last executing test programs: 43.754950103s ago: executing program 2 (id=335): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0xe4d, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x3, 0x1c}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x6, &(0x7f0000000140)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xffffff50}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x78, &(0x7f0000000200)=""/120, 0x40f00, 0x8, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x5, 0x1, 0x1}, 0x10, 0x23a36, r0, 0x4, 0x0, &(0x7f0000000340)=[{0x1, 0x3, 0x0, 0xa}, {0x5, 0x5, 0x6, 0x4}, {0x0, 0x1, 0x1, 0x3}, {0x0, 0x5, 0x7, 0xc}], 0x10, 0x6}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x64, 0x4, 0x300, 0x100000c, 0xe0, 0x0, 0x1b0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x4, 0x0, 0x6, 0x6], 0x0, 0x64fff6dd1457ec10}, {0x0, [0x2, 0x2, 0x4, 0x2, 0xa, 0x6], 0x2, 0x6}}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='jfs\x00', 0x8080, &(0x7f00000001c0)='discard') 43.674916762s ago: executing program 2 (id=336): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000eeff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 43.61496094s ago: executing program 2 (id=337): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') 42.745229137s ago: executing program 2 (id=338): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183400, 0x119) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}}, 0x64000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) keyctl$get_persistent(0x16, 0xee00, 0xfffffffffffffffe) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), 0x4) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e060b7c0c"], 0x9) syz_clone(0x89085000, &(0x7f0000000000)="587bde4559158fcfe4f7653ce8ec2873a58daf5ef4cb832d6a3465eddbeddbc33efbe04fa1d5a80f17793080aefb5825dcdcbbce23dc137e9e423b2e61392cfc059660f2d8b64307009c7f4685f27701e6c20a80b7f03c1e1f559e02784da8edbb5f15b17ea77460c81cd3d95c689312cc04de23821910abfc43153c7b19cb3ad4f0b9af21dd4bfcf12371d35619cc2e9ce35c17d926ab66", 0x98, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)="c9c028a6ce3046a050070b1e224814f7cfcadb56c387d626efc49fbef3ff543ea3c9a5084ad364651a58b272642d36894127c3d228ceed3b7d9e09bec54f0bd641efa12403688f7550f5ae1109e07dc5e5e0ad20243fb565271eaf79ab80db27fb6268a41aaaf83971cbc99475504409dcfd579ce457b2237930155411146f50a8c59319cd856939aa36384f1153a293bfd93a9e6ed7961bba1e7931218cd9") 42.035285577s ago: executing program 2 (id=340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 41.42503728s ago: executing program 2 (id=352): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x7f, 0x2, 0xff7b}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0xb, 0x8, 0x7fff]}, &(0x7f0000000180)=0x44) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000001c0)=""/94) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000240)=0x3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/232) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000380)={0xb, {0xa, 0x400, 0x7f, 0x40}}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x800, 0x400, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {r5, r6}}, './file0\x00'}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000680)=0xa) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f00000006c0)={{0x3, @name="a01d62fbafb970be7d8d0859200e1982e7b6d6a1d52164fb7e31d169eed7facb"}, 0x8, 0x4, 0x1}) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r9) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x15, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xfff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0xfce5, 0x60, &(0x7f0000000880)=""/96, 0x40f00, 0x0, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000980)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0xb, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r7, r12, r7, r7, r4, r7, r7], 0x0, 0x10, 0x800}, 0x94) ioctl$VIDIOC_ENUMSTD(r11, 0xc0485619, &(0x7f0000000b40)={0x6, 0x3200e0, "3222081730d348f5ae2bd36bdf7fe301b92bf416e9bfef73", {0x7fff, 0x6}, 0xa00}) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0), 0x4) pread64(r13, &(0x7f0000000c00)=""/89, 0x59, 0x1) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000c80)="5ce36f5bb2f5be8de86ce51504c845014e4fc31ec65db4875fcdbc2992e8b83ab9fb3e7fa097b64a75dd5513032800a10952b0f8d148530f21e602c4d08aebea537a6556608e07819bd0722c3bd2677d586a8848d1495e56d8819c413c3a3380f7fb25981a81487fadeb1146d600496d520d", 0x72) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x64, '\x00', r10, r13, 0x1, 0x0, 0x3}, 0x50) 41.325631663s ago: executing program 32 (id=352): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x7f, 0x2, 0xff7b}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0xb, 0x8, 0x7fff]}, &(0x7f0000000180)=0x44) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000001c0)=""/94) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000240)=0x3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/232) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000380)={0xb, {0xa, 0x400, 0x7f, 0x40}}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x800, 0x400, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {r5, r6}}, './file0\x00'}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000680)=0xa) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f00000006c0)={{0x3, @name="a01d62fbafb970be7d8d0859200e1982e7b6d6a1d52164fb7e31d169eed7facb"}, 0x8, 0x4, 0x1}) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r9) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x15, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xfff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0xfce5, 0x60, &(0x7f0000000880)=""/96, 0x40f00, 0x0, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000980)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0xb, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r7, r12, r7, r7, r4, r7, r7], 0x0, 0x10, 0x800}, 0x94) ioctl$VIDIOC_ENUMSTD(r11, 0xc0485619, &(0x7f0000000b40)={0x6, 0x3200e0, "3222081730d348f5ae2bd36bdf7fe301b92bf416e9bfef73", {0x7fff, 0x6}, 0xa00}) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0), 0x4) pread64(r13, &(0x7f0000000c00)=""/89, 0x59, 0x1) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000c80)="5ce36f5bb2f5be8de86ce51504c845014e4fc31ec65db4875fcdbc2992e8b83ab9fb3e7fa097b64a75dd5513032800a10952b0f8d148530f21e602c4d08aebea537a6556608e07819bd0722c3bd2677d586a8848d1495e56d8819c413c3a3380f7fb25981a81487fadeb1146d600496d520d", 0x72) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x64, '\x00', r10, r13, 0x1, 0x0, 0x3}, 0x50) 6.189895971s ago: executing program 0 (id=776): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0xc, 0x0, 0x29}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x4}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6b, 0x7ff], 0xeeee8000, 0x2019c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.09490235s ago: executing program 0 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x20, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.022999827s ago: executing program 0 (id=780): r0 = socket$nl_audit(0x10, 0x3, 0x9) keyctl$set_reqkey_keyring(0xe, 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000300)=@ethtool_wolinfo={0x5, 0x7ff, 0xfffffa40, "999540b44119"}}) 6.022820813s ago: executing program 0 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8020, &(0x7f0000000080)=ANY=[@ANYBLOB='uid=', @ANYRESOCT]) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'veth0\x00', {'vcan0\x00'}, 0x1000}) 5.998879667s ago: executing program 0 (id=782): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xa0, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x8c, 0x1, [@m_nat={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x35, 0x6, "e596286ec42c70b3e220300363455fa21fdd6071f8bc79724e7377a84af06ec00d58448af0a1063bcf0376a9794b729a73"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2b, 0xff, @remote, @local, {[], {{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf500}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2c4a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x851) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r8, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r10 = fcntl$dupfd(r8, 0x406, r9) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) bind$packet(r10, &(0x7f0000000440)={0x11, 0x5, r12, 0x1, 0x7, 0x6, @remote}, 0x14) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x1064, r13, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_SE_APDU={0x33, 0x19, "92343c1b0f0a652b2525d309bd521fce1e11fe0fa9ab280c6c5cff1e39c82a7898e45a69312ffcc5bee6672f646a19"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1064}, 0x1, 0x0, 0x0, 0x40840}, 0x2604880c) sendmsg$RDMA_NLDEV_CMD_RES_GET(r11, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000914000429205e2508512350da351a8b1d543eab4ad46a0000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x90) 5.095304675s ago: executing program 0 (id=808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000300)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) (async) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) (async) close(0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x40000) (async) 2.305016627s ago: executing program 1 (id=862): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0xc8d5, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec80be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x5, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x9c, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x79, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x5, 0x80, 0x2, 0x451}}, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.08536447s ago: executing program 1 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x9c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x79, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x5, 0x80, 0x2, 0x451}}, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (fail_nth: 4) 1.985385348s ago: executing program 1 (id=864): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = memfd_create(&(0x7f0000000240)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe;\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6\xaf\xe7\xa6\x10\xb6\xde', 0x7) fcntl$addseals(r1, 0x409, 0x8) (async) fcntl$addseals(r1, 0x409, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003, 0x11, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', r3, 0x10, 0x40, 0x401, 0x9, {{0x1e, 0x4, 0x1, 0x32, 0x78, 0x67, 0x0, 0x8, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@noop, @timestamp_addr={0x44, 0x2c, 0x22, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x2}, {@local, 0xf}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xe}, {@rand_addr=0x64010102, 0x8}, {@multicast1, 0x5}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xec, 0x3, 0x4, [{@remote, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xd}, {@private=0xa010100, 0x10001}, {@rand_addr=0x64010100}]}, @timestamp_prespec={0x44, 0xc, 0xc6, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x21eae, 0x40040}}, 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x21eae, 0x40040}}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xaf50}, [@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @alu={0x4, 0x0, 0x1, 0x9, 0xa, 0xfffffffffffffff0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x1d, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x5, 0x10000}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[r7, r7, r7, r7], &(0x7f0000000300)=[{0x4, 0x3, 0x6, 0x7}, {0x0, 0x2, 0xc, 0xb}, {0x1, 0x3, 0x4, 0x2}, {0x0, 0x1, 0x3, 0x4}, {0x1, 0x5, 0x6, 0x5}, {0x0, 0x2, 0x5, 0x5}, {0x0, 0x3, 0x2, 0xc}], 0x10, 0x7d22000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xaf50}, [@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @alu={0x4, 0x0, 0x1, 0x9, 0xa, 0xfffffffffffffff0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x1d, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x5, 0x10000}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[r7, r7, r7, r7], &(0x7f0000000300)=[{0x4, 0x3, 0x6, 0x7}, {0x0, 0x2, 0xc, 0xb}, {0x1, 0x3, 0x4, 0x2}, {0x0, 0x1, 0x3, 0x4}, {0x1, 0x5, 0x6, 0x5}, {0x0, 0x2, 0x5, 0x5}, {0x0, 0x3, 0x2, 0xc}], 0x10, 0x7d22000}, 0x94) 1.844859372s ago: executing program 1 (id=865): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="240000001e005f1814fffffffffffff807ef00000100000000000c0006000500c4", 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73e1ad62}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x3, 0x0, 0x0, 0x2, 0xdf, 0x6, 0x6, 0xac, 0x4d, 0x0, 0x2f, 0x0, 0x40, 0x8, 0x2, 0x7f, 0x0, 0xbb, '\x00', 0x5, 0x403}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='vfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1.552506838s ago: executing program 1 (id=866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x406c0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000180)="e6", 0x1, 0x20048004, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, 0x0, 0xfffffffffffffd1e, 0x40000002, 0x0, 0x19) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x50, 0x1}) r2 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x2e7f, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) recvmmsg(r7, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x4}, 0x401}, {{&(0x7f0000001580)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000005dc0)=""/84, 0x54}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x2, &(0x7f0000002680)=""/79, 0x4f}, 0xfffffffa}, {{&(0x7f0000002700)=@un=@abs, 0x80, &(0x7f0000000500)=[{&(0x7f0000002780)=""/251, 0xfb}, {&(0x7f0000002880)=""/87, 0x57}], 0x2, &(0x7f0000002900)=""/249, 0xf9}, 0x4}, {{&(0x7f0000002a00)=@nfc_llcp, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002a80)=""/104, 0x68}, {&(0x7f0000002b00)=""/207, 0xcf}, {&(0x7f0000002c00)=""/152, 0x98}], 0x3, &(0x7f0000002d00)=""/152, 0x98}, 0x40009e}, {{&(0x7f0000002dc0)=@can, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001600)=""/13, 0xd}, {&(0x7f0000002e80)}, {&(0x7f0000002ec0)=""/253, 0xfd}], 0x3, &(0x7f0000003000)=""/101, 0x65}, 0x2}, {{&(0x7f0000003080)=@ax25={{0x3, @default}, [@bcast, @bcast, @default, @default, @remote, @netrom, @remote, @default]}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003100)=""/171, 0xab}, {&(0x7f00000031c0)=""/147, 0x93}, {&(0x7f0000003280)=""/214, 0xd6}, {&(0x7f0000003380)=""/114, 0x72}], 0x4, &(0x7f0000003440)=""/246, 0xf6}, 0x7}, {{&(0x7f0000003540)=@l2tp, 0x80, &(0x7f00000047c0)=[{&(0x7f00000035c0)=""/113, 0x71}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/72, 0x48}, {&(0x7f00000046c0)=""/76, 0x4c}, {&(0x7f0000004740)=""/101, 0x65}], 0x5, &(0x7f0000004840)=""/237, 0xed}, 0x800}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004940)}, {&(0x7f0000004980)=""/65, 0x41}, {&(0x7f0000004a00)=""/237, 0xed}, {&(0x7f0000004b00)=""/127, 0x7f}], 0x4, &(0x7f0000004bc0)=""/4096, 0x1000}, 0x9}], 0x8, 0x40000040, 0x0) ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea90026af8032003300c4c48ddc8dcd0000000f01cbb950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x60}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r8, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x1}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 1.373922944s ago: executing program 1 (id=870): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4, 0x1010, r0, 0x10000000) write$vhost_msg(r0, &(0x7f00000002c0)={0x1, {&(0x7f0000000200)=""/146, 0x92, &(0x7f00000000c0)=""/56, 0x2, 0x2}}, 0x48) 1.331946819s ago: executing program 33 (id=870): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4, 0x1010, r0, 0x10000000) write$vhost_msg(r0, &(0x7f00000002c0)={0x1, {&(0x7f0000000200)=""/146, 0x92, &(0x7f00000000c0)=""/56, 0x2, 0x2}}, 0x48) 483.31181ms ago: executing program 4 (id=883): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000d80), 0x0, 0x69879b4ab3253f6d, 0x0) 414.383688ms ago: executing program 4 (id=885): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0328000980070705ab0b78"], 0x0) (async) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0328000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000001880)=[{&(0x7f0000000280)="76ced011151259a6cb4041de375a4f1ec1c73839b6796622a8510184ab26a8d34c24cdb4d53228155a0094d4d148ade761c3fb4bbc15847f8f015e9c691562dc2bf3c02a486010dab4ce0315bbcba0", 0x4f}], 0x1) (async) writev(r1, &(0x7f0000001880)=[{&(0x7f0000000280)="76ced011151259a6cb4041de375a4f1ec1c73839b6796622a8510184ab26a8d34c24cdb4d53228155a0094d4d148ade761c3fb4bbc15847f8f015e9c691562dc2bf3c02a486010dab4ce0315bbcba0", 0x4f}], 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trusted: '], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x31, 0x1, 0x2, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2", 0x32314d48}) dup2(r0, r1) (async) r3 = dup2(r0, r1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r3, 0x67ca3832, 0x522c4f36, 0xa}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) (async) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000380)={0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x8, 0x1, 0x1, 0x0, 0x6}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x8, 0x1, 0x1, 0x0, 0x6}) bind$can_raw(r0, 0x0, 0x0) (async) bind$can_raw(r0, 0x0, 0x0) 343.954258ms ago: executing program 4 (id=887): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 342.585478ms ago: executing program 3 (id=889): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 215.574673ms ago: executing program 3 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f00000011c0)=0x2, 0xa, 0x40000002, 0x0, 0x0, 0xfffffff7) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0) 215.451783ms ago: executing program 3 (id=891): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x5, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) close(r0) 143.976377ms ago: executing program 3 (id=892): r0 = socket(0x10, 0x3, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, @empty, @private0, 0x0, 0x0, 0x0, 0x800000}}) 143.775475ms ago: executing program 4 (id=893): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x2180, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044815}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000040)={0x1, 0x5, 0x7f}) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) 143.686931ms ago: executing program 3 (id=894): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0xc, 0x0, 0x29}) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x4}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6b, 0x7ff], 0xeeee8000, 0x2019c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 94.918352ms ago: executing program 4 (id=895): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @generic={0x4, 0xc, 0x1, 0xc4f5, 0x6}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000001240)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') write$yama_ptrace_scope(r6, &(0x7f0000000040)='3\x00', 0x2) r7 = socket(0x11, 0xa, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000580)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000240)) write$FUSE_NOTIFY_INVAL_INODE(r8, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x5, 0xe, 0x81a}}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 94.401007ms ago: executing program 3 (id=896): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000b00)={0x0, 0x42474752, 0x3, @stepwise={0x9, 0xff, 0x7, 0x1ff, 0x5, 0x9}}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r3}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r6, 0x0, 0x180000}, 0x18) close(r5) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {}, {0x8, 0x2}, {0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000090}, 0x40000) r7 = syz_io_uring_setup(0x3619, &(0x7f00000006c0)={0x0, 0xbded, 0x10000, 0x1, 0x361}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_MEM_REGION(r7, 0x22, &(0x7f00000005c0)={&(0x7f0000000400)={&(0x7f00000007c0)="7b986d2e81abc5d366192a175b5ef90ac781fc9e5dbd9093a52a0a3f4012af0504f59de325fc997b98af7624cace299641b7ef2cd25f169f7594c8760f46f72c4c199cb614a9c56a3af330938c232239a44a90052ace66e71101619788a5ce4d1f6a8c0c0c8154c8a0bc6c88b1f14e92ab244d51973d91983c668ac9f9e6007a2444b1848089a1bf36409162594ae26b2b1b8877b405d6b56748d71a7a581c85f9f635282dd0425baa7e27f889", 0xad, 0x1, 0x7f, 0x4}}, 0x1) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f00000004c0)={'sit0\x00', 0x7, 0x5}) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0xb1f, 0x6, 0x8, 0x0, 0xe5]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r11}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) 14.329446ms ago: executing program 4 (id=897): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 0s ago: executing program 5 (id=872): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x9c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x79, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x5, 0x80, 0x2, 0x451}}, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (fail_nth: 5) kernel console output (not intermixed with test programs): reconfigured BSSID 50:50:50:50:50:50 [ 57.208872][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.259168][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.267530][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.273457][ T1255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.277335][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.277623][ T1255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.292489][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.318896][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.327059][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.342713][ T6026] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.344617][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.350838][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.366988][ T1255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.369631][ T1255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.435577][ T6035] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.527591][ T6040] program syz.1.8 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.573923][ T6045] Bluetooth: MGMT ver 1.23 [ 57.578195][ T6045] overlay: filesystem on ./bus is read-only [ 57.639351][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11'. [ 57.794615][ T6066] netlink: 312 bytes leftover after parsing attributes in process `syz.1.16'. [ 57.838224][ T6069] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 57.926904][ T6074] 9p: Unknown Cache mode or invalid value fs [ 57.960700][ T64] Bluetooth: hci3: command tx timeout [ 57.962835][ T5297] Bluetooth: hci0: command tx timeout [ 57.964081][ T5949] Bluetooth: hci2: command tx timeout [ 57.980264][ T841] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 58.040565][ T5949] Bluetooth: hci1: command tx timeout [ 58.086060][ T6078] ISOFS: Unable to identify CD-ROM format. [ 58.136450][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26'. [ 58.146997][ T6084] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6084 comm=syz.1.26 [ 58.167026][ T841] usb 5-1: not running at top speed; connect to a high speed hub [ 58.170942][ T841] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 58.174756][ T841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.180711][ T841] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.184453][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.187610][ T841] usb 5-1: Product: å¡á‡‘簓挺댜첛ㅫ汣狨榓ﰄ햑îªÈ«é¦šáˆ–岓ꡑ꛰Ꙁ沪翄í’ફï“ൺ넊逥꣪碼Ῡᷧï¾ê‡£í’¨ã¼˜ã¸°)ဋ꼔 [ 58.195757][ T841] usb 5-1: Manufacturer: ã°Š [ 58.197781][ T841] usb 5-1: SerialNumber: ⿛룛૷ᬜ辅彩饥였䆦ì†ï—²ë¶†ë…¢éµ¼ïƒï˜±èŽäŽœê¤‘젳龎䕥⒙嶿矠ⷥￇ⨀뵒堕뼱âŒèŠ´ì« íŒ²éŠŠãŽá³£á°¿éƒ…ਡ✔⠵ᮟ [ 58.216337][ T6094] xt_HMARK: spi-set and port-set can't be combined [ 58.228671][ T6094] Zero length message leads to an empty skb [ 58.415541][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.416487][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 58.418839][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.444312][ T841] usb 5-1: 0:2 : does not exist [ 58.471558][ T841] usb 5-1: USB disconnect, device number 2 [ 58.475949][ T6108] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.487887][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 58.568113][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 58.768841][ T6115] xt_bpf: check failed: parse error [ 59.465973][ T6139] process 'syz.1.44' launched '/dev/fd/4' with NULL argv: empty string added [ 59.524773][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'. [ 59.600739][ T6150] SELinux: policydb string length 14080 does not match expected length 8 [ 59.604669][ T6150] SELinux: failed to load policy [ 59.821769][ T6158] bond1 (unregistering): Released all slaves [ 59.924594][ T6163] netlink: 224 bytes leftover after parsing attributes in process `syz.3.53'. [ 59.929280][ T6163] IPv6: Can't replace route, no match found [ 59.958397][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 59.963307][ T6168] ata1.00: invalid cdb length 6 [ 59.985242][ T6170] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 60.040506][ T5949] Bluetooth: hci2: command tx timeout [ 60.050240][ T5949] Bluetooth: hci3: command tx timeout [ 60.052051][ T64] Bluetooth: hci0: command tx timeout [ 60.120306][ T5949] Bluetooth: hci1: command tx timeout [ 60.260107][ T5975] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.412910][ T5975] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 60.416627][ T5975] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 60.421664][ T5975] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 60.425655][ T5975] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 60.430389][ T5975] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 60.436130][ T5975] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 60.439281][ T5975] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 60.442834][ T5975] usb 8-1: Product: syz [ 60.444879][ T5975] usb 8-1: Manufacturer: syz [ 60.451576][ T5975] cdc_wdm 8-1:1.0: skipping garbage [ 60.453568][ T5975] cdc_wdm 8-1:1.0: skipping garbage [ 60.458757][ T5975] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 60.470231][ T5975] cdc_wdm 8-1:1.0: Unknown control protocol [ 60.652386][ T841] usb 8-1: USB disconnect, device number 2 [ 60.653623][ T6174] cdc_wdm 8-1:1.0: Error submitting int urb - -19 [ 60.687261][ T6205] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.696450][ T6205] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 60.708941][ T6205] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 60.713247][ T6205] UDF-fs: Scanning with blocksize 2048 failed [ 60.715870][ T6205] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 60.718120][ T6205] UDF-fs: Scanning with blocksize 4096 failed [ 61.581970][ T6235] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 61.586096][ T6235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.586781][ T40] kauditd_printk_skb: 135 callbacks suppressed [ 61.586794][ T40] audit: type=1400 audit(1761985204.905:234): avc: denied { getopt } for pid=6234 comm="syz.2.74" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.653810][ T40] audit: type=1400 audit(1761985204.975:235): avc: denied { ioctl } for pid=6238 comm="syz.2.76" path="socket:[9197]" dev="sockfs" ino=9197 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.683360][ T40] audit: type=1400 audit(1761985205.005:236): avc: denied { accept } for pid=6243 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.689267][ T40] audit: type=1400 audit(1761985205.005:237): avc: denied { ioctl } for pid=6243 comm="syz.2.77" path="socket:[10494]" dev="sockfs" ino=10494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.723578][ T40] audit: type=1400 audit(1761985205.045:238): avc: denied { create } for pid=6246 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 62.079570][ T40] audit: type=1400 audit(1761985205.395:239): avc: denied { connect } for pid=6255 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.087805][ T40] audit: type=1400 audit(1761985205.405:240): avc: denied { ioctl } for pid=6255 comm="syz.0.81" path="socket:[10052]" dev="sockfs" ino=10052 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.110109][ T841] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.120959][ T5949] Bluetooth: hci0: command tx timeout [ 62.121018][ T64] Bluetooth: hci3: command tx timeout [ 62.121758][ T5297] Bluetooth: hci2: command tx timeout [ 62.186683][ T40] audit: type=1400 audit(1761985205.505:241): avc: denied { append } for pid=6259 comm="syz.0.82" name="v4l-subdev7" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.194168][ T40] audit: type=1400 audit(1761985205.505:242): avc: denied { create } for pid=6259 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.201367][ T40] audit: type=1400 audit(1761985205.505:243): avc: denied { write } for pid=6259 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.260162][ T841] usb 7-1: Using ep0 maxpacket: 8 [ 62.263839][ T841] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.267228][ T841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.270687][ T841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.274692][ T841] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.279951][ T841] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.285431][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.498524][ T841] usb 7-1: GET_CAPABILITIES returned 0 [ 62.500424][ T841] usbtmc 7-1:16.0: can't read capabilities [ 62.702050][ T34] usb 7-1: USB disconnect, device number 2 [ 63.328182][ T6287] __nla_validate_parse: 5 callbacks suppressed [ 63.328191][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 63.682920][ T6308] netlink: 84 bytes leftover after parsing attributes in process `syz.1.98'. [ 63.723958][ T6310] netlink: 108 bytes leftover after parsing attributes in process `syz.1.99'. [ 63.727294][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 63.834971][ T6314] netlink: 116 bytes leftover after parsing attributes in process `syz.1.101'. [ 63.843095][ T6316] binder: 6315:6316 unknown command 0 [ 63.845340][ T6316] binder: 6315:6316 ioctl c0306201 200000000300 returned -22 [ 64.239118][ T6343] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 64.279463][ T6346] loop2: detected capacity change from 0 to 7 [ 64.285914][ T6346] Dev loop2: unable to read RDB block 7 [ 64.288453][ T6346] loop2: unable to read partition table [ 64.291118][ T6346] loop2: partition table beyond EOD, truncated [ 64.293659][ T6346] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 64.351316][ T6361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.110'. [ 64.389727][ T6361] tipc: Started in network mode [ 64.394287][ T6361] tipc: Node identity 620f19da5018, cluster identity 4711 [ 64.397368][ T6361] tipc: Enabled bearer , priority 0 [ 64.461143][ T6361] team0 (unregistering): Port device team_slave_0 removed [ 64.467746][ T6361] team0 (unregistering): Port device team_slave_1 removed [ 64.555836][ T6359] tipc: Resetting bearer [ 64.747563][ T6366] mmap: syz.0.112 (6366) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.236189][ T6359] tipc: Disabling bearer [ 65.860122][ T61] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.041404][ T61] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 66.045158][ T61] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 66.048965][ T61] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.055780][ T61] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 66.059161][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.062168][ T61] usb 8-1: Product: syz [ 66.063698][ T61] usb 8-1: Manufacturer: syz [ 66.065649][ T61] usb 8-1: SerialNumber: syz [ 66.072819][ T61] hub 8-1:1.0: bad descriptor, ignoring hub [ 66.075155][ T61] hub 8-1:1.0: probe with driver hub failed with error -5 [ 66.276884][ T61] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 66.601233][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 66.601249][ T40] audit: type=1400 audit(1761985209.925:295): avc: denied { getopt } for pid=6407 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.607887][ T6408] erspan0: entered promiscuous mode [ 66.657633][ T6410] ======================================================= [ 66.657633][ T6410] WARNING: The mand mount option has been deprecated and [ 66.657633][ T6410] and is ignored by this kernel. Remove the mand [ 66.657633][ T6410] option from the mount to silence this warning. [ 66.657633][ T6410] ======================================================= [ 66.677821][ T40] audit: type=1400 audit(1761985209.995:296): avc: denied { add_name } for pid=6409 comm="syz.0.120" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.688551][ T40] audit: type=1400 audit(1761985209.995:297): avc: denied { create } for pid=6409 comm="syz.0.120" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.695835][ T40] audit: type=1400 audit(1761985209.995:298): avc: denied { associate } for pid=6409 comm="syz.0.120" name="cpuacct.usage_percpu" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.703304][ T40] audit: type=1400 audit(1761985210.005:299): avc: denied { read append open } for pid=6409 comm="syz.0.120" path="/32/file0/cpuacct.usage_percpu" dev="9p" ino=71827989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.712133][ T40] audit: type=1800 audit(1761985210.015:300): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.120" name="file0" dev="9p" ino=71827905 res=0 errno=0 [ 66.730806][ T6393] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 66.735709][ T40] audit: type=1400 audit(1761985210.055:301): avc: denied { ioctl } for pid=6392 comm="syz.3.116" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.797491][ T40] audit: type=1400 audit(1761985210.115:302): avc: denied { read append } for pid=6416 comm="syz.2.123" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.808296][ T40] audit: type=1400 audit(1761985210.115:303): avc: denied { open } for pid=6416 comm="syz.2.123" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.808339][ T40] audit: type=1400 audit(1761985210.115:304): avc: denied { ioctl } for pid=6416 comm="syz.2.123" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.870550][ T6421] sctp: [Deprecated]: syz.2.124 (pid 6421) Use of int in maxseg socket option. [ 66.870550][ T6421] Use struct sctp_assoc_value instead [ 66.884055][ T6421] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 66.886729][ T6421] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 66.891869][ T6421] vhci_hcd vhci_hcd.0: Device attached [ 66.894802][ T6393] usb 8-1: device firmware changed [ 66.895808][ T6422] vhci_hcd: connection closed [ 66.899102][ T5982] usb 8-1: USB disconnect, device number 3 [ 66.900520][ T60] vhci_hcd: stop threads [ 66.905747][ T60] vhci_hcd: release socket [ 66.905824][ T5982] usblp0: removed [ 66.907642][ T60] vhci_hcd: disconnect device [ 67.040394][ T5982] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 67.108970][ T6435] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 67.112334][ T6435] netlink: 228 bytes leftover after parsing attributes in process `syz.1.127'. [ 67.123348][ T6437] binder: 6436:6437 unknown command 0 [ 67.125133][ T6437] binder: 6436:6437 ioctl c0306201 200000000080 returned -22 [ 67.129559][ T6437] binder: 6436:6437 ioctl c0306201 2000000003c0 returned -14 [ 67.137240][ T6437] netlink: 'syz.0.128': attribute type 3 has an invalid length. [ 67.140721][ T6437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.160179][ T6437] Process accounting resumed [ 67.212249][ T6439] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 67.224906][ T5982] usb 8-1: unable to get BOS descriptor or descriptor too short [ 67.228186][ T5982] usb 8-1: no configurations [ 67.230949][ T5982] usb 8-1: can't read configurations, error -22 [ 67.281638][ T6442] veth3: entered promiscuous mode [ 67.426984][ T6447] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 67.427801][ T6448] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 67.501708][ T6451] usb usb3: usbfs: process 6451 (syz.2.133) did not claim interface 2 before use [ 68.308136][ T6468] binder: 6467:6468 unknown command 0 [ 68.310537][ T6468] binder: 6467:6468 ioctl c0306201 200000000080 returned -22 [ 68.336977][ T6474] qnx6: unable to read the first superblock [ 68.343153][ T6474] qnx6: unable to read the first superblock [ 68.345645][ T6474] qnx6: unable to read the first superblock [ 68.350924][ T6474] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 68.497327][ T6492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6492 comm=syz.2.143 [ 68.780122][ T841] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.825344][ T6513] binder: 6512:6513 ioctl 8020640d 2000000000c0 returned -22 [ 68.931234][ T841] usb 7-1: Using ep0 maxpacket: 32 [ 68.935092][ T841] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 68.941470][ T841] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 68.945020][ T841] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 68.947935][ T841] usb 7-1: Product: syz [ 68.949759][ T841] usb 7-1: Manufacturer: syz [ 68.951828][ T841] usb 7-1: SerialNumber: syz [ 68.957182][ T841] usb 7-1: config 0 descriptor?? [ 68.959733][ T6495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.217169][ T3250] usb 7-1: USB disconnect, device number 3 [ 69.425024][ T6495] binder: 6494:6495 ioctl c02064b2 2000000003c0 returned -22 [ 69.519924][ T6529] loop2: detected capacity change from 0 to 7 [ 69.524617][ T5940] Dev loop2: unable to read RDB block 7 [ 69.526353][ T5940] loop2: unable to read partition table [ 69.528171][ T5940] loop2: partition table beyond EOD, truncated [ 69.532967][ T6529] Dev loop2: unable to read RDB block 7 [ 69.535034][ T6529] loop2: unable to read partition table [ 69.537204][ T6529] loop2: partition table beyond EOD, truncated [ 69.539486][ T6529] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 69.693212][ T5717] IPVS: starting estimator thread 0... [ 69.780227][ T6534] IPVS: using max 23 ests per chain, 55200 per kthread [ 69.916069][ T6536] xt_recent: Unsupported userspace flags (000000b2) [ 69.931494][ T61] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 70.005252][ T6545] binder: 6544:6545 ioctl 4018620d 0 returned -22 [ 70.078691][ T6531] syz.3.155 (6531): drop_caches: 2 [ 70.100283][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 70.117712][ T6532] syz.3.155 (6532): drop_caches: 2 [ 70.121963][ T61] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.125015][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.128027][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.131136][ T61] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.135196][ T61] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.137978][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.142116][ T6545] binder: 6544:6545 ioctl c0306201 200000000240 returned -11 [ 70.182589][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.185016][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.188772][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.191296][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.193668][ T64] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 70.193794][ T64] Bluetooth: hci3: Malformed LE Event: 0x02 [ 70.357641][ T61] usb 8-1: GET_CAPABILITIES returned 0 [ 70.359444][ T61] usbtmc 8-1:16.0: can't read capabilities [ 70.458087][ T6571] overlay: Unknown parameter 'dont_hash' [ 70.462270][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 70.473562][ T6573] random: crng reseeded on system resumption [ 70.528756][ T6580] warning: `syz.1.170' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.532860][ T6580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.170'. [ 70.545413][ T6581] bridge0: entered promiscuous mode [ 70.564744][ T56] usb 8-1: USB disconnect, device number 6 [ 70.592552][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 70.597006][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 71.122659][ T6605] loop2: detected capacity change from 0 to 7 [ 71.126053][ T6605] Dev loop2: unable to read RDB block 7 [ 71.128494][ T6605] loop2: unable to read partition table [ 71.131759][ T6605] loop2: partition table beyond EOD, truncated [ 71.134390][ T6605] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 71.138181][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 71.204921][ T6614] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 71.210284][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.213089][ T64] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 71.326994][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 71.329750][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 71.380186][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 71.384080][ T56] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.387342][ T56] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 71.390182][ T56] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.393723][ T56] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.396747][ T56] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 71.400502][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.409199][ T56] hub 6-1:1.0: bad descriptor, ignoring hub [ 71.417249][ T56] hub 6-1:1.0: probe with driver hub failed with error -5 [ 71.421255][ T56] cdc_wdm 6-1:1.0: skipping garbage [ 71.423483][ T56] cdc_wdm 6-1:1.0: skipping garbage [ 71.426938][ T56] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 71.429353][ T56] cdc_wdm 6-1:1.0: Unknown control protocol [ 71.458092][ T6627] netlink: 'syz.2.187': attribute type 20 has an invalid length. [ 71.506176][ T6632] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 71.585515][ T6632] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 71.620980][ T6636] loop2: detected capacity change from 0 to 7 [ 71.624367][ T6636] Dev loop2: unable to read RDB block 7 [ 71.626169][ T6636] loop2: unable to read partition table [ 71.628130][ T6636] loop2: partition table beyond EOD, truncated [ 71.630977][ T6636] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 71.670407][ T6638] usb usb8: usbfs: process 6638 (syz.2.191) did not claim interface 0 before use [ 71.675499][ T6638] SELinux: failed to load policy [ 71.682480][ T6601] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 71.700942][ T5717] usb 6-1: USB disconnect, device number 2 [ 71.709766][ T6640] IPv4: Oversized IP packet from 172.20.20.24 [ 71.713425][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 71.715663][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 71.758912][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 71.758921][ T40] audit: type=1400 audit(1761985215.075:348): avc: denied { ioctl } for pid=6643 comm="syz.2.194" path="socket:[12841]" dev="sockfs" ino=12841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.768618][ T40] audit: type=1400 audit(1761985215.085:349): avc: denied { bind } for pid=6643 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.792815][ T40] audit: type=1400 audit(1761985215.115:350): avc: denied { connect } for pid=6648 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.800216][ T40] audit: type=1400 audit(1761985215.115:351): avc: denied { setopt } for pid=6648 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.808221][ T40] audit: type=1400 audit(1761985215.125:352): avc: denied { read } for pid=6648 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.858906][ T40] audit: type=1400 audit(1761985215.175:353): avc: denied { listen } for pid=6648 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.873800][ T6657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.198'. [ 71.896522][ T6659] loop2: detected capacity change from 0 to 7 [ 71.899978][ T5940] Dev loop2: unable to read RDB block 7 [ 71.901861][ T5940] loop2: unable to read partition table [ 71.903753][ T5940] loop2: partition table beyond EOD, truncated [ 71.907426][ T6659] Dev loop2: unable to read RDB block 7 [ 71.909107][ T40] audit: type=1400 audit(1761985215.225:354): avc: denied { read write } for pid=6656 comm="syz.3.198" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 71.909450][ T6659] loop2: unable to read partition table [ 71.919511][ T40] audit: type=1400 audit(1761985215.225:355): avc: denied { open } for pid=6656 comm="syz.3.198" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 71.921095][ T6659] loop2: partition table beyond EOD, truncated [ 71.930752][ T6659] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 71.934268][ T6657] Cannot find del_set index 4 as target [ 72.067210][ T6665] "syz.3.202" (6665) uses obsolete ecb(arc4) skcipher [ 72.210115][ T5717] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.222235][ T40] audit: type=1400 audit(1761985215.545:356): avc: denied { create } for pid=6669 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.229378][ T40] audit: type=1400 audit(1761985215.545:357): avc: denied { ioctl } for pid=6669 comm="syz.1.203" path="socket:[12857]" dev="sockfs" ino=12857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.319335][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 72.371547][ T5717] usb 7-1: Using ep0 maxpacket: 16 [ 72.376452][ T5717] usb 7-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.382123][ T5717] usb 7-1: config 1 interface 0 has no altsetting 0 [ 72.386826][ T5717] usb 7-1: New USB device found, idVendor=1477, idProduct=1025, bcdDevice= 0.40 [ 72.390762][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.394043][ T5717] usb 7-1: Product: à ‡ [ 72.395751][ T5717] usb 7-1: Manufacturer: 芕巢ì¼ëžŽâ€¦ç¼›ë…ºå’£ï‡¦á©—䤗켊楷è´äŠœç›°ïŠì¶¹ç²‚î”ã›è¨äž°ï«³ë³¥ä‰–徃ﰬ愞ïœäŽ†î ‹ã¢œì‹§á©¶í›‘ꑩ๥‽ᑩ篴अ㛹掄蓨拕躠磡ਫ਼咟ொ血ë­ì³®éª¢í”£îœèŽƒì¢—鱻ꜜ秺뺂ä¤ä€¢ê‚‘賈 [ 72.405079][ T5717] usb 7-1: SerialNumber: Е [ 72.622013][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.625774][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.631648][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.635110][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.639795][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.643505][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.708379][ T6691] tmpfs: Bad value for 'mpol' [ 72.713354][ T6691] SQUASHFS error: Failed to read block 0x0: -5 [ 72.716176][ T6691] unable to read squashfs_super_block [ 72.717431][ T5717] usbhid 7-1:1.0: can't add hid device: -71 [ 72.721819][ T5717] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 72.727537][ T5717] usb 7-1: USB disconnect, device number 4 [ 72.735164][ T6691] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 72.790186][ T6694] bpf: Bad value for 'mode' [ 72.883738][ T6696] afs: Unknown parameter 'd' [ 72.904858][ T6701] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 72.952517][ T6704] bridge: RTM_NEWNEIGH with invalid ether address [ 73.119405][ T6721] random: crng reseeded on system resumption [ 73.126789][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 73.131987][ T6721] netlink: 'syz.3.217': attribute type 1 has an invalid length. [ 73.136798][ T6721] netlink: 'syz.3.217': attribute type 2 has an invalid length. [ 73.324267][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 73.363060][ T6744] netlink: 'syz.3.225': attribute type 62 has an invalid length. [ 73.462920][ T6751] overlayfs: overlapping lowerdir path [ 73.470903][ T6751] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 73.473323][ T6751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.482231][ T6751] overlayfs: failed to verify upper (66/file0, ino=390, err=-116) [ 73.486090][ T6751] overlayfs: failed to verify index dir 'upper' xattr [ 73.489037][ T6751] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 73.494215][ T6753] kvm: user requested TSC rate below hardware speed [ 73.497797][ T6751] overlayfs: failed to verify upper root origin [ 73.499955][ T6753] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 73.645131][ T6763] binder: 6762:6763 ioctl f507 0 returned -22 [ 73.648245][ T6763] binder: 6762:6763 ioctl c400941b 2000000004c0 returned -22 [ 73.777679][ T6776] binder_alloc: binder_alloc_mmap_handler: 6775 200000ffd000-200001000000 already mapped failed -16 [ 73.783426][ T6776] binder_alloc: binder_alloc_mmap_handler: 6775 200000ffd000-200001000000 already mapped failed -16 [ 73.787972][ T6776] binder_alloc: binder_alloc_mmap_handler: 6775 200000ffd000-200001000000 already mapped failed -16 [ 73.792989][ T6776] binder_alloc: binder_alloc_mmap_handler: 6775 200000ffd000-200001000000 already mapped failed -16 [ 73.797781][ T6776] binder_alloc: binder_alloc_mmap_handler: 6775 200000ffd000-200001000000 already mapped failed -16 [ 73.802888][ T6776] binder_alloc: binder_alloc_mmap_handler: 6775 200000ffd000-200001000000 already mapped failed -16 [ 73.807453][ T6776] binder_alloc: binder_alloc_mmap_handler: 6775 200000ffd000-200001000000 already mapped failed -16 [ 73.812290][ T6776] binder_alloc: binder_alloc_mmap_handler: 6775 200000ffd000-200001000000 already mapped failed -16 [ 73.914642][ T6785] loop2: detected capacity change from 0 to 7 [ 73.917964][ T5940] Dev loop2: unable to read RDB block 7 [ 73.919811][ T5940] loop2: unable to read partition table [ 73.921748][ T5940] loop2: partition table beyond EOD, truncated [ 73.925047][ T6785] Dev loop2: unable to read RDB block 7 [ 73.927148][ T6785] loop2: unable to read partition table [ 73.929098][ T6785] loop2: partition table beyond EOD, truncated [ 73.932371][ T6785] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 73.992189][ T6789] tmpfs: Group quota block hardlimit too large. [ 74.002173][ T5975] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 74.065955][ T5949] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 74.120160][ T5949] Bluetooth: hci3: command 0x0405 tx timeout [ 74.170073][ T5975] usb 8-1: Using ep0 maxpacket: 16 [ 74.174676][ T5975] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 74.177777][ T5975] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 74.181126][ T5975] usb 8-1: Product: syz [ 74.182683][ T5975] usb 8-1: Manufacturer: syz [ 74.184277][ T5975] usb 8-1: SerialNumber: syz [ 74.187327][ T5975] usb 8-1: config 0 descriptor?? [ 74.578561][ T6820] loop2: detected capacity change from 0 to 7 [ 74.583634][ T6820] Dev loop2: unable to read RDB block 7 [ 74.586027][ T6820] loop2: unable to read partition table [ 74.588582][ T6820] loop2: partition table beyond EOD, truncated [ 74.593844][ T6820] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.683554][ T6822] netlink: 'syz.2.250': attribute type 9 has an invalid length. [ 74.915270][ T6837] sp0: Synchronizing with TNC [ 75.098191][ T6846] capability: warning: `syz.3.255' uses deprecated v2 capabilities in a way that may be insecure [ 75.108551][ T6847] bridge1: entered allmulticast mode [ 75.184341][ T10] usb 8-1: USB disconnect, device number 7 [ 75.258634][ T6858] loop2: detected capacity change from 0 to 7 [ 75.263915][ T5940] Dev loop2: unable to read RDB block 7 [ 75.265776][ T5940] loop2: unable to read partition table [ 75.267651][ T5940] loop2: partition table beyond EOD, truncated [ 75.272493][ T6858] Dev loop2: unable to read RDB block 7 [ 75.275029][ T6858] loop2: unable to read partition table [ 75.277312][ T6858] loop2: partition table beyond EOD, truncated [ 75.279293][ T6858] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 75.546207][ T6877] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 75.639886][ T6880] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 75.643669][ T6880] netlink: 'syz.3.267': attribute type 3 has an invalid length. [ 75.646123][ T6880] netlink: 'syz.3.267': attribute type 7 has an invalid length. [ 75.648493][ T6880] netlink: 'syz.3.267': attribute type 8 has an invalid length. [ 75.651917][ T6880] __nla_validate_parse: 5 callbacks suppressed [ 75.651925][ T6880] netlink: 184 bytes leftover after parsing attributes in process `syz.3.267'. [ 75.657068][ T6880] NCSI netlink: No device for ifindex 131092 [ 75.689693][ T6883] loop2: detected capacity change from 0 to 7 [ 75.692455][ T6883] Dev loop2: unable to read RDB block 7 [ 75.694270][ T6883] loop2: unable to read partition table [ 75.696197][ T6883] loop2: partition table beyond EOD, truncated [ 75.698135][ T6883] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 75.783303][ T6892] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 75.801739][ T6892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.809272][ T6892] vlan2: entered promiscuous mode [ 75.811430][ T6892] bond1: entered promiscuous mode [ 75.815892][ T6892] openvswitch: netlink: Key type 51 is out of range max 32 [ 75.826127][ T6892] gretap1: entered promiscuous mode [ 75.832593][ T6892] bond1: (slave gretap1): making interface the new active one [ 75.837043][ T6892] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 75.937725][ T6901] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 76.036879][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 76.058169][ T6912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.074279][ T6912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.077421][ T6912] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 76.083224][ T6912] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 76.115262][ T6916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6916 comm=syz.3.280 [ 76.124531][ T6916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.280'. [ 76.205600][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.208562][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.241011][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 76.244772][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 76.468800][ T6933] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.475442][ T6933] BIDI support in bsg has been removed. [ 76.539799][ T6943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.288'. [ 76.544043][ T6943] nbd: must specify at least one socket [ 76.889249][ T6955] netlink: 36 bytes leftover after parsing attributes in process `syz.3.293'. [ 76.974235][ T6964] overlay: Bad value for 'workdir' [ 76.977959][ T6966] overlay: Bad value for 'workdir' [ 77.025134][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 77.025150][ T40] audit: type=1400 audit(1761985220.345:379): avc: denied { map } for pid=6967 comm="syz.3.297" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.037912][ T40] audit: type=1400 audit(1761985220.345:380): avc: denied { execute } for pid=6967 comm="syz.3.297" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.048197][ T40] audit: type=1400 audit(1761985220.355:381): avc: denied { execstack } for pid=6967 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.084559][ T40] audit: type=1400 audit(1761985220.405:382): avc: denied { write } for pid=6969 comm="syz.3.298" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.157068][ T40] audit: type=1400 audit(1761985220.475:383): avc: denied { name_connect } for pid=6977 comm="syz.2.299" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 77.166298][ T6978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.173828][ T40] audit: type=1400 audit(1761985220.495:384): avc: denied { create } for pid=6977 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 77.189881][ T40] audit: type=1400 audit(1761985220.505:385): avc: denied { getopt } for pid=6977 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 77.438418][ T40] audit: type=1400 audit(1761985220.755:386): avc: denied { append } for pid=6994 comm="syz.3.306" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.506451][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.509780][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.576750][ T40] audit: type=1326 audit(1761985220.895:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.2.308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5765f8efc9 code=0x7ffc0000 [ 77.586156][ T40] audit: type=1326 audit(1761985220.905:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.2.308" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5765f8efc9 code=0x7ffc0000 [ 77.597429][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.612934][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.751159][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.755770][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.759640][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.764104][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.806945][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.815919][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.820693][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.830347][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.934693][ T7034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.313'. [ 78.049136][ T7034] binder_alloc: binder_alloc_mmap_handler: 7033 200000ffe000-200000fff000 already mapped failed -16 [ 78.053528][ T7038] bridge_slave_0: left allmulticast mode [ 78.055982][ T7038] bridge_slave_0: left promiscuous mode [ 78.059242][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.067205][ T7038] bridge_slave_1: left allmulticast mode [ 78.069646][ T7038] bridge_slave_1: left promiscuous mode [ 78.073653][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.081881][ T7038] bond0: (slave bond_slave_0): Releasing backup interface [ 78.086643][ T7038] bond0: (slave bond_slave_1): Releasing backup interface [ 78.093272][ T7038] team0: Port device team_slave_0 removed [ 78.097532][ T7039] netlink: 48 bytes leftover after parsing attributes in process `syz.0.314'. [ 78.099325][ T7038] team0: Port device team_slave_1 removed [ 78.105323][ T7038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.108326][ T7038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.114218][ T7038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.117359][ T7038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.122773][ T7038] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.143028][ T7039] sit0: entered promiscuous mode [ 78.171100][ T7039] team0: Port device sit0 added [ 79.007587][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 79.195300][ T7086] loop2: detected capacity change from 0 to 7 [ 79.198518][ T7086] Dev loop2: unable to read RDB block 7 [ 79.201061][ T7086] loop2: unable to read partition table [ 79.203628][ T7086] loop2: partition table beyond EOD, truncated [ 79.206188][ T7086] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 79.262022][ T7090] random: crng reseeded on system resumption [ 79.300129][ T61] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.440268][ T61] usb 5-1: device descriptor read/64, error -71 [ 79.568876][ T7108] openvswitch: netlink: IP tunnel dst address not specified [ 79.680097][ T61] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.810129][ T61] usb 5-1: device descriptor read/64, error -71 [ 79.920658][ T61] usb usb5-port1: attempt power cycle [ 80.122162][ T7111] capability: warning: `syz.2.334' uses 32-bit capabilities (legacy support in use) [ 80.170286][ T7115] Cannot find add_set index 2 as target [ 80.173368][ T7115] JFS: discard option not supported on device [ 80.176343][ T7115] Mount JFS Failure: -5 [ 80.215785][ T7118] loop2: detected capacity change from 0 to 7 [ 80.219850][ T5940] Dev loop2: unable to read RDB block 7 [ 80.222691][ T5940] loop2: unable to read partition table [ 80.224839][ T5940] loop2: partition table beyond EOD, truncated [ 80.227821][ T7118] Dev loop2: unable to read RDB block 7 [ 80.230244][ T7118] loop2: unable to read partition table [ 80.232763][ T7118] loop2: partition table beyond EOD, truncated [ 80.235373][ T7118] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 80.260226][ T61] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.281747][ T61] usb 5-1: device descriptor read/8, error -71 [ 80.520300][ T61] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.540830][ T61] usb 5-1: device descriptor read/8, error -71 [ 80.650469][ T61] usb usb5-port1: unable to enumerate USB device [ 81.902694][ T7131] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.906138][ T7131] block device autoloading is deprecated and will be removed. [ 81.940463][ T7133] fuse: Unknown parameter 'gUou2' [ 82.125477][ T6353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.177802][ T7141] loop2: detected capacity change from 0 to 7 [ 82.181179][ T5940] Dev loop2: unable to read RDB block 7 [ 82.183194][ T5940] loop2: unable to read partition table [ 82.185368][ T5940] loop2: partition table beyond EOD, truncated [ 82.188687][ T7141] Dev loop2: unable to read RDB block 7 [ 82.190447][ T7141] loop2: unable to read partition table [ 82.192205][ T7141] loop2: partition table beyond EOD, truncated [ 82.193998][ T7141] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 82.202904][ T6353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.263586][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 82.263597][ T40] audit: type=1400 audit(1761985225.585:422): avc: denied { bind } for pid=7145 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.273432][ T40] audit: type=1400 audit(1761985225.585:423): avc: denied { name_bind } for pid=7145 comm="syz.0.347" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 82.279188][ T40] audit: type=1400 audit(1761985225.585:424): avc: denied { node_bind } for pid=7145 comm="syz.0.347" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 82.289232][ T40] audit: type=1400 audit(1761985225.585:425): avc: denied { connect } for pid=7145 comm="syz.0.347" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.299794][ T6353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.327272][ T40] audit: type=1400 audit(1761985225.645:426): avc: denied { map } for pid=7147 comm="syz.0.348" path="socket:[14765]" dev="sockfs" ino=14765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.384341][ T6353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.387584][ T7150] validate_nla: 2 callbacks suppressed [ 82.387594][ T7150] netlink: 'syz.1.349': attribute type 1 has an invalid length. [ 82.410930][ T7150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 82.417535][ T7150] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 82.423555][ T7150] bond3: entered allmulticast mode [ 82.434436][ T7150] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 82.545661][ T6353] bridge_slave_1: left allmulticast mode [ 82.548255][ T6353] bridge_slave_1: left promiscuous mode [ 82.552854][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.562537][ T6353] bridge_slave_0: left allmulticast mode [ 82.564979][ T6353] bridge_slave_0: left promiscuous mode [ 82.567431][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.592982][ T40] audit: type=1400 audit(1761985225.915:427): avc: denied { execute } for pid=7160 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 82.608309][ T40] audit: type=1400 audit(1761985225.915:428): avc: denied { execute_no_trans } for pid=7160 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 82.776770][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.780737][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.784116][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.787024][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.790122][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.805938][ T6353] bond1 (unregistering): (slave gretap1): Releasing active interface [ 83.065359][ T6353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.069720][ T6353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.074486][ T6353] bond0 (unregistering): Released all slaves [ 83.138460][ T6353] bond1 (unregistering): Released all slaves [ 83.182903][ T7180] __nla_validate_parse: 3 callbacks suppressed [ 83.182918][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.359'. [ 83.189279][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.359'. [ 83.317379][ T7171] chnl_net:caif_netlink_parms(): no params data found [ 83.450281][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.452546][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.454918][ T7171] bridge_slave_0: entered allmulticast mode [ 83.458045][ T7171] bridge_slave_0: entered promiscuous mode [ 83.461660][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.464012][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.466328][ T7171] bridge_slave_1: entered allmulticast mode [ 83.468988][ T7171] bridge_slave_1: entered promiscuous mode [ 83.504307][ T6353] hsr_slave_0: left promiscuous mode [ 83.506421][ T6353] hsr_slave_1: left promiscuous mode [ 83.539859][ T6353] veth1_macvtap: left promiscuous mode [ 83.542589][ T6353] veth0_macvtap: left promiscuous mode [ 83.545155][ T6353] veth1_vlan: left promiscuous mode [ 83.547510][ T6353] veth0_vlan: left promiscuous mode [ 84.035815][ T6353] team0 (unregistering): Port device team_slave_1 removed [ 84.086889][ T6353] team0 (unregistering): Port device team_slave_0 removed [ 84.498999][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.505795][ T7171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.562594][ T7171] team0: Port device team_slave_0 added [ 84.568140][ T7171] team0: Port device team_slave_1 added [ 84.622089][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.625057][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.637538][ T7171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.643894][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.646751][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.658178][ T7171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.686040][ T40] audit: type=1400 audit(1761985228.005:429): avc: denied { watch } for pid=7220 comm="syz.1.363" path="/99/bus" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.694425][ T40] audit: type=1400 audit(1761985228.005:430): avc: denied { watch_sb watch_reads } for pid=7220 comm="syz.1.363" path="/99/bus" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.724486][ T7171] hsr_slave_0: entered promiscuous mode [ 84.726679][ T7171] hsr_slave_1: entered promiscuous mode [ 84.729207][ T7171] debugfs: 'hsr0' already exists in 'hsr' [ 84.731225][ T7171] Cannot create hsr debugfs directory [ 84.854778][ T64] Bluetooth: hci1: command tx timeout [ 84.869638][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.364'. [ 84.878764][ T7231] netlink: 'syz.1.364': attribute type 12 has an invalid length. [ 84.911566][ T7171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.922037][ T7171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.927051][ T7236] syzkaller1: entered promiscuous mode [ 84.928740][ T7236] syzkaller1: entered allmulticast mode [ 84.932982][ T7171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.949769][ T7171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.998671][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.007222][ T7248] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 85.021657][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.030570][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.033377][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.044004][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.046505][ T6353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.177689][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.307089][ T7171] veth0_vlan: entered promiscuous mode [ 85.314419][ T7171] veth1_vlan: entered promiscuous mode [ 85.335175][ T7171] veth0_macvtap: entered promiscuous mode [ 85.339079][ T7171] veth1_macvtap: entered promiscuous mode [ 85.348487][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.358184][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.364973][ T6353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.368735][ T6353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.374493][ T6353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.378228][ T6353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.418904][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.423706][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.437597][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.440337][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.448834][ T40] audit: type=1400 audit(1761985228.765:431): avc: denied { mounton } for pid=7171 comm="syz-executor" path="/syzkaller.IwpZOe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 85.495969][ T7271] loop2: detected capacity change from 0 to 7 [ 85.499256][ T7271] Dev loop2: unable to read RDB block 7 [ 85.502093][ T7271] loop2: unable to read partition table [ 85.504633][ T7271] loop2: partition table beyond EOD, truncated [ 85.507175][ T7271] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.597977][ T7279] input: syz1 as /devices/virtual/input/input8 [ 85.705077][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 85.847290][ T7305] loop2: detected capacity change from 0 to 7 [ 85.850882][ T7305] Dev loop2: unable to read RDB block 7 [ 85.853256][ T7305] loop2: unable to read partition table [ 85.855840][ T7305] loop2: partition table beyond EOD, truncated [ 85.858437][ T7305] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.908738][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.380'. [ 86.044123][ T7326] bridge2: entered promiscuous mode [ 86.045742][ T7326] bridge2: entered allmulticast mode [ 86.090114][ T7333] loop2: detected capacity change from 0 to 7 [ 86.093868][ T5940] Dev loop2: unable to read RDB block 7 [ 86.095798][ T5940] loop2: unable to read partition table [ 86.097663][ T5940] loop2: partition table beyond EOD, truncated [ 86.103462][ T7333] Dev loop2: unable to read RDB block 7 [ 86.105819][ T7333] loop2: unable to read partition table [ 86.107764][ T7333] loop2: partition table beyond EOD, truncated [ 86.109783][ T7333] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 86.151852][ T7337] CUSE: unknown device info "" [ 86.153541][ T7337] CUSE: zero length info key specified [ 86.444088][ T2298] cfg80211: failed to load regulatory.db [ 86.474273][ T7369] loop2: detected capacity change from 0 to 7 [ 86.477389][ T5940] Dev loop2: unable to read RDB block 7 [ 86.479169][ T5940] loop2: unable to read partition table [ 86.481870][ T5940] loop2: partition table beyond EOD, truncated [ 86.484561][ T7369] Dev loop2: unable to read RDB block 7 [ 86.486411][ T7369] loop2: unable to read partition table [ 86.488434][ T7369] loop2: partition table beyond EOD, truncated [ 86.491006][ T7369] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 86.558037][ T7379] bridge_slave_0: default FDB implementation only supports local addresses [ 86.567040][ T7379] vlan2: entered promiscuous mode [ 86.568804][ T7379] bridge0: entered promiscuous mode [ 86.662223][ T7382] affs: No valid root block on device nullb0 [ 86.667878][ T7391] usb usb4: usbfs: process 7391 (syz.1.404) did not claim interface 0 before use [ 86.726914][ T7404] loop2: detected capacity change from 0 to 7 [ 86.731901][ T7404] Dev loop2: unable to read RDB block 7 [ 86.734637][ T7404] loop2: unable to read partition table [ 86.738561][ T7404] loop2: partition table beyond EOD, truncated [ 86.742957][ T7404] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 86.812760][ T10] IPVS: starting estimator thread 0... [ 86.900425][ T7417] IPVS: using max 43 ests per chain, 103200 per kthread [ 86.900701][ T7428] netfs: Couldn't get user pages (rc=-14) [ 86.904720][ T7428] netfs: Zero-sized read [R=1] [ 86.920362][ T64] Bluetooth: hci1: command tx timeout [ 86.925043][ T6351] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.927975][ T6351] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.931222][ T6351] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.935130][ T6351] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.276220][ T7440] loop2: detected capacity change from 0 to 7 [ 87.279422][ T5940] Dev loop2: unable to read RDB block 7 [ 87.281796][ T5940] loop2: unable to read partition table [ 87.284406][ T5940] loop2: partition table beyond EOD, truncated [ 87.287727][ T7440] Dev loop2: unable to read RDB block 7 [ 87.289636][ T7440] loop2: unable to read partition table [ 87.291702][ T7440] loop2: partition table beyond EOD, truncated [ 87.293734][ T7440] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 87.323795][ T64] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 87.323857][ T64] Bluetooth: hci2: Malformed LE Event: 0x02 [ 87.500262][ T2298] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 87.630186][ T2298] usb 8-1: device descriptor read/64, error -71 [ 87.734203][ T7470] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7470 comm=syz.1.427 [ 87.784436][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 87.787929][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 87.837243][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 87.837254][ T40] audit: type=1400 audit(1761985231.155:456): avc: denied { bind } for pid=7479 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 87.890135][ T2298] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 87.927310][ T40] audit: type=1400 audit(1761985231.245:457): avc: denied { ioctl } for pid=7498 comm="syz.4.430" path="socket:[17378]" dev="sockfs" ino=17378 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 87.936492][ T40] audit: type=1400 audit(1761985231.255:458): avc: denied { sqpoll } for pid=7474 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.025395][ T2298] usb 8-1: device descriptor read/64, error -71 [ 88.043867][ T40] audit: type=1400 audit(1761985231.365:459): avc: denied { connect } for pid=7498 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 88.090409][ T40] audit: type=1400 audit(1761985231.415:460): avc: denied { listen } for pid=7498 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 88.143423][ T2298] usb usb8-port1: attempt power cycle [ 88.287984][ T40] audit: type=1400 audit(1761985231.605:461): avc: denied { write } for pid=7528 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.420181][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 88.490199][ T2298] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 88.524852][ T2298] usb 8-1: device descriptor read/8, error -71 [ 88.590179][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 88.595715][ T10] usb 6-1: config 0 has no interfaces? [ 88.602606][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 88.606574][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 88.610215][ T10] usb 6-1: Product: syz [ 88.611954][ T10] usb 6-1: Manufacturer: syz [ 88.613790][ T10] usb 6-1: SerialNumber: syz [ 88.617142][ T10] usb 6-1: config 0 descriptor?? [ 88.644831][ T7531] Cannot find del_set index 4 as target [ 88.770127][ T2298] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 88.800853][ T2298] usb 8-1: device descriptor read/8, error -71 [ 88.836928][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.434'. [ 88.842285][ T61] usb 6-1: USB disconnect, device number 3 [ 88.913185][ T2298] usb usb8-port1: unable to enumerate USB device [ 89.010100][ T64] Bluetooth: hci1: command tx timeout [ 89.191578][ T7488] Set syz1 is full, maxelem 65536 reached [ 89.240780][ T7552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.441'. [ 89.876456][ T40] audit: type=1400 audit(1761985233.195:462): avc: denied { mount } for pid=7618 comm="syz.4.448" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 90.062853][ T40] audit: type=1400 audit(1761985233.385:463): avc: denied { create } for pid=7628 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 90.068978][ T40] audit: type=1400 audit(1761985233.385:464): avc: denied { bind } for pid=7628 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 90.220795][ T61] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 90.372012][ T40] audit: type=1326 audit(1761985233.695:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467498efc9 code=0x7fc00000 [ 90.383834][ T61] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 90.389361][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.394388][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.397829][ T61] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 90.404201][ T61] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 90.408145][ T61] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 90.411856][ T61] usb 9-1: Manufacturer: syz [ 90.415179][ T61] usb 9-1: config 0 descriptor?? [ 90.501431][ T7648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.458'. [ 90.505222][ T7648] tipc: Invalid UDP bearer configuration [ 90.505268][ T7648] tipc: Enabling of bearer rejected, failed to enable media [ 90.627939][ T61] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 90.639308][ T61] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 90.712731][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 90.852996][ T7689] program syz.0.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.917877][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 90.921376][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 90.997464][ T61] usb 9-1: USB disconnect, device number 2 [ 91.049970][ T7709] (syz.0.474,7709,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 91.054638][ T7709] (syz.0.474,7709,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 91.057751][ T7709] (syz.0.474,7709,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 91.064217][ T7709] (syz.0.474,7709,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 91.066203][ T7711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.475'. [ 91.090517][ T64] Bluetooth: hci1: command tx timeout [ 91.118626][ T7713] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7713 comm=syz.1.476 [ 91.148797][ T7715] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 91.151099][ T7715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 91.155074][ T7715] vhci_hcd vhci_hcd.0: Device attached [ 91.161355][ T7715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.477'. [ 91.183766][ T7715] vhci_hcd vhci_hcd.0: port 0 already used [ 91.339688][ T7716] vhci_hcd: connection closed [ 91.339893][ T7590] vhci_hcd: stop threads [ 91.343140][ T7590] vhci_hcd: release socket [ 91.345480][ T7590] vhci_hcd: disconnect device [ 91.517467][ T7739] xt_bpf: check failed: parse error [ 92.095539][ T7764] netlink: 14 bytes leftover after parsing attributes in process `syz.4.490'. [ 92.203925][ T7764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.209731][ T7764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.214261][ T7764] bond0 (unregistering): Released all slaves [ 92.421625][ T7776] program syz.0.494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.437908][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 92.561963][ T7783] loop2: detected capacity change from 0 to 7 [ 92.566774][ T7783] Dev loop2: unable to read RDB block 7 [ 92.569298][ T7783] loop2: unable to read partition table [ 92.572222][ T7783] loop2: partition table beyond EOD, truncated [ 92.574992][ T7783] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 92.642032][ T64] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 92.642069][ T64] Bluetooth: hci2: Malformed LE Event: 0x02 [ 92.660484][ T61] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 92.716234][ T7789] netlink: 'syz.3.500': attribute type 4 has an invalid length. [ 92.778663][ T7797] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 92.821910][ T61] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.825739][ T61] usb 9-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 92.830782][ T61] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.834672][ T61] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 92.839372][ T61] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 92.846942][ T61] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.852561][ T61] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.855933][ T61] usb 9-1: Product: syz [ 92.857716][ T61] usb 9-1: Manufacturer: syz [ 92.863126][ T7802] Cannot find map_set index 65532 as target [ 92.876418][ T61] cdc_wdm 9-1:1.0: skipping garbage [ 92.878711][ T61] cdc_wdm 9-1:1.0: skipping garbage [ 92.882795][ T61] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 92.885343][ T61] cdc_wdm 9-1:1.0: Unknown control protocol [ 92.921156][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 92.921172][ T40] audit: type=1400 audit(1761985236.245:488): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.996209][ T64] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 92.996255][ T64] Bluetooth: hci2: Malformed LE Event: 0x02 [ 93.055773][ T40] audit: type=1400 audit(1761985236.375:489): avc: denied { mounton } for pid=7819 comm="syz.1.511" path="/file0" dev="ramfs" ino=19947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 93.100145][ T56] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 93.120073][ T40] audit: type=1400 audit(1761985236.435:490): avc: denied { read write } for pid=7780 comm="syz.4.496" name="cdc-wdm0" dev="devtmpfs" ino=2950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 93.127806][ T40] audit: type=1400 audit(1761985236.445:491): avc: denied { open } for pid=7780 comm="syz.4.496" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 93.176203][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 93.178769][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 93.181392][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 93.183845][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 93.186003][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 93.188480][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 93.191970][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 93.194765][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 93.198117][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 93.200864][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 93.204279][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 93.206905][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 93.209788][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 93.212478][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 93.215346][ T6584] usb 9-1: USB disconnect, device number 3 [ 93.217767][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 93.217785][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 93.217798][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 93.284387][ T56] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 93.287942][ T56] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 93.291490][ T56] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.294350][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.298935][ T7805] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.301655][ T7805] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.306117][ T56] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.415598][ T40] audit: type=1400 audit(1761985236.735:492): avc: denied { connect } for pid=7836 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.422709][ T40] audit: type=1400 audit(1761985236.735:493): avc: denied { write } for pid=7836 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.514633][ T10] usb 8-1: USB disconnect, device number 12 [ 93.594214][ T40] audit: type=1400 audit(1761985236.915:494): avc: denied { setopt } for pid=7842 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.865443][ T40] audit: type=1400 audit(1761985237.185:495): avc: denied { read } for pid=7852 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 93.988981][ T7862] comedi comedi0: Cannot bond this driver to itself! [ 94.067638][ T7871] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 94.080662][ T7871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.097418][ T7870] veth3: entered promiscuous mode [ 94.101358][ T7870] bond5: (slave veth3): Enslaving as an active interface with a down link [ 94.104480][ T7871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7871 comm=syz.1.528 [ 94.108343][ T7870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7870 comm=syz.1.528 [ 94.113218][ T7871] vlan3: entered allmulticast mode [ 94.114903][ T7871] bond5: entered allmulticast mode [ 94.117221][ T7871] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 94.276327][ T7874] program syz.1.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.355709][ T7878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.531'. [ 94.358527][ T7878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.531'. [ 94.361501][ T7878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.531'. [ 94.365105][ T7878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.531'. [ 94.392500][ T40] audit: type=1400 audit(1761985237.715:496): avc: denied { connect } for pid=7884 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.398125][ T40] audit: type=1400 audit(1761985237.715:497): avc: denied { write } for pid=7884 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.501529][ T7893] netlink: 64 bytes leftover after parsing attributes in process `syz.3.537'. [ 94.535402][ T7899] ptrace attach of "/syz-executor exec"[5933] was attempted by ""[7899] [ 94.545504][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 94.549064][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 94.670490][ T7909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7909 comm=syz.4.542 [ 94.677414][ T7911] input: syz1 as /devices/virtual/input/input10 [ 94.921844][ T7931] xt_HMARK: spi-set and port-set can't be combined [ 94.926843][ T7931] team0: Device gtp0 is of different type [ 95.135307][ T7945] syzkaller0: entered promiscuous mode [ 95.137246][ T7945] syzkaller0: entered allmulticast mode [ 95.143737][ T7945] netlink: 60 bytes leftover after parsing attributes in process `syz.3.555'. [ 95.656991][ T7966] tmpfs: Bad value for 'mpol' [ 95.958510][ T8005] netlink: 64 bytes leftover after parsing attributes in process `syz.4.569'. [ 96.370390][ T8028] i2c i2c-1: Invalid block write size 34 [ 96.373658][ T8028] 9pnet_virtio: no channels available for device syz [ 96.376456][ T8028] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 96.389063][ T8028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.432119][ T8028] loop5: detected capacity change from 0 to 7 [ 96.442625][ T5940] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 96.444363][ T5940] loop5: partition table partially beyond EOD, truncated [ 96.447469][ T5940] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 96.466325][ T8028] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 96.468717][ T8028] loop5: partition table partially beyond EOD, truncated [ 96.472742][ T8028] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 96.495671][ T5940] udevd[5940]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 96.519485][ T5940] udevd[5940]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 96.571833][ T8041] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 97.052437][ T8068] overlayfs: failed to resolve './bus': -2 [ 97.197548][ T8077] gtp1: entered promiscuous mode [ 97.201936][ T8077] SELinux: Context Ü is not valid (left unmapped). [ 97.315438][ T8082] netlink: 'syz.4.591': attribute type 27 has an invalid length. [ 97.358184][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.361856][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.434328][ T8082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.444383][ T8082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.554559][ T8082] gtp1: left promiscuous mode [ 97.588386][ T8083] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.596102][ T8083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.604102][ T7615] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.608507][ T7615] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.611671][ T7615] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.615392][ T7615] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.868889][ T8089] netlink: 'syz.4.592': attribute type 4 has an invalid length. [ 97.885665][ T8095] evm: overlay not supported [ 97.891399][ T8095] program syz.0.593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.894240][ T8095] ata1.00: invalid command format 4 [ 98.022655][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.596'. [ 98.026648][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 98.026660][ T40] audit: type=1400 audit(1761985241.335:520): avc: granted { setsecparam } for pid=8101 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 98.031374][ T8106] ocfs2_dlmfs: Unknown parameter 'size' [ 98.043214][ T40] audit: type=1400 audit(1761985241.355:521): avc: denied { remount } for pid=8105 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.082122][ T40] audit: type=1400 audit(1761985241.405:522): avc: denied { bind } for pid=8107 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.086585][ T8110] input: syz0 as /devices/virtual/input/input11 [ 98.176290][ T8119] tipc: Started in network mode [ 98.178419][ T8119] tipc: Node identity 9adf9f7ca1e2, cluster identity 4711 [ 98.182259][ T8119] tipc: Enabled bearer , priority 0 [ 98.184992][ T8120] syzkaller0: entered promiscuous mode [ 98.186864][ T8120] syzkaller0: entered allmulticast mode [ 98.202410][ T8121] tipc: Resetting bearer [ 98.210158][ T8121] tipc: Disabling bearer [ 98.301480][ T40] audit: type=1400 audit(1761985241.625:523): avc: denied { create } for pid=8123 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 98.413450][ T40] audit: type=1400 audit(1761985241.735:524): avc: denied { mounton } for pid=8136 comm="syz.0.607" path="/149/bus" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 98.413574][ T8137] overlay: ./bus is not a directory [ 98.454032][ T8137] FAT-fs (nullb0): bogus number of reserved sectors [ 98.457174][ T8137] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 98.532491][ T8138] ALSA: mixer_oss: invalid OSS volume 'IGAgN' [ 98.535658][ T8138] ALSA: mixer_oss: invalid OSS volume 'IM' [ 98.591030][ T40] audit: type=1400 audit(1761985241.915:525): avc: denied { append } for pid=8143 comm="syz.0.609" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.744652][ T64] Bluetooth: hci2: unexpected event 0x10 length: 29 > 1 [ 98.745436][ T5949] Bluetooth: hci2: hardware error 0x02 [ 99.031362][ T8160] loop2: detected capacity change from 0 to 7 [ 99.034575][ T8160] Dev loop2: unable to read RDB block 7 [ 99.036945][ T8160] loop2: unable to read partition table [ 99.039382][ T8160] loop2: partition table beyond EOD, truncated [ 99.042069][ T8160] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.276348][ T8173] binder: 8172:8173 ioctl c018620c 200000000240 returned -1 [ 99.388468][ T64] Bluetooth: hci0: unexpected event 0x10 length: 29 > 1 [ 99.390263][ T64] Bluetooth: hci0: hardware error 0x02 [ 99.413713][ T8180] __nla_validate_parse: 1 callbacks suppressed [ 99.413723][ T8180] netlink: 84 bytes leftover after parsing attributes in process `syz.3.623'. [ 99.479356][ T40] audit: type=1400 audit(1761985242.795:526): avc: denied { ioctl } for pid=8181 comm="syz.3.624" path="socket:[21670]" dev="sockfs" ino=21670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.599978][ T8185] loop2: detected capacity change from 0 to 7 [ 99.604291][ T5940] Dev loop2: unable to read RDB block 7 [ 99.606201][ T5940] loop2: unable to read partition table [ 99.608099][ T5940] loop2: partition table beyond EOD, truncated [ 99.617578][ T8185] Dev loop2: unable to read RDB block 7 [ 99.621383][ T8185] loop2: unable to read partition table [ 99.623435][ T8185] loop2: partition table beyond EOD, truncated [ 99.625430][ T8185] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.715932][ T40] audit: type=1400 audit(1761985243.035:527): avc: denied { view } for pid=8188 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 99.954467][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 99.958381][ T8197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.628'. [ 99.969058][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 99.972804][ T8197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.628'. [ 100.044589][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 100.048132][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 100.053395][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 100.056465][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 100.060639][ T40] audit: type=1400 audit(1761985243.385:528): avc: denied { execute } for pid=8213 comm="syz.1.634" path="pipe:[21687]" dev="pipefs" ino=21687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 100.251606][ T8235] netlink: 'syz.3.641': attribute type 30 has an invalid length. [ 100.299066][ T8241] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 100.547438][ T40] audit: type=1400 audit(1761985243.865:529): avc: denied { setopt } for pid=8262 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.624405][ T8270] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.627914][ T6350] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.631633][ T7590] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.760214][ T5949] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 100.798054][ T8281] syz.4.655: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 100.943803][ T8293] CIFS: iocharset name too long [ 101.481058][ T64] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 102.680135][ T5297] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.680454][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 112.281587][ T8302] PKCS8: Unsupported PKCS#8 version [ 112.284440][ T5297] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 112.284469][ T5297] Bluetooth: hci3: Malformed LE Event: 0x02 [ 112.470422][ T8339] vlan2: entered promiscuous mode [ 112.472079][ T8339] bridge0: entered promiscuous mode [ 112.504681][ T8345] program syz.4.675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.645407][ T8352] PKCS8: Unsupported PKCS#8 version [ 112.685937][ T8354] loop2: detected capacity change from 0 to 7 [ 112.690129][ T8325] Dev loop2: unable to read RDB block 7 [ 112.692319][ T8325] loop2: unable to read partition table [ 112.694479][ T8325] loop2: partition table beyond EOD, truncated [ 112.698868][ T8354] Dev loop2: unable to read RDB block 7 [ 112.701982][ T8354] loop2: unable to read partition table [ 112.704207][ T8354] loop2: partition table beyond EOD, truncated [ 112.706880][ T8354] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.157167][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 113.162047][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 113.279443][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 113.279454][ T40] audit: type=1400 audit(1761985256.595:533): avc: denied { setattr } for pid=8376 comm="syz.3.686" name="timer" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 113.297849][ T8379] loop2: detected capacity change from 0 to 7 [ 113.302157][ T8325] Dev loop2: unable to read RDB block 7 [ 113.304531][ T8325] loop2: unable to read partition table [ 113.307113][ T8325] loop2: partition table beyond EOD, truncated [ 113.314588][ T8379] Dev loop2: unable to read RDB block 7 [ 113.317125][ T8379] loop2: unable to read partition table [ 113.319741][ T8379] loop2: partition table beyond EOD, truncated [ 113.322561][ T8379] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.445897][ T40] audit: type=1400 audit(1761985256.765:534): avc: denied { shutdown } for pid=8398 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.470159][ T40] audit: type=1400 audit(1761985256.775:535): avc: denied { getopt } for pid=8387 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 113.490486][ T40] audit: type=1400 audit(1761985256.775:536): avc: denied { bind } for pid=8387 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.553679][ T8414] loop2: detected capacity change from 0 to 7 [ 113.565517][ T8414] Dev loop2: unable to read RDB block 7 [ 113.567886][ T8414] loop2: unable to read partition table [ 113.572074][ T8414] loop2: partition table beyond EOD, truncated [ 113.579540][ T8414] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.655868][ T8427] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 113.673993][ T8425] kvm: MONITOR instruction emulated as NOP! [ 113.675090][ T40] audit: type=1400 audit(1761985256.995:537): avc: denied { map } for pid=8428 comm="syz.0.703" path="socket:[23776]" dev="sockfs" ino=23776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 113.702956][ T8432] dns_resolver: Unsupported server list version (0) [ 113.849611][ T40] audit: type=1400 audit(1761985257.165:538): avc: denied { append } for pid=8438 comm="syz.3.705" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.971289][ T8443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.975474][ T40] audit: type=1400 audit(1761985257.295:539): avc: denied { accept } for pid=8442 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 113.981751][ T8444] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.987283][ T8444] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 113.993223][ T8443] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 114.071776][ T7591] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 114.190475][ T7591] bond4: (slave macvlan2): link status up again after 0 ms [ 114.192909][ T7591] bond4: (slave macvlan2): failed to get link speed/duplex [ 114.196603][ T7591] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 114.282736][ T8456] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 114.320128][ T7615] bond4: (slave macvlan2): failed to get link speed/duplex [ 114.334412][ T64] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 114.334476][ T64] Bluetooth: hci1: Malformed LE Event: 0x02 [ 114.395333][ T40] audit: type=1400 audit(1761985257.715:540): avc: denied { read } for pid=8457 comm="syz.4.712" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 114.407127][ T40] audit: type=1400 audit(1761985257.715:541): avc: denied { open } for pid=8457 comm="syz.4.712" path="/86/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 114.416188][ T40] audit: type=1400 audit(1761985257.725:542): avc: denied { ioctl } for pid=8457 comm="syz.4.712" path="/86/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 114.431429][ T7591] bond4: (slave macvlan2): failed to get link speed/duplex [ 114.449369][ T8463] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 114.526176][ T8472] netlink: 'syz.0.716': attribute type 4 has an invalid length. [ 114.540144][ T7591] bond4: (slave macvlan2): failed to get link speed/duplex [ 114.541512][ T8472] netlink: 'syz.0.716': attribute type 4 has an invalid length. [ 114.597977][ T8475] program syz.0.717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.641993][ T8477] tmpfs: Bad value for 'mpol' [ 114.650141][ T7615] bond4: (slave macvlan2): failed to get link speed/duplex [ 114.693498][ T8475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8475 comm=syz.0.717 [ 114.760614][ T7592] bond4: (slave macvlan2): failed to get link speed/duplex [ 114.880154][ T7615] bond4: (slave macvlan2): failed to get link speed/duplex [ 114.937590][ T64] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 114.937622][ T64] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 114.938535][ T8491] netlink: 84 bytes leftover after parsing attributes in process `syz.0.724'. [ 114.940705][ T64] Bluetooth: hci1: Malformed LE Event: 0x02 [ 115.032016][ T8498] netlink: 60 bytes leftover after parsing attributes in process `syz.0.726'. [ 115.155587][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.731'. [ 115.170792][ T8519] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 115.329254][ T8530] loop2: detected capacity change from 0 to 7 [ 115.332742][ T8421] Dev loop2: unable to read RDB block 7 [ 115.335284][ T8421] loop2: unable to read partition table [ 115.337935][ T8421] loop2: partition table beyond EOD, truncated [ 115.345596][ T8530] Dev loop2: unable to read RDB block 7 [ 115.347836][ T8530] loop2: unable to read partition table [ 115.350314][ T8530] loop2: partition table beyond EOD, truncated [ 115.350353][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 115.355574][ T8530] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.355871][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 115.460314][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 115.465966][ T8542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.502570][ T8542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.612801][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.617172][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.622302][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.625874][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.633555][ T8521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.641496][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.990070][ T2298] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 116.015348][ T8621] loop2: detected capacity change from 0 to 7 [ 116.019518][ T8573] Dev loop2: unable to read RDB block 7 [ 116.021843][ T8573] loop2: unable to read partition table [ 116.023808][ T8573] loop2: partition table beyond EOD, truncated [ 116.031599][ T8621] Dev loop2: unable to read RDB block 7 [ 116.033413][ T8621] loop2: unable to read partition table [ 116.035381][ T8621] loop2: partition table beyond EOD, truncated [ 116.037552][ T8621] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.140069][ T2298] usb 8-1: Using ep0 maxpacket: 8 [ 116.143258][ T2298] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 116.147369][ T2298] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.150582][ T2298] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.153691][ T2298] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.156947][ T2298] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.161564][ T2298] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.164605][ T2298] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.377074][ T2298] usb 8-1: GET_CAPABILITIES returned 0 [ 116.379139][ T2298] usbtmc 8-1:16.0: can't read capabilities [ 116.386397][ T8645] fuse: Bad value for 'group_id' [ 116.388032][ T8645] fuse: Bad value for 'group_id' [ 116.635864][ T8587] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 116.636004][ T7705] usb 8-1: USB disconnect, device number 13 [ 116.639168][ T8659] netlink: 68 bytes leftover after parsing attributes in process `syz.4.765'. [ 116.748534][ T8667] tmpfs: Bad value for 'mpol' [ 116.930649][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.093487][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 117.096998][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.099782][ T10] usb 5-1: Product: syz [ 117.101793][ T10] usb 5-1: Manufacturer: syz [ 117.103847][ T10] usb 5-1: SerialNumber: syz [ 117.240117][ T64] Bluetooth: hci0: command tx timeout [ 117.312290][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 117.316364][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 117.322283][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 117.374292][ T8677] fuse: Bad value for 'group_id' [ 117.376553][ T8677] fuse: Bad value for 'group_id' [ 117.527231][ T8680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8680 comm=syz.3.772 [ 117.687712][ T56] usb 5-1: USB disconnect, device number 7 [ 117.891575][ T8708] devpts: Bad value for 'uid' [ 117.894007][ T8708] devpts: Bad value for 'uid' [ 117.987558][ T8715] loop2: detected capacity change from 0 to 7 [ 117.990249][ T8715] Dev loop2: unable to read RDB block 7 [ 117.992270][ T8715] loop2: unable to read partition table [ 117.994202][ T8715] loop2: partition table beyond EOD, truncated [ 117.996208][ T8715] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.030734][ T64] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 118.030761][ T64] Bluetooth: hci1: Dropping invalid advertising data [ 118.036991][ T64] Bluetooth: hci1: Malformed LE Event: 0x02 [ 118.043964][ T8716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=8716 comm=syz.0.782 [ 118.334424][ T10] usb 6-1: USB disconnect, device number 4 [ 118.377496][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 118.377508][ T40] audit: type=1400 audit(1761985261.695:554): avc: denied { setopt } for pid=8733 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 118.435782][ T40] audit: type=1400 audit(1761985261.755:555): avc: granted { setsecparam } for pid=8740 comm="syz.4.792" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 118.447041][ T40] audit: type=1400 audit(1761985261.755:556): avc: granted { setsecparam } for pid=8740 comm="syz.4.792" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 118.501048][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 118.529626][ T8754] random: crng reseeded on system resumption [ 118.529656][ T40] audit: type=1400 audit(1761985261.845:557): avc: denied { mount } for pid=8753 comm="syz.1.798" name="/" dev="configfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 118.532691][ T8752] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 118.538240][ T8754] QAT: Stopping all acceleration devices. [ 118.538470][ T8754] Unrecognized hibernate image header format! [ 118.538483][ T8754] PM: hibernation: Image mismatch: architecture specific data [ 118.539817][ T40] audit: type=1400 audit(1761985261.845:558): avc: denied { append } for pid=8751 comm="syz.4.796" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 118.539845][ T40] audit: type=1400 audit(1761985261.855:559): avc: denied { search } for pid=8753 comm="syz.1.798" name="/" dev="configfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.539865][ T40] audit: type=1400 audit(1761985261.855:560): avc: denied { setattr } for pid=8753 comm="syz.1.798" name="/" dev="configfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.594515][ T40] audit: type=1400 audit(1761985261.915:561): avc: denied { create } for pid=8756 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 118.597180][ T8759] loop2: detected capacity change from 0 to 7 [ 118.604058][ T8759] Dev loop2: unable to read RDB block 7 [ 118.605830][ T8759] loop2: unable to read partition table [ 118.610714][ T8759] loop2: partition table beyond EOD, truncated [ 118.612355][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.801'. [ 118.612871][ T8759] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.615554][ T40] audit: type=1400 audit(1761985261.935:562): avc: denied { nlmsg_read } for pid=8760 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.658178][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 118.661864][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 118.664962][ T8766] netlink: 'syz.3.804': attribute type 11 has an invalid length. [ 118.667458][ T8766] netlink: 'syz.3.804': attribute type 7 has an invalid length. [ 118.673892][ T56] libceph: connect (1)[c::]:6789 error -22 [ 118.676918][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 118.678672][ T56] libceph: connect (1)[c::]:6789 error -22 [ 118.683261][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 118.689881][ T8772] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.695200][ T8772] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 118.730823][ T40] audit: type=1400 audit(1761985262.055:563): avc: denied { setcurrent } for pid=8774 comm="syz.1.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 118.849765][ T8783] netlink: 92 bytes leftover after parsing attributes in process `syz.0.808'. [ 118.959262][ T56] libceph: connect (1)[c::]:6789 error -22 [ 118.961828][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 118.967092][ T8789] No control pipe specified [ 119.043115][ T8793] loop2: detected capacity change from 0 to 7 [ 119.048610][ T8573] Dev loop2: unable to read RDB block 7 [ 119.051779][ T8573] loop2: unable to read partition table [ 119.054287][ T8573] loop2: partition table beyond EOD, truncated [ 119.057944][ T8793] Dev loop2: unable to read RDB block 7 [ 119.061104][ T8793] loop2: unable to read partition table [ 119.063608][ T8793] loop2: partition table beyond EOD, truncated [ 119.066196][ T8793] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.080647][ T6353] net_ratelimit: 40 callbacks suppressed [ 119.080658][ T6353] bond4: (slave macvlan2): failed to get link speed/duplex [ 119.200169][ T7589] bond4: (slave macvlan2): failed to get link speed/duplex [ 119.310192][ T6353] bond4: (slave macvlan2): failed to get link speed/duplex [ 119.420317][ T7615] bond4: (slave macvlan2): failed to get link speed/duplex [ 119.470331][ T56] libceph: connect (1)[c::]:6789 error -22 [ 119.472670][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 119.493193][ T8768] ceph: No mds server is up or the cluster is laggy [ 119.530254][ T6353] bond4: (slave macvlan2): failed to get link speed/duplex [ 119.652204][ T7589] bond4: (slave macvlan2): failed to get link speed/duplex [ 119.660791][ T8813] tipc: Cannot configure node identity twice [ 119.770241][ T7589] bond4: (slave macvlan2): failed to get link speed/duplex [ 119.880298][ T6353] bond4: (slave macvlan2): failed to get link speed/duplex [ 119.897065][ T8827] devtmpfs: Cannot change global quota limit on remount [ 119.906200][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.823'. [ 119.913806][ T8827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64792 sclass=netlink_route_socket pid=8827 comm=syz.3.823 [ 120.001074][ T6353] bond4: (slave macvlan2): failed to get link speed/duplex [ 120.049392][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 120.100404][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 120.110558][ T7615] bond4: (slave macvlan2): failed to get link speed/duplex [ 120.114695][ T8848] usb usb9: usbfs: process 8848 (syz.1.831) did not claim interface 0 before use [ 120.138690][ T8854] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 120.149374][ T8854] cramfs: wrong magic [ 120.153392][ T8858] kAFS: No cell specified [ 120.155328][ T8858] kAFS: No cell specified [ 120.157186][ T8858] kAFS: No cell specified [ 120.158690][ T8858] kAFS: No cell specified [ 120.160850][ T8858] kAFS: No cell specified [ 120.163245][ T8858] kAFS: No cell specified [ 120.165167][ T8858] kAFS: No cell specified [ 120.167185][ T8858] kAFS: No cell specified [ 120.168992][ T8858] kAFS: No cell specified [ 120.170734][ T8858] kAFS: No cell specified [ 120.172391][ T8858] kAFS: No cell specified [ 120.174023][ T8858] kAFS: No cell specified [ 120.175546][ T8858] kAFS: No cell specified [ 120.177050][ T8858] kAFS: No cell specified [ 120.178680][ T8858] kAFS: No cell specified [ 120.180837][ T8858] kAFS: No cell specified [ 120.182348][ T8858] kAFS: No cell specified [ 120.184004][ T8858] kAFS: No cell specified [ 120.185693][ T8858] kAFS: No cell specified [ 120.187716][ T8858] kAFS: No cell specified [ 120.189765][ T8858] kAFS: No cell specified [ 120.192001][ T8858] kAFS: No cell specified [ 120.193855][ T8860] netlink: 'syz.4.834': attribute type 1 has an invalid length. [ 120.197298][ T8858] kAFS: No cell specified [ 120.199370][ T8858] kAFS: No cell specified [ 120.201386][ T8858] kAFS: No cell specified [ 120.202912][ T8858] kAFS: No cell specified [ 120.204574][ T8858] kAFS: No cell specified [ 120.206615][ T8858] kAFS: No cell specified [ 120.208459][ T8858] kAFS: No cell specified [ 120.208851][ T8860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.211459][ T8858] kAFS: No cell specified [ 120.214904][ T8858] kAFS: No cell specified [ 120.216482][ T8858] kAFS: No cell specified [ 120.218058][ T8858] kAFS: No cell specified [ 120.219892][ T8858] kAFS: No cell specified [ 120.221612][ T8858] kAFS: No cell specified [ 120.221751][ T8861] bond1: (slave geneve2): making interface the new active one [ 120.223202][ T8858] kAFS: No cell specified [ 120.227501][ T8861] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 120.227762][ T8858] kAFS: No cell specified [ 120.232014][ T7592] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.232749][ T8858] kAFS: No cell specified [ 120.237710][ T8858] kAFS: No cell specified [ 120.237824][ T7592] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.239338][ T8858] kAFS: No cell specified [ 120.244175][ T8858] kAFS: No cell specified [ 120.244553][ T7592] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.245649][ T8858] kAFS: No cell specified [ 120.248462][ T7592] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.252416][ T8858] kAFS: No cell specified [ 120.256075][ T8858] kAFS: No cell specified [ 120.258328][ T8858] kAFS: No cell specified [ 120.260578][ T8858] kAFS: No cell specified [ 120.262639][ T8858] kAFS: No cell specified [ 120.264669][ T8858] kAFS: No cell specified [ 120.266662][ T8858] kAFS: No cell specified [ 120.268811][ T8858] kAFS: No cell specified [ 120.271635][ T8858] kAFS: No cell specified [ 120.273799][ T8858] kAFS: No cell specified [ 120.275918][ T8858] kAFS: No cell specified [ 120.277947][ T8858] kAFS: No cell specified [ 120.280151][ T8858] kAFS: No cell specified [ 120.282191][ T8858] kAFS: No cell specified [ 120.284277][ T8858] kAFS: No cell specified [ 120.286287][ T8858] kAFS: No cell specified [ 120.288938][ T8858] kAFS: No cell specified [ 120.293639][ T8858] kAFS: No cell specified [ 120.295706][ T8858] kAFS: No cell specified [ 120.297718][ T8858] kAFS: No cell specified [ 120.299848][ T8858] kAFS: No cell specified [ 120.302968][ T8858] kAFS: No cell specified [ 120.305256][ T8858] kAFS: No cell specified [ 120.381115][ T8867] 8021q: adding VLAN 0 to HW filter on device bond6 [ 120.600247][ T64] Bluetooth: hci0: command tx timeout [ 120.790203][ T8895] veth0: entered promiscuous mode [ 120.792994][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 120.949772][ T8904] fuse: Unknown parameter 'grou00000000000000000000' [ 120.975553][ T8906] FAULT_INJECTION: forcing a failure. [ 120.975553][ T8906] name failslab, interval 1, probability 0, space 0, times 1 [ 120.981857][ T8906] CPU: 2 UID: 0 PID: 8906 Comm: syz.1.849 Not tainted syzkaller #0 PREEMPT(full) [ 120.981879][ T8906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.981889][ T8906] Call Trace: [ 120.981905][ T8906] [ 120.981911][ T8906] dump_stack_lvl+0x16c/0x1f0 [ 120.981953][ T8906] should_fail_ex+0x512/0x640 [ 120.981980][ T8906] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 120.982009][ T8906] should_failslab+0xc2/0x120 [ 120.982029][ T8906] kmem_cache_alloc_node_noprof+0x78/0x770 [ 120.982054][ T8906] ? __alloc_skb+0x2b2/0x380 [ 120.982076][ T8906] ? __alloc_skb+0x2b2/0x380 [ 120.982093][ T8906] ? __pfx_netlink_insert+0x10/0x10 [ 120.982115][ T8906] __alloc_skb+0x2b2/0x380 [ 120.982135][ T8906] ? __pfx___alloc_skb+0x10/0x10 [ 120.982156][ T8906] ? netlink_autobind.isra.0+0x158/0x370 [ 120.982184][ T8906] netlink_alloc_large_skb+0x69/0x140 [ 120.982209][ T8906] netlink_sendmsg+0x698/0xdd0 [ 120.982237][ T8906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.982271][ T8906] ____sys_sendmsg+0xa98/0xc70 [ 120.982287][ T8906] ? copy_msghdr_from_user+0x10a/0x160 [ 120.982307][ T8906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.982335][ T8906] ___sys_sendmsg+0x134/0x1d0 [ 120.982359][ T8906] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.982378][ T8906] ? __lock_acquire+0x622/0x1c90 [ 120.982433][ T8906] __sys_sendmsg+0x16d/0x220 [ 120.982455][ T8906] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.982494][ T8906] do_syscall_64+0xcd/0xfa0 [ 120.982519][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.982535][ T8906] RIP: 0033:0x7f42a058efc9 [ 120.982548][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.982564][ T8906] RSP: 002b:00007f42a136d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.982581][ T8906] RAX: ffffffffffffffda RBX: 00007f42a07e5fa0 RCX: 00007f42a058efc9 [ 120.982592][ T8906] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 120.982602][ T8906] RBP: 00007f42a136d090 R08: 0000000000000000 R09: 0000000000000000 [ 120.982612][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.982621][ T8906] R13: 00007f42a07e6038 R14: 00007f42a07e5fa0 R15: 00007fff367459f8 [ 120.982643][ T8906] [ 121.188798][ T8913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'. [ 121.300354][ T840] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 121.471487][ T840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 121.476490][ T840] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.479430][ T840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.482197][ T840] usb 8-1: Product: syz [ 121.483590][ T840] usb 8-1: Manufacturer: syz [ 121.485115][ T840] usb 8-1: SerialNumber: syz [ 121.488296][ T840] usb 8-1: config 0 descriptor?? [ 121.588226][ T64] Bluetooth: hci3: SCO packet for unknown connection handle 2935 [ 121.788039][ T8943] FAULT_INJECTION: forcing a failure. [ 121.788039][ T8943] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.796839][ T8943] CPU: 3 UID: 0 PID: 8943 Comm: syz.1.863 Not tainted syzkaller #0 PREEMPT(full) [ 121.796864][ T8943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.796873][ T8943] Call Trace: [ 121.796879][ T8943] [ 121.796886][ T8943] dump_stack_lvl+0x16c/0x1f0 [ 121.796917][ T8943] should_fail_ex+0x512/0x640 [ 121.796941][ T8943] _copy_from_iter+0x29f/0x1720 [ 121.796965][ T8943] ? __alloc_skb+0x200/0x380 [ 121.796985][ T8943] ? __pfx__copy_from_iter+0x10/0x10 [ 121.797011][ T8943] ? netlink_autobind.isra.0+0x158/0x370 [ 121.797044][ T8943] netlink_sendmsg+0x820/0xdd0 [ 121.797072][ T8943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.797105][ T8943] ____sys_sendmsg+0xa98/0xc70 [ 121.797122][ T8943] ? copy_msghdr_from_user+0x10a/0x160 [ 121.797144][ T8943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.797169][ T8943] ___sys_sendmsg+0x134/0x1d0 [ 121.797193][ T8943] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.797213][ T8943] ? __lock_acquire+0x622/0x1c90 [ 121.797271][ T8943] __sys_sendmsg+0x16d/0x220 [ 121.797294][ T8943] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.797334][ T8943] do_syscall_64+0xcd/0xfa0 [ 121.797361][ T8943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.797379][ T8943] RIP: 0033:0x7f42a058efc9 [ 121.797393][ T8943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.797411][ T8943] RSP: 002b:00007f42a136d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.797428][ T8943] RAX: ffffffffffffffda RBX: 00007f42a07e5fa0 RCX: 00007f42a058efc9 [ 121.797440][ T8943] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 121.797450][ T8943] RBP: 00007f42a136d090 R08: 0000000000000000 R09: 0000000000000000 [ 121.797459][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.797469][ T8943] R13: 00007f42a07e6038 R14: 00007f42a07e5fa0 R15: 00007fff367459f8 [ 121.797495][ T8943] [ 121.901241][ T56] usb 8-1: USB disconnect, device number 14 [ 121.924489][ T8945] bridge_slave_0: left allmulticast mode [ 121.928621][ T8945] bridge_slave_0: left promiscuous mode [ 121.931334][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.938281][ T8945] bridge_slave_1: left allmulticast mode [ 121.942549][ T8945] bridge_slave_1: left promiscuous mode [ 121.944470][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.949564][ T8945] bond0: (slave bond_slave_0): Releasing backup interface [ 121.955182][ T8945] bond0: (slave bond_slave_1): Releasing backup interface [ 121.960861][ T8945] team0: Port device team_slave_0 removed [ 121.967144][ T8945] team0: Port device team_slave_1 removed [ 121.967166][ T8946] netlink: 'syz.1.864': attribute type 10 has an invalid length. [ 121.969288][ T8945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.975333][ T8945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.978392][ T8945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.981543][ T8945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.007348][ T8946] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.402231][ T8955] kvm: user requested TSC rate below hardware speed [ 122.448307][ T8958] fuse: Unknown parameter 'group_i00000000000000000000' [ 122.512079][ T8960] loop2: detected capacity change from 0 to 7 [ 122.515395][ T8573] Dev loop2: unable to read RDB block 7 [ 122.517125][ T8573] loop2: unable to read partition table [ 122.519380][ T8573] loop2: partition table beyond EOD, truncated [ 122.523781][ T8960] Dev loop2: unable to read RDB block 7 [ 122.525596][ T8960] loop2: unable to read partition table [ 122.527490][ T8960] loop2: partition table beyond EOD, truncated [ 122.529540][ T8960] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.743948][ T5297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.747273][ T5297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.750283][ T5297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.756526][ T5297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.760174][ T5297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.784983][ T8977] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 122.789122][ T8977] bond2 (unregistering): Released all slaves [ 122.958573][ T8974] chnl_net:caif_netlink_parms(): no params data found [ 123.076531][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.079493][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.082444][ T8974] bridge_slave_0: entered allmulticast mode [ 123.086128][ T8974] bridge_slave_0: entered promiscuous mode [ 123.086916][ T8998] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.095834][ T8998] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.104236][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.106541][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.108822][ T8974] bridge_slave_1: entered allmulticast mode [ 123.111674][ T8974] bridge_slave_1: entered promiscuous mode [ 123.155092][ T8974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.159582][ T8974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.216560][ T8974] team0: Port device team_slave_0 added [ 123.221886][ T8974] team0: Port device team_slave_1 added [ 123.269198][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.269552][ T9008] /dev/nullb0: Can't open blockdev [ 123.272494][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.286067][ T8974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.292244][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.295693][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.306267][ T9010] fuse: Unknown parameter 'group_i00000000000000000000' [ 123.306819][ T8974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.349872][ T8974] hsr_slave_0: entered promiscuous mode [ 123.353297][ T8974] hsr_slave_1: entered promiscuous mode [ 123.355779][ T8974] debugfs: 'hsr0' already exists in 'hsr' [ 123.357968][ T8974] Cannot create hsr debugfs directory [ 123.409162][ T9013] loop2: detected capacity change from 0 to 7 [ 123.411926][ T9013] Dev loop2: unable to read RDB block 7 [ 123.413795][ T9013] loop2: unable to read partition table [ 123.415659][ T9013] loop2: partition table beyond EOD, truncated [ 123.417637][ T9013] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.489033][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.492686][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.496571][ T9020] trusted_key: encrypted_key: hex blob is missing [ 123.521538][ T8974] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.532331][ T8974] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.540984][ T8974] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.548253][ T8974] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.564329][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.566694][ T8974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.569089][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.571555][ T8974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.573146][ T9039] fuse: Unknown parameter 'group_id00000000000000000000' [ 123.602060][ T8974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.612251][ T7615] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.616193][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.628791][ T8974] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.636831][ T7589] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.639171][ T7589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.646289][ T7615] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.648399][ T7615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.702799][ T8974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.739081][ T8974] veth0_vlan: entered promiscuous mode [ 123.748665][ T8974] veth1_vlan: entered promiscuous mode [ 123.760875][ T8974] veth0_macvtap: entered promiscuous mode [ 123.764483][ T8974] veth1_macvtap: entered promiscuous mode [ 123.782866][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.790407][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.796259][ T7615] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.799575][ T7615] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.804217][ T7592] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.809797][ T7592] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.856636][ T7592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.859249][ T7592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.871292][ T9070] fuse: Unknown parameter 'group_id00000000000000000000' [ 123.877474][ T7592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.881336][ T7592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.928132][ T9072] FAULT_INJECTION: forcing a failure. [ 123.928132][ T9072] name failslab, interval 1, probability 0, space 0, times 0 [ 123.932433][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.5.872 Not tainted syzkaller #0 PREEMPT(full) [ 123.932447][ T9072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.932453][ T9072] Call Trace: [ 123.932457][ T9072] [ 123.932461][ T9072] dump_stack_lvl+0x16c/0x1f0 [ 123.932480][ T9072] should_fail_ex+0x512/0x640 [ 123.932492][ T9072] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 123.932507][ T9072] should_failslab+0xc2/0x120 [ 123.932520][ T9072] kmem_cache_alloc_noprof+0x75/0x6e0 [ 123.932536][ T9072] ? skb_clone+0x190/0x3f0 [ 123.932552][ T9072] ? skb_clone+0x190/0x3f0 [ 123.932565][ T9072] skb_clone+0x190/0x3f0 [ 123.932579][ T9072] netlink_deliver_tap+0xabd/0xd30 [ 123.932596][ T9072] netlink_unicast+0x64c/0x870 [ 123.932614][ T9072] ? __pfx_netlink_unicast+0x10/0x10 [ 123.932634][ T9072] netlink_sendmsg+0x8c8/0xdd0 [ 123.932651][ T9072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.932672][ T9072] ____sys_sendmsg+0xa98/0xc70 [ 123.932682][ T9072] ? copy_msghdr_from_user+0x10a/0x160 [ 123.932696][ T9072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.932714][ T9072] ___sys_sendmsg+0x134/0x1d0 [ 123.932729][ T9072] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.932741][ T9072] ? __lock_acquire+0x622/0x1c90 [ 123.932775][ T9072] __sys_sendmsg+0x16d/0x220 [ 123.932789][ T9072] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.932811][ T9072] do_syscall_64+0xcd/0xfa0 [ 123.932829][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.932839][ T9072] RIP: 0033:0x7fc280f8efc9 [ 123.932848][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.932858][ T9072] RSP: 002b:00007fc281e9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.932868][ T9072] RAX: ffffffffffffffda RBX: 00007fc2811e5fa0 RCX: 00007fc280f8efc9 [ 123.932874][ T9072] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 123.932880][ T9072] RBP: 00007fc281e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 123.932886][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.932892][ T9072] R13: 00007fc2811e6038 R14: 00007fc2811e5fa0 R15: 00007ffe1e6d7aa8 [ 123.932906][ T9072] [ 123.933001][ T9072] ------------[ cut here ]------------ [ 123.965363][ T9074] loop2: detected capacity change from 0 to 7 [ 123.966725][ T9072] no supported rates for sta 08:02:11:00:00:01 (0xf, band 0) in rate_mask 0xffffffff with flags 0x10 [ 123.967146][ T9072] WARNING: CPU: 1 PID: 9072 at net/mac80211/rate.c:401 __rate_control_send_low+0x667/0x780 [ 123.969247][ T9074] Dev loop2: unable to read RDB block 7 [ 123.970579][ T9072] Modules linked in: [ 123.970616][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.5.872 Not tainted syzkaller #0 PREEMPT(full) [ 123.970629][ T9072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.970636][ T9072] RIP: 0010:__rate_control_send_low+0x667/0x780 [ 123.972405][ T9074] loop2: unable to read partition table [ 123.974106][ T9072] Code: a4 a0 d4 00 00 00 e8 e8 cb e6 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 00 08 e3 8c e8 7a fb a4 f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 47 58 4f f7 e9 f5 fc ff [ 123.974119][ T9072] RSP: 0018:ffffc90005fd6d28 EFLAGS: 00010286 [ 123.974129][ T9072] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b3ee8 [ 123.974137][ T9072] RDX: ffff88804e0fa480 RSI: ffffffff817b3ef5 RDI: 0000000000000001 [ 123.974144][ T9072] RBP: ffff88804a9b1568 R08: 0000000000000001 R09: 0000000000000000 [ 123.974150][ T9072] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000000f [ 123.974157][ T9072] R13: 0000000000000010 R14: 000000000000000c R15: 0000000000000000 [ 123.974164][ T9072] FS: 00007fc281e9b6c0(0000) GS:ffff8880d6b08000(0000) knlGS:0000000000000000 [ 123.974186][ T9072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.974199][ T9072] CR2: 00007fc280f74c40 CR3: 000000004bf3a000 CR4: 0000000000352ef0 [ 123.974209][ T9072] Call Trace: [ 123.974217][ T9072] [ 123.974226][ T9072] ? __kasan_slab_alloc+0x89/0x90 [ 123.974252][ T9072] rate_control_send_low+0x124/0x810 [ 123.974280][ T9072] ? genl_rcv+0x28/0x40 [ 123.974306][ T9072] ? netlink_unicast+0x5aa/0x870 [ 123.976672][ T9074] loop2: partition table beyond EOD, [ 123.977796][ T9072] rate_control_get_rate+0x1be/0x5e0 [ 123.979515][ T9074] truncated [ 123.981011][ T9072] ieee80211_tx_h_rate_ctrl+0xa35/0x1ae0 [ 123.982962][ T9074] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.984361][ T9072] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 124.081907][ T9072] invoke_tx_handlers_late+0x1172/0x27d0 [ 124.083707][ T9072] ? invoke_tx_handlers_early+0x669/0x28a0 [ 124.085549][ T9072] ieee80211_tx+0x304/0x460 [ 124.087034][ T9072] ? __pfx_ieee80211_tx+0x10/0x10 [ 124.088732][ T9072] ? ieee80211_skb_resize+0x22a/0x630 [ 124.090768][ T9072] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 124.092477][ T9072] ieee80211_xmit+0x30f/0x3e0 [ 124.094011][ T9072] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 124.095857][ T9072] ieee80211_tx_skb_tid+0x1c1/0x550 [ 124.097540][ T9072] ieee80211_mgmt_tx+0x14b1/0x2470 [ 124.099398][ T9072] cfg80211_mlme_mgmt_tx+0x7ef/0x1690 [ 124.101689][ T9072] nl80211_tx_mgmt+0x86d/0xdd0 [ 124.103628][ T9072] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 124.105406][ T9072] ? __pfx_netdev_run_todo+0x10/0x10 [ 124.107126][ T9072] ? nl80211_pre_doit+0x1b0/0xb10 [ 124.108815][ T9072] genl_family_rcv_msg_doit+0x209/0x2f0 [ 124.110602][ T9072] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 124.112521][ T9072] ? bpf_lsm_capable+0x9/0x10 [ 124.114031][ T9072] ? security_capable+0x7e/0x260 [ 124.115607][ T9072] ? ns_capable+0xd7/0x110 [ 124.117152][ T9072] genl_rcv_msg+0x55c/0x800 [ 124.118668][ T9072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.120380][ T9072] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 124.122089][ T9072] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 124.123812][ T9072] ? __pfx_nl80211_post_doit+0x10/0x10 [ 124.125551][ T9072] ? dump_stack_lvl+0x185/0x1f0 [ 124.127125][ T9072] netlink_rcv_skb+0x158/0x420 [ 124.128782][ T9072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.130861][ T9072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.133041][ T9072] ? netlink_deliver_tap+0x1ae/0xd30 [ 124.134907][ T9072] genl_rcv+0x28/0x40 [ 124.136186][ T9072] netlink_unicast+0x5aa/0x870 [ 124.137971][ T9072] ? __pfx_netlink_unicast+0x10/0x10 [ 124.139647][ T9072] netlink_sendmsg+0x8c8/0xdd0 [ 124.141242][ T9072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.142940][ T9072] ____sys_sendmsg+0xa98/0xc70 [ 124.144456][ T9072] ? copy_msghdr_from_user+0x10a/0x160 [ 124.146236][ T9072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.148475][ T9072] ___sys_sendmsg+0x134/0x1d0 [ 124.150480][ T9072] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.152152][ T9072] ? __lock_acquire+0x622/0x1c90 [ 124.153850][ T9072] __sys_sendmsg+0x16d/0x220 [ 124.155330][ T9072] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.156942][ T9072] do_syscall_64+0xcd/0xfa0 [ 124.158378][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.160288][ T9072] RIP: 0033:0x7fc280f8efc9 [ 124.161668][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.167667][ T9072] RSP: 002b:00007fc281e9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.170289][ T9072] RAX: ffffffffffffffda RBX: 00007fc2811e5fa0 RCX: 00007fc280f8efc9 [ 124.172833][ T9072] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 124.175282][ T9072] RBP: 00007fc281e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 124.177750][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.180267][ T9072] R13: 00007fc2811e6038 R14: 00007fc2811e5fa0 R15: 00007ffe1e6d7aa8 [ 124.182766][ T9072] [ 124.183756][ T9072] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.185997][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.5.872 Not tainted syzkaller #0 PREEMPT(full) [ 124.188942][ T9072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.192249][ T9072] Call Trace: [ 124.193346][ T9072] [ 124.194281][ T9072] dump_stack_lvl+0x3d/0x1f0 [ 124.195745][ T9072] vpanic+0x640/0x6f0 [ 124.197036][ T9072] ? __rate_control_send_low+0x667/0x780 [ 124.198985][ T9072] panic+0xca/0xd0 [ 124.200177][ T9072] ? __pfx_panic+0x10/0x10 [ 124.201575][ T9072] ? check_panic_on_warn+0x1f/0xb0 [ 124.203225][ T9072] check_panic_on_warn+0xab/0xb0 [ 124.204773][ T9072] __warn+0xf6/0x3c0 [ 124.205991][ T9072] ? __rate_control_send_low+0x667/0x780 [ 124.207924][ T9072] report_bug+0x3c3/0x580 [ 124.209286][ T9072] ? __rate_control_send_low+0x667/0x780 [ 124.211043][ T9072] handle_bug+0x184/0x210 [ 124.212398][ T9072] exc_invalid_op+0x17/0x50 [ 124.213864][ T9072] asm_exc_invalid_op+0x1a/0x20 [ 124.215408][ T9072] RIP: 0010:__rate_control_send_low+0x667/0x780 [ 124.217396][ T9072] Code: a4 a0 d4 00 00 00 e8 e8 cb e6 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 00 08 e3 8c e8 7a fb a4 f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 47 58 4f f7 e9 f5 fc ff [ 124.223414][ T9072] RSP: 0018:ffffc90005fd6d28 EFLAGS: 00010286 [ 124.225311][ T9072] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b3ee8 [ 124.227795][ T9072] RDX: ffff88804e0fa480 RSI: ffffffff817b3ef5 RDI: 0000000000000001 [ 124.230158][ T9072] RBP: ffff88804a9b1568 R08: 0000000000000001 R09: 0000000000000000 [ 124.232566][ T9072] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000000f [ 124.235198][ T9072] R13: 0000000000000010 R14: 000000000000000c R15: 0000000000000000 [ 124.237849][ T9072] ? __warn_printk+0x198/0x350 [ 124.239378][ T9072] ? __warn_printk+0x1a5/0x350 [ 124.240905][ T9072] ? __rate_control_send_low+0x666/0x780 [ 124.242687][ T9072] ? __kasan_slab_alloc+0x89/0x90 [ 124.244247][ T9072] rate_control_send_low+0x124/0x810 [ 124.245922][ T9072] ? genl_rcv+0x28/0x40 [ 124.247436][ T9072] ? netlink_unicast+0x5aa/0x870 [ 124.249181][ T9072] rate_control_get_rate+0x1be/0x5e0 [ 124.250858][ T9072] ieee80211_tx_h_rate_ctrl+0xa35/0x1ae0 [ 124.252637][ T9072] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 124.254528][ T9072] invoke_tx_handlers_late+0x1172/0x27d0 [ 124.256409][ T9072] ? invoke_tx_handlers_early+0x669/0x28a0 [ 124.258765][ T9072] ieee80211_tx+0x304/0x460 [ 124.260653][ T9072] ? __pfx_ieee80211_tx+0x10/0x10 [ 124.262817][ T9072] ? ieee80211_skb_resize+0x22a/0x630 [ 124.264527][ T9072] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 124.266588][ T9072] ieee80211_xmit+0x30f/0x3e0 [ 124.268595][ T9072] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 124.271006][ T9072] ieee80211_tx_skb_tid+0x1c1/0x550 [ 124.272742][ T9072] ieee80211_mgmt_tx+0x14b1/0x2470 [ 124.274363][ T9072] cfg80211_mlme_mgmt_tx+0x7ef/0x1690 [ 124.276625][ T9072] nl80211_tx_mgmt+0x86d/0xdd0 [ 124.278637][ T9072] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 124.280960][ T9072] ? __pfx_netdev_run_todo+0x10/0x10 [ 124.282772][ T9072] ? nl80211_pre_doit+0x1b0/0xb10 [ 124.284339][ T9072] genl_family_rcv_msg_doit+0x209/0x2f0 [ 124.286035][ T9072] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 124.287947][ T9072] ? bpf_lsm_capable+0x9/0x10 [ 124.289379][ T9072] ? security_capable+0x7e/0x260 [ 124.290873][ T9072] ? ns_capable+0xd7/0x110 [ 124.292251][ T9072] genl_rcv_msg+0x55c/0x800 [ 124.293742][ T9072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.295284][ T9072] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 124.296872][ T9072] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 124.298824][ T9072] ? __pfx_nl80211_post_doit+0x10/0x10 [ 124.300901][ T9072] ? dump_stack_lvl+0x185/0x1f0 [ 124.302405][ T9072] netlink_rcv_skb+0x158/0x420 [ 124.304111][ T9072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.306096][ T9072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.308316][ T9072] ? netlink_deliver_tap+0x1ae/0xd30 [ 124.310488][ T9072] genl_rcv+0x28/0x40 [ 124.312248][ T9072] netlink_unicast+0x5aa/0x870 [ 124.314300][ T9072] ? __pfx_netlink_unicast+0x10/0x10 [ 124.316552][ T9072] netlink_sendmsg+0x8c8/0xdd0 [ 124.318622][ T9072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.320727][ T9072] ____sys_sendmsg+0xa98/0xc70 [ 124.322262][ T9072] ? copy_msghdr_from_user+0x10a/0x160 [ 124.324004][ T9072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.325663][ T9072] ___sys_sendmsg+0x134/0x1d0 [ 124.327185][ T9072] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.328827][ T9072] ? __lock_acquire+0x622/0x1c90 [ 124.330393][ T9072] __sys_sendmsg+0x16d/0x220 [ 124.331874][ T9072] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.333460][ T9072] do_syscall_64+0xcd/0xfa0 [ 124.334902][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.336733][ T9072] RIP: 0033:0x7fc280f8efc9 [ 124.338104][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.343968][ T9072] RSP: 002b:00007fc281e9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.346544][ T9072] RAX: ffffffffffffffda RBX: 00007fc2811e5fa0 RCX: 00007fc280f8efc9 [ 124.348981][ T9072] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 124.351382][ T9072] RBP: 00007fc281e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 124.353838][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.356257][ T9072] R13: 00007fc2811e6038 R14: 00007fc2811e5fa0 R15: 00007ffe1e6d7aa8 [ 124.358657][ T9072] [ 124.360329][ T9072] Kernel Offset: disabled [ 124.361717][ T9072] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:21:07 Registers: info registers vcpu 0 CPU#0 RAX=fffffbfff210407a RBX=fffffbfff210407b RCX=ffffffff81c50e4f RDX=fffffbfff210407b RSI=0000000000000008 RDI=ffffffff908203d0 RBP=fffffbfff210407a RSP=ffffc90005537988 R8 =0000000000000000 R9 =fffffbfff210407a R10=ffffffff908203d7 R11=0000000000000001 R12=0000000000000040 R13=ffff88805524b188 R14=ffff88805524b000 R15=0000000000000200 RIP=ffffffff822593cc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f615e5156c0 CR3=000000004bf3a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc281012fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc281012fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc281012fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc281012ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc28101307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc28101315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2811b74a8 00007fc2811b74a0 00007fc2811b7498 00007fc2811b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc281d1d100 00007fc2811b7460 00007fc2811b7478 0000000500060006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2811b74b8 00007fc2811b74b0 00007fc2811b74a8 00007fc2811b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85296070 RDI=ffffffff9add8780 RBP=ffffffff9add8740 RSP=ffffc90005fd65e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35bb142 R15=dffffc0000000000 RIP=ffffffff85296097 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc281e9b6c0 ffffffff 00c00000 GS =0000 ffff8880d6b08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc280f74c40 CR3=000000004bf3a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffffe Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc281e9b060 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc281012fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc281012fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc281012fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc281012ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc28101307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc28101315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73697664616d2065 74616c75706f7000 757a253d657a6973 2070253d72747000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 564c534144480540 51444950554a5500 505f0018405f4c56 0555001857515500 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000100fdb RBX=0000000000000002 RCX=ffffffff8b6082a9 RDX=0000000000000000 RSI=ffffffff8da2b048 RDI=ffffffff8bf07040 RBP=ffffed1003bd4920 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801dea4900 R14=ffffffff908203d0 R15=0000000000000000 RIP=ffffffff8b606d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f615d772c60 CR3=0000000024939000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564d2c3099c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564d2c30a420 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19b05f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373253e5f43f483 7373253b3bacba59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 777843bdec76bea5 7373737617a1b060 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6d697377685f31 3132303863616d2f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19b05f2230 0000564d2c33c0c0 0000000000004ea1 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888039376070 RCX=ffffffff816e497e RDX=ffff88805693a480 RSI=ffff888039376070 RDI=0000800000000000 RBP=0000800000000000 RSP=ffffc900063774c0 R8 =0000000000000004 R9 =0000000000000ffd R10=0000000000000004 R11=0000000000000001 R12=0000000000000004 R13=ffff8880334d2ff9 R14=ffff8880334d2ffd R15=ffffc90006377628 RIP=ffffffff81bd0858 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f19b0c0c880 ffffffff 00c00000 GS =0000 ffff8880d6d08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c346c59 CR3=000000005b74b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008040000 Opmask01=0000000000002000 Opmask02=0000000003ffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000073656c75 722d76656475002f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373797300313d65 6c62616e6500323a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000637379730031 3d656c62616e6500 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0f0e0d0c0b0a 0908070605040302 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373797300313d65 6c62616e6500323a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a5e444f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3034316632785c71 65736b7369642d79 626632785c6b7369 646632785c2f736b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373797300313d65 6c62616e6500323a 37622f3034316632 785c7165736b7369 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 0000564d2c314a10 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000