 81.302742][ T7299] ? xskq_create+0xfb/0x1d0 [ 81.302756][ T7299] xskq_create+0xfb/0x1d0 [ 81.302771][ T7299] xsk_setsockopt+0x640/0x840 [ 81.302785][ T7299] ? __pfx_xsk_setsockopt+0x10/0x10 [ 81.302798][ T7299] ? find_held_lock+0x2b/0x80 [ 81.302813][ T7299] ? selinux_socket_setsockopt+0x6a/0x80 [ 81.302828][ T7299] ? __pfx_xsk_setsockopt+0x10/0x10 [ 81.302841][ T7299] do_sock_setsockopt+0xf0/0x1d0 [ 81.302854][ T7299] __sys_setsockopt+0x1a0/0x230 [ 81.302872][ T7299] __x64_sys_setsockopt+0xbd/0x160 [ 81.302886][ T7299] ? do_syscall_64+0x91/0x4c0 [ 81.302895][ T7299] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.302910][ T7299] do_syscall_64+0xcd/0x4c0 [ 81.302920][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.302930][ T7299] RIP: 0033:0x7f215d38e9a9 [ 81.302939][ T7299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.302948][ T7299] RSP: 002b:00007f215e285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.302958][ T7299] RAX: ffffffffffffffda RBX: 00007f215d5b5fa0 RCX: 00007f215d38e9a9 [ 81.302964][ T7299] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 81.302970][ T7299] RBP: 00007f215d410d69 R08: 0000000000000004 R09: 0000000000000000 [ 81.302975][ T7299] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.302981][ T7299] R13: 0000000000000000 R14: 00007f215d5b5fa0 R15: 00007ffc0c3c3e68 [ 81.302993][ T7299] [ 81.319189][ T7302] block device autoloading is deprecated and will be removed. [ 81.342826][ T7299] Mem-Info: [ 81.344839][ T7301] ref_ctr increment failed for inode: 0x298 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888038749400 [ 81.345422][ T7299] active_anon:13928 inactive_anon:73 isolated_anon:0 [ 81.345422][ T7299] active_file:1384 inactive_file:49071 isolated_file:0 [ 81.345422][ T7299] unevictable:1768 dirty:219 writeback:0 [ 81.345422][ T7299] slab_reclaimable:11134 slab_unreclaimable:73802 [ 81.345422][ T7299] mapped:25154 shmem:2400 pagetables:1308 [ 81.345422][ T7299] sec_pagetables:302 bounce:0 [ 81.345422][ T7299] kernel_misc_reclaimable:0 [ 81.345422][ T7299] free:436188 free_pcp:24843 free_cma:0 [ 81.420807][ T7299] Node 0 active_anon:55644kB inactive_anon:292kB active_file:5536kB inactive_file:196024kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100296kB dirty:856kB writeback:0kB shmem:6064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14576kB pagetables:5048kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB [ 81.435749][ T7299] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:36kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 81.449496][ T7299] Node 0 DMA free:14808kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:60kB free_cma:0kB [ 81.462036][ T7299] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 81.465108][ T7299] Node 0 DMA32 free:166092kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55620kB inactive_anon:280kB active_file:5536kB inactive_file:196024kB unevictable:3536kB writepending:856kB present:2080628kB managed:1264284kB mlocked:0kB bounce:0kB free_pcp:43560kB local_pcp:8592kB free_cma:0kB [ 81.479115][ T7299] lowmem_reserve[]: 0 0 0 0 0 [ 81.481223][ T7299] Node 1 Normal free:1565116kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:3536kB writepending:36kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:54544kB local_pcp:11056kB free_cma:0kB [ 81.494372][ T7299] lowmem_reserve[]: 0 0 0 0 0 [ 81.496426][ T7299] Node 0 DMA: 4*4kB (U) 7*8kB (U) 5*16kB (U) 18*32kB (U) 16*64kB (U) 14*128kB (U) 8*256kB (U) 4*512kB (U) 3*1024kB (U) 2*2048kB (UM) 0*4096kB = 14808kB [ 81.502044][ T7299] Node 0 DMA32: 714*4kB (UME) 100*8kB (UME) 93*16kB (UME) 782*32kB (UME) 248*64kB (UME) 149*128kB (UME) 136*256kB (UM) 52*512kB (UM) 37*1024kB (UM) 1*2048kB (M) 0*4096kB = 166488kB [ 81.507920][ T7299] Node 1 Normal: 24*4kB (UME) 14*8kB (UME) 11*16kB (UME) 22*32kB (UME) 20*64kB (UME) 21*128kB (UME) 10*256kB (UM) 4*512kB (UME) 5*1024kB (UE) 1*2048kB (U) 378*4096kB (UM) = 1565120kB [ 81.513602][ T7299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.516545][ T7299] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.519402][ T7299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.520439][ T7306] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.369'. [ 81.522335][ T7299] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.528210][ T7299] 52858 total pagecache pages [ 81.529694][ T7299] 0 pages in swap cache [ 81.530417][ T7306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=69 sclass=netlink_route_socket pid=7306 comm=syz.2.369 [ 81.530993][ T7299] Free swap = 124996kB [ 81.530999][ T7299] Total swap = 124996kB [ 81.531005][ T7299] 1048443 pages RAM [ 81.531008][ T7299] 0 pages HighMem/MovableOnly [ 81.531012][ T7299] 283043 pages reserved [ 81.531016][ T7299] 0 pages cma reserved [ 81.590367][ T7310] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 81.595076][ T7310] netlink: 'syz.1.371': attribute type 1 has an invalid length. [ 81.616757][ T7310] 8021q: adding VLAN 0 to HW filter on device bond66 [ 81.627742][ T7310] bond66: (slave geneve2): making interface the new active one [ 81.630914][ T7310] bond66: (slave geneve2): Enslaving as an active interface with an up link [ 82.000874][ T7327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7327 comm=syz.3.377 [ 82.216912][ T7343] 9pnet: Unknown protocol version 9p20\++} [ 82.403396][ T5953] e1000 0000:00:06.0 eth0: Reset adapter [ 82.433349][ T5965] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.502854][ T5965] Bluetooth: hci2: command 0x0406 tx timeout [ 82.512918][ T5965] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.520141][ T7366] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 82.524075][ T7366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.541197][ T7373] Bluetooth: MGMT ver 1.23 [ 82.582761][ T5965] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.583076][ T5953] e1000 0000:00:06.0 eth0: Reset adapter [ 84.582935][ T5965] Bluetooth: hci2: command 0x0406 tx timeout [ 84.744494][ T5953] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 84.997916][ T7384] libceph: resolve ' [ 84.997916][ T7384] -&fYǝa2i [ 84.997916][ T7384] .?&*&' (ret=-3): failed [ 85.008184][ T7388] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 85.027315][ T7388] tipc: Resetting bearer [ 85.027938][ T7389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7389 comm=syz.2.392 [ 85.035242][ T7390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7390 comm=syz.2.392 [ 85.037125][ T7388] batman_adv: batadv0: Adding interface: team0 [ 85.042977][ T7388] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.053521][ T7388] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 85.084291][ T7388] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 85.087761][ T7388] __nla_validate_parse: 3 callbacks suppressed [ 85.087772][ T7388] netlink: 2 bytes leftover after parsing attributes in process `syz.3.393'. [ 85.094251][ T7388] team0: entered promiscuous mode [ 85.096450][ T7388] team_slave_0: entered promiscuous mode [ 85.099550][ T7388] team_slave_1: entered promiscuous mode [ 85.104148][ T7388] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.107135][ T7388] batman_adv: batadv0: Interface activated: team0 [ 85.109898][ T7388] batman_adv: batadv0: Interface deactivated: team0 [ 85.114436][ T7388] batman_adv: batadv0: Removing interface: team0 [ 85.118352][ T7388] bridge0: port 3(team0) entered blocking state [ 85.121124][ T7388] bridge0: port 3(team0) entered disabled state [ 85.124283][ T7388] team0: entered allmulticast mode [ 85.125914][ T7388] team_slave_0: entered allmulticast mode [ 85.127837][ T7388] team_slave_1: entered allmulticast mode [ 85.131248][ T7388] bridge0: port 3(team0) entered blocking state [ 85.133290][ T7388] bridge0: port 3(team0) entered forwarding state [ 85.156523][ T7410] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 85.182251][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 85.182266][ T40] audit: type=1400 audit(1753591137.807:53461): avc: denied { connect } for pid=7411 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 85.326557][ T7421] libceph: resolve ' [ 85.326557][ T7421] -&fYǝa2i [ 85.326557][ T7421] .?&*&' (ret=-3): failed [ 85.448859][ T40] audit: type=1400 audit(1753591138.077:53462): avc: denied { bind } for pid=7427 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.553529][ T40] audit: type=1400 audit(1753591138.177:53463): avc: denied { module_request } for pid=7437 comm="syz.3.408" kmod="crypto-ecb(aes-aesni)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.682963][ T5991] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 85.699227][ T40] audit: type=1400 audit(1753591138.327:53464): avc: denied { accept } for pid=7452 comm="syz.3.410" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.711097][ T40] audit: type=1400 audit(1753591138.337:53465): avc: denied { ioctl } for pid=7452 comm="syz.3.410" path="socket:[16899]" dev="sockfs" ino=16899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 85.812878][ T5991] usb 7-1: device descriptor read/64, error -71 [ 85.860867][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 85.912130][ T7465] Device name not specified. [ 85.912130][ T7465] [ 86.044979][ T7486] loop2: detected capacity change from 0 to 7 [ 86.049829][ T7082] Dev loop2: unable to read RDB block 7 [ 86.052182][ T7082] loop2: unable to read partition table [ 86.058270][ T7082] loop2: partition table beyond EOD, truncated [ 86.065051][ T7486] Dev loop2: unable to read RDB block 7 [ 86.068282][ T7486] loop2: unable to read partition table [ 86.071350][ T7486] loop2: partition table beyond EOD, truncated [ 86.074432][ T7486] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 86.082707][ T5991] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 86.121372][ T40] audit: type=1400 audit(1753591138.747:53466): avc: denied { write } for pid=7491 comm="syz.3.423" path="socket:[14114]" dev="sockfs" ino=14114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.130926][ T40] audit: type=1400 audit(1753591138.757:53467): avc: denied { setopt } for pid=7491 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.222783][ T5991] usb 7-1: device descriptor read/64, error -71 [ 86.333092][ T5991] usb usb7-port1: attempt power cycle [ 86.349766][ T7508] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 86.353609][ T40] audit: type=1400 audit(1753591138.977:53468): avc: denied { ioctl } for pid=7503 comm="syz.1.426" path="socket:[16231]" dev="sockfs" ino=16231 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 86.365497][ T7508] overlay: filesystem on ./bus is read-only [ 86.368312][ T40] audit: type=1400 audit(1753591138.997:53469): avc: denied { mounton } for pid=7503 comm="syz.1.426" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 86.440552][ T53] cfg80211: failed to load regulatory.db [ 86.527947][ T40] audit: type=1400 audit(1753591139.157:53470): avc: denied { append } for pid=7521 comm="syz.0.431" name="video9" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 86.702911][ T5991] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 86.733311][ T5991] usb 7-1: device descriptor read/8, error -71 [ 86.857056][ T7540] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 86.859129][ T7540] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.862986][ T7540] vhci_hcd vhci_hcd.0: Device attached [ 86.867854][ T7535] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 86.869864][ T7535] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.872243][ T7535] vhci_hcd vhci_hcd.0: Device attached [ 86.888612][ T7535] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 86.891372][ T7535] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.899812][ T7535] vhci_hcd vhci_hcd.0: Device attached [ 86.903100][ T7544] vhci_hcd: connection closed [ 86.903379][ T1143] vhci_hcd: stop threads [ 86.903471][ T7541] vhci_hcd: connection closed [ 86.904323][ T7546] vhci_hcd: connection closed [ 86.904970][ T1143] vhci_hcd: release socket [ 86.911098][ T1143] vhci_hcd: disconnect device [ 86.921084][ T1143] vhci_hcd: stop threads [ 86.924789][ T1143] vhci_hcd: release socket [ 86.926711][ T1143] vhci_hcd: disconnect device [ 86.929337][ T1143] vhci_hcd: stop threads [ 86.931159][ T1143] vhci_hcd: release socket [ 86.942717][ T1143] vhci_hcd: disconnect device [ 86.972732][ T5991] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 86.987300][ T7549] netlink: 372 bytes leftover after parsing attributes in process `syz.3.437'. [ 87.003133][ T5991] usb 7-1: device descriptor read/8, error -71 [ 87.051212][ T7553] (syz.3.439,7553,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 87.056185][ T7553] (syz.3.439,7553,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 87.097276][ T7555] libceph: resolve ' [ 87.097276][ T7555] -&fYǝa2i [ 87.097276][ T7555] .?&*&' (ret=-3): failed [ 87.113163][ T5991] usb usb7-port1: unable to enumerate USB device [ 87.114529][ T7553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.439'. [ 87.562560][ T7564] netlink: 'syz.0.444': attribute type 21 has an invalid length. [ 87.567649][ T7564] netlink: 156 bytes leftover after parsing attributes in process `syz.0.444'. [ 87.630145][ T7578] cgroup: noprefix used incorrectly [ 87.796541][ T7584] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 87.833269][ T7586] libceph: resolve ' [ 87.833269][ T7586] -&fYǝa2i [ 87.833269][ T7586] .?&*&' (ret=-3): failed [ 87.927983][ T7591] ipt_REJECT: ECHOREPLY no longer supported. [ 88.309732][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 88.380185][ T7611] libceph: resolve ' [ 88.380185][ T7611] -&fYǝa2i [ 88.380185][ T7611] .?&*&' (ret=-3): failed [ 88.401502][ T7603] hsr_slave_1 (unregistering): left promiscuous mode [ 88.422943][ T5965] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.606032][ T7623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=7623 comm=syz.1.463 [ 88.676529][ T7625] netlink: 228 bytes leftover after parsing attributes in process `syz.0.464'. [ 88.679450][ T7625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.681851][ T7625] IPv6: NLM_F_CREATE should be set when creating new route [ 88.862791][ T5953] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 89.022786][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 89.026088][ T5953] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.028509][ T5953] usb 6-1: config 0 has no interface number 0 [ 89.030328][ T5953] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.033533][ T5953] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.036114][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.039857][ T5953] usb 6-1: config 0 descriptor?? [ 89.046345][ T5953] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 89.253694][ T5953] usb 6-1: USB disconnect, device number 5 [ 89.302789][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.567804][ T7631] libceph: resolve ' [ 89.567804][ T7631] -&fYǝa2i [ 89.567804][ T7631] .?&*&' (ret=-3): failed [ 89.606696][ T7633] No buffer was provided with the request [ 89.700246][ T7638] netlink: 'syz.0.470': attribute type 3 has an invalid length. [ 89.703232][ T7638] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 89.706114][ T7638] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.470'. [ 89.793241][ T7642] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 90.207575][ T7648] random: crng reseeded on system resumption [ 90.212750][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 90.212763][ T40] audit: type=1400 audit(1753591142.837:53481): avc: denied { append } for pid=7647 comm="syz.3.473" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.232594][ T7648] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 90.512870][ T5960] Bluetooth: hci4: command 0x1003 tx timeout [ 90.515705][ T5965] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 90.559445][ T7656] overlay: Bad value for 'workdir' [ 90.602718][ T40] audit: type=1400 audit(1753591143.227:53482): avc: denied { read } for pid=7660 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.630935][ T5953] Process accounting resumed [ 90.657577][ T7669] libceph: resolve ' [ 90.657577][ T7669] -&fYǝa2i [ 90.657577][ T7669] .?&*&' (ret=-3): failed [ 90.706302][ T7667] netlink: 72 bytes leftover after parsing attributes in process `syz.1.480'. [ 90.712576][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 90.724070][ T7667] SELinux: failed to load policy [ 90.768873][ T40] audit: type=1400 audit(1753591143.397:53483): avc: denied { create } for pid=7676 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 90.774656][ T7679] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 90.779868][ T7679] VFS: Can't find a romfs filesystem on dev nullb0. [ 90.779868][ T7679] [ 90.813249][ T40] audit: type=1400 audit(1753591143.447:53484): avc: denied { open } for pid=7681 comm="syz.3.487" path="/dev/ttyqa" dev="devtmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 90.814068][ T7684] netlink: 52 bytes leftover after parsing attributes in process `syz.1.486'. [ 90.845655][ T7686] tap0: tun_chr_ioctl cmd 1074025675 [ 90.847751][ T7686] tap0: persist enabled [ 90.849683][ T7686] tap0: tun_chr_ioctl cmd 1074025675 [ 90.851732][ T7686] tap0: persist disabled [ 90.931911][ T40] audit: type=1400 audit(1753591143.557:53485): avc: denied { append } for pid=7693 comm="syz.3.491" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.997260][ T7701] vivid-001: disconnect [ 91.067159][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 91.102860][ T6036] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 91.110035][ T7715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.498'. [ 91.115331][ T7715] netlink: 36 bytes leftover after parsing attributes in process `syz.3.498'. [ 91.143010][ T40] audit: type=1400 audit(1753591143.767:53486): avc: denied { mount } for pid=7721 comm="syz.2.500" name="/" dev="autofs" ino=19523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 91.182086][ T40] audit: type=1400 audit(1753591143.807:53487): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 91.236107][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 91.265444][ T6036] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.268887][ T6036] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 91.272515][ T6036] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 91.277605][ T6036] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.281096][ T6036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.287321][ T7686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.291792][ T6036] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.370072][ T7744] netlink: 'syz.1.508': attribute type 1 has an invalid length. [ 91.386803][ T7744] 8021q: adding VLAN 0 to HW filter on device bond67 [ 91.399011][ T7744] bond67: (slave gretap1): making interface the new active one [ 91.403207][ T7744] bond67: (slave gretap1): Enslaving as an active interface with an up link [ 91.485713][ T40] audit: type=1400 audit(1753591144.117:53488): avc: denied { execute } for pid=7746 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 91.494095][ T40] audit: type=1400 audit(1753591144.117:53489): avc: denied { execute_no_trans } for pid=7746 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 91.509184][ T7748] libceph: resolve ' [ 91.509184][ T7748] -&fYǝa2i [ 91.509184][ T7748] .?&*&' (ret=-3): failed [ 91.521891][ T40] audit: type=1400 audit(1753591144.147:53490): avc: denied { execmem } for pid=7746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 91.549909][ T839] usb 5-1: USB disconnect, device number 8 [ 91.574667][ T7751] netlink: 'syz.1.512': attribute type 15 has an invalid length. [ 91.577849][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 91.622958][ T5998] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 91.641175][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.644314][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.647362][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.651290][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.654243][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.738052][ T5960] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 91.740564][ T5960] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 91.767668][ T7754] chnl_net:caif_netlink_parms(): no params data found [ 91.792983][ T5998] usb 8-1: Invalid ep0 maxpacket: 64 [ 91.900153][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.902819][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.905431][ T7754] bridge_slave_0: entered allmulticast mode [ 91.908175][ T7754] bridge_slave_0: entered promiscuous mode [ 91.910791][ T223] bridge_slave_1: left allmulticast mode [ 91.913429][ T223] bridge_slave_1: left promiscuous mode [ 91.915384][ T223] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.919666][ T223] bridge_slave_0: left allmulticast mode [ 91.921443][ T223] bridge_slave_0: left promiscuous mode [ 91.923311][ T5998] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 91.924750][ T223] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.955765][ T7772] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 91.998183][ T7778] libceph: resolve ' [ 91.998183][ T7778] -&fYǝa2i [ 91.998183][ T7778] .?&*&' (ret=-3): failed [ 92.072790][ T5998] usb 8-1: Invalid ep0 maxpacket: 64 [ 92.075544][ T5998] usb usb8-port1: attempt power cycle [ 92.089135][ T7781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7781 comm=syz.1.520 [ 92.174408][ T223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.179709][ T223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.184190][ T223] bond0 (unregistering): Released all slaves [ 92.197868][ T223] bond1 (unregistering): Released all slaves [ 92.215464][ T223] bond2 (unregistering): Released all slaves [ 92.222190][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.224692][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.227006][ T7754] bridge_slave_1: entered allmulticast mode [ 92.229598][ T7754] bridge_slave_1: entered promiscuous mode [ 92.267471][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.272350][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.305444][ T7787] tmpfs: Unknown parameter 'dis`ard;tx寔J Ց' [ 92.334737][ T7784] netlink: 'syz.0.521': attribute type 7 has an invalid length. [ 92.341624][ T7754] team0: Port device team_slave_0 added [ 92.345778][ T7754] team0: Port device team_slave_1 added [ 92.385820][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.385850][ T7790] tmpfs: Unknown parameter 'usrquota@' [ 92.388691][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.405032][ T7754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.418540][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.421653][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.422873][ T5998] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 92.434657][ T7754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.451981][ T7791] program syz.1.523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.455636][ T5998] usb 8-1: Invalid ep0 maxpacket: 64 [ 92.537903][ T7795] mkiss: ax0: crc mode is auto. [ 92.583336][ T7754] hsr_slave_0: entered promiscuous mode [ 92.583992][ T5998] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 92.586853][ T7754] hsr_slave_1: entered promiscuous mode [ 92.593128][ T7754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.596054][ T7754] Cannot create hsr debugfs directory [ 92.613547][ T5998] usb 8-1: Invalid ep0 maxpacket: 64 [ 92.616206][ T5998] usb usb8-port1: unable to enumerate USB device [ 92.681416][ T223] hsr_slave_0: left promiscuous mode [ 92.684525][ T223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.688692][ T223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.195359][ T223] team0 (unregistering): Port device team_slave_1 removed [ 93.268054][ T223] team0 (unregistering): Port device team_slave_0 removed [ 93.702855][ T5960] Bluetooth: hci2: command tx timeout [ 93.792968][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.864826][ T7808] libceph: resolve ' [ 93.864826][ T7808] -&fYǝa2i [ 93.864826][ T7808] .?&*&' (ret=-3): failed [ 93.911682][ T7754] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.918447][ T7810] libceph: resolve ' [ 93.918447][ T7810] -&fYǝa2i [ 93.918447][ T7810] .?&*&' (ret=-3): failed [ 93.923222][ T7754] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.937492][ T7754] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.942464][ T7754] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.992351][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.008283][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.013722][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.015788][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.021160][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.023549][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.026816][ T7823] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 94.136652][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.286760][ T7754] veth0_vlan: entered promiscuous mode [ 94.291446][ T7754] veth1_vlan: entered promiscuous mode [ 94.306740][ T7754] veth0_macvtap: entered promiscuous mode [ 94.310379][ T7754] veth1_macvtap: entered promiscuous mode [ 94.324441][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.341591][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.346831][ T7754] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.349801][ T7754] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.353416][ T7754] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.356726][ T7754] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.387398][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'. [ 94.409523][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.412020][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.428022][ T7856] libceph: resolve ' [ 94.428022][ T7856] -&fYǝa2i [ 94.428022][ T7856] .?&*&' (ret=-3): failed [ 94.441153][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.445120][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.552145][ T7874] tap0: tun_chr_ioctl cmd 1074025675 [ 94.554450][ T7874] tap0: persist enabled [ 94.556083][ T7874] tap0: tun_chr_ioctl cmd 1074025675 [ 94.557813][ T7874] tap0: persist enabled [ 94.559328][ T7874] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.569194][ T7874] netlink: 'syz.4.542': attribute type 32 has an invalid length. [ 94.634785][ T7888] libceph: resolve ' [ 94.634785][ T7888] -&fYǝa2i [ 94.634785][ T7888] .?&*&' (ret=-3): failed [ 94.704904][ T7894] hpfs: Unknown parameter 'quota' [ 94.903412][ T7902] dns_resolver: Unsupported content type (234) [ 94.914028][ T7912] 9p: Unknown access argument 18446744073709551615: -34 [ 94.942769][ T5998] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 95.094119][ T5998] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.097934][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.101463][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 95.105339][ T5998] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.109489][ T5998] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.112461][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.117700][ T5998] usb 5-1: config 0 descriptor?? [ 95.539084][ T5998] usbhid 5-1:0.0: can't add hid device: -71 [ 95.544358][ T5998] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 95.549886][ T7945] libceph: resolve ' [ 95.549886][ T7945] -&fYǝa2i [ 95.549886][ T7945] .?&*&' (ret=-3): failed [ 95.553917][ T5998] usb 5-1: USB disconnect, device number 9 [ 95.795689][ T5960] Bluetooth: hci2: command tx timeout [ 95.807852][ T7962] overlayfs: conflicting options: userxattr,redirect_dir=on [ 95.831327][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 95.831342][ T40] audit: type=1400 audit(1753591148.457:53509): avc: denied { create } for pid=7964 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.846592][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.859235][ T40] audit: type=1400 audit(1753591148.487:53510): avc: denied { bind } for pid=7964 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.978080][ T7974] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 96.025248][ T7980] libceph: resolve ' [ 96.025248][ T7980] -&fYǝa2i [ 96.025248][ T7980] .?&*&' (ret=-3): failed [ 96.327780][ T40] audit: type=1400 audit(1753591148.957:53511): avc: denied { ioctl } for pid=7986 comm="syz.1.576" path="socket:[20129]" dev="sockfs" ino=20129 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.374178][ T40] audit: type=1400 audit(1753591149.007:53512): avc: denied { watch watch_reads } for pid=7991 comm="syz.1.577" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 96.383139][ T7992] netlink: 496 bytes leftover after parsing attributes in process `syz.1.577'. [ 96.385410][ T7995] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 96.400945][ T7995] netlink: 168 bytes leftover after parsing attributes in process `syz.3.578'. [ 96.404346][ T7995] netlink: 168 bytes leftover after parsing attributes in process `syz.3.578'. [ 96.429398][ T7997] netlink: 187192 bytes leftover after parsing attributes in process `syz.1.579'. [ 96.447710][ T7999] SELinux: policydb string length 1818846728 does not match expected length 8 [ 96.447760][ T7997] netlink: 'syz.1.579': attribute type 8 has an invalid length. [ 96.451052][ T7999] SELinux: failed to load policy [ 96.457768][ T40] audit: type=1400 audit(1753591149.087:53513): avc: denied { read } for pid=7998 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.023494][ T8013] libceph: resolve ' [ 97.023494][ T8013] -&fYǝa2i [ 97.023494][ T8013] .?&*&' (ret=-3): failed [ 97.117884][ T8017] netlink: 'syz.0.584': attribute type 4 has an invalid length. [ 97.370484][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 97.375204][ T8022] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.585'. [ 97.639795][ T8033] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 97.729971][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 97.734256][ T40] audit: type=1400 audit(1753591150.367:53514): avc: denied { read write } for pid=8034 comm="syz.3.590" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.747002][ T40] audit: type=1400 audit(1753591150.367:53515): avc: denied { open } for pid=8034 comm="syz.3.590" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.874571][ T5960] Bluetooth: hci2: command tx timeout [ 98.052904][ T8062] libceph: resolve ' [ 98.052904][ T8062] -&fYǝa2i [ 98.052904][ T8062] .?&*&' (ret=-3): failed [ 98.068313][ T5960] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 98.118774][ T8073] CIFS: Unable to determine destination address [ 98.129138][ T40] audit: type=1400 audit(1753591150.757:53516): avc: denied { firmware_load } for pid=8072 comm="syz.0.603" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 98.159335][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.601'. [ 98.159866][ T8073] syz.0.603 (8073) used greatest stack depth: 19784 bytes left [ 98.196492][ T8083] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 98.239192][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 98.242483][ T8090] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 98.245430][ T8090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.306187][ T8088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.312492][ T8088] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.315039][ T8088] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.317087][ T8088] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.319078][ T8088] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.322120][ T8088] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.378500][ T40] audit: type=1400 audit(1753591151.007:53517): avc: denied { accept } for pid=8087 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.727334][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 98.742976][ T8113] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 98.778878][ T8115] libceph: resolve ' [ 98.778878][ T8115] -&fYǝa2i [ 98.778878][ T8115] .?&*&' (ret=-3): failed [ 98.790402][ T8115] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 98.895872][ T8125] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 99.007534][ T40] audit: type=1400 audit(1753591151.637:53518): avc: denied { accept } for pid=8132 comm="syz.4.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.062472][ T8143] libceph: resolve ' [ 99.062472][ T8143] -&fYǝa2i [ 99.062472][ T8143] .?&*&' (ret=-3): failed [ 99.137390][ T8145] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(72) [ 99.138712][ T8153] bond0: option mode: unable to set because the bond device has slaves [ 99.139538][ T8145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.147156][ T8153] netlink: 'syz.4.625': attribute type 39 has an invalid length. [ 99.150398][ T8145] vhci_hcd vhci_hcd.0: Device attached [ 99.152552][ T8151] usbip_core: unknown command [ 99.154190][ T8151] vhci_hcd: unknown pdu 0 [ 99.155899][ T8151] usbip_core: unknown command [ 99.158292][ T13] vhci_hcd: stop threads [ 99.160073][ T13] vhci_hcd: release socket [ 99.161791][ T13] vhci_hcd: disconnect device [ 99.379016][ T5960] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 99.690209][ T8166] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 99.693004][ T8166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.698028][ T8166] vhci_hcd vhci_hcd.0: Device attached [ 99.700994][ T8166] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 99.932731][ T59] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 100.263550][ T8166] mkiss: ax0: crc mode is auto. [ 100.343698][ T5960] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.343746][ T5965] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.344943][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.405608][ T8181] libceph: resolve ' [ 100.405608][ T8181] -&fYǝa2i [ 100.405608][ T8181] .?&*&' (ret=-3): failed [ 100.808435][ T8192] MINIX-fs: blocksize too small for device [ 100.859505][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 100.859526][ T40] audit: type=1400 audit(1753591153.487:53522): avc: denied { mounton } for pid=8196 comm="syz.0.638" path="/syzcgroup/unified/syz0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 100.861235][ T8198] syz.0.638: attempt to access beyond end of device [ 100.861235][ T8198] loop0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 100.878751][ T8198] qnx4: unable to read the superblock [ 100.899078][ T40] audit: type=1400 audit(1753591153.527:53523): avc: denied { ioctl } for pid=8193 comm="syz.1.637" path="mnt:[4026532878]" dev="nsfs" ino=4026532878 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 100.910123][ T8201] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 101.118148][ T8215] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 101.121173][ T8215] overlayfs: missing 'lowerdir' [ 101.210895][ T8225] xt_l2tp: missing protocol rule (udp|l2tpip) [ 101.250195][ T8228] 9pnet_virtio: no channels available for device syz [ 101.251562][ T40] audit: type=1400 audit(1753591153.877:53524): avc: denied { mounton } for pid=8226 comm="syz.1.649" path="/155/file0" dev="9p" ino=35913912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.331936][ T8239] libceph: resolve ' [ 101.331936][ T8239] -&fYǝa2i [ 101.331936][ T8239] .?&*&' (ret=-3): failed [ 101.368306][ T8243] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 101.397698][ T8246] random: crng reseeded on system resumption [ 101.400133][ T40] audit: type=1400 audit(1753591154.027:53525): avc: denied { write } for pid=8245 comm="syz.0.655" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.412058][ T8246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8246 comm=syz.0.655 [ 101.640814][ T8265] libceph: resolve ' [ 101.640814][ T8265] -&fYǝa2i [ 101.640814][ T8265] .?&*&' (ret=-3): failed [ 102.009258][ T8298] libceph: resolve ' [ 102.009258][ T8298] -&fYǝa2i [ 102.009258][ T8298] .?&*&' (ret=-3): failed [ 102.106598][ T40] audit: type=1400 audit(1753591154.737:53526): avc: denied { create } for pid=8314 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 102.118813][ T40] audit: type=1400 audit(1753591154.737:53527): avc: denied { ioctl } for pid=8314 comm="syz.4.675" path="socket:[21751]" dev="sockfs" ino=21751 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 102.164311][ T8322] tmpfs: Bad value for 'mpol' [ 102.196153][ T40] audit: type=1400 audit(1753591154.827:53528): avc: denied { append } for pid=8323 comm="syz.4.683" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 102.210247][ T40] audit: type=1404 audit(1753591154.837:53529): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 102.219962][ T40] audit: type=1400 audit(1753591154.837:53530): avc: denied { mounton } for pid=8324 comm="syz.3.682" path="/211/file0" dev="tmpfs" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 102.232058][ T40] audit: type=1400 audit(1753591154.857:53531): avc: denied { recv } for pid=8324 comm="syz.3.682" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50674 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 102.232579][ T8326] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 102.246119][ T8326] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 102.285205][ T8336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.321281][ T8342] libceph: resolve ' [ 102.321281][ T8342] -&fYǝa2i [ 102.321281][ T8342] .?&*&' (ret=-3): failed [ 102.334862][ T8340] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 102.453337][ T8347] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 102.484474][ T53] Process accounting resumed [ 102.537587][ T8357] __nla_validate_parse: 7 callbacks suppressed [ 102.537599][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.693'. [ 102.544277][ T8359] input: syz0 as /devices/virtual/input/input10 [ 102.587978][ T8357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8357 comm=syz.3.693 [ 102.655450][ T8359] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.848627][ T8371] libceph: resolve ' [ 102.848627][ T8371] -&fYǝa2i [ 102.848627][ T8371] .?&*&' (ret=-3): failed [ 102.854694][ T839] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 102.881785][ T8375] tipc: Enabled bearer , priority 0 [ 102.907282][ T8381] tipc: Resetting bearer [ 103.023415][ T839] usb 9-1: too many configurations: 151, using maximum allowed: 8 [ 103.039974][ T839] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 103.045813][ T839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 103.049199][ T839] usb 9-1: Product: syz [ 103.050991][ T839] usb 9-1: Manufacturer: syz [ 103.055092][ T839] usb 9-1: SerialNumber: syz [ 103.059296][ T839] usb 9-1: config 0 descriptor?? [ 103.164824][ T8392] QAT: Invalid ioctl -2144835806 [ 103.277577][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.694'. [ 103.945464][ T8381] tipc: Disabling bearer [ 103.950653][ T8389] bridge0: port 3(gretap0) entered blocking state [ 103.953569][ T8389] bridge0: port 3(gretap0) entered disabled state [ 103.956220][ T8389] gretap0: entered allmulticast mode [ 103.959597][ T8389] gretap0: entered promiscuous mode [ 103.962116][ T8389] bridge0: port 3(gretap0) entered blocking state [ 103.964892][ T8389] bridge0: port 3(gretap0) entered forwarding state [ 103.993232][ T53] usb 9-1: USB disconnect, device number 2 [ 104.022474][ T8402] tap0: tun_chr_ioctl cmd 1074025675 [ 104.029172][ T8402] tap0: persist enabled [ 104.031261][ T8402] tap0: tun_chr_ioctl cmd 1074025675 [ 104.035919][ T8402] tap0: persist enabled [ 104.044899][ T8408] libceph: resolve ' [ 104.044899][ T8408] -&fYǝa2i [ 104.044899][ T8408] .?&*&' (ret=-3): failed [ 104.045696][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.706'. [ 104.085182][ T8412] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 104.087732][ T8412] netlink: 'syz.3.710': attribute type 4 has an invalid length. [ 104.090149][ T8412] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.710'. [ 104.313180][ T8433] libceph: resolve ' [ 104.313180][ T8433] -&fYǝa2i [ 104.313180][ T8433] .?&*&' (ret=-3): failed [ 104.375139][ T8431] kvm: MONITOR instruction emulated as NOP! [ 104.382782][ T53] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 104.522953][ T8443] syz.1.721: attempt to access beyond end of device [ 104.522953][ T8443] loop1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 104.527891][ T8443] qnx6: unable to read the first superblock [ 104.530243][ T8443] syz.1.721: attempt to access beyond end of device [ 104.530243][ T8443] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 104.534207][ T8443] qnx6: unable to read the first superblock [ 104.536065][ T8443] qnx6: unable to read the first superblock [ 104.538728][ T8443] syz.1.721: attempt to access beyond end of device [ 104.538728][ T8443] loop1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 104.542774][ T8443] qnx6: unable to read the first superblock [ 104.542781][ T53] usb 9-1: Invalid ep0 maxpacket: 16 [ 104.544845][ T8443] syz.1.721: attempt to access beyond end of device [ 104.544845][ T8443] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 104.550935][ T8443] qnx6: unable to read the first superblock [ 104.554356][ T8443] qnx6: unable to read the first superblock [ 104.556822][ T8443] syz.1.721: attempt to access beyond end of device [ 104.556822][ T8443] loop1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 104.560774][ T8443] qnx6: unable to read the first superblock [ 104.562813][ T8443] syz.1.721: attempt to access beyond end of device [ 104.562813][ T8443] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 104.566694][ T8443] qnx6: unable to read the first superblock [ 104.568561][ T8443] qnx6: unable to read the first superblock [ 104.571072][ T8443] syz.1.721: attempt to access beyond end of device [ 104.571072][ T8443] loop1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 104.575236][ T8443] qnx6: unable to read the first superblock [ 104.577169][ T8443] syz.1.721: attempt to access beyond end of device [ 104.577169][ T8443] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 104.580928][ T8443] qnx6: unable to read the first superblock [ 104.582549][ T8443] qnx6: unable to read the first superblock [ 104.585058][ T8443] syz.1.721: attempt to access beyond end of device [ 104.585058][ T8443] loop1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 104.589014][ T8443] qnx6: unable to read the first superblock [ 104.590948][ T8443] qnx6: unable to read the first superblock [ 104.592888][ T8443] qnx6: unable to read the first superblock [ 104.595354][ T8443] qnx6: unable to read the first superblock [ 104.597310][ T8443] qnx6: unable to read the first superblock [ 104.599182][ T8443] qnx6: unable to read the first superblock [ 104.601651][ T8443] qnx6: unable to read the first superblock [ 104.603877][ T8443] qnx6: unable to read the first superblock [ 104.605732][ T8443] qnx6: unable to read the first superblock [ 104.608215][ T8443] qnx6: unable to read the first superblock [ 104.610353][ T8443] qnx6: unable to read the first superblock [ 104.612233][ T8443] qnx6: unable to read the first superblock [ 104.614794][ T8443] qnx6: unable to read the first superblock [ 104.616769][ T8443] qnx6: unable to read the first superblock [ 104.618629][ T8443] qnx6: unable to read the first superblock [ 104.621078][ T8443] qnx6: unable to read the first superblock [ 104.623110][ T8443] qnx6: unable to read the first superblock [ 104.624950][ T8443] qnx6: unable to read the first superblock [ 104.627458][ T8443] qnx6: unable to read the first superblock [ 104.629400][ T8443] qnx6: unable to read the first superblock [ 104.631275][ T8443] qnx6: unable to read the first superblock [ 104.633758][ T8443] qnx6: unable to read the first superblock [ 104.635708][ T8443] qnx6: unable to read the first superblock [ 104.637571][ T8443] qnx6: unable to read the first superblock [ 104.640834][ T8443] qnx6: unable to read the first superblock [ 104.642838][ T8443] qnx6: unable to read the first superblock [ 104.644718][ T8443] qnx6: unable to read the first superblock [ 104.647254][ T8443] qnx6: unable to read the first superblock [ 104.649210][ T8443] qnx6: unable to read the first superblock [ 104.651102][ T8443] qnx6: unable to read the first superblock [ 104.653598][ T8443] qnx6: unable to read the first superblock [ 104.655662][ T8443] qnx6: unable to read the first superblock [ 104.657536][ T8443] qnx6: unable to read the first superblock [ 104.659945][ T8443] qnx6: unable to read the first superblock [ 104.661904][ T8443] qnx6: unable to read the first superblock [ 104.665054][ T5998] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 104.667313][ T5998] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 104.670344][ T8443] qnx6: unable to read the first superblock [ 104.672739][ C0] ------------[ cut here ]------------ [ 104.675603][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 104.678371][ T8443] qnx6: unable to read the first superblock [ 104.678452][ C0] WARNING: CPU: 0 PID: 8445 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 104.680576][ T8443] qnx6: unable to read the first superblock [ 104.684269][ C0] Modules linked in: [ 104.684313][ C0] CPU: 0 UID: 0 PID: 8445 Comm: syz.0.720 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 104.684339][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.684351][ C0] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 104.684376][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 d5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 46 0f 38 00 90 0f 0b 90 e9 1b f6 ff [ 104.692785][ T53] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 104.694460][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 104.694482][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 104.717981][ C0] RDX: ffff888063cc0000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 104.721321][ C0] RBP: ffff888036918970 R08: 0000000000000001 R09: 0000000000000000 [ 104.724626][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000000f8f [ 104.727935][ C0] R13: 0000000080000100 R14: ffff88802f525978 R15: 0000000000000001 [ 104.731228][ C0] FS: 00007f739da786c0(0000) GS:ffff8880d6720000(0000) knlGS:0000000000000000 [ 104.735043][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.737823][ C0] CR2: 0000000000000050 CR3: 00000000535d2000 CR4: 0000000000352ef0 [ 104.741165][ C0] Call Trace: [ 104.742598][ C0] [ 104.743874][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 104.746278][ C0] call_timer_fn+0x19a/0x620 [ 104.748249][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 104.750408][ C0] ? __run_timers+0x559/0x960 [ 104.752420][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 104.754895][ C0] __run_timers+0x569/0x960 [ 104.756854][ C0] ? __pfx___run_timers+0x10/0x10 [ 104.759030][ C0] run_timer_base+0x114/0x190 [ 104.760543][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 104.762153][ C0] run_timer_softirq+0x1a/0x40 [ 104.763666][ C0] handle_softirqs+0x219/0x8e0 [ 104.765167][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 104.766814][ C0] __irq_exit_rcu+0x109/0x170 [ 104.768294][ C0] irq_exit_rcu+0x9/0x30 [ 104.769631][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 104.771389][ C0] [ 104.772327][ C0] [ 104.773264][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 104.775166][ C0] RIP: 0010:ktime_get_coarse_real_ts64_mg+0xd6/0x300 [ 104.777233][ C0] Code: 48 c7 c7 48 a9 df 9a e8 18 b8 ee ff 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 c4 18 12 00 58 4d 85 e4 0f 85 b8 01 00 00 45 1d 12 00 44 8b 25 ee dd 35 19 45 89 e5 31 ff 41 83 e5 01 44 [ 104.783203][ C0] RSP: 0018:ffffc900057fefe8 EFLAGS: 00000293 [ 104.785114][ C0] RAX: 0000000000000000 RBX: ffffc900057ff058 RCX: ffffffff81a9ccb0 [ 104.787573][ C0] RDX: ffff888063cc0000 RSI: ffffffff81a9ccbb RDI: 0000000000000007 [ 104.790045][ C0] RBP: ffffc900057ff028 R08: 0000000000000007 R09: 0000000000000000 [ 104.792418][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 104.794804][ C0] R13: 1ffff92000affe0c R14: fffff52000affe0b R15: ffffc900057ff060 [ 104.797170][ C0] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 104.799070][ C0] ? ktime_get_coarse_real_ts64_mg+0x24b/0x300 [ 104.800976][ C0] ? ktime_get_coarse_real_ts64_mg+0x24b/0x300 [ 104.802842][ C0] current_time+0x82/0x1a0 [ 104.804238][ C0] ? __pfx_current_time+0x10/0x10 [ 104.805768][ C0] ? generic_write_checks+0x311/0x480 [ 104.806637][ T8443] qnx6: unable to read the first superblock [ 104.807368][ C0] inode_needs_update_time.part.0+0x21/0x270 [ 104.807387][ C0] file_update_time+0x9b/0x1c0 [ 104.807399][ C0] shmem_file_write_iter+0xec/0x140 [ 104.809921][ T8443] qnx6: unable to read the first superblock [ 104.811060][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 104.812805][ T8443] qnx6: unable to read the first superblock [ 104.814223][ C0] __kernel_write_iter+0x31a/0xa90 [ 104.814243][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 104.814258][ C0] ? __up_read+0x1f8/0x750 [ 104.814271][ C0] ? dump_user_range+0x745/0xb60 [ 104.814289][ C0] dump_user_range+0x41f/0xb60 [ 104.814306][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 104.814321][ C0] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 104.814340][ C0] ? __pfx_writenote+0x10/0x10 [ 104.814358][ C0] elf_core_dump+0x288a/0x3a90 [ 104.816728][ T8443] qnx6: unable to read the first superblock [ 104.817993][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 104.818011][ C0] ? kasan_save_stack+0x42/0x60 [ 104.821690][ T8443] qnx6: unable to read the first superblock [ 104.823182][ C0] ? kasan_save_stack+0x33/0x60 [ 104.823199][ C0] ? kasan_save_track+0x14/0x30 [ 104.823213][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 104.823227][ C0] ? do_coredump+0x1c9a/0x4f10 [ 104.823240][ C0] ? get_signal+0x22e3/0x26d0 [ 104.823253][ C0] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 104.823268][ C0] ? 0xffffffffff600000 [ 104.823297][ C0] ? do_coredump+0x399c/0x4f10 [ 104.827107][ T8443] qnx6: unable to read the first superblock [ 104.827728][ C0] do_coredump+0x399c/0x4f10 [ 104.832730][ T8443] qnx6: unable to read the first superblock [ 104.832758][ C0] ? __pfx_do_coredump+0x10/0x10 [ 104.836099][ T8443] qnx6: unable to read the first superblock [ 104.836190][ T8443] qnx6: unable to read the first superblock [ 104.837681][ C0] ? find_held_lock+0x2b/0x80 [ 104.837699][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 104.837713][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.841486][ T8443] qnx6: unable to read the first superblock [ 104.842576][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 104.842592][ C0] ? kernel_text_address+0x8d/0x100 [ 104.842604][ C0] ? __kernel_text_address+0xd/0x40 [ 104.848202][ T8443] qnx6: unable to read the first superblock [ 104.848535][ C0] ? unwind_get_return_address+0x59/0xa0 [ 104.853719][ T8443] qnx6: unable to read the first superblock [ 104.854731][ C0] ? stack_depot_save_flags+0x28/0xa40 [ 104.857333][ T8443] qnx6: unable to read the first superblock [ 104.858025][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 104.862571][ T8443] qnx6: unable to read the first superblock [ 104.863152][ C0] ? kasan_save_stack+0x42/0x60 [ 104.863170][ C0] ? kasan_save_stack+0x33/0x60 [ 104.863184][ C0] ? kasan_save_track+0x14/0x30 [ 104.863198][ C0] ? kasan_save_free_info+0x3b/0x60 [ 104.863210][ C0] ? __kasan_slab_free+0x51/0x70 [ 104.866994][ T8443] qnx6: unable to read the first superblock [ 104.868052][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 104.868070][ C0] ? __sigqueue_free+0xba/0x2a0 [ 104.868085][ C0] ? get_signal+0xcba/0x26d0 [ 104.873225][ T8443] qnx6: unable to read the first superblock [ 104.875081][ C0] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 104.875142][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 104.887595][ T8443] qnx6: unable to read the first superblock [ 104.887828][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 104.898696][ T8443] qnx6: unable to read the first superblock [ 104.899368][ C0] ? rcu_is_watching+0x12/0xc0 [ 104.905751][ T8443] qnx6: unable to read the first superblock [ 104.906954][ C0] get_signal+0x22e3/0x26d0 [ 104.906986][ C0] ? force_sig_fault+0xc4/0x100 [ 104.912867][ T8443] qnx6: unable to read the first superblock [ 104.913296][ C0] ? __pfx_get_signal+0x10/0x10 [ 104.913328][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 104.916428][ T8443] qnx6: unable to read the first superblock [ 104.917508][ C0] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 104.917534][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 104.917557][ C0] irqentry_exit_to_user_mode+0x12a/0x270 [ 104.917569][ C0] asm_exc_page_fault+0x26/0x30 [ 104.917580][ C0] RIP: 0033:0x7f739cb8e9b1 [ 104.917590][ C0] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 104.917601][ C0] RSP: 002b:0000000000000050 EFLAGS: 00010217 [ 104.917611][ C0] RAX: 0000000000000000 RBX: 00007f739cdb5fa0 RCX: 00007f739cb8e9a9 [ 104.917618][ C0] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000000904000 [ 104.917625][ C0] RBP: 00007f739cc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 104.925149][ T8443] qnx6: unable to read the first superblock [ 104.925461][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 104.931891][ T8443] qnx6: unable to read the first superblock [ 104.933440][ C0] R13: 0000000000000000 R14: 00007f739cdb5fa0 R15: 00007ffd05d73168 [ 104.933474][ C0] [ 104.933481][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.933489][ C0] CPU: 0 UID: 0 PID: 8445 Comm: syz.0.720 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 104.933503][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.933509][ C0] Call Trace: [ 104.933514][ C0] [ 104.933518][ C0] dump_stack_lvl+0x3d/0x1f0 [ 104.933537][ C0] panic+0x71c/0x800 [ 104.933553][ C0] ? __pfx_panic+0x10/0x10 [ 104.933568][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 104.933588][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 104.933604][ C0] ? __queue_work+0xc9c/0x10f0 [ 104.933619][ C0] check_panic_on_warn+0xab/0xb0 [ 104.933641][ C0] __warn+0xf6/0x3c0 [ 104.933650][ C0] ? __queue_work+0xc9c/0x10f0 [ 104.933662][ C0] report_bug+0x3c3/0x580 [ 104.933676][ C0] ? __queue_work+0xc9c/0x10f0 [ 104.933688][ C0] handle_bug+0x184/0x210 [ 104.933702][ C0] exc_invalid_op+0x17/0x50 [ 104.933720][ C0] asm_exc_invalid_op+0x1a/0x20 [ 104.933736][ C0] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 104.933754][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 d5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 46 0f 38 00 90 0f 0b 90 e9 1b f6 ff [ 104.933771][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 104.933782][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 104.933788][ C0] RDX: ffff888063cc0000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 104.933795][ C0] RBP: ffff888036918970 R08: 0000000000000001 R09: 0000000000000000 [ 104.933801][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000000f8f [ 104.933807][ C0] R13: 0000000080000100 R14: ffff88802f525978 R15: 0000000000000001 [ 104.933821][ C0] ? __warn_printk+0x198/0x350 [ 104.933846][ C0] ? __warn_printk+0x1a5/0x350 [ 104.933873][ C0] ? __queue_work+0xc9b/0x10f0 [ 104.933893][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 104.933913][ C0] call_timer_fn+0x19a/0x620 [ 104.933938][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 104.933962][ C0] ? __run_timers+0x559/0x960 [ 104.933986][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 104.934008][ C0] __run_timers+0x569/0x960 [ 104.934039][ C0] ? __pfx___run_timers+0x10/0x10 [ 104.934073][ C0] run_timer_base+0x114/0x190 [ 104.934097][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 104.934126][ C0] run_timer_softirq+0x1a/0x40 [ 104.934150][ C0] handle_softirqs+0x219/0x8e0 [ 104.934169][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 104.934195][ C0] __irq_exit_rcu+0x109/0x170 [ 104.934215][ C0] irq_exit_rcu+0x9/0x30 [ 104.934234][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 104.934259][ C0] [ 104.934263][ C0] [ 104.934267][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 104.934283][ C0] RIP: 0010:ktime_get_coarse_real_ts64_mg+0xd6/0x300 [ 104.934310][ C0] Code: 48 c7 c7 48 a9 df 9a e8 18 b8 ee ff 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 c4 18 12 00 58 4d 85 e4 0f 85 b8 01 00 00 45 1d 12 00 44 8b 25 ee dd 35 19 45 89 e5 31 ff 41 83 e5 01 44 [ 104.934326][ C0] RSP: 0018:ffffc900057fefe8 EFLAGS: 00000293 [ 104.934339][ C0] RAX: 0000000000000000 RBX: ffffc900057ff058 RCX: ffffffff81a9ccb0 [ 104.934351][ C0] RDX: ffff888063cc0000 RSI: ffffffff81a9ccbb RDI: 0000000000000007 [ 104.934360][ C0] RBP: ffffc900057ff028 R08: 0000000000000007 R09: 0000000000000000 [ 104.934367][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 104.934376][ C0] R13: 1ffff92000affe0c R14: fffff52000affe0b R15: ffffc900057ff060 [ 104.934395][ C0] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 104.934421][ C0] ? ktime_get_coarse_real_ts64_mg+0x24b/0x300 [ 104.934450][ C0] ? ktime_get_coarse_real_ts64_mg+0x24b/0x300 [ 104.934481][ C0] current_time+0x82/0x1a0 [ 104.934499][ C0] ? __pfx_current_time+0x10/0x10 [ 104.934517][ C0] ? generic_write_checks+0x311/0x480 [ 104.934544][ C0] inode_needs_update_time.part.0+0x21/0x270 [ 104.934560][ C0] file_update_time+0x9b/0x1c0 [ 104.934580][ C0] shmem_file_write_iter+0xec/0x140 [ 104.934600][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 104.934617][ C0] __kernel_write_iter+0x31a/0xa90 [ 104.934644][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 104.934662][ C0] ? __up_read+0x1f8/0x750 [ 104.934684][ C0] ? dump_user_range+0x745/0xb60 [ 104.934714][ C0] dump_user_range+0x41f/0xb60 [ 104.934742][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 104.934761][ C0] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 104.934790][ C0] ? __pfx_writenote+0x10/0x10 [ 104.934821][ C0] elf_core_dump+0x288a/0x3a90 [ 104.934854][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 104.934876][ C0] ? kasan_save_stack+0x42/0x60 [ 104.934899][ C0] ? kasan_save_stack+0x33/0x60 [ 104.934921][ C0] ? kasan_save_track+0x14/0x30 [ 104.934944][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 104.934961][ C0] ? do_coredump+0x1c9a/0x4f10 [ 104.934983][ C0] ? get_signal+0x22e3/0x26d0 [ 104.935020][ C0] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 104.935047][ C0] ? 0xffffffffff600000 [ 104.935101][ C0] ? do_coredump+0x399c/0x4f10 [ 104.935116][ C0] do_coredump+0x399c/0x4f10 [ 104.935148][ C0] ? __pfx_do_coredump+0x10/0x10 [ 104.935172][ C0] ? find_held_lock+0x2b/0x80 [ 104.935194][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 104.935212][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.935237][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 104.935257][ C0] ? kernel_text_address+0x8d/0x100 [ 104.935276][ C0] ? __kernel_text_address+0xd/0x40 [ 104.935295][ C0] ? unwind_get_return_address+0x59/0xa0 [ 104.935321][ C0] ? stack_depot_save_flags+0x28/0xa40 [ 104.935349][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 104.935368][ C0] ? kasan_save_stack+0x42/0x60 [ 104.935390][ C0] ? kasan_save_stack+0x33/0x60 [ 105.149577][ C0] ? kasan_save_track+0x14/0x30 [ 105.151119][ C0] ? kasan_save_free_info+0x3b/0x60 [ 105.152754][ C0] ? __kasan_slab_free+0x51/0x70 [ 105.154313][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 105.155872][ C0] ? __sigqueue_free+0xba/0x2a0 [ 105.157427][ C0] ? get_signal+0xcba/0x26d0 [ 105.158919][ C0] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 105.160898][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 105.162645][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 105.164557][ C0] ? rcu_is_watching+0x12/0xc0 [ 105.166061][ C0] get_signal+0x22e3/0x26d0 [ 105.167527][ C0] ? force_sig_fault+0xc4/0x100 [ 105.169366][ C0] ? __pfx_get_signal+0x10/0x10 [ 105.171229][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 105.172957][ C0] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 105.174904][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 105.176924][ C0] irqentry_exit_to_user_mode+0x12a/0x270 [ 105.178744][ C0] asm_exc_page_fault+0x26/0x30 [ 105.180298][ C0] RIP: 0033:0x7f739cb8e9b1 [ 105.181717][ C0] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 105.187710][ C0] RSP: 002b:0000000000000050 EFLAGS: 00010217 [ 105.189604][ C0] RAX: 0000000000000000 RBX: 00007f739cdb5fa0 RCX: 00007f739cb8e9a9 [ 105.192247][ C0] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000000904000 [ 105.194972][ C0] RBP: 00007f739cc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 105.197461][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 105.199920][ C0] R13: 0000000000000000 R14: 00007f739cdb5fa0 R15: 00007ffd05d73168 [ 105.202387][ C0] [ 105.204084][ C0] Kernel Offset: disabled [ 105.205487][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:39:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000103 RBX=00000000000000c7 RCX=ffffffff819b8f42 RDX=ffff888063cc0000 RSI=ffffffff819b8f30 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc900000077f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000000f01 R13=0000000000000000 R14=ffff8880573cc880 R15=ffffc900000078c0 RIP=ffffffff81bbe8c1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f739da786c0 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000050 CR3=00000000535d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd05d734f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f739cc11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f739cc11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f739cc11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f739cc11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f739cc11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f739cc11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff855a5880 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc900068ef6a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff361741e R15=dffffc0000000000 RIP=ffffffff855a58a7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f215e2646c0 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000050 CR3=00000000219ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2b4976a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888100f56000 RCX=ffffc90003ccf91c RDX=0000000000000005 RSI=ffffffff8de0b1cd RDI=ffff888100f56000 RBP=ffff888100f56000 RSP=ffffc90003ccf950 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000008400001 R13=ffffc90003ccf9d8 R14=0000000000000000 R15=ffff888036919168 RIP=ffffffff8198d730 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f215e263f98 CR3=00000000219ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f215d411d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f215d411d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f215d411d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f215d411d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f215d411de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f215d411ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f215d586488 00007f215d586480 00007f215d586478 00007f215d586450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f215e0ed100 00007f215d586440 00007f215d586458 00007f215d5864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f215d586498 00007f215d586490 00007f215d586488 00007f215d586480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000018 RBX=ffffffff8c0ecdaa RCX=1ffff920008cbef6 RDX=ffff88802b1c0000 RSI=ffffffff8b836ec4 RDI=0000000000000004 RBP=ffffc9000465f920 RSP=ffffc9000465f838 R8 =0000000000000004 R9 =00000000ffffffff R10=000000000000000d R11=0000000000000001 R12=0000000000000405 R13=0000000000000020 R14=0000000000000405 R15=000000000000000d RIP=ffffffff8b836efd RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558ef37500 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff2b495df8 CR3=0000000051104000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080410001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2b4976a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdbb1611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 253d746e61772064 7a253d6461657200 7269646b6d206f74 2064656c69616600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0018514b44520541 5f00184144405700 574c414e48054a51 054140494c444300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000