last executing test programs: 25.241633628s ago: executing program 0 (id=173): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) 25.182935953s ago: executing program 0 (id=175): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000380)={r0, 0x1, 0x6, "aa6f2c02731a701a6c20a9714fadd603fa988d15abfe6f215e4c38f58bd74975b6c4defe30f1c0a62a2444d95dfaa9a884af5e81a47cc04081688813041680df3e37e0aafbd3a4173b991efae37d1c2c56d06a03dcc7b70039d1ac45a094f16542b75b8f1978f60ebdd21fec00bf795b50c6ec04a65c8d"}) (fail_nth: 11) 25.182177675s ago: executing program 0 (id=178): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x4400) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f1900000000000000024f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f0000000780)=""/226, 0xfe4f}], 0x2}}], 0x1, 0x40, 0x0) 25.083256077s ago: executing program 0 (id=179): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x38, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x6, 0x99, {0xfbfffc01, 0x5e}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24028081) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x13) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)={0x14, 0x3c, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008095) 24.97300729s ago: executing program 0 (id=181): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') utimes(0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="01020000010006", 0x7) 24.8325888s ago: executing program 0 (id=183): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c, 0x0, 0x3}, {0x6}]}, 0x10) 9.795686225s ago: executing program 32 (id=183): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c, 0x0, 0x3}, {0x6}]}, 0x10) 4.792397884s ago: executing program 2 (id=552): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0xa8, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT={0x38, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4010) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x80000000}}, './file0\x00'}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000200)={0x0, 0x40002, 0x2, {0xd, @pix_mp={0xc, 0x4, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x4}}}) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000640)={0x2, 0x3, 0x1000}) readv(r0, &(0x7f0000001180)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000080)=""/203, 0xcb}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x3) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x83}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x3}, {}, {0x0, 0xfc}, @connect={{}, {0x0, 0x5}}}], 0x70) 3.502010016s ago: executing program 4 (id=574): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x1, 0x70bd28, 0x25dfdbfc, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x0, 0x4e21, 0x9, 0xa, 0x20, 0xa0, 0x6c}, 0x6e6bb5, 0x1}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3.442768616s ago: executing program 4 (id=576): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000002c0)=0xc, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)=0x17) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) 3.362909048s ago: executing program 1 (id=579): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x44, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) 3.359377179s ago: executing program 1 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x180, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x150, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x800) 3.14257163s ago: executing program 2 (id=582): r0 = socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 3.091354625s ago: executing program 2 (id=584): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x8100, 0x1}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a40), 0x8a240, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000001040)) 3.090833439s ago: executing program 1 (id=585): syz_80211_inject_frame(&(0x7f0000001280)=@broadcast, &(0x7f00000012c0)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @initial, {0x6, 0x2}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x1, 0x1, 0x6b, @void}, 0x22) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "c378423352e79c242fb9e364d40c4a00c1a3d10aaf30dfed5a2873c0d03323f6", "d46888c7cb5ad595e9b51cdc3b7d0d1676ff0aaa7e6440956d5914c316e77135", "85cb01bed4e5ad08d984fc6e6c19e75b11e40c9faa3eb827a355ba5de2eadce7", "50725da5596b91c4fc2902fd64118c77a37faa6f5159598d4b578e058943bfe4", "43d5dd774a4a53440ef61e80d1ced8a59e8f913fcd427cecd141bfffd57c4c9c", "b022bd843156fbfb84f4e2d4", 0x7, 0x7, 0xe, 0x2, 0xffff7fff}}) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x13af}, @broadcast}, 0xa) 3.087465726s ago: executing program 4 (id=586): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'bridge_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) (async) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xe00040, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x41b, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500005c0000000000119078000000000000000000004e200048907803000000000000006d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8ddec71ca8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x6b38, 0x10100, 0x0, 0x1eb}, &(0x7f0000000300), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f0000000200)={0x0, 0xab62, 0x800, 0x3, 0x147}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_usb(r7, &(0x7f0000000440)="9302", 0x2) (async) ioctl$RTC_PIE_OFF(r7, 0x7006) (async) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) r8 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async) getdents(r8, &(0x7f0000001fc0)=""/184, 0x20002078) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r11, &(0x7f0000000300)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$packet(r8, &(0x7f0000000080)={0x11, 0xd, r12, 0x1, 0x7, 0x6, @random="0bb24305b8d4"}, 0x14) 3.030012857s ago: executing program 4 (id=588): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0f030514fe"], 0xa) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x7) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.97216373s ago: executing program 3 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@rand_addr=0x64010100, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0x0, 0x2, 0xa0, 0x80, 0x2f, 0x0, r6}, {0x0, 0xeadd, 0x8, 0x46, 0xf, 0x6, 0x9}, {0xd, 0x4, 0x0, 0xfe4}, 0xffffffff, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4d6, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x3504, 0x1, 0x2, 0x0, 0x0, 0x1, 0x431c}}, 0xe8) 2.971912082s ago: executing program 4 (id=590): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) socket$packet(0x11, 0x3, 0x300) 2.76303027s ago: executing program 3 (id=591): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e00500000a0000001177fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x6000002c, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2.532185439s ago: executing program 1 (id=592): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) socket$inet(0x2, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000240)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c2003"], 0xf) sendto$packet(r5, 0x0, 0x0, 0x2, &(0x7f0000000200)={0x11, 0x1, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r10, 0x113, 0x3, &(0x7f0000000000), 0x4) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x57ffffa, 0x122c42) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000400020011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a910e13ada87a16c1ca43f80026d1a8530e04d52853964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in6=@remote, @in6=@empty, 0x4000, 0x0, 0x4e24, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "42c1e92e943c4bb2f323b84cbe9f307eca71efe211236d3d5c3a29a491b582a599b07e15b88b01e18c250043cf910da9384a57647a74943883418c2c648e6884c4"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) 2.212657799s ago: executing program 2 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3c4768456acc"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40d0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0xd80, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x25c, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x43}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x7c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xe2, 0x101, 0x3, 0x89, 0xf218, 0x0, 0xacc0]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7fff, 0xc, 0xd3, 0x52, 0xdc0, 0x3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x9, 0x0, 0xff, 0x0, 0xd15c, 0x8, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0xe, 0x7, 0x3, 0x5, 0x7ff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x5, 0x94, 0x80, 0x2, 0xb05, 0x3559]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x0, 0xffff, 0x0, 0x0, 0xffff, 0x8, 0xabe1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x5, 0x3, 0x15, 0x5, 0x7c, 0x8, 0xb0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xff, 0x9, 0x2, 0x8, 0x7fff, 0xb, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa68, 0x168, 0x3, 0x3ff, 0x9, 0x7, 0x315, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb8, 0x9, 0x8, 0x6, 0x14, 0x6, 0x4, 0x7ff]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x5}, {0x3, 0x1}, {0x3, 0x2}, {0x7, 0x4}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}]}, @NL80211_ATTR_TID_CONFIG={0x2a0, 0x11d, 0x0, 0x1, [{0x1d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x44, 0xb, 0x30, 0x1, 0x18, 0x5, 0x60, 0x36, 0x24, 0x48, 0x9, 0x1, 0x6c, 0x1b, 0x9, 0x1, 0x6]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x36, 0x30, 0x16, 0x12, 0x0, 0xb, 0x12, 0x5, 0x3, 0x36, 0x36, 0x9, 0x24, 0x5, 0x9]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x2}, {0x0, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x6, 0x6}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x8}, {0x7, 0xa}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0x9}, {0x6, 0x8}, {0x4, 0x6}, {0x6, 0x6}, {0x2, 0x2}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x6}, {0x4}, {0x5, 0x6}, {0x7, 0x7}, {0x1, 0x6}, {0x3, 0xa}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4e, 0x6, 0x16, 0x36, 0x5, 0x48, 0x9, 0x6c, 0x6, 0x18, 0x0, 0x24, 0x3, 0x2, 0x16, 0x9, 0x12, 0x24, 0x36]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x12, 0x6, 0x2, 0x36, 0x6, 0x60, 0x24, 0x24, 0x36, 0x5]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x16, 0xc, 0x24, 0x36, 0x24, 0x2, 0x6c, 0x1b, 0x60, 0x4, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcf, 0x5, 0x4, 0x401, 0x0, 0x2, 0x5, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xf01e, 0xb, 0x3, 0x1, 0x528, 0x6630, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x3, 0x3, 0x63, 0x8000, 0xf75, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x48, 0x48, 0x37, 0x24, 0x4, 0x6, 0xc, 0x3, 0x7]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x6, 0x1, 0x0, 0x9, 0x200, 0x5]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x3}, {0x7, 0x4}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x1a}, {0x0, 0x3}, {0x6, 0x2}, {0x5}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x6, 0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x4, 0x6}, {0x7, 0xa}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x9}, {0x4, 0x8}, {0x2, 0x3}, {0x4, 0x7}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0x5}, {0x6, 0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x28, 0x4, 0xf, 0x2, 0xba81, 0x9, 0xa, 0xfb]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4ef}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x18, 0xc, 0x1b, 0x1b, 0x18, 0x6c, 0x3, 0x1, 0xb, 0x16, 0x6c, 0x0, 0x876e5e8784317f11, 0x6, 0x2, 0x1b, 0x4, 0x6c, 0x18, 0xb, 0x6c, 0x36, 0x58475bf6c446397, 0x9, 0x6, 0xb, 0x5, 0x6c, 0x1, 0x18, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xc208, 0x2, 0x5, 0x10, 0x2, 0x2, 0x3]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x60, 0x2, 0xc, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8a, 0x6, 0x3, 0x5, 0x7, 0x5, 0x400]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x5f0, 0x11d, 0x0, 0x1, [{0x498, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3d7, 0xa289, 0x6, 0x3, 0x8, 0x5, 0x4, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x3ff, 0xf283, 0xaec7, 0x9c96, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x2}, {0x3, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2d, 0x36, 0x24, 0x6c, 0xb, 0xb, 0x12, 0x2, 0x2, 0x36, 0x1b, 0x9, 0x9, 0x1b, 0x12, 0x4, 0x2, 0x9, 0x60, 0x65]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x2, 0x1}, {0x4, 0x5}, {0x7, 0x4}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0x9}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x7}, {}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x5}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x3}, {0x3, 0x1}, {0x6, 0xa}, {0x6, 0x2}, {0x2, 0x5}, {0x1, 0x2}, {0x7, 0xa}, {0x2, 0x5}, {0x7, 0x1}, {0x7, 0x8}, {0x6, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x6, 0x9, 0x8000, 0x4, 0xee84, 0x1]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x34, 0xc, 0x5, 0x36, 0x36, 0x30, 0x6, 0x36, 0x3, 0xc, 0x4, 0x5, 0x3b, 0x24, 0x5, 0x3, 0x4, 0x1b, 0x60, 0x5f]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x5, 0x6c, 0x60, 0x60, 0x30, 0x0, 0x1b, 0x60, 0x48, 0x60]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xb, 0x2, 0xfffb, 0x80, 0x5, 0x0, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa00, 0x9, 0x7, 0x3, 0xff, 0x2, 0x8000, 0x8]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x1b, 0x57, 0x6c, 0x4, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x3ff, 0xb7, 0xfc01, 0x0, 0x14, 0x3ff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x4, 0x4, 0x9]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x36, 0xb, 0x48, 0x18, 0x16, 0xb, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x6, 0x203, 0x9, 0x9, 0x1, 0x800, 0xa84]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x0, 0x5, 0x7, 0xcd9, 0x2, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x8001, 0x3, 0x4, 0xfb, 0x2, 0x6da5]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x3}, {0x3, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x3, 0x9}, {0x2, 0xa}, {0x0, 0x4}, {0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x2}, {0x5, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x7, 0x2}, {0x3, 0xa}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x1}, {0x6, 0xa}, {0x7, 0x1}, {0x5, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x7, 0x4}, {0x2, 0x7}, {0x2, 0x7}, {0x2, 0x2}, {0x6, 0x9}, {0x2, 0x4}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0x4}, {0x5, 0x2}, {0x5, 0xa}]}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x2}, {0x2, 0x4}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x5, 0x5}, {0x4, 0xa}, {0x0, 0x7}, {0x6}, {0x1, 0xa}, {0x7, 0xa}, {0x6, 0x1}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x4}, {0x6, 0x3}, {}, {0x1, 0x9}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x5}, {0x2, 0x4}, {0x4, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x24, 0x1b, 0x36, 0x1b, 0x0, 0x30, 0xc, 0x3, 0x9, 0x1b, 0x5, 0x0, 0x60, 0x16, 0x12, 0xd, 0x2, 0x6c, 0x6, 0x36, 0x1b, 0x24, 0x1, 0x3, 0x6c, 0x3, 0x406ac852b60d9f00, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xeb45, 0x14f, 0x0, 0x6, 0x7, 0x101, 0x800, 0x800]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x60, 0x1, 0x5, 0x2, 0x6c, 0x2, 0x48, 0x12, 0x48, 0x24, 0x1, 0xf, 0x5, 0x48, 0x1b, 0xc]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x3}, {0x5, 0x2}, {0x2, 0xa}, {0x7, 0x5}, {0x4, 0x5}, {0x6, 0x4}, {0x6, 0x9}, {0x7, 0x9}, {0x6, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x6, 0x4}, {0x3, 0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x8}, {0x6, 0xa}, {0x2, 0x9}, {0x3, 0x2}, {0x1}, {0x5, 0x2}, {0x2, 0x4}, {0x7, 0x6}, {0x6, 0xa}, {0x1, 0x1}, {0x6}, {}, {0x0, 0x5}, {0x6, 0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x2}, {0x0, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x6}, {0x2, 0x3}, {0x3, 0x5}, {0x5, 0x7}, {0x3, 0x7}, {0x2, 0x5}, {0x5, 0x7}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x8}, {0x2}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x30, 0x16, 0x12, 0x3, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0x32, 0x1b, 0x6, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x0, 0x6, 0x2, 0x9, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x7b, 0x1, 0x12, 0x12, 0x6990ce8cfb07dea8, 0x2, 0xb, 0xc, 0x1, 0x9, 0x1b, 0x1, 0x2d, 0x6, 0x6, 0x48]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x12, 0x1b, 0x18, 0x4, 0x6c, 0xb, 0x24, 0x5, 0x9, 0x1, 0x6, 0x60, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xe, 0x1, 0x8, 0x1, 0x3ff, 0x7fff, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x6, 0x9}, {0x5, 0xa}, {0x1, 0x4}, {0x5, 0x3}, {}, {0x7, 0x7}, {0x2, 0x4}, {0x3, 0x3}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {}, {0x7, 0x5}, {0x3, 0x6}, {0x3, 0x7}, {0x5, 0x6}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x8}, {0x2, 0x6}, {0x5, 0xa}, {0x4, 0x8}, {0x6, 0x1}, {0x6, 0xa}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x7}, {0x0, 0x9}, {0x6}, {0x7, 0x3}, {0x3, 0x3}, {0x7, 0x7}, {0x2, 0x9}, {0x6}, {0x4, 0x4}, {0x6}, {0x2, 0xa}, {0x6, 0x1}, {}, {0x1, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x0, 0x5}, {0x4, 0x2}, {0x6, 0x6}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x9}, {0x6, 0x7}, {0x5}, {0x0, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x72, 0x3, 0x4, 0x72, 0x1, 0x74, 0xb]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x12, 0x9, 0x18, 0x43a32eb641a115be, 0x36, 0x12, 0xbcf5dea33cde0964, 0xb, 0x3, 0x1, 0x5, 0x3, 0xb, 0x12, 0x2, 0x16, 0xb, 0xd2, 0x9, 0x18, 0x5, 0x4, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0xffc0, 0x0, 0x2, 0x4, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x5}, {0x3, 0x9}, {0x6, 0xa}, {0x1}, {0x1, 0x3}, {0x1}, {0x6, 0x3}, {0x5, 0x5}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x8}, {0x5, 0x1}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x2, 0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x2, 0xa}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0xa}, {0x0, 0x3}, {0x5, 0x15}, {0x3, 0x4}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xd8, 0x390, 0x9, 0x49, 0x3, 0xa4b, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa92, 0x7ff, 0x8, 0x3, 0x4, 0x9, 0x40, 0x1]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x100, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x4, 0x1, 0x0, 0x9, 0x2, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xe, 0x5, 0x2, 0x3, 0xe, 0xcc, 0x73e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x3, 0xfff9, 0xe0, 0x0, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x4, 0x3ff, 0x6d3d, 0x400, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xfffd, 0x0, 0x9, 0x4d38, 0x6, 0x0, 0xf12]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0x1b, 0x1, 0x36, 0x5b, 0x2, 0x3, 0x6c, 0x48, 0xb, 0x16, 0x0, 0x60, 0x60, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0xb, 0x3, 0x3, 0x1, 0x3, 0x2]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0xb, 0x4, 0x24, 0xc, 0x6, 0x1b, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb19, 0x4, 0x8, 0x80, 0x1, 0xff, 0x3, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d8, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x29fb000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x190, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x24, 0x18, 0xc, 0x4, 0x4, 0xc, 0x18, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0x200, 0x8, 0x73, 0x401, 0x7, 0xfff]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0x6}, {}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0x5}, {0x0, 0x2}, {0x5, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x2}, {0x4, 0x2}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x3}, {0x7}, {0x7}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x3}, {0x6, 0x8}, {0x4, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x4}, {0x1, 0xa}, {0x5, 0xa}, {0x7, 0x5}, {0x0, 0x1}, {0x4, 0x6}, {0x7, 0x6}, {0x1, 0x3}, {0x2, 0x7}, {0x3, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x7}, {0x7, 0x9}, {0x5, 0x6}, {}, {0x0, 0xc}, {0x0, 0x9}, {0x6, 0x4}, {0x0, 0x9}, {0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x9}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0xa}, {0x2, 0x4}, {0x5, 0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x5, 0x6}, {0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x7}, {0x4, 0x7}, {0x4}, {0x6, 0x1}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x100, 0x25, 0xfff7, 0x2, 0x0, 0x7e8, 0x4]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x2}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x1, 0xa}, {0x2}, {0x1, 0x8}, {0x5, 0x6}, {0x6, 0x5}, {0x1, 0x2}, {0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x4, 0x3}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x4}, {0x1, 0x7}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x2}, {0x4, 0x5}, {0x4, 0x6}, {0x6, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x3, 0x2}, {0x3, 0x5}, {0x3, 0x5}, {0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x2}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x4}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x5, 0xb, 0x5, 0x0, 0xc, 0xb, 0x60, 0x24, 0x24, 0x1, 0x3a, 0x4]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf4f0, 0x3dcb, 0x8, 0x101, 0x6, 0x0, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xd, 0x8, 0x2, 0xe, 0x5, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x87}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaa}]}]}]}, 0xd80}, 0x1, 0x0, 0x0, 0x20004001}, 0x20004800) 2.212206212s ago: executing program 2 (id=594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x180, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x150, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x104, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x800) 391.736141ms ago: executing program 1 (id=595): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 152.321229ms ago: executing program 4 (id=596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 151.823062ms ago: executing program 3 (id=597): rt_sigprocmask(0x1, &(0x7f0000000480)={[0x5]}, &(0x7f00000004c0), 0x8) r0 = syz_io_uring_setup(0x23e8, &(0x7f0000000180)={0x0, 0x2612, 0x2, 0x3, 0x340}, &(0x7f0000000040), &(0x7f0000000200)) io_uring_setup(0x4, &(0x7f00000002c0)={0x0, 0xc071, 0x20, 0x1, 0x280, 0x0, r0}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2903fcffffff00000000160000000c0006000100000001"], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) 72.255066ms ago: executing program 3 (id=598): socket$inet6(0xa, 0x3, 0x8000000003c) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8000, 0x0, 0x0, 0x2, 0x0, @broadcast, @loopback}, {0x17, 0x7c, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x110000d6}, 0x0) 71.126366ms ago: executing program 3 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000122a09000000000000000000020000000900020073797a300000000008000440000000000900010073797a3000000000080003400000000134000000140a0300000000000000000002000000090001ba86c800300000000008000340000000010c0006400000000000000002140000001100010000000000000000000000000a"], 0x98}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x80000001, 0x4, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006c80)=ANY=[@ANYBLOB="782800001200050b00000000000000000a"], 0x2878}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1cc, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1402, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x754e, 0x3}}, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0x16}, {0x6, 0x1}, {0x18, 0x1}, {0x36}, {0x3}, {0x1}, {0x60, 0x1}, {0xb, 0x1}, {0x60}, {0x2}, {0x16, 0x1}, {0x12, 0x1}, {0x1, 0x1}, {0x6}, {0x6, 0x1}, {0x34, 0x1}, {0x24}, {0x18}, {0x4, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x48, 0x1}, {0x9, 0x1}, {0xc, 0x1}, {0x6}, {0x1b, 0x1}, {0x48, 0x1}, {0x18}, {0x9, 0x1}, {0x24, 0x1}, {0x3, 0x1}, {0x16, 0x1}, {0x36, 0x1}, {0x9f694daf16ee80ae}, {0xb}, {0x24, 0x1}, {0x1b}, {0x9}, {0x3}, {0x3}, {0x1, 0x1}, {0x36}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x581}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xd4}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x1, 0x4, 0x0, {0x4, 0x1, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x0, 0x3}}, @NL80211_ATTR_KEYS={0x124, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9148245511"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "959505e4d4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x9, 0x4, "4428cc9fc4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "55a6cfa46d32f547073c0ac7ef"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f53e56db36"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6d04911790c7c672868a5f4a0b"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f4ba117e15a86ac237597ce4e7"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d802588840f51546265b60ab3f"}]}]}]}, 0x1cc}}, 0x10) 677.512µs ago: executing program 1 (id=600): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 452.823µs ago: executing program 3 (id=601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x710ce59bde3da92}]}, 0x3c}, 0x1, 0x3fffffffffffff, 0x0, 0x40}, 0x4010044) 0s ago: executing program 2 (id=602): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) setsockopt$inet6_tcp_buf(r1, 0x6, 0x12, &(0x7f0000000240)="5b4b9816bde9e578546abbafbc77a12f9880d8a70d69f80a0c72edf08eef53f8d97d4f7a10e45ce56accabf913d1cbd612abf89c741ae0f0c8ad4d0b4239acb4dd8823f1a29d0741a27cd8403f48345ed31c28eb45dbaf91e4901d704b011ee27d844f2778e42d66ab4ac0618cd56fdc191fe255308fdc6016dea4c562eacccbeb84cd632ed9dd98a9baa0eb31ea82bdad85ef2ecf3d319a026fa59d260e04071db0ba857497baf808bff5565edde530e8f1ef282d8e19c1accd20e87c44133a4a163620561109c9da8fed3cc22e04daaf4a1b6a86e4f58c5a240dbfebf02e9b3dd8fd027c4f62b2369a1def", 0xec) (async, rerun: 64) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11) (rerun: 64) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x20000b) (async) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]}) (async, rerun: 64) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000080)=0x9) (rerun: 64) write$ppp(r4, &(0x7f0000000300)="5af9", 0x2) (async, rerun: 32) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x4000) (rerun: 32) write$qrtrtun(r1, &(0x7f0000000400)="daa83db3e4ea4e685c0ecc4a5c56c62e4f26f0a72e15333b60073a4823f3d890de0bd03b3ff73b4872e7f5dd4590bd042006a6ada6ae7af0c08fa67ae0f5c127205b4d622bef56742af7458273c0c62a18d89101805847fb398827b4a2942ed42e49bb0eb638a4bcc4a3a698ad7003776d21e51e19cc6331237ae2635162be31ddbbabfe3e2844f5a62f9fcac2c21b2af3581a2f30e2879bb819e85e48445c6dbaea3a0f90b31d223069ad91eaaa05b8b7513647d6b3b2b00e355cd372eb48c52b", 0xc1) (async) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x60ff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}], 0x10}, 0x2) (async, rerun: 64) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$inet(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x500, 0x0, 0x0, 0x0, [0x4], [0x0, 0x8001]}}) (async) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000580)="235975bec0462edf5152c0cd67e37548049f965b81671b065ff8b1b6d55003c88a16e03cf8c1feb6e2a94b18264bcf6f8121711ad3c34191d0e92987adc1760de125c845b30adf1652901b897daf0f902dfbbc3014be9d6821a78d49a297cc39562efca7c69310bc7d23e82781e8d3538cb2ca12df34fcfa8d8e5ceed7d812cd84594b496b7ea25a0c27edb465b93235fa96077121d0d016ec05863389371d4ccecb2d01ff1e4012e7", 0xa9}, {&(0x7f0000000640)="22eae51efc8008383f881fea4e7cb5c71bd7", 0x12}], 0x2, 0xb, 0x80000000, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) (async, rerun: 32) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdfe91e0000000c009900be000000170000000800cb00000000009f000a00828804273d0d000000ffffffffffff0800000008000000000002000a04ffffffffffff00000000010802110000010000000200ffffffffffffffffffff00ffffffffffff9e0900000108021100000108000000000802110000000000000004051585f8f5fcac9eacc878f80a6562080211000000060000000508021100000196fa0000000802f0fb0f709b724e34074431948d11000000ff070000010802110000017f000000840f0b0100ffffffffffff0010"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x851) socket$l2tp(0x2, 0x2, 0x73) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='40::\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010828bd7000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="0c0050800400088004000600"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): d_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.778732][ T40] audit: type=1400 audit(1745613920.113:86): avc: denied { getattr } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:11860' (ED25519) to the list of known hosts. [ 39.171682][ T40] audit: type=1400 audit(1745613920.533:87): avc: denied { name_bind } for pid=5863 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.048766][ T5865] cgroup: Unknown subsys name 'net' [ 41.215079][ T5865] cgroup: Unknown subsys name 'cpuset' [ 41.220198][ T5865] cgroup: Unknown subsys name 'rlimit' [ 41.439126][ T5933] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.042395][ T5865] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.583742][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 44.583758][ T40] audit: type=1400 audit(1745613925.943:105): avc: denied { execmem } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.766356][ T40] audit: type=1400 audit(1745613926.123:106): avc: denied { create } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.772699][ T40] audit: type=1400 audit(1745613926.123:107): avc: denied { create } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.778800][ T40] audit: type=1400 audit(1745613926.123:108): avc: denied { read write } for pid=5943 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.786118][ T40] audit: type=1400 audit(1745613926.123:109): avc: denied { open } for pid=5943 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.795369][ T40] audit: type=1400 audit(1745613926.133:110): avc: denied { ioctl } for pid=5944 comm="syz-executor" path="socket:[6309]" dev="sockfs" ino=6309 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.808174][ T5957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.809031][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.810984][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.813749][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.815706][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.817605][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.819663][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.821917][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.824644][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.826460][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.828404][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.831078][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.837080][ T40] audit: type=1400 audit(1745613926.193:111): avc: denied { read } for pid=5944 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.838422][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.840232][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.844226][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.846904][ T5959] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.849163][ T40] audit: type=1400 audit(1745613926.193:112): avc: denied { open } for pid=5944 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.850977][ T5959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.852611][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.864769][ T40] audit: type=1400 audit(1745613926.193:113): avc: denied { mounton } for pid=5945 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.871168][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.871477][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.021223][ T40] audit: type=1400 audit(1745613926.383:114): avc: denied { module_request } for pid=5945 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.080393][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.128373][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 45.178655][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 45.208615][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 45.330779][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.333049][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.335897][ T5944] bridge_slave_0: entered allmulticast mode [ 45.338692][ T5944] bridge_slave_0: entered promiscuous mode [ 45.361570][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.363863][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.366103][ T5945] bridge_slave_0: entered allmulticast mode [ 45.368667][ T5945] bridge_slave_0: entered promiscuous mode [ 45.371822][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.374059][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.376303][ T5945] bridge_slave_1: entered allmulticast mode [ 45.378843][ T5945] bridge_slave_1: entered promiscuous mode [ 45.387557][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.389837][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.392614][ T5944] bridge_slave_1: entered allmulticast mode [ 45.395419][ T5944] bridge_slave_1: entered promiscuous mode [ 45.483903][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.507979][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.512006][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.514331][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.516580][ T5943] bridge_slave_0: entered allmulticast mode [ 45.519124][ T5943] bridge_slave_0: entered promiscuous mode [ 45.523082][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.540054][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.542437][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.544700][ T5951] bridge_slave_0: entered allmulticast mode [ 45.547242][ T5951] bridge_slave_0: entered promiscuous mode [ 45.551882][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.568446][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.570839][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.573112][ T5943] bridge_slave_1: entered allmulticast mode [ 45.575702][ T5943] bridge_slave_1: entered promiscuous mode [ 45.590949][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.593819][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.596276][ T5951] bridge_slave_1: entered allmulticast mode [ 45.598887][ T5951] bridge_slave_1: entered promiscuous mode [ 45.688327][ T5945] team0: Port device team_slave_0 added [ 45.716533][ T5944] team0: Port device team_slave_0 added [ 45.721740][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.727235][ T5945] team0: Port device team_slave_1 added [ 45.733767][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.738797][ T5944] team0: Port device team_slave_1 added [ 45.743109][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.785877][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.817430][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.819657][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.828234][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.834216][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.836392][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.844383][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.914186][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.916417][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.925139][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.930193][ T5951] team0: Port device team_slave_0 added [ 45.935691][ T5943] team0: Port device team_slave_0 added [ 45.938048][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.940278][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.948808][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.953640][ T5951] team0: Port device team_slave_1 added [ 45.972660][ T5943] team0: Port device team_slave_1 added [ 46.022729][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.024917][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.032911][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.064839][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.067063][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.075998][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.092113][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.094396][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.103660][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.110964][ T5945] hsr_slave_0: entered promiscuous mode [ 46.113899][ T5945] hsr_slave_1: entered promiscuous mode [ 46.138071][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.140266][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.148322][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.194440][ T5944] hsr_slave_0: entered promiscuous mode [ 46.196801][ T5944] hsr_slave_1: entered promiscuous mode [ 46.198814][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.204340][ T5944] Cannot create hsr debugfs directory [ 46.256732][ T5951] hsr_slave_0: entered promiscuous mode [ 46.258969][ T5951] hsr_slave_1: entered promiscuous mode [ 46.261113][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.263482][ T5951] Cannot create hsr debugfs directory [ 46.337425][ T5943] hsr_slave_0: entered promiscuous mode [ 46.339617][ T5943] hsr_slave_1: entered promiscuous mode [ 46.342945][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.345303][ T5943] Cannot create hsr debugfs directory [ 46.589127][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.596398][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.600430][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.611254][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.634120][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.640036][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.644215][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.653667][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.689438][ T5951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.695765][ T5951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.701893][ T5951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.708519][ T5951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.759311][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.764346][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.771227][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.778236][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.783879][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.800937][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.820473][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.829689][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.832070][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.837157][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.839420][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.861458][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.879683][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.882136][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.901276][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.903568][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.911869][ T5950] Bluetooth: hci2: command tx timeout [ 46.911873][ T5952] Bluetooth: hci0: command tx timeout [ 46.916027][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.920891][ T5950] Bluetooth: hci3: command tx timeout [ 46.920956][ T5952] Bluetooth: hci1: command tx timeout [ 46.944498][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.961294][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.963566][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.976801][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.982476][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.984791][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.016174][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.024510][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.027352][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.034080][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.040622][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.043010][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.063290][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.080541][ T5945] veth0_vlan: entered promiscuous mode [ 47.096494][ T5945] veth1_vlan: entered promiscuous mode [ 47.129305][ T5944] veth0_vlan: entered promiscuous mode [ 47.136645][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.142900][ T5945] veth0_macvtap: entered promiscuous mode [ 47.149398][ T5944] veth1_vlan: entered promiscuous mode [ 47.153549][ T5945] veth1_macvtap: entered promiscuous mode [ 47.171740][ T5944] veth0_macvtap: entered promiscuous mode [ 47.181747][ T5944] veth1_macvtap: entered promiscuous mode [ 47.186401][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.197901][ T5951] veth0_vlan: entered promiscuous mode [ 47.201515][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.205942][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.209251][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.214747][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.219205][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.222801][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.226631][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.232704][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.235526][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.238215][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.241105][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.246159][ T5951] veth1_vlan: entered promiscuous mode [ 47.248945][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.253439][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.256918][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.260511][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.270240][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.328659][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.333504][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.343978][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.346493][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.348980][ T5943] veth0_vlan: entered promiscuous mode [ 47.362859][ T5951] veth0_macvtap: entered promiscuous mode [ 47.371558][ T5943] veth1_vlan: entered promiscuous mode [ 47.374428][ T5951] veth1_macvtap: entered promiscuous mode [ 47.377520][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.380002][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.394267][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.397568][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.401044][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.404259][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.408301][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.414334][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.417610][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.420927][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.424187][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.427931][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.438162][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.440219][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.440359][ T5951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.440391][ T5951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.440405][ T5951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.440418][ T5951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.461571][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.467263][ T5943] veth0_macvtap: entered promiscuous mode [ 47.472469][ T5943] veth1_macvtap: entered promiscuous mode [ 47.530943][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.534104][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.540028][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.543364][ T6015] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 47.545273][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.546536][ T6015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 47.549842][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.555780][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.559329][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.562788][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.567180][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.574974][ T6015] dummy0: entered promiscuous mode [ 47.577350][ T6015] bridge0: port 3(dummy0) entered blocking state [ 47.579433][ T6015] bridge0: port 3(dummy0) entered disabled state [ 47.582096][ T6015] dummy0: entered allmulticast mode [ 47.585069][ T6015] bridge0: port 3(dummy0) entered blocking state [ 47.587316][ T6015] bridge0: port 3(dummy0) entered forwarding state [ 47.591816][ T6016] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 47.594407][ T6016] netlink: 558 bytes leftover after parsing attributes in process `syz.2.3'. [ 47.599815][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.603329][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.607176][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.610411][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.613565][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.616942][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.620753][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.627523][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.627975][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.630492][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.633627][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.638673][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.641541][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.650429][ T6019] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 47.660159][ T6018] syzkaller1: entered promiscuous mode [ 47.662616][ T6018] syzkaller1: entered allmulticast mode [ 47.711843][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.714331][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.719043][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.724128][ T6022] netlink: 'syz.3.4': attribute type 7 has an invalid length. [ 47.726552][ T6022] netlink: 'syz.3.4': attribute type 8 has an invalid length. [ 47.728898][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.730312][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.734637][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.768276][ T6025] syzkaller1: entered promiscuous mode [ 47.770095][ T6025] syzkaller1: entered allmulticast mode [ 47.962420][ T6036] ======================================================= [ 47.962420][ T6036] WARNING: The mand mount option has been deprecated and [ 47.962420][ T6036] and is ignored by this kernel. Remove the mand [ 47.962420][ T6036] option from the mount to silence this warning. [ 47.962420][ T6036] ======================================================= [ 48.013509][ T6038] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 48.015974][ T6038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11'. [ 48.018714][ T6038] dummy0: entered promiscuous mode [ 48.020706][ T837] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 48.020710][ T6038] bridge0: port 3(dummy0) entered blocking state [ 48.025164][ T6038] bridge0: port 3(dummy0) entered disabled state [ 48.027248][ T6038] dummy0: entered allmulticast mode [ 48.029996][ T6038] bridge0: port 3(dummy0) entered blocking state [ 48.032188][ T6038] bridge0: port 3(dummy0) entered forwarding state [ 48.112738][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.115171][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.117451][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'. [ 48.120186][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.120236][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.122794][ T6044] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14'. [ 48.127908][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.130240][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.133514][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.135856][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.138158][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.140472][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.143074][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.145387][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.147697][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.150025][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.152741][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.155105][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.157407][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.159727][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.162468][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.164795][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.167098][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.169497][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.172073][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.174368][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.176681][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.179020][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.181458][ T837] usb 6-1: Using ep0 maxpacket: 32 [ 48.183162][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.185993][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.188502][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.191566][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.194030][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.196532][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.199027][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.201633][ T837] usb 6-1: unable to get BOS descriptor or descriptor too short [ 48.204443][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.206918][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.209793][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.212341][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.214745][ T837] usb 6-1: config index 0 descriptor too short (expected 34347, got 43) [ 48.217336][ T837] usb 6-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 48.220025][ T837] usb 6-1: config 31 has an invalid descriptor of length 174, skipping remainder of the config [ 48.223197][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.225498][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.227697][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.229832][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.232079][ T837] usb 6-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 48.234764][ T837] usb 6-1: config 31 has no interface number 0 [ 48.236655][ T837] usb 6-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 48.240084][ T837] usb 6-1: config 31 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 119, changing to 7 [ 48.243562][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.245847][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.248091][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.250351][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.252722][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.254987][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.257232][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.259546][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.261851][ T837] usb 6-1: config 31 interface 81 altsetting 3 endpoint 0x83 has invalid maxpacket 34394, setting to 1024 [ 48.265239][ T837] usb 6-1: config 31 interface 81 has no altsetting 0 [ 48.267356][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.269698][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.272190][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.274518][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.276885][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.279213][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.282167][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.284576][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.286932][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.289318][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.291909][ T837] usb 6-1: string descriptor 0 read error: -22 [ 48.293821][ T837] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 48.296586][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.299996][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.303199][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.305484][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.310608][ T837] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:31.81/input/input5 [ 48.314223][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.316480][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.318761][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.322194][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.325106][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.327797][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.330788][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.333367][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.336166][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.338457][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.342611][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.344885][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.347159][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.348360][ T6047] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 48.349454][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.356556][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.358900][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.361321][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.363681][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.365980][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.368287][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.370787][ T6006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.374912][ T6006] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 48.465339][ T6058] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 48.467811][ T6058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20'. [ 48.476183][ T6058] dummy0: entered promiscuous mode [ 48.478176][ T6058] bridge0: port 3(dummy0) entered blocking state [ 48.480260][ T6058] bridge0: port 3(dummy0) entered disabled state [ 48.482806][ T6058] dummy0: entered allmulticast mode [ 48.485400][ T6058] bridge0: port 3(dummy0) entered blocking state [ 48.487406][ T6058] bridge0: port 3(dummy0) entered forwarding state [ 48.579111][ T5986] usb 6-1: USB disconnect, device number 2 [ 48.649751][ T6072] tipc: Failed to obtain node identity [ 48.653389][ T6072] tipc: Enabling of bearer rejected, failed to enable media [ 48.724441][ T6082] syzkaller1: entered promiscuous mode [ 48.726213][ T6082] syzkaller1: entered allmulticast mode [ 48.728993][ T6082] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 48.784823][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 48.788441][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.32'. [ 48.923548][ T5952] block nbd0: Receive control failed (result -32) [ 48.960184][ T6090] syzkaller1: entered promiscuous mode [ 48.962577][ T6090] syzkaller1: entered allmulticast mode [ 48.991105][ T5952] Bluetooth: hci1: command tx timeout [ 48.991982][ T5959] Bluetooth: hci2: command tx timeout [ 48.994869][ T5950] Bluetooth: hci0: command tx timeout [ 48.995271][ T67] Bluetooth: hci3: command tx timeout [ 49.124769][ T6092] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 49.164876][ T6092] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 49.173012][ T6092] CIFS mount error: No usable UNC path provided in device string! [ 49.173012][ T6092] [ 49.176217][ T6092] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 49.515644][ T6102] overlay: Bad value for 'workdir' [ 49.594142][ T6106] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 49.596649][ T6106] dummy0: entered promiscuous mode [ 49.598667][ T6106] bridge0: port 3(dummy0) entered blocking state [ 49.600922][ T6106] bridge0: port 3(dummy0) entered disabled state [ 49.603073][ T6106] dummy0: entered allmulticast mode [ 49.605719][ T6106] bridge0: port 3(dummy0) entered blocking state [ 49.607744][ T6106] bridge0: port 3(dummy0) entered forwarding state [ 49.664721][ T40] kauditd_printk_skb: 82 callbacks suppressed [ 49.664736][ T40] audit: type=1400 audit(1745613931.023:197): avc: denied { write } for pid=6109 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.673325][ T40] audit: type=1400 audit(1745613931.023:198): avc: denied { create } for pid=6109 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.720770][ T40] audit: type=1400 audit(1745613931.073:199): avc: denied { write } for pid=6109 comm="syz.3.41" path="socket:[7998]" dev="sockfs" ino=7998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.848132][ T40] audit: type=1400 audit(1745613931.203:200): avc: denied { mount } for pid=6118 comm="syz.1.45" name="/" dev="ramfs" ino=8813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.855553][ T40] audit: type=1400 audit(1745613931.203:201): avc: denied { allowed } for pid=6118 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.862679][ T40] audit: type=1400 audit(1745613931.213:202): avc: denied { create } for pid=6118 comm="syz.1.45" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.868896][ T40] audit: type=1400 audit(1745613931.213:203): avc: denied { map } for pid=6118 comm="syz.1.45" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.877949][ T40] audit: type=1400 audit(1745613931.213:204): avc: denied { read write } for pid=6118 comm="syz.1.45" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.891662][ T40] audit: type=1400 audit(1745613931.253:205): avc: denied { setopt } for pid=6120 comm="syz.1.46" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.898653][ T40] audit: type=1400 audit(1745613931.253:206): avc: denied { write } for pid=6120 comm="syz.1.46" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.962889][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.985540][ T6127] netlink: 'syz.1.49': attribute type 10 has an invalid length. [ 50.014809][ T6129] Zero length message leads to an empty skb [ 50.019576][ T6129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6129 comm=syz.1.50 [ 50.108153][ T6138] Bluetooth: MGMT ver 1.23 [ 50.113367][ T6138] tipc: Failed to obtain node identity [ 50.115118][ T6138] tipc: Enabling of bearer rejected, failed to enable media [ 50.121181][ T58] usb 8-1: Using ep0 maxpacket: 16 [ 50.124656][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 50.128219][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16384, setting to 1024 [ 50.137953][ T58] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.142144][ T58] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 50.144936][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.149445][ T58] usb 8-1: config 0 descriptor?? [ 50.154817][ T58] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input6 [ 50.357260][ T6004] usb 8-1: USB disconnect, device number 2 [ 50.629318][ T6162] FAULT_INJECTION: forcing a failure. [ 50.629318][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 50.633344][ T6162] CPU: 1 UID: 0 PID: 6162 Comm: syz.2.62 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 50.633358][ T6162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.633364][ T6162] Call Trace: [ 50.633367][ T6162] [ 50.633371][ T6162] dump_stack_lvl+0x16c/0x1f0 [ 50.633389][ T6162] should_fail_ex+0x512/0x640 [ 50.633401][ T6162] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 50.633413][ T6162] should_failslab+0xc2/0x120 [ 50.633425][ T6162] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 50.633436][ T6162] ? __alloc_skb+0x2b2/0x380 [ 50.633450][ T6162] __alloc_skb+0x2b2/0x380 [ 50.633461][ T6162] ? __pfx___alloc_skb+0x10/0x10 [ 50.633472][ T6162] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 50.633485][ T6162] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 50.633502][ T6162] netlink_alloc_large_skb+0x69/0x130 [ 50.633518][ T6162] netlink_sendmsg+0x6a1/0xdd0 [ 50.633534][ T6162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.633552][ T6162] ____sys_sendmsg+0xa95/0xc70 [ 50.633568][ T6162] ? copy_msghdr_from_user+0x10a/0x160 [ 50.633580][ T6162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.633601][ T6162] ___sys_sendmsg+0x134/0x1d0 [ 50.633614][ T6162] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.633641][ T6162] __sys_sendmsg+0x16d/0x220 [ 50.633653][ T6162] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.633669][ T6162] ? rcu_is_watching+0x12/0xc0 [ 50.633686][ T6162] do_syscall_64+0xcd/0x260 [ 50.633701][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.633712][ T6162] RIP: 0033:0x7fb0ac78e969 [ 50.633720][ T6162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.633729][ T6162] RSP: 002b:00007fb0ad624038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.633739][ T6162] RAX: ffffffffffffffda RBX: 00007fb0ac9b5fa0 RCX: 00007fb0ac78e969 [ 50.633745][ T6162] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 50.633751][ T6162] RBP: 00007fb0ad624090 R08: 0000000000000000 R09: 0000000000000000 [ 50.633757][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.633763][ T6162] R13: 0000000000000000 R14: 00007fb0ac9b5fa0 R15: 00007fff3c10bb08 [ 50.633775][ T6162] [ 50.742364][ T6164] warning: `syz.2.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.841505][ T6172] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.872125][ T6174] virtio-fs: tag not found [ 51.031100][ T6184] FAULT_INJECTION: forcing a failure. [ 51.031100][ T6184] name failslab, interval 1, probability 0, space 0, times 0 [ 51.035076][ T6184] CPU: 3 UID: 0 PID: 6184 Comm: syz.3.71 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 51.035090][ T6184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.035096][ T6184] Call Trace: [ 51.035100][ T6184] [ 51.035103][ T6184] dump_stack_lvl+0x16c/0x1f0 [ 51.035121][ T6184] should_fail_ex+0x512/0x640 [ 51.035133][ T6184] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 51.035150][ T6184] should_failslab+0xc2/0x120 [ 51.035162][ T6184] __kmalloc_cache_noprof+0x6a/0x3e0 [ 51.035177][ T6184] ? __asan_memset+0x23/0x50 [ 51.035191][ T6184] ? alloc_netdev_mqs+0xece/0x1570 [ 51.035205][ T6184] ? __xdp_rxq_info_reg+0x14e/0x2d0 [ 51.035220][ T6184] alloc_netdev_mqs+0xece/0x1570 [ 51.035236][ T6184] bnep_add_connection+0x24d/0xd20 [ 51.035250][ T6184] ? __fget_files+0x25a/0x3c0 [ 51.035260][ T6184] ? __pfx_bnep_add_connection+0x10/0x10 [ 51.035274][ T6184] ? __fget_files+0x20e/0x3c0 [ 51.035286][ T6184] do_bnep_sock_ioctl.constprop.0+0x496/0x590 [ 51.035301][ T6184] ? __pfx_do_bnep_sock_ioctl.constprop.0+0x10/0x10 [ 51.035317][ T6184] ? find_held_lock+0x2b/0x80 [ 51.035336][ T6184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.035348][ T6184] sock_do_ioctl+0x115/0x280 [ 51.035364][ T6184] ? __pfx_sock_do_ioctl+0x10/0x10 [ 51.035382][ T6184] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 51.035399][ T6184] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 51.035421][ T6184] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 51.035449][ T6184] sock_ioctl+0x227/0x6b0 [ 51.035465][ T6184] ? __pfx_sock_ioctl+0x10/0x10 [ 51.035489][ T6184] ? hook_file_ioctl_common+0x145/0x410 [ 51.035511][ T6184] ? selinux_file_ioctl+0x180/0x270 [ 51.035533][ T6184] ? selinux_file_ioctl+0xb4/0x270 [ 51.035557][ T6184] ? __pfx_sock_ioctl+0x10/0x10 [ 51.035583][ T6184] __x64_sys_ioctl+0x190/0x200 [ 51.035607][ T6184] do_syscall_64+0xcd/0x260 [ 51.035631][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.035648][ T6184] RIP: 0033:0x7f902438e969 [ 51.035661][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.035676][ T6184] RSP: 002b:00007f90221f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.035691][ T6184] RAX: ffffffffffffffda RBX: 00007f90245b5fa0 RCX: 00007f902438e969 [ 51.035701][ T6184] RDX: 0000200000000380 RSI: 00000000400442c8 RDI: 0000000000000005 [ 51.035711][ T6184] RBP: 00007f90221f6090 R08: 0000000000000000 R09: 0000000000000000 [ 51.035720][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.035728][ T6184] R13: 0000000000000000 R14: 00007f90245b5fa0 R15: 00007ffd88a22ea8 [ 51.035750][ T6184] [ 51.092416][ T67] Bluetooth: hci0: command tx timeout [ 51.092464][ T5950] Bluetooth: hci1: command tx timeout [ 51.092497][ T5950] Bluetooth: hci3: command tx timeout [ 51.092523][ T5950] Bluetooth: hci2: command tx timeout [ 51.431617][ T6200] syzkaller1: entered promiscuous mode [ 51.433391][ T6200] syzkaller1: entered allmulticast mode [ 51.629484][ T6211] 9pnet: Unknown protocol version 9p2000.uaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 51.758163][ T6219] netlink: 'syz.3.83': attribute type 10 has an invalid length. [ 51.818795][ T6225] xt_nat: multiple ranges no longer supported [ 51.871032][ T6231] kernel read not supported for file /policy (pid: 6231 comm: syz.3.88) [ 51.879549][ T6231] tipc: Failed to obtain node identity [ 51.885483][ T6231] tipc: Enabling of bearer rejected, failed to enable media [ 51.924510][ T6237] autofs: Unknown parameter '^G8Y$ !]B*|L [ 51.924510][ T6237] gQ'g3ah*|y [ 51.924510][ T6237] Bk'8IϨ5:z' [ 51.928322][ T6239] program syz.3.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.971239][ T6242] syzkaller1: entered promiscuous mode [ 51.972986][ T6242] syzkaller1: entered allmulticast mode [ 52.033995][ T6244] netlink: 'syz.1.93': attribute type 11 has an invalid length. [ 52.101922][ T6250] syzkaller1: entered promiscuous mode [ 52.103725][ T6250] syzkaller1: entered allmulticast mode [ 52.106614][ T6250] FAULT_INJECTION: forcing a failure. [ 52.106614][ T6250] name failslab, interval 1, probability 0, space 0, times 0 [ 52.111113][ T6250] CPU: 3 UID: 0 PID: 6250 Comm: syz.3.95 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 52.111128][ T6250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.111134][ T6250] Call Trace: [ 52.111139][ T6250] [ 52.111143][ T6250] dump_stack_lvl+0x16c/0x1f0 [ 52.111172][ T6250] should_fail_ex+0x512/0x640 [ 52.111187][ T6250] ? rcu_is_watching+0x12/0xc0 [ 52.111202][ T6250] should_failslab+0xc2/0x120 [ 52.111215][ T6250] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 52.111226][ T6250] ? __local_bh_enable_ip+0xa4/0x120 [ 52.111239][ T6250] ? __skb_ext_alloc+0x1a/0x80 [ 52.111251][ T6250] __skb_ext_alloc+0x1a/0x80 [ 52.111259][ T6250] skb_ext_add+0x232/0x7a0 [ 52.111267][ T6250] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.111280][ T6250] ? ipt_do_table+0xd48/0x1ac0 [ 52.111298][ T6250] secpath_set+0xfb/0x1f0 [ 52.111308][ T6250] xfrm_input+0x692/0x7170 [ 52.111322][ T6250] ? __pfx_xfrm_input+0x10/0x10 [ 52.111331][ T6250] ? find_held_lock+0x2b/0x80 [ 52.111345][ T6250] ? ip_tunnel_lookup+0x805/0xb70 [ 52.111360][ T6250] vti_input+0x2be/0x3d0 [ 52.111376][ T6250] ? __pfx_vti_input+0x10/0x10 [ 52.111390][ T6250] ? nf_hook_slow+0x132/0x200 [ 52.111404][ T6250] xfrm4_ipcomp_rcv+0x9f/0x260 [ 52.111414][ T6250] ? __pfx_xfrm4_ipcomp_rcv+0x10/0x10 [ 52.111423][ T6250] ip_protocol_deliver_rcu+0x444/0x4c0 [ 52.111438][ T6250] ip_local_deliver_finish+0x316/0x570 [ 52.111451][ T6250] ip_local_deliver+0x18e/0x1f0 [ 52.111462][ T6250] ? __pfx_ip_local_deliver+0x10/0x10 [ 52.111473][ T6250] ip_rcv+0x2c3/0x5d0 [ 52.111484][ T6250] ? __pfx_ip_rcv+0x10/0x10 [ 52.111494][ T6250] __netif_receive_skb_one_core+0x197/0x1e0 [ 52.111507][ T6250] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 52.111518][ T6250] ? lock_acquire+0x179/0x350 [ 52.111531][ T6250] __netif_receive_skb+0x1d/0x160 [ 52.111542][ T6250] netif_receive_skb+0x137/0x7b0 [ 52.111552][ T6250] ? __pfx_netif_receive_skb+0x10/0x10 [ 52.111562][ T6250] ? _copy_from_iter+0x161/0x15b0 [ 52.111575][ T6250] ? __pfx__copy_from_iter+0x10/0x10 [ 52.111588][ T6250] tun_rx_batched.isra.0+0x3ee/0x740 [ 52.111603][ T6250] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 52.111618][ T6250] ? tun_get_user+0x1c0d/0x3b10 [ 52.111631][ T6250] ? rcu_is_watching+0x12/0xc0 [ 52.111645][ T6250] tun_get_user+0x2897/0x3b10 [ 52.111686][ T6250] ? __pfx_tun_get_user+0x10/0x10 [ 52.111699][ T6250] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 52.111714][ T6250] ? find_held_lock+0x2b/0x80 [ 52.111727][ T6250] ? tun_get+0x191/0x370 [ 52.111741][ T6250] tun_chr_write_iter+0xdc/0x210 [ 52.111760][ T6250] vfs_write+0x5ba/0x1180 [ 52.111777][ T6250] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 52.111791][ T6250] ? __pfx_vfs_write+0x10/0x10 [ 52.111806][ T6250] ? find_held_lock+0x2b/0x80 [ 52.111826][ T6250] ksys_write+0x12a/0x240 [ 52.111834][ T6250] ? __pfx_ksys_write+0x10/0x10 [ 52.111847][ T6250] do_syscall_64+0xcd/0x260 [ 52.111862][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.111873][ T6250] RIP: 0033:0x7f902438e969 [ 52.111882][ T6250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.111891][ T6250] RSP: 002b:00007f90221f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.111901][ T6250] RAX: ffffffffffffffda RBX: 00007f90245b5fa0 RCX: 00007f902438e969 [ 52.111907][ T6250] RDX: 0000000000000fce RSI: 0000200000002280 RDI: 0000000000000003 [ 52.111913][ T6250] RBP: 00007f90221f6090 R08: 0000000000000000 R09: 0000000000000000 [ 52.111919][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.111925][ T6250] R13: 0000000000000000 R14: 00007f90245b5fa0 R15: 00007ffd88a22ea8 [ 52.111937][ T6250] [ 52.114884][ T6252] dccp_invalid_packet: invalid packet type [ 52.261848][ T67] block nbd1: Receive control failed (result -32) [ 52.365803][ T6267] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 52.604430][ T6288] tipc: Failed to obtain node identity [ 52.607164][ T6288] tipc: Enabling of bearer rejected, failed to enable media [ 52.675142][ T6294] validate_nla: 3 callbacks suppressed [ 52.675153][ T6294] netlink: 'syz.3.114': attribute type 12 has an invalid length. [ 52.735206][ T6300] netlink: 'syz.2.117': attribute type 10 has an invalid length. [ 52.737885][ T6300] __nla_validate_parse: 14 callbacks suppressed [ 52.737893][ T6300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.117'. [ 52.749845][ T6298] netlink: 36 bytes leftover after parsing attributes in process `syz.3.116'. [ 52.781544][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 52.836780][ T6315] netlink: 'syz.0.120': attribute type 10 has an invalid length. [ 52.870293][ T6315] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 52.874836][ T6308] program syz.0.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.875205][ T6305] tipc: Failed to obtain node identity [ 52.879820][ T6305] tipc: Enabling of bearer rejected, failed to enable media [ 52.885458][ T6308] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 53.038561][ T6320] syzkaller1: entered promiscuous mode [ 53.040179][ T6320] syzkaller1: entered allmulticast mode [ 53.151955][ T67] Bluetooth: hci2: command tx timeout [ 53.153935][ T67] Bluetooth: hci3: command tx timeout [ 53.156122][ T67] Bluetooth: hci1: command tx timeout [ 53.157884][ T5959] Bluetooth: hci0: command tx timeout [ 53.331911][ T6324] xt_hashlimit: size too large, truncated to 1048576 [ 53.341556][ T6324] syz.1.122: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 53.348542][ T6324] CPU: 3 UID: 0 PID: 6324 Comm: syz.1.122 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 53.348562][ T6324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.348571][ T6324] Call Trace: [ 53.348577][ T6324] [ 53.348583][ T6324] dump_stack_lvl+0x16c/0x1f0 [ 53.348620][ T6324] warn_alloc+0x248/0x3a0 [ 53.348638][ T6324] ? __pfx_warn_alloc+0x10/0x10 [ 53.348661][ T6324] ? __get_vm_area_node+0x1b9/0x300 [ 53.348680][ T6324] ? __get_vm_area_node+0x1e5/0x300 [ 53.348701][ T6324] __vmalloc_node_range_noprof+0x1110/0x1540 [ 53.348729][ T6324] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 53.348763][ T6324] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 53.348791][ T6324] __kvmalloc_node_noprof+0x2ff/0x600 [ 53.348803][ T6324] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 53.348827][ T6324] ? net_generic+0xea/0x2a0 [ 53.348845][ T6324] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 53.348872][ T6324] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 53.348892][ T6324] hashlimit_mt_check_common+0x8bb/0x1460 [ 53.348917][ T6324] hashlimit_mt_check+0x71/0x90 [ 53.348938][ T6324] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 53.348959][ T6324] xt_check_match+0x283/0xa50 [ 53.348980][ T6324] ? bit_wait_timeout+0x162/0x170 [ 53.348998][ T6324] ? __pfx_xt_check_match+0x10/0x10 [ 53.349022][ T6324] ? xt_find_target+0x1f2/0x290 [ 53.349045][ T6324] ? xt_find_match+0x1f6/0x290 [ 53.349068][ T6324] find_check_entry.constprop.0+0x34e/0xa20 [ 53.349093][ T6324] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 53.349121][ T6324] ? kasan_quarantine_put+0x10a/0x240 [ 53.349135][ T6324] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.349156][ T6324] ? kfree+0x2b6/0x4d0 [ 53.349175][ T6324] ? translate_table+0xc0e/0x17b0 [ 53.349196][ T6324] translate_table+0xd0b/0x17b0 [ 53.349275][ T6324] ? __pfx_translate_table+0x10/0x10 [ 53.349293][ T6324] ? xt_alloc_table_info+0x3e/0xa0 [ 53.349319][ T6324] do_ip6t_set_ctl+0x570/0xb00 [ 53.349340][ T6324] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 53.349361][ T6324] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 53.349384][ T6324] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 53.349417][ T6324] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 53.349439][ T6324] nf_setsockopt+0x8a/0xf0 [ 53.349456][ T6324] ipv6_setsockopt+0x135/0x170 [ 53.349479][ T6324] rawv6_setsockopt+0xc2/0x510 [ 53.349497][ T6324] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 53.349516][ T6324] ? selinux_socket_setsockopt+0x6a/0x80 [ 53.349539][ T6324] ? sock_common_setsockopt+0x2e/0xf0 [ 53.349557][ T6324] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 53.349578][ T6324] do_sock_setsockopt+0x221/0x470 [ 53.349599][ T6324] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 53.349632][ T6324] __sys_setsockopt+0x1a0/0x230 [ 53.349650][ T6324] __x64_sys_setsockopt+0xbd/0x160 [ 53.349666][ T6324] ? do_syscall_64+0x91/0x260 [ 53.349686][ T6324] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.349704][ T6324] do_syscall_64+0xcd/0x260 [ 53.349725][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.349744][ T6324] RIP: 0033:0x7feb49d8e969 [ 53.349756][ T6324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.349771][ T6324] RSP: 002b:00007feb4aca2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 53.349784][ T6324] RAX: ffffffffffffffda RBX: 00007feb49fb5fa0 RCX: 00007feb49d8e969 [ 53.349793][ T6324] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 53.349802][ T6324] RBP: 00007feb49e10ab1 R08: 0000000000000588 R09: 0000000000000000 [ 53.349810][ T6324] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 53.349819][ T6324] R13: 0000000000000000 R14: 00007feb49fb5fa0 R15: 00007ffc68bd3648 [ 53.349838][ T6324] [ 53.349842][ T6324] Mem-Info: [ 53.491275][ T6324] active_anon:21755 inactive_anon:0 isolated_anon:0 [ 53.491275][ T6324] active_file:10716 inactive_file:38451 isolated_file:0 [ 53.491275][ T6324] unevictable:1797 dirty:1719 writeback:0 [ 53.491275][ T6324] slab_reclaimable:10933 slab_unreclaimable:70763 [ 53.491275][ T6324] mapped:33602 shmem:18041 pagetables:919 [ 53.491275][ T6324] sec_pagetables:295 bounce:0 [ 53.491275][ T6324] kernel_misc_reclaimable:0 [ 53.491275][ T6324] free:456709 free_pcp:4675 free_cma:0 [ 53.506334][ T6324] Node 0 active_anon:89500kB inactive_anon:0kB active_file:42864kB inactive_file:153728kB unevictable:3652kB isolated(anon):0kB isolated(file):0kB mapped:134780kB dirty:6836kB writeback:0kB shmem:71108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11728kB pagetables:3676kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB [ 53.517498][ T6324] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:40kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 53.527714][ T6324] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 53.535975][ T6324] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 53.537786][ T6324] Node 0 DMA32 free:233624kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB active_anon:89872kB inactive_anon:0kB active_file:42864kB inactive_file:153728kB unevictable:3652kB writepending:6836kB present:2080628kB managed:1265880kB mlocked:116kB bounce:0kB free_pcp:14304kB local_pcp:292kB free_cma:0kB [ 53.547831][ T6324] lowmem_reserve[]: 0 0 0 0 0 [ 53.549389][ T6324] Node 1 Normal free:1578728kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:40kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:1920kB local_pcp:160kB free_cma:0kB [ 53.555268][ T6333] syzkaller1: entered promiscuous mode [ 53.558723][ T6324] lowmem_reserve[]: [ 53.560271][ T6333] syzkaller1: entered allmulticast mode [ 53.561623][ T6324] 0 0 0 0 0 [ 53.561706][ T6324] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 53.561788][ T6324] Node 0 DMA32: 84*4kB (UME) 63*8kB (UME) 52*16kB (UE) 153*32kB (UME) 35*64kB (UME) 16*128kB (UE) 9*256kB (UME) 2*512kB (U) 3*1024kB (UME) 2*2048kB (E) 55*4096kB (M) = 246632kB [ 53.561873][ T6324] Node 1 Normal: 6*4kB (UME) 11*8kB (UME) 17*16kB (UME) 108*32kB (UME) 50*64kB (UME) 21*128kB (UME) 4*256kB (UE) 7*512kB (UME) 2*1024kB (UE) 1*2048kB (M) 381*4096kB [ 53.566048][ T6333] FAULT_INJECTION: forcing a failure. [ 53.566048][ T6333] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.568675][ T6324] (M) = 1579008kB [ 53.568686][ T6324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 53.574225][ T6333] CPU: 1 UID: 0 PID: 6333 Comm: syz.0.125 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 53.574240][ T6333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.574246][ T6333] Call Trace: [ 53.574250][ T6333] [ 53.574253][ T6333] dump_stack_lvl+0x16c/0x1f0 [ 53.574271][ T6333] should_fail_ex+0x512/0x640 [ 53.574285][ T6333] _copy_to_user+0x32/0xd0 [ 53.574298][ T6333] simple_read_from_buffer+0xcb/0x170 [ 53.574316][ T6333] proc_fail_nth_read+0x197/0x270 [ 53.574332][ T6333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.574348][ T6333] ? rw_verify_area+0xcf/0x680 [ 53.574362][ T6333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.574378][ T6333] vfs_read+0x1de/0xc70 [ 53.574411][ T6333] ? __pfx___mutex_lock+0x10/0x10 [ 53.574426][ T6333] ? __pfx_vfs_read+0x10/0x10 [ 53.574445][ T6333] ? __fget_files+0x20e/0x3c0 [ 53.574458][ T6333] ksys_read+0x12a/0x240 [ 53.574466][ T6333] ? __pfx_ksys_read+0x10/0x10 [ 53.574481][ T6333] ? rcu_is_watching+0x12/0xc0 [ 53.574497][ T6333] do_syscall_64+0xcd/0x260 [ 53.574512][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.574523][ T6333] RIP: 0033:0x7fea7298d37c [ 53.574531][ T6333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.574540][ T6333] RSP: 002b:00007fea707f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.574550][ T6333] RAX: ffffffffffffffda RBX: 00007fea72bb5fa0 RCX: 00007fea7298d37c [ 53.574556][ T6333] RDX: 000000000000000f RSI: 00007fea707f60a0 RDI: 0000000000000005 [ 53.574562][ T6333] RBP: 00007fea707f6090 R08: 0000000000000000 R09: 0000000000000000 [ 53.574568][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.574573][ T6333] R13: 0000000000000000 R14: 00007fea72bb5fa0 R15: 00007ffdb2454548 [ 53.574585][ T6333] [ 53.645481][ T6324] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 53.648283][ T6324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 53.651349][ T6324] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 53.654240][ T6324] 63509 total pagecache pages [ 53.655747][ T6324] 0 pages in swap cache [ 53.657067][ T6324] Free swap = 124996kB [ 53.658428][ T6324] Total swap = 124996kB [ 53.659781][ T6324] 1048443 pages RAM [ 53.661101][ T6324] 0 pages HighMem/MovableOnly [ 53.662781][ T6324] 282642 pages reserved [ 53.664200][ T6324] 0 pages cma reserved [ 53.692457][ T6335] FAULT_INJECTION: forcing a failure. [ 53.692457][ T6335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.696860][ T6335] CPU: 2 UID: 0 PID: 6335 Comm: syz.1.127 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 53.696874][ T6335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.696880][ T6335] Call Trace: [ 53.696884][ T6335] [ 53.696888][ T6335] dump_stack_lvl+0x16c/0x1f0 [ 53.696906][ T6335] should_fail_ex+0x512/0x640 [ 53.696919][ T6335] _copy_from_iter+0x2a4/0x15b0 [ 53.696933][ T6335] ? __alloc_skb+0x200/0x380 [ 53.696945][ T6335] ? __pfx__copy_from_iter+0x10/0x10 [ 53.696956][ T6335] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 53.696969][ T6335] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 53.696988][ T6335] netlink_sendmsg+0x829/0xdd0 [ 53.697004][ T6335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.697023][ T6335] ____sys_sendmsg+0xa95/0xc70 [ 53.697039][ T6335] ? copy_msghdr_from_user+0x10a/0x160 [ 53.697055][ T6335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.697076][ T6335] ___sys_sendmsg+0x134/0x1d0 [ 53.697088][ T6335] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.697115][ T6335] __sys_sendmsg+0x16d/0x220 [ 53.697127][ T6335] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.697148][ T6335] ? rcu_is_watching+0x12/0xc0 [ 53.697169][ T6335] do_syscall_64+0xcd/0x260 [ 53.697184][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.697195][ T6335] RIP: 0033:0x7feb49d8e969 [ 53.697204][ T6335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.697213][ T6335] RSP: 002b:00007feb4aca2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.697224][ T6335] RAX: ffffffffffffffda RBX: 00007feb49fb5fa0 RCX: 00007feb49d8e969 [ 53.697234][ T6335] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 53.697243][ T6335] RBP: 00007feb4aca2090 R08: 0000000000000000 R09: 0000000000000000 [ 53.697252][ T6335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.697261][ T6335] R13: 0000000000000000 R14: 00007feb49fb5fa0 R15: 00007ffc68bd3648 [ 53.697281][ T6335] [ 53.716575][ T6337] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 53.747736][ T6339] netlink: 48 bytes leftover after parsing attributes in process `syz.1.129'. [ 53.748613][ T6337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.128'. [ 53.822304][ T6341] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 53.825394][ T6341] netlink: 232 bytes leftover after parsing attributes in process `syz.1.130'. [ 53.827565][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 53.867382][ T6350] netlink: 'syz.0.131': attribute type 1 has an invalid length. [ 53.872534][ T6350] netlink: 80 bytes leftover after parsing attributes in process `syz.0.131'. [ 54.523584][ T5959] block nbd2: Receive control failed (result -32) [ 54.595089][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'. [ 54.653489][ T6372] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 54.655972][ T6372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 54.687657][ T40] kauditd_printk_skb: 1941 callbacks suppressed [ 54.687670][ T40] audit: type=1326 audit(1745613936.043:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.0.141" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea7298e969 code=0x0 [ 54.716446][ T40] audit: type=1400 audit(1745613936.073:2149): avc: denied { create } for pid=6375 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 54.722685][ T40] audit: type=1400 audit(1745613936.073:2150): avc: denied { setopt } for pid=6375 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 54.895654][ T6385] syzkaller1: entered promiscuous mode [ 54.897368][ T6385] syzkaller1: entered allmulticast mode [ 55.015471][ T40] audit: type=1400 audit(1745613936.373:2151): avc: denied { read } for pid=6386 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.021492][ T40] audit: type=1400 audit(1745613936.373:2152): avc: denied { read } for pid=6386 comm="syz.1.147" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 55.030710][ T40] audit: type=1400 audit(1745613936.373:2153): avc: denied { open } for pid=6386 comm="syz.1.147" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 55.083631][ T40] audit: type=1400 audit(1745613936.443:2154): avc: denied { bind } for pid=6389 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.218311][ T40] audit: type=1400 audit(1745613936.573:2155): avc: denied { ioctl } for pid=6393 comm="syz.1.149" path="pid:[4026532875]" dev="nsfs" ino=4026532875 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.593594][ T40] audit: type=1400 audit(1745613936.953:2156): avc: denied { ioctl } for pid=6401 comm="syz.0.152" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.602113][ T40] audit: type=1400 audit(1745613936.953:2157): avc: denied { create } for pid=6401 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 55.647015][ T6405] syzkaller1: entered promiscuous mode [ 55.648853][ T6405] syzkaller1: entered allmulticast mode [ 55.755877][ T6409] loop6: detected capacity change from 0 to 524287999 [ 55.772823][ T67] block nbd3: Receive control failed (result -32) [ 55.796257][ T6413] tipc: Failed to obtain node identity [ 55.798105][ T6413] tipc: Enabling of bearer rejected, failed to enable media [ 55.876163][ T6421] mmap: syz.3.161 (6421) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.916085][ T6431] netlink: 'syz.0.165': attribute type 10 has an invalid length. [ 55.922898][ T6429] sp0: Synchronizing with TNC [ 55.959196][ T6435] FAULT_INJECTION: forcing a failure. [ 55.959196][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 55.964602][ T6435] CPU: 2 UID: 0 PID: 6435 Comm: syz.0.166 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 55.964625][ T6435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.964635][ T6435] Call Trace: [ 55.964640][ T6435] [ 55.964647][ T6435] dump_stack_lvl+0x16c/0x1f0 [ 55.964701][ T6435] should_fail_ex+0x512/0x640 [ 55.964730][ T6435] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 55.964749][ T6435] should_failslab+0xc2/0x120 [ 55.964767][ T6435] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 55.964784][ T6435] ? __alloc_skb+0x2b2/0x380 [ 55.964804][ T6435] ? bpf_lsm_capable+0x9/0x10 [ 55.964822][ T6435] __alloc_skb+0x2b2/0x380 [ 55.964841][ T6435] ? __pfx___alloc_skb+0x10/0x10 [ 55.964859][ T6435] ? genl_rcv_msg+0x550/0x800 [ 55.964882][ T6435] ? genl_rcv_msg+0x4bb/0x800 [ 55.964913][ T6435] netlink_ack+0x15d/0xb80 [ 55.964935][ T6435] ? __lock_acquire+0xaa4/0x1ba0 [ 55.964955][ T6435] netlink_rcv_skb+0x347/0x440 [ 55.964977][ T6435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 55.965003][ T6435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 55.965034][ T6435] ? __pfx_down_read+0x10/0x10 [ 55.965057][ T6435] ? netlink_deliver_tap+0x1ae/0xd30 [ 55.965080][ T6435] genl_rcv+0x28/0x40 [ 55.965103][ T6435] netlink_unicast+0x53a/0x7f0 [ 55.965129][ T6435] ? __pfx_netlink_unicast+0x10/0x10 [ 55.965157][ T6435] netlink_sendmsg+0x8d1/0xdd0 [ 55.965182][ T6435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.965212][ T6435] ____sys_sendmsg+0xa95/0xc70 [ 55.965236][ T6435] ? copy_msghdr_from_user+0x10a/0x160 [ 55.965255][ T6435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 55.965284][ T6435] ___sys_sendmsg+0x134/0x1d0 [ 55.965301][ T6435] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.965341][ T6435] __sys_sendmsg+0x16d/0x220 [ 55.965357][ T6435] ? __pfx___sys_sendmsg+0x10/0x10 [ 55.965385][ T6435] do_syscall_64+0xcd/0x260 [ 55.965406][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.965423][ T6435] RIP: 0033:0x7fea7298e969 [ 55.965436][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.965451][ T6435] RSP: 002b:00007fea707f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.965468][ T6435] RAX: ffffffffffffffda RBX: 00007fea72bb5fa0 RCX: 00007fea7298e969 [ 55.965478][ T6435] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 55.965487][ T6435] RBP: 00007fea707f6090 R08: 0000000000000000 R09: 0000000000000000 [ 55.965498][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.965506][ T6435] R13: 0000000000000000 R14: 00007fea72bb5fa0 R15: 00007ffdb2454548 [ 55.965527][ T6435] [ 56.069329][ C2] vkms_vblank_simulate: vblank timer overrun [ 56.120280][ T6442] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.140321][ T6442] program syz.0.169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.145469][ T6439] netlink: 'syz.1.168': attribute type 3 has an invalid length. [ 56.232309][ T6454] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 56.257969][ T6456] FAULT_INJECTION: forcing a failure. [ 56.257969][ T6456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.263030][ T6456] CPU: 3 UID: 0 PID: 6456 Comm: syz.0.175 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 56.263045][ T6456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.263052][ T6456] Call Trace: [ 56.263056][ T6456] [ 56.263060][ T6456] dump_stack_lvl+0x16c/0x1f0 [ 56.263079][ T6456] should_fail_ex+0x512/0x640 [ 56.263092][ T6456] _copy_to_user+0x32/0xd0 [ 56.263105][ T6456] simple_read_from_buffer+0xcb/0x170 [ 56.263122][ T6456] proc_fail_nth_read+0x197/0x270 [ 56.263139][ T6456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.263155][ T6456] ? rw_verify_area+0xcf/0x680 [ 56.263169][ T6456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.263185][ T6456] vfs_read+0x1de/0xc70 [ 56.263202][ T6456] ? __pfx___mutex_lock+0x10/0x10 [ 56.263216][ T6456] ? __pfx_vfs_read+0x10/0x10 [ 56.263235][ T6456] ? __fget_files+0x20e/0x3c0 [ 56.263248][ T6456] ksys_read+0x12a/0x240 [ 56.263270][ T6456] ? __pfx_ksys_read+0x10/0x10 [ 56.263290][ T6456] do_syscall_64+0xcd/0x260 [ 56.263305][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.263316][ T6456] RIP: 0033:0x7fea7298d37c [ 56.263325][ T6456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.263334][ T6456] RSP: 002b:00007fea707f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.263344][ T6456] RAX: ffffffffffffffda RBX: 00007fea72bb5fa0 RCX: 00007fea7298d37c [ 56.263350][ T6456] RDX: 000000000000000f RSI: 00007fea707f60a0 RDI: 0000000000000003 [ 56.263356][ T6456] RBP: 00007fea707f6090 R08: 0000000000000000 R09: 0000000000000000 [ 56.263362][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.263367][ T6456] R13: 0000000000000000 R14: 00007fea72bb5fa0 R15: 00007ffdb2454548 [ 56.263380][ T6456] [ 56.484369][ T6477] 9pnet_virtio: no channels available for device syz [ 57.015698][ T6493] program syz.2.189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.075778][ T6502] pim6reg1: entered promiscuous mode [ 57.077582][ T6502] pim6reg1: entered allmulticast mode [ 57.230275][ T6511] tipc: Failed to obtain node identity [ 57.232153][ T6511] tipc: Enabling of bearer rejected, failed to enable media [ 57.396401][ T6532] capability: warning: `syz.1.203' uses deprecated v2 capabilities in a way that may be insecure [ 57.428898][ T6534] futex_wake_op: syz.1.204 tries to shift op by -1; fix this program [ 57.463669][ T6538] usb usb8: usbfs: process 6538 (syz.3.207) did not claim interface 0 before use [ 57.475835][ T6541] syzkaller1: entered promiscuous mode [ 57.477619][ T6541] syzkaller1: entered allmulticast mode [ 57.601953][ T67] block nbd4: Receive control failed (result -32) [ 57.609352][ T6545] tipc: Failed to obtain node identity [ 57.611127][ T6545] tipc: Enabling of bearer rejected, failed to enable media [ 57.681168][ T6547] syz.2.210 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.760717][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.892421][ T6564] validate_nla: 3 callbacks suppressed [ 57.892431][ T6564] netlink: 'syz.2.216': attribute type 10 has an invalid length. [ 57.897607][ T6564] __nla_validate_parse: 9 callbacks suppressed [ 57.897617][ T6564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.216'. [ 57.913424][ T24] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 57.916907][ T24] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 57.921665][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 57.925327][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 57.929756][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 57.938341][ T24] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 57.942245][ T24] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 57.944918][ T24] usb 8-1: Product: syz [ 57.946721][ T24] usb 8-1: Manufacturer: syz [ 57.951713][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 57.953910][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 57.958730][ T24] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 57.961400][ T24] cdc_wdm 8-1:1.0: Unknown control protocol [ 58.019853][ T6576] program syz.1.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.044137][ T6578] syzkaller1: entered promiscuous mode [ 58.045976][ T6578] syzkaller1: entered allmulticast mode [ 58.091327][ T6580] can0: slcan on ptm0. [ 58.155109][ T24] usb 8-1: USB disconnect, device number 3 [ 58.181066][ T6579] can0 (unregistered): slcan off ptm0. [ 58.216606][ T6582] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 58.224809][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.229105][ T6582] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 58.237051][ T6582] can0: slcan on ptm0. [ 58.401872][ T6581] can0 (unregistered): slcan off ptm0. [ 58.402729][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 58.592706][ T6611] netlink: 'syz.2.231': attribute type 21 has an invalid length. [ 58.597849][ T6611] netlink: 152 bytes leftover after parsing attributes in process `syz.2.231'. [ 58.628025][ T6615] netlink: 830 bytes leftover after parsing attributes in process `syz.2.233'. [ 58.644688][ T6617] tipc: Failed to obtain node identity [ 58.646443][ T6617] tipc: Enabling of bearer rejected, failed to enable media [ 58.664549][ T6619] overlayfs: failed to resolve './file0': -2 [ 58.693594][ T6623] syzkaller1: entered promiscuous mode [ 58.695373][ T6623] syzkaller1: entered allmulticast mode [ 58.921402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 58.951921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.381936][ T6680] tipc: Failed to obtain node identity [ 59.384288][ T6680] tipc: Enabling of bearer rejected, failed to enable media [ 59.660446][ T6692] trusted_key: syz.2.250 sent an empty control message without MSG_MORE. [ 59.725373][ T6647] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.727426][ T6647] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 59.738866][ T6647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.741513][ T6647] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 59.748780][ T6647] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.752692][ T6647] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 59.757010][ T6647] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.759379][ T6647] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 59.821861][ T6695] overlayfs: failed to resolve './file0': -2 [ 59.829561][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 59.829570][ T40] audit: type=1400 audit(1745613941.183:2239): avc: denied { write } for pid=6694 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.853994][ T40] audit: type=1400 audit(1745613941.203:2240): avc: denied { mounton } for pid=6694 comm="syz.2.251" path=2F38312FE91F7189591E9233614B dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 59.866876][ T6696] overlay: Unknown parameter 'dont_measure' [ 60.032173][ T67] block nbd5: Receive control failed (result -32) [ 60.036040][ T6705] netlink: 36 bytes leftover after parsing attributes in process `syz.1.256'. [ 60.066668][ T6708] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 60.073395][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 60.076229][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.257'. [ 60.079573][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 60.161907][ T6716] overlayfs: failed to resolve './file0': -2 [ 60.189946][ T6719] syzkaller1: entered promiscuous mode [ 60.201989][ T6719] syzkaller1: entered allmulticast mode [ 60.318432][ T40] audit: type=1326 audit(1745613941.673:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.264" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb49d8e969 code=0x0 [ 60.445694][ T6732] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 60.601391][ T40] audit: type=1400 audit(1745613941.963:2242): avc: denied { setopt } for pid=6737 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.639276][ T6740] sit0: entered promiscuous mode [ 60.642963][ T6740] netlink: 'syz.2.269': attribute type 1 has an invalid length. [ 60.645379][ T6740] netlink: 1 bytes leftover after parsing attributes in process `syz.2.269'. [ 60.685697][ T6743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.270'. [ 60.724815][ T6745] overlayfs: failed to resolve './file0': -2 [ 60.885317][ T67] block nbd6: Receive control failed (result -32) [ 60.936653][ T6748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.016474][ T6755] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 61.332239][ T5954] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 61.349401][ T40] audit: type=1400 audit(1745613942.703:2243): avc: denied { read } for pid=6764 comm="syz.1.280" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.356829][ T40] audit: type=1400 audit(1745613942.703:2244): avc: denied { open } for pid=6764 comm="syz.1.280" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.444477][ T6770] tipc: Failed to obtain node identity [ 61.446152][ T6770] tipc: Enabling of bearer rejected, failed to enable media [ 61.483444][ T5954] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 61.486883][ T5954] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 61.490299][ T5954] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 61.495977][ T5954] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 61.499396][ T5954] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 61.504803][ T5954] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 61.507608][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 61.510393][ T5954] usb 8-1: Product: syz [ 61.512053][ T5954] usb 8-1: Manufacturer: syz [ 61.521389][ T5954] cdc_wdm 8-1:1.0: skipping garbage [ 61.523199][ T5954] cdc_wdm 8-1:1.0: skipping garbage [ 61.525997][ T5954] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 61.527823][ T5954] cdc_wdm 8-1:1.0: Unknown control protocol [ 61.634714][ T40] audit: type=1400 audit(1745613942.993:2245): avc: denied { create } for pid=6772 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 61.712656][ T6780] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 61.721907][ T34] usb 8-1: USB disconnect, device number 4 [ 62.063315][ T40] audit: type=1400 audit(1745613943.423:2246): avc: denied { append } for pid=6785 comm="syz.1.286" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.063364][ T6786] random: crng reseeded on system resumption [ 62.213903][ T40] audit: type=1400 audit(1745613943.573:2247): avc: denied { ioctl } for pid=6785 comm="syz.1.286" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.364669][ T6786] kvm: kvm [6785]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 62.450125][ T6802] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 62.464867][ T6786] kvm: kvm [6785]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 62.500942][ T6786] kvm: kvm [6785]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 62.534032][ T6786] kvm: kvm [6785]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 62.539442][ T6786] kvm: kvm [6785]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 62.576489][ T6786] kvm: kvm [6785]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 62.626755][ T40] audit: type=1400 audit(1745613943.983:2248): avc: denied { read } for pid=6808 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.666268][ T6786] kvm: kvm [6785]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 62.683348][ T9] IPVS: starting estimator thread 0... [ 62.685330][ T6786] kvm: kvm [6785]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 62.734647][ T6786] kvm: kvm [6785]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 62.751666][ T6786] kvm: kvm [6785]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 62.791882][ T6811] IPVS: using max 44 ests per chain, 105600 per kthread [ 62.917371][ T67] block nbd7: Receive control failed (result -32) [ 63.778852][ T6855] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 63.791251][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.823839][ T6855] bond1: (slave veth3): Enslaving as an active interface with a down link [ 63.826705][ T6858] tipc: Failed to obtain node identity [ 63.828751][ T6858] tipc: Enabling of bearer rejected, failed to enable media [ 63.836455][ T6855] bond1: (slave veth0_to_bond): making interface the new active one [ 63.839695][ T6855] veth0_to_bond: entered promiscuous mode [ 63.841950][ T6855] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 63.913931][ T6866] netlink: 'syz.2.313': attribute type 10 has an invalid length. [ 63.916483][ T6866] __nla_validate_parse: 7 callbacks suppressed [ 63.916490][ T6866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.313'. [ 63.989327][ T6877] x_tables: duplicate underflow at hook 1 [ 64.098472][ T6886] FAULT_INJECTION: forcing a failure. [ 64.098472][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 64.102468][ T6886] CPU: 1 UID: 0 PID: 6886 Comm: syz.3.319 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 64.102482][ T6886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.102488][ T6886] Call Trace: [ 64.102495][ T6886] [ 64.102500][ T6886] dump_stack_lvl+0x16c/0x1f0 [ 64.102526][ T6886] should_fail_ex+0x512/0x640 [ 64.102541][ T6886] ? fs_reclaim_acquire+0xae/0x150 [ 64.102556][ T6886] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 64.102572][ T6886] should_failslab+0xc2/0x120 [ 64.102584][ T6886] __kmalloc_noprof+0xd2/0x510 [ 64.102597][ T6886] tomoyo_realpath_from_path+0xc2/0x6e0 [ 64.102613][ T6886] ? tomoyo_profile+0x47/0x60 [ 64.102632][ T6886] tomoyo_path_number_perm+0x245/0x580 [ 64.102644][ T6886] ? tomoyo_path_number_perm+0x237/0x580 [ 64.102658][ T6886] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 64.102675][ T6886] ? find_held_lock+0x2b/0x80 [ 64.102699][ T6886] ? find_held_lock+0x2b/0x80 [ 64.102711][ T6886] ? hook_file_ioctl_common+0x145/0x410 [ 64.102723][ T6886] ? __fget_files+0x20e/0x3c0 [ 64.102735][ T6886] security_file_ioctl+0x9b/0x240 [ 64.102751][ T6886] __x64_sys_ioctl+0xb7/0x200 [ 64.102766][ T6886] do_syscall_64+0xcd/0x260 [ 64.102781][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.102792][ T6886] RIP: 0033:0x7f902438e969 [ 64.102800][ T6886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.102810][ T6886] RSP: 002b:00007f90221d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.102819][ T6886] RAX: ffffffffffffffda RBX: 00007f90245b6080 RCX: 00007f902438e969 [ 64.102826][ T6886] RDX: 0000200000000080 RSI: 000000004010ae42 RDI: 0000000000000004 [ 64.102832][ T6886] RBP: 00007f90221d5090 R08: 0000000000000000 R09: 0000000000000000 [ 64.102837][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.102843][ T6886] R13: 0000000000000001 R14: 00007f90245b6080 R15: 00007ffd88a22ea8 [ 64.102855][ T6886] [ 64.102859][ T6886] ERROR: Out of memory at tomoyo_realpath_from_path. [ 65.000319][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 65.000329][ T40] audit: type=1400 audit(1745613946.353:2251): avc: denied { setopt } for pid=6888 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 65.144537][ T6896] kvm: apic: phys broadcast and lowest prio [ 65.365679][ T67] block nbd8: Receive control failed (result -32) [ 65.417795][ T6919] tipc: Failed to obtain node identity [ 65.420047][ T6919] tipc: Enabling of bearer rejected, failed to enable media [ 65.461478][ T6927] syzkaller1: entered promiscuous mode [ 65.463658][ T6927] syzkaller1: entered allmulticast mode [ 65.490911][ T40] audit: type=1400 audit(1745613946.853:2252): avc: denied { connect } for pid=6930 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.528712][ T6933] syzkaller1: entered promiscuous mode [ 65.530565][ T40] audit: type=1400 audit(1745613946.883:2253): avc: denied { create } for pid=6934 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.536832][ T6933] syzkaller1: entered allmulticast mode [ 65.810006][ T40] audit: type=1400 audit(1745613947.163:2254): avc: denied { rename } for pid=6945 comm="syz.3.340" name="file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.883452][ T40] audit: type=1400 audit(1745613947.243:2255): avc: denied { create } for pid=6954 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 65.892245][ T40] audit: type=1400 audit(1745613947.243:2256): avc: denied { ioctl } for pid=6954 comm="syz.3.344" path="socket:[14549]" dev="sockfs" ino=14549 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 65.899862][ T6955] macsec1: entered promiscuous mode [ 65.904483][ T6955] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 65.906829][ T6955] macsec1: entered allmulticast mode [ 65.907672][ T6957] netlink: 'syz.2.345': attribute type 10 has an invalid length. [ 65.908568][ T6955] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 65.918085][ T40] audit: type=1400 audit(1745613947.273:2257): avc: denied { getopt } for pid=6956 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.968056][ T6960] netlink: 'syz.2.346': attribute type 17 has an invalid length. [ 65.970768][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 65.973586][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.346'. [ 66.000424][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 66.004005][ T6940] IPVS: Error joining to the multicast group [ 66.222850][ T1472] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.370845][ T1472] usb 7-1: Using ep0 maxpacket: 16 [ 66.373956][ T1472] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 66.377811][ T1472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 66.382952][ T1472] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 66.385860][ T1472] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.388338][ T1472] usb 7-1: Product: syz [ 66.389650][ T1472] usb 7-1: Manufacturer: syz [ 66.391262][ T1472] usb 7-1: SerialNumber: syz [ 66.394664][ T1472] usb 7-1: config 0 descriptor?? [ 66.612343][ T1472] appledisplay 7-1:0.0: Error while getting initial brightness: -71 [ 66.617169][ T1472] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -71 [ 66.623759][ T1472] usb 7-1: USB disconnect, device number 2 [ 66.655437][ T6964] syzkaller1: entered promiscuous mode [ 66.657234][ T6964] syzkaller1: entered allmulticast mode [ 66.736353][ T6966] netlink: 76 bytes leftover after parsing attributes in process `syz.3.348'. [ 66.766027][ T6969] netlink: 'syz.3.349': attribute type 11 has an invalid length. [ 66.768580][ T6969] netlink: 224 bytes leftover after parsing attributes in process `syz.3.349'. [ 66.793401][ T40] audit: type=1326 audit(1745613948.153:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.1.350" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb49d8e969 code=0x0 [ 66.821762][ T6969] netlink: 'syz.3.349': attribute type 11 has an invalid length. [ 66.824246][ T6969] netlink: 'syz.3.349': attribute type 11 has an invalid length. [ 66.826659][ T6969] netlink: 224 bytes leftover after parsing attributes in process `syz.3.349'. [ 66.874353][ T40] audit: type=1400 audit(1745613948.233:2259): avc: denied { read } for pid=6972 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.880209][ T40] audit: type=1400 audit(1745613948.233:2260): avc: denied { getopt } for pid=6972 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.203385][ T6990] FAULT_INJECTION: forcing a failure. [ 67.203385][ T6990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.207363][ T6990] CPU: 0 UID: 0 PID: 6990 Comm: syz.2.357 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 67.207378][ T6990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.207384][ T6990] Call Trace: [ 67.207388][ T6990] [ 67.207392][ T6990] dump_stack_lvl+0x16c/0x1f0 [ 67.207422][ T6990] should_fail_ex+0x512/0x640 [ 67.207440][ T6990] _copy_from_user+0x2e/0xd0 [ 67.207453][ T6990] kvm_vm_ioctl+0x14a9/0x3d40 [ 67.207471][ T6990] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 67.207490][ T6990] ? kasan_quarantine_put+0x10a/0x240 [ 67.207500][ T6990] ? lockdep_hardirqs_on+0x7c/0x110 [ 67.207515][ T6990] ? find_held_lock+0x2b/0x80 [ 67.207529][ T6990] ? tomoyo_path_number_perm+0x295/0x580 [ 67.207544][ T6990] ? tomoyo_path_number_perm+0x18d/0x580 [ 67.207558][ T6990] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 67.207570][ T6990] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.207582][ T6990] ? do_vfs_ioctl+0x512/0x1990 [ 67.207597][ T6990] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 67.207614][ T6990] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 67.207632][ T6990] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.207652][ T6990] ? hook_file_ioctl_common+0x145/0x410 [ 67.207665][ T6990] ? selinux_file_ioctl+0x180/0x270 [ 67.207680][ T6990] ? selinux_file_ioctl+0xb4/0x270 [ 67.207696][ T6990] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 67.207709][ T6990] __x64_sys_ioctl+0x190/0x200 [ 67.207724][ T6990] do_syscall_64+0xcd/0x260 [ 67.207739][ T6990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.207750][ T6990] RIP: 0033:0x7fb0ac78e969 [ 67.207758][ T6990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.207768][ T6990] RSP: 002b:00007fb0ad603038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.207778][ T6990] RAX: ffffffffffffffda RBX: 00007fb0ac9b6080 RCX: 00007fb0ac78e969 [ 67.207784][ T6990] RDX: 0000200000000080 RSI: 000000004010ae42 RDI: 0000000000000004 [ 67.207790][ T6990] RBP: 00007fb0ad603090 R08: 0000000000000000 R09: 0000000000000000 [ 67.207796][ T6990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.207802][ T6990] R13: 0000000000000001 R14: 00007fb0ac9b6080 R15: 00007fff3c10bb08 [ 67.207814][ T6990] [ 67.810537][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 67.973101][ T7006] netlink: 'syz.3.361': attribute type 10 has an invalid length. [ 67.976430][ T7006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.361'. [ 68.135630][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.365'. [ 68.138840][ T7016] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 68.237157][ T7021] MINIX-fs: blocksize too small for device [ 68.289167][ T7021] 9pnet: Could not find request transport:  [ 68.312324][ T7028] capability: warning: `syz.3.369' uses 32-bit capabilities (legacy support in use) [ 68.334662][ T7030] tipc: Failed to obtain node identity [ 68.336444][ T7030] tipc: Enabling of bearer rejected, failed to enable media [ 68.420002][ T7035] fuse: Bad value for 'user_id' [ 68.423445][ T7035] fuse: Bad value for 'user_id' [ 68.666011][ T7041] program syz.1.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.697186][ T7051] process 'syz.2.378' launched '/dev/fd/3' with NULL argv: empty string added [ 68.736796][ T7056] tipc: Failed to obtain node identity [ 68.738541][ T7056] tipc: Enabling of bearer rejected, failed to enable media [ 68.773936][ T7062] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 68.810273][ T7068] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 68.842914][ T7071] ip6erspan0: entered promiscuous mode [ 68.848491][ T7071] loop8: detected capacity change from 0 to 7 [ 68.853242][ T7071] Dev loop8: unable to read RDB block 7 [ 68.855249][ T7071] loop8: unable to read partition table [ 68.857120][ T7071] loop8: partition table beyond EOD, truncated [ 68.859111][ T7071] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 69.756457][ T7094] netlink: 'syz.1.392': attribute type 15 has an invalid length. [ 69.814876][ T7100] overlayfs: missing 'lowerdir' [ 69.880705][ T7104] __nla_validate_parse: 4 callbacks suppressed [ 69.880716][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 69.885443][ T7104] netlink: 'syz.1.396': attribute type 9 has an invalid length. [ 69.891595][ T7104] macvlan2: entered allmulticast mode [ 69.893263][ T7104] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 69.945187][ T7106] openvswitch: netlink: IPv4 tun info is not correct [ 70.091265][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 70.091276][ T40] audit: type=1400 audit(1745613951.453:2271): avc: denied { map } for pid=7120 comm="syz.2.401" path="/proc/339/net/dev_mcast" dev="proc" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 70.100540][ T40] audit: type=1400 audit(1745613951.453:2272): avc: denied { create } for pid=7120 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.327609][ T7143] overlayfs: failed to resolve './file0': -2 [ 70.361483][ T40] audit: type=1400 audit(1745613951.723:2273): avc: denied { write } for pid=7144 comm="syz.2.413" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 70.665975][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 70.670133][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 70.673718][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 70.803896][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.423'. [ 71.084605][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.087253][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.132531][ T40] audit: type=1400 audit(1745613952.493:2274): avc: denied { write } for pid=7181 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.138818][ T40] audit: type=1400 audit(1745613952.493:2275): avc: denied { create } for pid=7181 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 71.290771][ T7192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7192 comm=syz.3.429 [ 71.329291][ T7191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.669096][ T40] audit: type=1400 audit(1745613953.023:2276): avc: denied { execute } for pid=7193 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 71.678626][ T40] audit: type=1400 audit(1745613953.023:2277): avc: denied { execute_no_trans } for pid=7193 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 71.739266][ T40] audit: type=1400 audit(1745613953.093:2278): avc: denied { getopt } for pid=7200 comm="syz.2.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.739924][ T7201] xt_hashlimit: overflow, rate too high: 0 [ 71.804771][ T5959] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.807944][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.811909][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.815695][ T5959] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.818652][ T5959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.832879][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.835296][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.837974][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.843584][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.846443][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.850622][ T40] audit: type=1400 audit(1745613953.203:2279): avc: denied { mounton } for pid=7204 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.922665][ T7206] kvm_pr_unimpl_wrmsr: 92 callbacks suppressed [ 71.922678][ T7206] kvm: kvm [7205]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4000 [ 71.928058][ T7206] kvm: kvm [7205]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 71.959207][ T7204] chnl_net:caif_netlink_parms(): no params data found [ 72.083588][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.085880][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.088120][ T7204] bridge_slave_0: entered allmulticast mode [ 72.091124][ T7204] bridge_slave_0: entered promiscuous mode [ 72.094209][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.096474][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.098899][ T7204] bridge_slave_1: entered allmulticast mode [ 72.101666][ T7204] bridge_slave_1: entered promiscuous mode [ 72.134405][ T7204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.138686][ T7204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.189738][ T7204] team0: Port device team_slave_0 added [ 72.194191][ T7204] team0: Port device team_slave_1 added [ 72.225596][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.228452][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.240583][ T7204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.246806][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.249595][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.259628][ T7204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.298959][ T7204] hsr_slave_0: entered promiscuous mode [ 72.301719][ T7204] hsr_slave_1: entered promiscuous mode [ 72.304448][ T7204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.307101][ T7204] Cannot create hsr debugfs directory [ 72.342555][ T5959] block nbd9: Receive control failed (result -32) [ 72.422325][ T7204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.427274][ T7204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.432879][ T7204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.437028][ T7204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.449853][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.452187][ T7204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.454913][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.457126][ T7204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.490277][ T7204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.503639][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.506730][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.521329][ T7204] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.528348][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.530683][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.536508][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.538760][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.651799][ T7204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.673518][ T7261] tipc: Failed to obtain node identity [ 72.675805][ T7264] Failed to get privilege flags for destination (handle=0x2:0x0) [ 72.675892][ T40] audit: type=1400 audit(2000000000.289:2280): avc: denied { ioctl } for pid=7262 comm="syz.1.450" path="socket:[17493]" dev="sockfs" ino=17493 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.676491][ T7261] tipc: Enabling of bearer rejected, failed to enable media [ 72.772891][ T7204] veth0_vlan: entered promiscuous mode [ 72.779549][ T7204] veth1_vlan: entered promiscuous mode [ 72.793538][ T7204] veth0_macvtap: entered promiscuous mode [ 72.797143][ T7204] veth1_macvtap: entered promiscuous mode [ 72.805773][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.810060][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.811084][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 72.815451][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.815821][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 72.819077][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.822122][ T7279] netlink: 'syz.1.455': attribute type 12 has an invalid length. [ 72.825077][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.830461][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.833601][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.836888][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.842518][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.861402][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.865587][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.869625][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.874561][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.878559][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.882055][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.885014][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.888018][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.892332][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.901137][ T7204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.903879][ T7204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.906552][ T7204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.909282][ T7204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.002575][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.005608][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.034932][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.037495][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.205690][ T7328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7328 comm=syz.2.468 [ 73.214334][ T7330] tipc: Trying to set illegal importance in message [ 73.223730][ T7314] block nbd10: server does not support multiple connections per device. [ 73.231478][ T7314] block nbd10: shutting down sockets [ 73.364875][ T7341] fuse: Unknown parameter '' [ 73.412241][ T7348] tipc: Failed to obtain node identity [ 73.413967][ T7348] tipc: Enabling of bearer rejected, failed to enable media [ 73.487342][ T7356] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 73.490413][ T7356] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 73.494863][ T7356] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 73.587790][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.485'. [ 73.647753][ T7372] program syz.1.487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.666812][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 73.871653][ T5959] Bluetooth: hci1: command tx timeout [ 74.005598][ T7404] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 74.009871][ T7404] syz_tun: entered promiscuous mode [ 74.015211][ T7404] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 74.037909][ T7412] xt_l2tp: v2 tid > 0xffff: 150994944 [ 74.068127][ T7412] netlink: 'syz.3.505': attribute type 1 has an invalid length. [ 74.081894][ T7412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.086960][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 74.140141][ T7423] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 74.148899][ T7423] bridge0: port 3(dummy0) entered disabled state [ 74.150787][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 74.151613][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.156699][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.302919][ T34] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 74.305739][ T34] usb 9-1: can't read configurations, error -61 [ 74.430834][ T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 74.592964][ T34] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 74.596369][ T34] usb 9-1: can't read configurations, error -61 [ 74.600481][ T34] usb usb9-port1: attempt power cycle [ 74.962997][ T5959] block nbd10: Receive control failed (result -32) [ 74.970797][ T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 75.003514][ T34] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 75.006553][ T34] usb 9-1: can't read configurations, error -61 [ 75.013577][ T7449] overlayfs: missing 'lowerdir' [ 75.121024][ T13] veth0_to_bond: left promiscuous mode [ 75.150733][ T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 75.183801][ T34] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 75.187022][ T34] usb 9-1: can't read configurations, error -61 [ 75.190331][ T34] usb usb9-port1: unable to enumerate USB device [ 75.290729][ T58] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 75.399058][ T7473] overlayfs: missing 'lowerdir' [ 75.415023][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 75.415034][ T40] audit: type=1400 audit(2000000003.029:2296): avc: denied { setopt } for pid=7474 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.440832][ T58] usb 6-1: Using ep0 maxpacket: 32 [ 75.444353][ T58] usb 6-1: config 0 has an invalid interface number: 199 but max is 0 [ 75.447693][ T58] usb 6-1: config 0 has no interface number 0 [ 75.450284][ T58] usb 6-1: config 0 interface 199 has no altsetting 0 [ 75.455898][ T58] usb 6-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 75.459368][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.462717][ T58] usb 6-1: Product: syz [ 75.464130][ T58] usb 6-1: Manufacturer: syz [ 75.465636][ T58] usb 6-1: SerialNumber: syz [ 75.468264][ T58] usb 6-1: config 0 descriptor?? [ 75.473203][ T58] usbtouchscreen 6-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 75.537984][ T40] audit: type=1400 audit(2000000003.149:2297): avc: denied { create } for pid=7487 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.544435][ T40] audit: type=1400 audit(2000000003.149:2298): avc: denied { setopt } for pid=7487 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.791982][ T40] audit: type=1400 audit(2000000003.409:2299): avc: denied { create } for pid=7502 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.799987][ T40] audit: type=1400 audit(2000000003.409:2300): avc: denied { getopt } for pid=7502 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.894825][ T7507] netlink: 'syz.3.538': attribute type 21 has an invalid length. [ 75.897268][ T7507] __nla_validate_parse: 2 callbacks suppressed [ 75.897275][ T7507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.538'. [ 75.903165][ T7507] syzkaller1: left promiscuous mode [ 75.905061][ T7507] syzkaller1: left allmulticast mode [ 75.950844][ T5959] Bluetooth: hci1: command tx timeout [ 76.187522][ T6006] usb 6-1: USB disconnect, device number 4 [ 76.718042][ T40] audit: type=1400 audit(2000000004.329:2301): avc: denied { execute } for pid=7556 comm="syz.1.554" path="/sys/kernel/debug/sync/info" dev="debugfs" ino=3856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 76.782274][ T7562] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 1, id = 0 [ 76.785141][ T40] audit: type=1400 audit(2000000004.399:2302): avc: denied { map } for pid=7560 comm="syz.1.556" path="socket:[17981]" dev="sockfs" ino=17981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.793302][ T40] audit: type=1400 audit(2000000004.399:2303): avc: denied { accept } for pid=7560 comm="syz.1.556" path="socket:[17981]" dev="sockfs" ino=17981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.799829][ T40] audit: type=1400 audit(2000000004.399:2304): avc: denied { write } for pid=7560 comm="syz.1.556" name="snmp" dev="proc" ino=4026532959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.894653][ T7573] netlink: 156 bytes leftover after parsing attributes in process `syz.3.559'. [ 76.910981][ T6784] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 77.011037][ T7577] wg1 speed is unknown, defaulting to 1000 [ 77.014800][ T7577] wg1 speed is unknown, defaulting to 1000 [ 77.015610][ T7581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19289 sclass=netlink_route_socket pid=7581 comm=syz.4.564 [ 77.017861][ T7577] wg1 speed is unknown, defaulting to 1000 [ 77.057987][ T40] audit: type=1400 audit(2000000004.669:2305): avc: denied { name_connect } for pid=7582 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 77.066134][ T6784] usb 7-1: Using ep0 maxpacket: 32 [ 77.070048][ T6784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.078491][ T6784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.082274][ T6784] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 77.085094][ T6784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.090858][ T6784] usb 7-1: config 0 descriptor?? [ 77.137167][ T7577] infiniband syz2: set active [ 77.139960][ T5954] wg1 speed is unknown, defaulting to 1000 [ 77.141416][ T7577] infiniband syz2: added wg1 [ 77.145084][ T7577] syz2: rxe_create_cq: returned err = -12 [ 77.146925][ T7577] infiniband syz2: Couldn't create ib_mad CQ [ 77.148822][ T7577] infiniband syz2: Couldn't open port 1 [ 77.163220][ T7577] RDS/IB: syz2: added [ 77.164642][ T7577] smc: adding ib device syz2 with port count 1 [ 77.167124][ T7577] smc: ib device syz2 port 1 has pnetid [ 77.169961][ T34] wg1 speed is unknown, defaulting to 1000 [ 77.173444][ T7577] wg1 speed is unknown, defaulting to 1000 [ 77.273071][ T7577] wg1 speed is unknown, defaulting to 1000 [ 77.376956][ T7577] wg1 speed is unknown, defaulting to 1000 [ 77.459022][ T7577] wg1 speed is unknown, defaulting to 1000 [ 77.505466][ T6784] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 77.565915][ T7577] wg1 speed is unknown, defaulting to 1000 [ 77.752015][ T7553] dlm: non-version read from control device 39 [ 77.754730][ T7553] dlm: no locking on control device [ 77.759126][ T6784] usb 7-1: USB disconnect, device number 3 [ 77.780828][ T7595] netlink: 'syz.1.568': attribute type 15 has an invalid length. [ 77.783269][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.568'. [ 78.031425][ T5959] Bluetooth: hci1: command tx timeout [ 78.060992][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 78.169177][ T7614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.172363][ T7614] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.306571][ T7631] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 78.310960][ T7631] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 78.313474][ T7614] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.369673][ T7637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.375449][ T7637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.378126][ T7639] xt_l2tp: missing protocol rule (udp|l2tpip) [ 78.407272][ T5959] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 78.417093][ T7648] sp0: Synchronizing with TNC [ 78.464985][ T7653] bridge0: entered promiscuous mode [ 78.466913][ T7653] macvlan2: entered promiscuous mode [ 78.469904][ T7653] bridge0: port 4(macvlan2) entered blocking state [ 78.472835][ T7653] bridge0: port 4(macvlan2) entered disabled state [ 78.474997][ T7653] macvlan2: entered allmulticast mode [ 78.476695][ T7653] bridge0: entered allmulticast mode [ 78.479732][ T7653] macvlan2: left allmulticast mode [ 78.481740][ T7653] bridge0: left allmulticast mode [ 78.483898][ T7653] bridge0: left promiscuous mode [ 78.705667][ T7656] loop6: detected capacity change from 0 to 524287999 [ 78.708580][ T7656] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.604265][ T7656] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.607448][ T7656] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.611649][ T7656] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.614679][ T7656] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.620477][ T7656] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.623872][ T7656] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.626913][ T7656] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.629941][ T7656] ldm_validate_partition_table(): Disk read failed. [ 80.632647][ T7656] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.635426][ T7656] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.637940][ T7656] Dev loop6: unable to read RDB block 0 [ 80.641687][ T7656] loop6: unable to read partition table [ 80.644033][ T7656] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 80.657481][ T5956] ldm_validate_partition_table(): Disk read failed. [ 80.660235][ T5956] Dev loop6: unable to read RDB block 0 [ 80.663461][ T5956] loop6: unable to read partition table [ 80.667777][ T7658] ldm_validate_partition_table(): Disk read failed. [ 80.670559][ T7658] Dev loop6: unable to read RDB block 0 [ 80.673536][ T7658] loop6: unable to read partition table [ 80.675809][ T7658] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 81.325252][ T57] cfg80211: failed to load regulatory.db [ 81.476677][ T44] BUG: sleeping function called from invalid context at mm/util.c:743 [ 81.479867][ T44] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 44, name: kcompactd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 81.484356][ T44] preempt_count: 1, expected: 0 [ 81.485954][ T44] RCU nest depth: 0, expected: 0 [ 81.487528][ T44] 1 lock held by kcompactd0/44: [ 81.489048][ T44] #0: ffff88810448e5c8 (&mapping->i_private_lock){+.+.}-{3:3}, at: __buffer_migrate_folio+0x25b/0x690 [ 81.492926][ T44] Preemption disabled at: [ 81.492932][ T44] [<0000000000000000>] 0x0 [ 81.495777][ T44] CPU: 2 UID: 0 PID: 44 Comm: kcompactd0 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 81.495791][ T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.495797][ T44] Call Trace: [ 81.495801][ T44] [ 81.495805][ T44] dump_stack_lvl+0x16c/0x1f0 [ 81.495829][ T44] __might_resched+0x3c0/0x5e0 [ 81.495848][ T44] ? folio_flags+0x5b/0x100 [ 81.495862][ T44] ? __pfx___might_resched+0x10/0x10 [ 81.495879][ T44] folio_mc_copy+0xfb/0x190 [ 81.495894][ T44] __migrate_folio.constprop.0+0xa1/0x3d0 [ 81.495909][ T44] __buffer_migrate_folio+0x5cd/0x690 [ 81.495924][ T44] ? __pfx_buffer_migrate_folio_norefs+0x10/0x10 [ 81.495937][ T44] move_to_new_folio+0x1d9/0x700 [ 81.495951][ T44] migrate_pages_batch+0x201d/0x31a0 [ 81.495966][ T44] ? __pfx_compaction_free+0x10/0x10 [ 81.495985][ T44] ? __pfx_migrate_pages_batch+0x10/0x10 [ 81.495999][ T44] ? migrate_folio_done+0x298/0x340 [ 81.496014][ T44] migrate_pages_sync+0x12d/0x8a0 [ 81.496027][ T44] ? __pfx_compaction_alloc+0x10/0x10 [ 81.496042][ T44] ? __pfx_compaction_free+0x10/0x10 [ 81.496059][ T44] ? __pfx_migrate_pages_sync+0x10/0x10 [ 81.496078][ T44] migrate_pages+0x1b28/0x2350 [ 81.496091][ T44] ? __pfx_compaction_alloc+0x10/0x10 [ 81.496106][ T44] ? __pfx_compaction_free+0x10/0x10 [ 81.496123][ T44] ? __pfx_migrate_pages+0x10/0x10 [ 81.496139][ T44] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 81.496159][ T44] compact_zone+0x1f6c/0x45f0 [ 81.496179][ T44] ? __lock_acquire+0xaa4/0x1ba0 [ 81.496193][ T44] ? __pfx_compact_zone+0x10/0x10 [ 81.496213][ T44] compact_node+0x1a4/0x2d0 [ 81.496229][ T44] ? __pfx_compact_node+0x10/0x10 [ 81.496243][ T44] ? __pfx___might_resched+0x10/0x10 [ 81.496267][ T44] ? __pfx_extfrag_for_order+0x10/0x10 [ 81.496279][ T44] ? rcu_is_watching+0x12/0xc0 [ 81.496294][ T44] kcompactd+0x762/0xea0 [ 81.496311][ T44] ? __pfx_kcompactd+0x10/0x10 [ 81.496326][ T44] ? find_held_lock+0x2b/0x80 [ 81.496340][ T44] ? __pfx_autoremove_wake_function+0x10/0x10 [ 81.496356][ T44] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.496370][ T44] ? __kthread_parkme+0x19e/0x250 [ 81.496386][ T44] ? __pfx_kcompactd+0x10/0x10 [ 81.496402][ T44] kthread+0x3c2/0x780 [ 81.496412][ T44] ? __pfx_kthread+0x10/0x10 [ 81.496422][ T44] ? __pfx_kthread+0x10/0x10 [ 81.496431][ T44] ? __pfx_kthread+0x10/0x10 [ 81.496440][ T44] ? __pfx_kthread+0x10/0x10 [ 81.496450][ T44] ? rcu_is_watching+0x12/0xc0 [ 81.496462][ T44] ? __pfx_kthread+0x10/0x10 [ 81.496473][ T44] ret_from_fork+0x45/0x80 [ 81.496484][ T44] ? __pfx_kthread+0x10/0x10 [ 81.496493][ T44] ret_from_fork_asm+0x1a/0x30 [ 81.496515][ T44] [ 81.587247][ C2] vkms_vblank_simulate: vblank timer overrun [ 81.913629][ T6557] bond0: (slave syz_tun): Releasing backup interface [ 82.006488][ T1145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.021534][ T5959] block nbd11: Receive control failed (result -32) [ 82.101391][ T1145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.192282][ T1145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.259836][ T1145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.372795][ T1145] bridge_slave_1: left allmulticast mode [ 82.375083][ T1145] bridge_slave_1: left promiscuous mode [ 82.377798][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.382809][ T1145] bridge_slave_0: left allmulticast mode [ 82.384602][ T1145] bridge_slave_0: left promiscuous mode [ 82.386646][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.620870][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.625300][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.629410][ T1145] bond0 (unregistering): Released all slaves [ 82.978676][ T1145] hsr_slave_0: left promiscuous mode [ 82.980893][ T1145] hsr_slave_1: left promiscuous mode [ 82.982901][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.985215][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.988240][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.990588][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.012725][ T1145] veth1_macvtap: left promiscuous mode [ 83.015176][ T1145] veth0_macvtap: left promiscuous mode [ 83.017131][ T1145] veth1_vlan: left promiscuous mode [ 83.018927][ T1145] veth0_vlan: left promiscuous mode [ 83.510166][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 83.568123][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 84.475459][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 84.475469][ T40] audit: type=1400 audit(2000000012.089:2308): avc: denied { sys_chroot } for pid=7743 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 84.484080][ T40] audit: type=1400 audit(2000000012.089:2309): avc: denied { setgid } for pid=7743 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 VM DIAGNOSIS: 20:46:03 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff93a80de8 RCX=ffffffff8b402f82 RDX=1ffffffff1b9f7a0 RSI=ffffffff8bf46500 RDI=ffffffff8dcfbd00 RBP=0000000000000000 RSP=ffffc9000179fa60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8b402e95 R13=ffff8880526a98a8 R14=0000000000000062 R15=ffffffff8b4023d0 RIP=ffffffff81a0f9a1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feb49c4e020 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac983488 00007fb0ac983480 00007fb0ac983478 00007fb0ac983450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ad4ed100 00007fb0ac983440 00007fb0ac983458 00007fb0ac9834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac983498 00007fb0ac983490 00007fb0ac983488 00007fb0ac983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef1d9a36b2624f7c 02fdd83d9b2ef0eb bf0d245a8cf5e486 6a1b4aafda042ec2 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ced8fdac9091156 2036164a3a13447c e820cdacc1198e2d 28eff1e830e5dd5e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 56f5bf08f8ba9774 85bab01d07040e26 9da56f029a313dcf 2eef85adbd82ea31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eba0baa998ddd92e 63cd84ebcbccea62 c5a4de1660dc8f30 55e21f19dc6fd58c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88801dec5370 RCX=00000000fffffffe RDX=0000000000000000 RSI=ffff88801dec5370 RDI=00000000ffffffff RBP=ffff88801dec5370 RSP=ffffc90000677a10 R8 =0000000000080000 R9 =0000000000000001 R10=0000000000000000 R11=ffffffff9ad10598 R12=0000000000000000 R13=0000000000000000 R14=ffff88801dec4880 R15=0000000000000000 RIP=ffffffff81981114 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f343bee7d60 CR3=000000000e180000 CR4=00352ef0 DR0=000000008d224b4a DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f343b3836a3 00007f343b3836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc26e04390 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555950cec74 00005555950ceb00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555950d34a1 00005555950d3180 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030e90e796b7de9e eaa4100021e8030a 040021e403180400 21e00303cc100021 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0140888188100024 8004010000000806 06015ade01800800 24e00300100024d0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 033fffffffffffff fe100024c0030210 0024b00378100023 90030e90e796b7de ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9eeaa4100021e803 0a040021e4031804 0021e00303cc1000 21d00304040021cc ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0318040021c80301 000004080621c003 02040021bc031004 0021b8030210b880 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854e4b80 RDI=ffffffff9ae264a0 RBP=ffffffff9ae26460 RSP=ffffc90000a1ee38 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35c4ce6 R15=dffffc0000000000 RIP=ffffffff854e4ba7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000ffe000 CR3=00000000614b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac983488 00007fb0ac983480 00007fb0ac983478 00007fb0ac983450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ad4ed100 00007fb0ac983440 00007fb0ac983458 00007fb0ac9834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0ac983498 00007fb0ac983490 00007fb0ac983488 00007fb0ac983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff91cdfae2 RBX=0000000000000001 RCX=ffffffff8b6d80e6 RDX=0000000000000007 RSI=ffffffff91cdfae2 RDI=ffffffff910ed804 RBP=ffffc90003f376c0 RSP=ffffc90003f37600 R8 =ffffffff91cdfb0c R9 =0000000000000000 R10=0000000000000004 R11=00000000000a6d80 R12=ffffc90003f376c8 R13=ffffc90003f37678 R14=ffffc90003f376ad R15=ffffffff8b6d80e6 RIP=ffffffff8169df20 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556eaa3500 ffffffff 00c00000 GS =0000 ffff8880d6cb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556eabe5c8 CR3=000000004cac6000 CR4=00352ef0 DR0=0000840000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000200000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc68bd28e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb49e11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb49e11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb49e11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb49e11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb49e11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb49e11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000