last executing test programs: 2.349543646s ago: executing program 3 (id=174): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.180529198s ago: executing program 3 (id=176): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x401, 0x0, 0x0, 0x10, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000e00", "2809e8dbe108598948224ad54afac108000000bdb22d0000b420a1a9992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.179781686s ago: executing program 3 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}]}}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01c3419a2592443803cf578f", "6d02cd81", "066580001e00"}, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) 2.017873439s ago: executing program 3 (id=178): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000400100010000e0010a0000", @ANYRES32=r2, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfef7, 0x0}, 0x34008041) mbind(&(0x7f000017d000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040)=0xa, 0x5, 0x3) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) syz_clone(0x80104000, &(0x7f0000000380)="f05fc804b92b75e20b0cb9a29f7818e6eb0357e521c335f9f5cb29cc24f978d6de4963398cbdbf0393ad8bd561b2a5325c15146b7ec6dba73102a720ccf894024f36cf9f59d66f2345755c0fc35153d4831a51ec4543b07149ed47ef62c56a96ee2d1cba7df758db8ee8f83f651956f98a0622c75ed2f755a29d0d4e683669705f6180810770bf3cfa1e9f", 0x8b, &(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000540)="45cf0d4f314c1c40bd68d4a1052c4de7d9fda4f638bbd28aa9e48e68487cafbd9c9be9") (async) r7 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="5506237a61958bd4cd7db89bfe63f64743071dfdf1aeaa4435df83e862a15d47709690b7034e758f1c0107df926b27f5ed8a88779c126e32d2c81a6ea3a8e223f2991643fd075ef0f0cd19d5061b2265f0e4bc282e1a62e32ee43c974e1d9d149880ca91ebbefd37ef1a99dcdf3cf3c1dde0efcafc72863cb7afbcb6797ed0730fe5afa837c672880b0094dc36e406cc489eac"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=r8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffd8c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r9}, 0x10) r10 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r10, 0x0) (async) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) write$UHID_INPUT(r6, &(0x7f0000001040)={0x200f, {"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", 0x1000}}, 0x1006) 1.920281156s ago: executing program 1 (id=179): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x0, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000140)={@id={0x2, 0x0, @b}}) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) (async) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.919981356s ago: executing program 3 (id=180): mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./control\x00', 0x5000410) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x2) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) (async) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) socket$phonet(0x23, 0x2, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') 1.859132017s ago: executing program 1 (id=181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r2, 0x1000) 1.85847972s ago: executing program 3 (id=182): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x400, 0x101) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000040)={{0x2, 0xffffffff, 0x3, 0x2, 0x40, 0x5}, 0x2ef, [0x1, 0x8, 0x7fffffff, 0x40, 0x6, 0x6a31072b, 0x5, 0x6, 0x9, 0x6, 0x101, 0x8, 0x9, 0x101, 0x675c, 0x81, 0x9, 0x5, 0x9, 0x101, 0x1efd1684, 0x356, 0x3, 0x9d98, 0x6, 0x6, 0x4, 0x4, 0x4, 0xfc, 0x0, 0x1, 0x5, 0x6, 0x1, 0x285, 0x6, 0x2, 0x3, 0x70, 0x5, 0x4, 0x4, 0x8, 0xdb05, 0x0, 0x8, 0xfffffff7, 0x8001, 0x7f, 0x5, 0x2, 0x2, 0x5, 0x2d0, 0x126, 0x707, 0x93060616, 0x5, 0x52, 0x80, 0x3, 0x8, 0x401, 0x400000, 0xa, 0x7, 0x7, 0x2fbd, 0xed702ea, 0x1, 0x401, 0x7, 0x2, 0x1, 0x0, 0x9, 0xfffffffe, 0x1, 0x8, 0xfffff9ee, 0xfffffc01, 0x600, 0x6, 0xffffffff, 0xffffffff, 0x2120, 0x7fffffff, 0xffffff81, 0x3, 0x6, 0x3, 0x1, 0x0, 0x8, 0x9, 0x7, 0x8, 0x401, 0x8000, 0x2, 0x8, 0x101, 0x87, 0x1, 0x400, 0x2, 0x2, 0xd, 0x5, 0x4, 0x8, 0xfffffffa, 0x8, 0xc43, 0xfffffffd, 0x4, 0x4, 0x0, 0x6, 0xf, 0x8, 0x0, 0x1aa, 0x6, 0x1, 0x7, 0x0, 0x2, 0x7, 0x8, 0xf44, 0x8, 0x5, 0x0, 0x9, 0x684b, 0x5, 0xc, 0x0, 0x101, 0x9, 0x7f, 0x1, 0x200, 0x9071, 0xb6, 0x3, 0x10001, 0x0, 0xff, 0x8000, 0x9, 0xfffffffd, 0x200, 0x64, 0x4, 0x4, 0x7fffffff, 0x3, 0x2, 0x2, 0x8001, 0x9, 0x0, 0x38, 0x6, 0xe, 0x5, 0x2, 0x100, 0x5c57, 0x6, 0x8001, 0x6, 0xfffffff7, 0xe, 0x1, 0x8, 0x7, 0x8, 0xba, 0xffffffff, 0x8, 0x0, 0xdf0, 0x5, 0x8, 0x80000000, 0x1, 0x8, 0xfffff898, 0x8, 0x6, 0x2, 0x4, 0x7f, 0x1, 0x800, 0x7, 0x7fffffff, 0x8ccc, 0x5, 0xf, 0x8, 0x3, 0x80, 0x5, 0xa, 0x6, 0x1, 0x3d6, 0x8, 0xb5, 0xfff, 0x7f, 0x1000, 0x3ff, 0x5, 0x7fffffff, 0x5, 0xfffffffb, 0x900000, 0x5, 0xdbc, 0xb21, 0x80, 0x4, 0x8000, 0x6, 0x3, 0x6ccb0109, 0x400, 0x0, 0x71, 0x2, 0x0, 0x800, 0x1, 0xfffffffb, 0x2, 0x6e, 0xffffffff, 0x2, 0x6, 0x1, 0x8, 0x5, 0x7, 0x3ff, 0x4, 0x1, 0x0, 0x3ff, 0x7, 0xff, 0x2, 0xe, 0x838, 0x6, 0x3, 0x7fff, 0x4, 0xff, 0x4a1, 0x3, 0x8, 0x0, 0x3, 0x7, 0x3, 0x4, 0x5, 0x0, 0x6, 0x9, 0x59fe88e2, 0x1, 0x1e, 0x18, 0x9, 0x2, 0xc1f, 0x7, 0xffff, 0x4, 0x0, 0x5, 0x401, 0x3, 0x80000001, 0x5, 0xf, 0x0, 0x7, 0x2, 0x6, 0xd, 0xd, 0x10000, 0x5, 0x10, 0x2, 0x7fffffff, 0x6, 0xff, 0x1000, 0xfffffff9, 0x7, 0x1ff, 0x4, 0x1, 0x1, 0x4ea9, 0xfff, 0x80000001, 0x10001, 0x0, 0x44e, 0x9, 0x140000, 0x1, 0x4, 0x948, 0x5, 0x9a, 0xf, 0x8, 0x1, 0x1, 0x5, 0x7, 0x40, 0x869, 0x6, 0x2, 0x0, 0x0, 0xe2a, 0x2, 0x10000, 0x4, 0xd4, 0x1, 0x10, 0x9e, 0x1ff, 0xff, 0x8001, 0x2, 0x1, 0x10001, 0xffff0ecf, 0x7f, 0x9, 0x8001, 0x81, 0xe2, 0x9, 0x946c, 0x8a4, 0x1, 0x40, 0x3, 0x9, 0x1000, 0x3, 0x4, 0xc3d, 0x9, 0x3, 0x0, 0x2, 0x7, 0x6, 0x7, 0xfffffffa, 0x800, 0x9f7, 0x5, 0x646b, 0x4, 0xffffff7f, 0x9, 0x7fff, 0x9, 0x7fff, 0x8, 0x2, 0xbf, 0x80, 0x9c4, 0x7, 0x63, 0x9c7, 0x3, 0x0, 0x2, 0x2, 0x4, 0x2, 0x5, 0x7, 0x2, 0x0, 0x3, 0x7, 0x9, 0xd, 0x9, 0x4, 0xcd3, 0x618a7e19, 0x3f, 0x2, 0x9, 0x81, 0x8, 0x4, 0x4, 0x0, 0x4347, 0x0, 0x9, 0x4, 0xf, 0xa960, 0x7ff, 0x1000, 0x5, 0xc8, 0xc, 0x4, 0x85a, 0x0, 0x0, 0xfffff801, 0x2, 0x5234, 0x3, 0xbe5, 0x1, 0x7, 0xf, 0x5, 0x2, 0x0, 0x0, 0x8, 0x0, 0x2, 0x8, 0x1, 0x97, 0x8, 0x6, 0x800, 0x5444, 0x4, 0x3, 0x1, 0x2, 0x0, 0x6, 0xcfe, 0xca1, 0x3, 0x4, 0x40, 0x1, 0x80, 0x7, 0xe6d, 0x5, 0x1, 0x6, 0x0, 0x4, 0x101, 0x400, 0xc, 0x3, 0xd, 0x2, 0xbb2a, 0x6, 0x9, 0x6, 0x1, 0x78, 0x80, 0x6, 0x80, 0xe, 0x10, 0x2, 0x7, 0x0, 0x8d6, 0xa, 0x6, 0x8, 0x3, 0x6, 0x2, 0xb, 0x8, 0x6, 0x98, 0xffffff18, 0x5, 0x5, 0x3, 0x6, 0xfffffffd, 0xa, 0x4, 0x602fd9b0, 0x3, 0x2, 0x4, 0x0, 0x101, 0x0, 0x7, 0x1ff, 0x9, 0x80, 0x0, 0x8, 0xff, 0x1, 0x49, 0x100, 0x5, 0x5, 0xe, 0x8, 0x10, 0x81, 0x4, 0x4, 0x3, 0x101, 0x0, 0x9, 0x3e1, 0x12809b38, 0x7fff, 0x0, 0x3, 0x6, 0x800, 0x0, 0xd7, 0x6, 0x5, 0xffff, 0x25, 0x2, 0xffffffe0, 0x3, 0x3, 0x8, 0x1, 0x1, 0x993, 0x18, 0x5af, 0x622, 0xe, 0x8, 0x8, 0x8100000, 0x9, 0xc, 0x200, 0x9, 0x9, 0x40000000, 0x7, 0x7, 0x4, 0x4, 0xedb, 0x400, 0x100, 0x400, 0x1, 0x9, 0x2, 0x145, 0x7, 0x4, 0xa506, 0x8, 0x0, 0xb, 0x7, 0x7, 0x1f9d, 0x2, 0x10000, 0x9, 0x5, 0xf4, 0x9, 0x80000000, 0x80000001, 0xa8, 0x8, 0x2, 0x2, 0xfffffffd, 0xfe41, 0x2c, 0x40, 0x9, 0x7, 0x8, 0x7fff, 0x7f, 0x7c35, 0xb, 0x7, 0xa, 0x3, 0x6, 0x7, 0x7, 0x7, 0x40, 0x0, 0x0, 0x80000000, 0x6, 0xf41, 0x9, 0x2, 0x200, 0x0, 0x1, 0x6fa7, 0x7, 0x4, 0x7, 0x0, 0x8, 0x0, 0x7fff, 0x3, 0xfffffffc, 0x8, 0x2, 0x5, 0x8, 0x7, 0x9, 0x3, 0x2d2d, 0x9, 0x9, 0x3, 0x5, 0x10000, 0x6, 0x7fff, 0x8, 0x2, 0x73c, 0x7, 0x40, 0xa26, 0x5, 0x4, 0x7fff, 0x8, 0x1000, 0x9ef, 0x0, 0x6, 0x4, 0x2a, 0x0, 0x100, 0x1ff, 0x5, 0x7, 0x7f, 0x3, 0x8, 0x878, 0x10001, 0x9, 0x7ff, 0x8, 0x2, 0x40, 0xfffffffa, 0x0, 0xeb17, 0x92a0, 0xb711, 0x10001, 0x8000, 0x8, 0x8000, 0x10ff, 0x2, 0x3, 0x81, 0x3, 0x4f3, 0x3, 0xffff, 0x8, 0x1, 0x3d5f, 0x2, 0xa, 0x7fffffff, 0x9, 0x9, 0x8, 0x8, 0x9, 0xffffc000, 0x6, 0x81, 0x8, 0x2, 0x3, 0x9, 0x7fffffff, 0x6, 0xffff, 0x7, 0x10, 0x85, 0xffff, 0xfffffffa, 0x5, 0x10, 0xfffffffe, 0x8, 0x7, 0x8, 0xfff, 0x1, 0x2, 0x1, 0x4, 0x2aff, 0x61f0, 0x8, 0x31, 0x9, 0x8, 0x7fffffff, 0x1, 0x8, 0x5, 0x3, 0x8, 0x5, 0x6, 0x9, 0x508e, 0x8, 0x0, 0xffffffff, 0x6, 0xfffffff9, 0x2bd, 0x0, 0x5, 0x4, 0xfffffffa, 0x3, 0x5755, 0x3, 0x7, 0x10001, 0x0, 0x8cf, 0x7fffffff, 0xfff, 0x40, 0x1, 0x1, 0x6, 0x10, 0x81, 0xd1, 0x0, 0x7, 0x5, 0x0, 0x8, 0xd8d, 0x0, 0xa, 0x2, 0x7fff, 0x7, 0xf, 0x0, 0x80000000, 0x8, 0x6, 0x7, 0x6, 0x18000, 0x6be7, 0xb, 0xfe3b, 0x7, 0x1ff, 0x0, 0x800, 0x6, 0x8, 0x1500, 0x4, 0x4da6, 0x0, 0x8, 0x9, 0x0, 0xfffffffe, 0x5a800000, 0xffffffff, 0xe85d, 0x400000, 0x3, 0x9c1, 0x8000, 0x81, 0xfffffffa, 0x5, 0x5, 0x8, 0x2c9c, 0x0, 0x6557ca4a, 0x8, 0x78f0, 0x5, 0x8001, 0x4, 0x4, 0x5c, 0x6, 0xfff, 0x3, 0x1, 0x3, 0x7, 0x7, 0x2, 0x8, 0x9, 0x1, 0xa591, 0xbded, 0x3, 0x0, 0x9, 0xffffffff, 0x7, 0x4, 0x2, 0xfffffffe, 0x10, 0xc5ec, 0x3, 0x10001, 0x7, 0x100, 0x280, 0x400, 0x4, 0x3, 0x4, 0x7, 0xb9, 0x4, 0x2, 0x3e43, 0x5, 0x0, 0x3, 0x1, 0x1, 0x6, 0x6c3, 0x3, 0xb7fc, 0x7, 0x3, 0x2, 0x401, 0x1d, 0xffffffff, 0xfffffe00, 0x2, 0x4, 0x9, 0x28, 0x2, 0xff8000, 0x7, 0xfffffffa, 0x1, 0x7fff, 0x0, 0x19f, 0x0, 0x6, 0x8, 0x0, 0xc7, 0x6421334b, 0x5, 0xa, 0x9, 0x80000000, 0x7, 0x846, 0x0, 0x80, 0x40, 0x2, 0x400, 0x4, 0x7fff, 0x3, 0x1000, 0x9b, 0x400, 0x4, 0x7, 0x4, 0x3, 0x4f, 0x0, 0x1, 0x87b4, 0x4, 0xa6, 0x8b, 0x3, 0x10, 0x2, 0xffffffff, 0x4, 0xfff, 0x3c, 0xea7, 0xfffffbff, 0xff, 0x401, 0x5, 0x2, 0x7, 0xe, 0x0, 0x40, 0x9, 0xa1, 0x8, 0x51, 0x7, 0x9, 0x43, 0x10, 0xfff, 0xcf8, 0x6, 0x3, 0x2, 0x0, 0xf, 0x2, 0x71, 0xd, 0x6, 0x2, 0x7cf, 0xa, 0x6, 0x8, 0x7, 0x3, 0xb, 0xa, 0x0, 0x2, 0x4, 0x7, 0x3, 0xffffffff, 0x3, 0x6, 0x7, 0x81, 0x6, 0x1, 0x3, 0x82fc, 0x8000, 0x1, 0x10, 0x2, 0x1, 0xfffffff9, 0x7f, 0x0, 0x2, 0xc, 0x1, 0x1, 0x8]}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000001340)={0x2c, &(0x7f0000001100)={0x20, 0x30, 0xdc, {0xdc, 0x21, "a34273eaa2cf990351487822d533ed8fd913c285afaaaddf4b443c41e4cd897d75d9d2407444104ec786a73723b6a73a77e6958c63dbc3a8bcdc415320da918479f51fa109fb458777cdcae83059e4b707e9aa26814eeaaf072f82df1c1be64af222e71460a9af6632375c8884e70da9e4f14c60728aeb7bbb4cce44934aaa98eed3341993461828837b0ba207213eab0755358d76ef74b2646f80a67d0bd94ddd92effcb8dc69e23c7fbcc77515458b31d453448af5aeb5dabefd332c543c87b57b38d99819fb6df32d1301273eab8d20d804e6fffa1f8b93b8"}}, &(0x7f0000001200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}, &(0x7f0000001240)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xa8, "ce98c2d989a2caf4c046d4ce3d5f2232"}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "96b3fa000acff45df24b161f7d2d0bb6"}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x5, 0xf, 0x6, [0xc0]}, @ptm_cap={0x3}]}}, &(0x7f00000012c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb4, 0x4, 0x1, 0x1, "63def500", "53fc82ff"}}, &(0x7f0000001300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x2, 0xb, 0x10, 0x6, 0x1, 0x71c9}}}, &(0x7f00000017c0)={0x84, &(0x7f0000001380)={0x40, 0x16, 0x54, "fcbf61cac6384eac63a2d057e91a93f5e32da084389179e6fef3dce651a9127689dbb69e1fac246373178593071a679305ee5a5e5e8011a4de22d597034eddb94ad86cb85b4c94cca6a24c8244f6f9f1766145ac"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001480)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000014c0)={0x20, 0x0, 0x8, {0x100, 0x2, [0xff0]}}, &(0x7f0000001500)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001580)={0x40, 0xb, 0x2, "1b22"}, &(0x7f00000015c0)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000001600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001680)={0x40, 0x19, 0x2, 'C*'}, &(0x7f00000016c0)={0x40, 0x1a, 0x2, 0xf582}, &(0x7f0000001700)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000001740)={0x40, 0x1e, 0x1, 0xa5}, &(0x7f0000001780)={0x40, 0x21, 0x1, 0x2}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xf4, &(0x7f0000001880)=@generic={0x2, 0x2, 0xec, "4195b7d1", "4055e3aeaa3e71dd0e461215805b8ffa8489712db3271de4768509c70323803856ea684249f1ea1a9e22d24aedd99b348a2f5e13c8d1aefa0b6830c52e5cd3ced985340ccd12d94abcef8f9f4fa0aed34baabef29b905add216547e12763e2c740ec74e0dae4ce26c88de7fd1b3021699be17497c0f0f07b4c87ea2ea13e085621db970ff396859088725a7786c82cb96c03215ec945c0d05b0386965a77f9e33a50864fbd92ac2935406b2362938fb1d922d9fd2497fd6e3d0c65d67017df4e702b8b3ea67bedc97647d8388743732faee9775314075417116802ad839c197abd94c4d35a062ece9a538a81"}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000001980)="b1eb71b8164a750b63bb7dfc14a796245fcab7aa0912e051cc0c4d0a0d7e1a516b5eda1ca4854a11a97949046da5f824f902353d64c44900659d2c26dc5464ac9f2ea74eb22aa280b34fde6cd69ec2c3557013eb622fe39a7825aeb943f4d23ea2b715832267c32a9d92c88ed9dee6c5ad8e783b20437db5260fe221dce148d0a5a12d5b5a95b3ccd6ccf59960b77df5a775cefffb820b1b1997a3d9ed7d75228b18ec14c63deb1a57d3a9e03fe1", 0xae) r3 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r3, &(0x7f0000001f00)={&(0x7f0000001a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/85, 0x55}, {&(0x7f0000001b40)=""/115, 0x73}, {&(0x7f0000001bc0)=""/237, 0xed}, {&(0x7f0000001cc0)=""/145, 0x91}, {&(0x7f0000001d80)=""/203, 0xcb}], 0x5}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001f40)={r4, 0x7fff, 0x1, 0xfd92}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002000)={'ip6_vti0\x00', &(0x7f0000001f80)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x5, 0x1, 0x62, @local, @remote, 0x10, 0x7800, 0x0, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=@bloom_filter={0x1e, 0x6, 0x7ff, 0x8, 0x400, r5, 0x1, '\x00', r6, r4, 0x0, 0x4, 0x3, 0x2, @void, @value, @void, @value}, 0x50) r7 = syz_usb_connect$cdc_ncm(0x3, 0x193, &(0x7f00000020c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x181, 0x2, 0x1, 0x5, 0xc0, 0xed, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "81d7"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x7f}, {0x6, 0x24, 0x1a, 0x3, 0xc}, [@mdlm_detail={0x49, 0x24, 0x13, 0xc, "27dfa71ba0f8ef086014bfdadfd2e6f197f4ba4e26a55181b9f73fb56344196caba8eaf96d6c35e47146216a7372ed18da3b4cb8878bcdbfbf72f0d2736a75c1f2e7668e46"}, @country_functional={0x10, 0x24, 0x7, 0x81, 0x8, [0xf038, 0xd, 0x2, 0x52, 0x401]}, @obex={0x5, 0x24, 0x15, 0xf}, @mdlm_detail={0x5, 0x24, 0x13, 0x53, "ce"}, @mdlm_detail={0x63, 0x24, 0x13, 0x7, "ac0224b36bc6acf7fdb6abd3598a80e0bce2180b0ab0a8d47b86c26a37fbcbceff83b9f9467481355b044cf469ef6870889dd9d3ab3cedea9589de320a9e5e60cea277672768110182b524fcd3c1fe41b496a67c5a426a8022afefa36db445"}, @mdlm_detail={0x5d, 0x24, 0x13, 0x0, "76ada93f2ff3fb98c9d11e6501b956ccef2a6ed602539edf4d16b6657c1ae28ea4aaddab2aa6a881abbcae354fd6b5d2c901c93a14d04f9087529b29ba06f49dc8d6b152ae65d2c6a5996251364eddc6e2c3633631f5bcb5c2"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xfe, 0x0, 0xda}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xe1, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe, 0x8, 0xc}}}}}}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002280)={0xa, 0x6, 0x110, 0xf4, 0x4, 0xf, 0x40, 0x9}, 0xf8, &(0x7f00000022c0)={0x5, 0xf, 0xf8, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x2, 0xf780, 0x5, [0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7f, 0x1, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0xe, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4e, 0xa7, 0x5, 0x1ff, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0xe, 0x10, 0x7c}, @generic={0xbd, 0x10, 0x1, "e9194d95581a33917c40e396cf534eabb7ff13ab728cdfcedab4ad11818521848feabead924b30c06fc39ceb0bd67c49f6ad1510cbf9a02037cb27111112dedb8abd05a2eb3fe26e79259e193e495bf98b51faabf42b43f58f729ff93d0d7e01c869131f30d4dddad92cf86e09c1a13438614ca2c8bb5a824d623f6214a0eb53ca773a3fc9b087697c25318b12c84cb42913fc68fc377fb25960ceeb95af81bd9d363a287e5a40583261276771fb8bb2a3cbee6e9af7e28a7081"}]}, 0x3, [{0xc1, &(0x7f00000023c0)=@string={0xc1, 0x3, "43cdb031829ce1f8b9e0ae08bf638dce5a272d7d65fa0beb789b207d9c7b4665f5b816fb47377b8c49df9df0fdc278556a71af185651289a5c52cf20d1940df6a59d23ae5cf8ec7093218914ee4384b5340938a9d4e8f444ed9870deab6c80a6fc1189c5b845d5dd151db87a8fd4e4bc537a4ca08066ea90a74c5f04df06ed92cf1a5f045fbc2111931fd335217753bb42c4dbfdb32ad4d029e4a4be0df6a3dff199c5d66eb088ba3e1b1426665b50ac964b0b869d5e09dd1230a495635c81"}}, {0xae, &(0x7f00000024c0)=@string={0xae, 0x3, "8b4124243397e9daf0604ff7edd52e18cdbfccda5536152896831ec61249bee5dc8b6324fd6ff6247df1438d4260af6545be30feb39f3d0c356899e8b2799b2ae7a7a469d97e1ddc98bd889b7441fd2cbcfef1fa536c4397464a49ad7fe68bc02a312bb21dd8c5515a28d1437bacc76f0bb8afbc02b1835c7962a9421082fa7f7b6dc07471b31d98686f00da07e5d8de0af8ae3672dc325fc9f3cdfb3e2f6cde5181836971f3fcbe3e7cd132"}}, {0x4, &(0x7f0000002580)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000002740)={0x14, &(0x7f0000002600)={0x20, 0xe, 0xd5, {0xd5, 0x7, "45227d397849352b81e40cfbcc9b429a006de5d54415f09c968ca45b117156ce5d664c6ac73a8d60454f96f0ad7149fa905695f2c825a7ec7cd43b8009b918e88eca4cd6cd8fa13ad9cac91bdcb9563ac5456a6310ec02722ed2789333bab8ffae48cf5bb342d4cd7ac09d9bb890d0b6a6198ce2961dbbfec18e0bcac38576930dd98ccb367b3e2a3b1ceadbe7ccb062ffeb27e05d3ead5e74ef3eb9376c86af7963d091752258129561a9fa88282768ab657638933defd7520119e301978a12f0143413abc3eb5e35f4b34ee8ee1564a3fee1"}}, &(0x7f0000002700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002980)={0x44, &(0x7f0000002780)={0x20, 0xc, 0x1, "f0"}, &(0x7f00000027c0)={0x0, 0xa, 0x1, 0xbd}, &(0x7f0000002800)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000002840)={0x20, 0x80, 0x1c, {0x6, 0x5, 0x7, 0x1, 0x6, 0x50, 0x40, 0x4, 0x0, 0xd926, 0x5, 0x9c4}}, &(0x7f0000002880)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000028c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002900)={0x20, 0x87, 0x2}, &(0x7f0000002940)={0x20, 0x89, 0x2}}) splice(r3, &(0x7f0000002a00)=0xf33, r2, &(0x7f0000002a40)=0x9, 0x7f000000000000, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000002b00)={0x1e, 0x66, &(0x7f0000002a80)="29f1d59597d501d1bd8ea44c491d5786f7386004b078f827f9411f24df208ed6138c4b661a5b9bb684807c1ab3b17f29bfc789c58f524048145dd310ae90dd368f937f3e211cbdceae681fe7961b00520952a12c1333e9d08567da0082e125871c6ffda946a7"}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000002b40)) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002bc0), r5) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x40, r9, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfb}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000002dc0)={0x14, &(0x7f0000002cc0)={0x40, 0x28, 0xa7, {0xa7, 0x10, "c4dc51113ef6e6a8d30c2c3bfcc6bbdfc27ad81ea7ca3265f2fdf1b97183410a257d75049f52d462525b88bc873e98effb8978aae6f2926b650279fc7b0ddc0f2650526cd8b8cc04fca5a90c2998fd3baa7c6a4eae841b63207f3a9b5d797ffe57c7f0036d2576f8d53006fa27eb074cbf3589e30e763d4a8c39b0ec393c9fd61e9e0ac0e17b7fb9f271000d655e9cab18de22b97912d9a6c919c019b4877b024f9ffbc838"}}, &(0x7f0000002d80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003080)={0x44, &(0x7f0000002e00)={0x40, 0x12, 0xac, "42c9d8d353fb3ff3084edb5891e00974a018dbaefe20c679b0d08f2031c88df3da8a6855b728c02864126d8cd9f87724554555c23c92c42e6ef96ef06cc2a86069d1845691a05b6ff0e6fcc236b0107e3f9418512a5e2d0e186d39f6cbc6bed54726ed757373263926ecff5f003b189a9405ee327c2e99e53ccdd6e820c3f46b82bc2194463b42d38ff0a19cbb88294067d3378b1f59252c7dd64aa438bd7c7df5cda24d49bddd5c38537ddb"}, &(0x7f0000002ec0)={0x0, 0xa, 0x1}, &(0x7f0000002f00)={0x0, 0x8, 0x1, 0xa9}, &(0x7f0000002f40)={0x20, 0x80, 0x1c, {0xb, 0xe, 0x4, 0xab, 0x3, 0x2, 0xb, 0x5, 0xfffb, 0x6, 0xa, 0x8}}, &(0x7f0000002f80)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000002fc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003000)={0x20, 0x87, 0x2, 0xfa8}, &(0x7f0000003040)={0x20, 0x89, 0x2}}) fstat(r2, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000003180)={0x401, 0xa31, {0xffffffffffffffff}, {0x0}, 0x4, 0x3}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000031c0)={0x40008, 0x80000000, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x8001}) setresuid(r10, r11, r13) syz_open_dev$evdev(&(0x7f0000003200), 0x2, 0x600080) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000003240)={0xa4, r5, 0x80000}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000032c0)={r12, r14, 0x0, 0x5, &(0x7f0000003280)='SEG6\x00'}, 0x30) r15 = shmget(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) shmat(r15, &(0x7f0000ff8000/0x4000)=nil, 0x4000) 1.858083706s ago: executing program 1 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) epoll_create1(0x0) close_range(r2, r1, 0x0) 1.760403731s ago: executing program 2 (id=185): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000009) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) 1.760133904s ago: executing program 1 (id=186): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x401, 0x0, 0x0, 0x10, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000001200", "2809e8dbe108598948224ad54afac108000000bdb22d0000b420a1a9992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.689954365s ago: executing program 2 (id=187): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) 1.689553588s ago: executing program 1 (id=188): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000500)={0x206, 0x7, 0x9, 0xb}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) add_key$user(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0}}, 0x120) (async) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000100)=0x10, 0x0) sendmsg$tipc(r3, &(0x7f00000004c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x1}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)="64ff977b1c9d5ac9498ebc01d0e854c8f168a5b6cab49dc90857e794522064926be09b8c1769c218d41ff475e772754fd00f6c2735af4be7c94da9a2a8df4cd07d446c333cef4e071617dca01da4a613fa926024796a2fe0db5fc0aa22a92e8fdfc7ef0388196e9d67dd8d4d4b2c4b4be1b6ad2a378eea493a47af58295ad6871d8708e0d69d7e77", 0x88}, {&(0x7f0000000240)="4540a297c613a7559dd76a305b5f88dac8963152b1e1da4189fb654eedb9452f1e041a6a78684eb861545402d1e1a0ba009d4f690583fe0b943ec6b1384fccab0ff6149844043c04ebc72a2d1e0a0c5c2d7d90fada8f870f2e52582607208231c320f0aba48d5a4502ecea7f0a62431f3b06ec687ea76bf62ee196e3662b2909dca14836472fe28c99a28b5bb1a299a845d82e194871af2016a613a40599823b8c322894b53efce14f391954c646aa512004700b7484dabf75484e0ce44c5cc50132a4aeafe441baeb87352afc4d204c57b9e79e4166855fbe9f4543cdf62776327084b62a2d", 0xe6}, {&(0x7f0000000340)="f7357dc56b828f4c4bf7ab975e22d9d6f3c4a2a314262345c70a5acef2c68b726c20f8f2e76e22c5cd1d83f2c014d819126a6d", 0x33}, {&(0x7f0000000380)="a80ab30b213a646e3f22c2e93b4d4b7ef69a9d9222d5ff4a39d181136b10ed9b7f30b0fa1d99b99aa3b36e4a0bb89dce3e9781567329501b78d81fadb1df1b", 0x3f}], 0x4, &(0x7f0000000400)="8b4d440be3706c37ea49f406cd9046178e380d4ef6b3f8f3e189afd1c7c3e352d16adb568ce4cb54a867ec63d480ee2e1ab70b6366ededd05efbc687aef7ab3f295d85e1bf27d8207c8ea3e3d7cb0edfc9bf08af9ddb97d43bc677202503f419910f52ba885915ab50c2424a15c56779892c12af7bbcd788e1ff738a0a221d400daf8faa0b3c29723d0f4b25ddbbc852d516220bc8bc4c9cba4d51e460f877bfc0467ba6ca4a0e863eac6bf0", 0xac, 0x20008894}, 0x880) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32, @ANYBLOB="180012800b000100697036746e6c00000800090000001300"], 0x40}}, 0x0) (async) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4000) ioctl$NBD_SET_SOCK(r5, 0xab00, r1) (async) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x1000001000104) ioctl$NBD_DO_IT(r0, 0xab03) 1.68937183s ago: executing program 2 (id=189): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfba, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x40}, 0x1, 0x4c00000000000000}, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @multicast1}, 0x313, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3, 0xa}) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0x477e, 0x4, 0x3, 0x4, 0xffffff82, 0x9]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x3c, 0x0, 0x0, 0x200}, {0x6, 0x8, 0x6}]}) 1.550339542s ago: executing program 2 (id=190): ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000004c0)={{0x3, 0x200, 0x8000, 0x2c1, 0xc0, 0x7}, 0x46, [0x8, 0x1, 0x200000, 0x1, 0x4, 0xffffffff, 0x10, 0x0, 0x2, 0x9, 0x6, 0x1, 0xffff, 0x7a4f, 0x1, 0xf556, 0x3, 0x4, 0x3000, 0xc1, 0x8e, 0xfffffff1, 0xcf4a, 0xebd8, 0x10, 0x7, 0x4, 0xff, 0x4f18, 0x0, 0x5, 0x7, 0x80000000, 0x3, 0xc, 0xac98, 0xfffffff3, 0x1ff, 0x2, 0xf0, 0x1, 0x8, 0x0, 0x10000000, 0x1, 0x9, 0x641, 0xfff, 0x81, 0x400, 0x4, 0x4236, 0x8, 0x8, 0x8001, 0x1ff, 0x149, 0x9f2, 0xac3, 0x5, 0x6, 0x7, 0x4, 0x4750, 0x2, 0x5, 0xfffff000, 0x4, 0x7, 0xffff0001, 0x3ff, 0xb, 0x13, 0x9, 0x9, 0x1, 0x4, 0x9, 0x5, 0x8, 0x7fffffff, 0x10, 0xc33, 0x9a8, 0xff, 0x7, 0x2, 0xf4a9, 0xffffffff, 0x101, 0x4, 0x40, 0x1000, 0x24ed, 0x3, 0xb4a, 0x4, 0x7f, 0x7, 0x7, 0x3, 0xc6, 0x2, 0x7, 0x5, 0x1, 0x1, 0x8, 0x2, 0x7, 0x4, 0x1, 0x2, 0x2, 0x8, 0x401, 0x1000, 0x800, 0x3, 0x7, 0x40, 0x7f, 0x10001, 0x9, 0x4, 0x2, 0x5, 0x3, 0x4, 0x645a9c57, 0x7, 0x3, 0x4ea192b0, 0x2, 0x8, 0x800, 0x3, 0x8, 0x826d, 0x400, 0x3ff, 0x2, 0xc, 0x72, 0x8, 0x40, 0x5, 0x6, 0x5, 0x7, 0x4, 0x5, 0x5, 0x6, 0x7, 0x401, 0x4, 0x10001, 0x4, 0x2, 0x7fff, 0xfffffff8, 0x1, 0x5, 0x6, 0xd0000000, 0x3, 0x6, 0x44d0, 0x0, 0x2, 0x7, 0xea, 0xa2a6, 0x1, 0x79, 0x6, 0x4, 0x3, 0x5, 0xe00, 0xb7, 0x7, 0x3, 0x31c, 0x8, 0x1, 0xee6e, 0x0, 0x4610, 0x7ff, 0x81, 0x10, 0x2f83, 0x8, 0x4, 0x1, 0x18000, 0x6, 0x1b1c, 0x1, 0x9, 0x7fff, 0x4, 0x8000, 0x0, 0x14d, 0x80000001, 0x401, 0x133, 0xffff, 0x0, 0xfffffff5, 0x4, 0x7fe00000, 0x80000000, 0xad, 0xd, 0x7, 0xfff, 0x1, 0x8b40, 0x6, 0x4, 0x3, 0x3, 0x8, 0x4, 0xe9, 0x6, 0x1f, 0x9, 0x0, 0x8, 0x6, 0xfffffff7, 0x8, 0x0, 0xc, 0xc, 0x3, 0x7ff, 0x0, 0x8, 0x1, 0x1, 0x0, 0xff, 0x4, 0x2, 0x2, 0x10001, 0xf1e8, 0x4000000, 0x8, 0x7, 0x2, 0x8, 0x7ef, 0xcf, 0x6, 0x1, 0x1, 0x9, 0xfffffffd, 0x4, 0xc544, 0xfffffff9, 0x2, 0x9, 0x3ff, 0x84, 0x8, 0x3, 0x0, 0x1ff, 0x8, 0x10, 0x6, 0xff, 0x0, 0x7, 0x6, 0x80000000, 0x7fff, 0x682dc1db, 0x4, 0x975, 0x8, 0xfffffcf5, 0x0, 0xf8d2, 0x3f41, 0x200, 0x1a7, 0x4, 0xd, 0x0, 0x4, 0xe48, 0x3, 0x3, 0x1, 0xd, 0x2, 0x3, 0x7, 0x9, 0x3, 0xbf, 0xfde5, 0x1, 0xa, 0x38, 0xfffffffb, 0x6, 0xec0, 0x775483bf, 0x8, 0x6, 0x2, 0x9, 0xeeb, 0x7, 0x40, 0x4, 0x8, 0x6, 0x2, 0x9, 0xe9b3, 0x1, 0x80000000, 0x9, 0xa6, 0x2, 0x6, 0x1000, 0xfffffffb, 0x6, 0x3ff, 0x2, 0x2, 0x7, 0x8001, 0xffffffff, 0x89, 0x23c5, 0x2, 0xffffffff, 0x8, 0x5, 0x9, 0x9, 0x7, 0xf75f, 0xe, 0x401, 0x401, 0x6, 0x400, 0x6, 0x7, 0x3, 0x6, 0x4, 0x2, 0x4d8a, 0xfffffffd, 0x80, 0x80000000, 0x6, 0x2, 0x8, 0x4de, 0x5, 0x1, 0x3c72, 0x1, 0x2b673a9c, 0x7, 0x1, 0x2, 0x9, 0x2, 0x4, 0xffffffff, 0x7fff, 0x2, 0x1, 0x73, 0x62a47138, 0x490, 0x6, 0x7a2b, 0x6, 0x4, 0x5, 0x2, 0x8, 0xfff, 0x7, 0x100, 0x1, 0x6, 0x80000001, 0x796, 0x4d9e, 0xfff, 0x1f8, 0x5, 0xf, 0x7, 0x1, 0xf, 0xc, 0x3, 0x6, 0x9, 0xf, 0x7, 0x9, 0x2, 0x8001, 0x1, 0x9, 0xfffffffc, 0x2, 0x3ff, 0x4, 0x3, 0x7, 0x81, 0x8, 0x2, 0x1ff, 0x67, 0x1, 0x5, 0xfff, 0x3f40a007, 0x2, 0x8, 0x8, 0x5, 0x8, 0xe, 0x1, 0xfff, 0x392, 0x1, 0x2, 0xfffffffd, 0xef2, 0x0, 0x0, 0x2, 0x6, 0xbd, 0x0, 0x3, 0x6, 0x8, 0x8, 0xaac, 0x4, 0x5, 0x0, 0x2, 0xff, 0xff, 0x4, 0xd, 0x1, 0x0, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x400, 0x4, 0x5, 0x9, 0x10001, 0x6, 0x2, 0x0, 0x4267fe86, 0x40, 0x7ff, 0x3, 0x9, 0x0, 0x2cb8, 0xfffffff9, 0x7, 0x4, 0x3, 0xf0c4, 0xfffffff9, 0x101, 0x1400, 0x3, 0x5, 0x6, 0x24, 0x3f1d, 0x2, 0x6, 0x7, 0x9, 0x8, 0x4, 0x73, 0x3, 0x3, 0xc, 0x0, 0x80000001, 0x5, 0xd0, 0xfff, 0x3ff, 0x8, 0x7fff, 0x7, 0x8001, 0x438, 0x6, 0x3, 0x6, 0x2, 0x8, 0x77, 0x7f, 0x1, 0xa, 0x86, 0x6, 0x5, 0x8b, 0x12, 0x3, 0x3, 0x800, 0x10, 0x400, 0xb, 0x158, 0x8, 0xffffffff, 0x8001, 0xffffffda, 0x6, 0x8, 0x100, 0x2, 0x1, 0xe, 0x4, 0x6, 0xd, 0xb8, 0xda85, 0x0, 0x878, 0x10, 0x5, 0x8000, 0xfffffe00, 0x62, 0xfffffffc, 0x2, 0x4, 0x8, 0x40, 0x0, 0x1, 0xca, 0x9, 0x3, 0x1, 0xa747, 0x9, 0xc483, 0x1, 0x8001, 0x1ffc5b0f, 0x8, 0x7, 0x4, 0x5, 0x5, 0x1, 0x6, 0x0, 0xfffffffc, 0x8, 0x0, 0x10, 0x4, 0x400, 0x101, 0x972, 0x22, 0x4, 0x2, 0xd, 0x3, 0x1, 0x200, 0xfff, 0xd43e, 0x2, 0x1fe8, 0x9, 0xc, 0x5, 0x101, 0x5, 0x100, 0x0, 0xfffffff7, 0x0, 0x0, 0xffff, 0x8e, 0x3, 0x3, 0x6, 0x2, 0x7, 0x7, 0xffffff7f, 0x7, 0x2, 0x9, 0x7, 0x1, 0x7, 0x1, 0x9, 0x9, 0x7, 0x2, 0x8, 0x101, 0x6, 0xfffffffe, 0x4, 0x9, 0x8, 0x7f, 0xb824, 0x9, 0x6, 0x3d2e, 0x4, 0x2, 0x5, 0x260, 0x3ff, 0xb, 0x4, 0x5, 0x9, 0x8, 0x2, 0x7, 0xc, 0x6, 0xffffffff, 0xcac, 0x1, 0x1, 0x7, 0x0, 0x7, 0x81, 0xffffffff, 0x4, 0x3ff, 0x80000000, 0x8, 0x80, 0x4, 0x9, 0xfffffffd, 0x401, 0x5, 0x7f, 0x5, 0x5, 0x400, 0x7, 0x2, 0x100, 0xff, 0x2, 0xd, 0x0, 0x10000, 0x3, 0x0, 0x7fff, 0x5, 0x9, 0x7, 0x1, 0x2, 0x8, 0x200, 0xf3d60, 0x4, 0x75b91d68, 0x0, 0x2, 0x6, 0x7fffffff, 0x1ff, 0x2, 0xac40, 0x1, 0x9, 0x1, 0x6, 0x9, 0x6, 0x1, 0x5, 0xd5000000, 0x1000, 0x7, 0x80, 0x1, 0x2, 0x80000000, 0x80000000, 0x6, 0x80, 0xc94, 0x3, 0x9, 0x1, 0xf5c, 0x8, 0x5, 0x5, 0x1000, 0x5, 0x80, 0x10, 0x4, 0xc, 0x5, 0x80, 0xffffffff, 0x1, 0x5, 0x6, 0x3, 0x0, 0x4, 0x2, 0xf2d, 0x81, 0x7dae, 0xb, 0x10001, 0xf2, 0x6, 0x1, 0xbd, 0xfff, 0xfffffffa, 0x2, 0x836, 0x5, 0x2, 0x7f, 0x3, 0xa, 0xc, 0x3, 0x1, 0x9a, 0x9, 0xfffffffa, 0x9, 0x7fffffff, 0x8, 0x3, 0xffffffff, 0x3, 0x29c516df, 0x4, 0x80000000, 0x3, 0xf579, 0x400, 0x1ff, 0x1, 0x6, 0x1, 0x5, 0x2, 0x4722aeb8, 0x9, 0x94, 0x3, 0x1b9c, 0x5, 0x1, 0x80000000, 0x5, 0x0, 0x6, 0x1, 0xa, 0xfff, 0x1000, 0x1000, 0x8, 0x2, 0x9, 0x1, 0x4, 0x9, 0xa91f, 0x7, 0x1, 0x200, 0x4, 0x8, 0x2, 0x0, 0x9, 0x3, 0x9, 0x0, 0x0, 0x6, 0x6, 0xf05b, 0x400, 0x9bb, 0x100, 0x7, 0xfffff800, 0x3, 0xffffffff, 0x3, 0x4e, 0x77, 0x6, 0x8001, 0x7, 0x1, 0xa, 0x16, 0xfffffff9, 0x7, 0x7, 0x2, 0x7, 0x2, 0x91c, 0x8000, 0xe79d, 0xfffffff9, 0x101, 0x800000, 0x5, 0x8, 0x0, 0x3a, 0x1, 0x4, 0x8a, 0xff48, 0x7, 0x8, 0x8, 0x7, 0xffff, 0x0, 0x5, 0x3, 0xb09a, 0x7, 0x2, 0x7, 0x18000000, 0x0, 0x3, 0x55a9, 0x9, 0x2, 0x4, 0x3bc901b4, 0xd2, 0x7f, 0x2, 0x0, 0x7, 0x6b93, 0x40, 0x0, 0x8, 0x7, 0x5, 0x1, 0x3, 0x0, 0x4104cd62, 0x4, 0xfff, 0x1, 0x1, 0xdfde, 0x7ff, 0xc5d0, 0x4, 0x4, 0x3, 0x7, 0xfffffffb, 0xb747, 0x5, 0xa, 0x9, 0x1e, 0x6, 0xf, 0xfffffffd, 0x1, 0x4000000, 0x3e, 0xdfa, 0x5, 0x3, 0xfff, 0x8, 0x0, 0x2, 0xb245, 0x4, 0x9, 0x10000, 0x4, 0xffff356f, 0x8001, 0x9, 0x5811, 0xfffffff7, 0x101, 0xf, 0x7, 0x9, 0xa, 0xfffffff7, 0xfffffff9, 0x10, 0x7fff, 0x2, 0x3, 0xf, 0x0, 0x6, 0x10001, 0x3, 0x200, 0x8, 0x2, 0x3720, 0x3ff, 0x3, 0x4, 0x5, 0x5, 0x7, 0xb8, 0x7fff, 0x2, 0x1, 0x7, 0xfffffd8a, 0x6, 0xe, 0x2, 0x7, 0x3, 0x100, 0x4, 0xffff0c01, 0x1, 0xf9, 0x8, 0x5, 0x7, 0x695, 0x5, 0x1, 0x8, 0x1, 0x7f, 0x9dd, 0x8, 0x8, 0x8, 0xba, 0x6, 0x30000000, 0x7, 0x2, 0x1ff, 0x6, 0x2, 0x6, 0x3, 0x3, 0x5, 0xdc]}) poll(0x0, 0x0, 0x7) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x3) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "67f01a05647aca00"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2800a000}, 0x8010) r4 = shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r4) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xffffffee, 0x0, 0x0, 0x2000000, 0xf, "1241b72d7fffff5b000f000000462200"}) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r6 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/85}, 0x20) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 857.14788ms ago: executing program 1 (id=193): socket$inet6_udp(0xa, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000000)="1cd0", 0x2}, {&(0x7f0000000240)="6a83d2337001abf3341b7007a21e5da16562e582cc059b4a5d32767d052fdc05b116df3b9d722876de589c79cb9bf3db2ea0636b26817be4fc90c2b347409fad21e36ae95c2111cfab41b73eb25ea6127ce3018260d32abdaa28e79f13303f50184941025e8301dd4b84b2416be205d41b649f14a8da7d92407856e63ff5200c1ef13506ff915367e058f55d67ed6af7604edecf1cd44cf01091df0b00b821780e52a338aad3b1e556764716648c9af9e17b8ac09471d466af473ce9778d9f0bf4af9fa5fbe407b3e03af4cbfe1c99fcaca8b9c3a323385844c27d682587c9301f105853603a1eff9e38e3273ff82fa3", 0xf0}, {&(0x7f00000000c0)="6d45bace3c42b28e2220a6e20c07a32dc882ec45c03a737c76d7aa8fb77006e7084341ab3dcc2406", 0x28}, {&(0x7f0000000340)}, {&(0x7f0000000400)="4c2da9a4a56d39a51260f7a9fd79506c095802590cb3d4d133eed7842498524eb20e29d99436834c364aa228b25183af5bd14036405781fc602bb7202460fb44c0e7c20f899cf5b2c712561bfbf31d0b95562368b0a98097adf045f853f03de5b7170ab11ff1301e6a5b5da8edc56eafd7c6847f84fd8f569792806abaf4c0ca4abbe384d0c6a9570decbb85b27f4b76c00cf22ae81983c7a7eb26e83486624171961a208841322e90203716a471134c148b8c71c7dc7ea67598e6def187b84603461f69ea9443d37025b8896a3b10882ad5ca38acac750aec6749d0e4c3a143df32674e4cf3226453067f09b5dbcb49c462451b29d2", 0xf6}, {&(0x7f0000000100)}, {&(0x7f0000000540)="0ce8c63303e3fb7e871f410ab79bdbf25da8350dd497b15ce610503f7a2dc496bea553cdfe49d159404ca9f5dd51df0c8a242aa5b692671e37fb24ee43969980f7ce25d09f6b6220424010a2756f7e5a59cf33ac2a175e0a25ed298faca88de0db8f64f172449e5f5127371fa2a29fe49d4fd445999751ff7c1d0eca1a1703166b91e9a7071c8802e8aa855987b6a3d8", 0x90}, {&(0x7f0000000600)="dfc9e8f4c6ac0fbed9fb6cf7e4f3f83a1ab203bf814c09bf66d4ae8f54b0b672a702ab0996965febc1e501261f1ee8", 0x2f}, {&(0x7f0000000640)="e1b0930a9072a2c3a359b87b81ecec6ef758f66f9649c8210afa4174f3d1f116f8b7bf0b9fef82b202cf90b63e7b44b5fd9dd7328f94d8179877801a55fc23bbc5227f7b71a52442a94e2142b8a1b020f7518a937e8ab5ab61ca7990bc5c2c7f70ca9235fd2189e7e6a761b685a089a58ae27d3b05f38e917b1d5fb7c218e1a9197d87b1509a8771d2", 0x89}], 0x9, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSRS485(r3, 0x8925, 0x0) close(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x1, 0xfffffffffffffff7}}, 0x513300) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 220.224971ms ago: executing program 0 (id=201): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffeab) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) dup3(r3, r3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x7c, 0x7, 0x51, @remote, @private0={0xfc, 0x0, '\x00', 0x5}, 0x8000, 0x10, 0x1c0, 0x14aebdcf}}) 219.048162ms ago: executing program 0 (id=202): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0xc0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8918, &(0x7f0000000000)={'bond0\x00', @ifru_map={0x26d6, 0x7, 0x8, 0x5, 0xfe}}) close_range(r2, r1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000004c0)={0x1, @raw_data="a425e2f1a54d24f14258313560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) ioctl$sock_netdev_private(r2, 0x89f2, &(0x7f0000000000)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xbc, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}, @nested={0x8e, 0x2, 0x0, 0x1, [@generic="367ebe419b3317db735a18c4e7b8b659f464aa980ea7d3701a52413ed5af73cd580b0068cb8aaa13b725beeb3c13182258e616a4de430f75d81a56c0591191a2e68cc33d92603c962ba73ea6d66160f928dcc4880c92070aa3c8a3201e98597eb9b6ce8d1c6b7303ddee4b4a86208c9cfe00b19b55fad39238bfdfa5afc0b9b8acf3355b3cdb2e3a989a"]}]}, 0xbc}}, 0xc000) 140.588557ms ago: executing program 0 (id=203): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="867909a8a4c2c0788a1081bbe1e96a2d670979284cf8c9171242cd66bd526849a4dfd82242b064201cf5b8157b8e9649175d5916bfe856fb69aa24189bb3629e57aa3f4c7ad8eb300176f710916583b83a84c8aea2958f36e3eab2665ef10e15ae70b4474bcc6be36298f1b952edb98f7f770870c22935078895a99bd895d54f494d6acc3ded21eeb9c8d8a8749744fc3dc0", 0x1e}], 0x1}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/35, 0x23}], 0x1}, 0x100) 140.373511ms ago: executing program 0 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000a00)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000318000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000327000/0x3000)=nil, 0x3000, 0x8, 0x12, r2, 0x5806f000) 50.187677ms ago: executing program 2 (id=205): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x11) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000810) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0xa}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x17}}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x4010) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088}, 0x4000881) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) fcntl$getownex(r4, 0x10, &(0x7f0000000900)={0x0, 0x0}) syz_pidfd_open(r9, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000980), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x88, r10, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x4004) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x8040ae9f, &(0x7f0000000b00)=@arm64) syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r4) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x58, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000cc0)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000e00)={&(0x7f0000000b80), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x84, r12, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0xd4) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r15, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x4040844) ioctl$KVM_GET_DEBUGREGS(r11, 0x8080aea1, &(0x7f0000000f40)) 49.768036ms ago: executing program 0 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_complete(0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}}, 0xc015) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003404000100e140010"], 0x80}}, 0x0) 331.683µs ago: executing program 2 (id=207): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x401, 0x0, 0x0, 0x10, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000005500", "2809e8dbe108598948224ad54afac108000000bdb22d0000b420a1a9992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 0s ago: executing program 0 (id=208): socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = io_uring_setup(0x553c, &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x15, 0x0, 0x1) keyctl$setperm(0x5, r0, 0x423260d) keyctl$invalidate(0x15, r0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000100)=[r4], &(0x7f0000000180)=[0x45a], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f0000000280)={&(0x7f00000003c0)=[r4, r4, r4, r4], &(0x7f0000000240)=[0x932], 0x1, 0x3fffffffffffffb9, 0x7}) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000000909020073797a32000000000900010073797a3000000000200004801c0001800b00010065787468647200000c0002800800064000000001140000001100010000000000000000000000000a"], 0x74}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f92524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 38.240785][ T39] audit: type=1400 audit(1737462986.374:81): avc: denied { rlimitinh } for pid=5923 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.246417][ T39] audit: type=1400 audit(1737462986.374:82): avc: denied { siginh } for pid=5923 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.987045][ T39] audit: type=1400 audit(1737462987.134:83): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.993413][ T39] audit: type=1400 audit(1737462987.134:84): avc: denied { append } for pid=5334 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.999509][ T39] audit: type=1400 audit(1737462987.134:85): avc: denied { open } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.005609][ T39] audit: type=1400 audit(1737462987.134:86): avc: denied { getattr } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:57789' (ED25519) to the list of known hosts. [ 39.909577][ T39] audit: type=1400 audit(1737462988.054:87): avc: denied { name_bind } for pid=5928 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.490620][ T5930] cgroup: Unknown subsys name 'net' [ 41.593972][ T5930] cgroup: Unknown subsys name 'cpuset' [ 41.597190][ T5930] cgroup: Unknown subsys name 'rlimit' [ 41.780763][ T5935] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.374517][ T5930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.653634][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 44.653644][ T39] audit: type=1400 audit(1737462992.804:105): avc: denied { execmem } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.816845][ T39] audit: type=1400 audit(1737462992.964:106): avc: denied { create } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.826380][ T39] audit: type=1400 audit(1737462992.964:107): avc: denied { read write } for pid=5941 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.834493][ T39] audit: type=1400 audit(1737462992.964:108): avc: denied { open } for pid=5941 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.841715][ T39] audit: type=1400 audit(1737462992.974:109): avc: denied { ioctl } for pid=5941 comm="syz-executor" path="socket:[6425]" dev="sockfs" ino=6425 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.844777][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.862121][ T5957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.864488][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.866848][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.869318][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.872606][ T5957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.874834][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.877008][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.879959][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.882334][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.885141][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.887515][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.889790][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.894466][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.900979][ T39] audit: type=1400 audit(1737462993.044:110): avc: denied { read } for pid=5944 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.901427][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.909630][ T39] audit: type=1400 audit(1737462993.044:111): avc: denied { open } for pid=5944 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.912028][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.914877][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.915081][ T5960] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.915184][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.915985][ T5289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.916553][ T39] audit: type=1400 audit(1737462993.044:112): avc: denied { mounton } for pid=5944 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.917921][ T5289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.918028][ T5289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.923398][ T5289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.939207][ T5289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.989550][ T39] audit: type=1400 audit(1737462993.134:113): avc: denied { module_request } for pid=5944 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.009817][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 45.117764][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 45.149950][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.152835][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.154982][ T5944] bridge_slave_0: entered allmulticast mode [ 45.157163][ T5944] bridge_slave_0: entered promiscuous mode [ 45.161104][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.163402][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.165422][ T5944] bridge_slave_1: entered allmulticast mode [ 45.167512][ T5944] bridge_slave_1: entered promiscuous mode [ 45.193165][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 45.219246][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.222970][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.293018][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.295895][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.298723][ T5947] bridge_slave_0: entered allmulticast mode [ 45.302093][ T5947] bridge_slave_0: entered promiscuous mode [ 45.319697][ T5944] team0: Port device team_slave_0 added [ 45.324223][ T5944] team0: Port device team_slave_1 added [ 45.325977][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 45.330729][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.332824][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.334832][ T5947] bridge_slave_1: entered allmulticast mode [ 45.336914][ T5947] bridge_slave_1: entered promiscuous mode [ 45.415729][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.417696][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.425085][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.429645][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.434765][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.437530][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.439706][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.442003][ T5948] bridge_slave_0: entered allmulticast mode [ 45.444108][ T5948] bridge_slave_0: entered promiscuous mode [ 45.451106][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.453061][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.460183][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.496445][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.498571][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.500788][ T5948] bridge_slave_1: entered allmulticast mode [ 45.503203][ T5948] bridge_slave_1: entered promiscuous mode [ 45.544077][ T5947] team0: Port device team_slave_0 added [ 45.546042][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.548401][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.550375][ T5941] bridge_slave_0: entered allmulticast mode [ 45.552612][ T5941] bridge_slave_0: entered promiscuous mode [ 45.572595][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.576528][ T5947] team0: Port device team_slave_1 added [ 45.578351][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.581172][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.583217][ T5941] bridge_slave_1: entered allmulticast mode [ 45.585762][ T5941] bridge_slave_1: entered promiscuous mode [ 45.590457][ T5944] hsr_slave_0: entered promiscuous mode [ 45.592628][ T5944] hsr_slave_1: entered promiscuous mode [ 45.596558][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.659701][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.663714][ T5948] team0: Port device team_slave_0 added [ 45.665732][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.667748][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.675063][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.682131][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.685381][ T5948] team0: Port device team_slave_1 added [ 45.687263][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.689499][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.697406][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.773386][ T5941] team0: Port device team_slave_0 added [ 45.776250][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.778875][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.788205][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.796629][ T5947] hsr_slave_0: entered promiscuous mode [ 45.799311][ T5947] hsr_slave_1: entered promiscuous mode [ 45.801944][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.804855][ T5947] Cannot create hsr debugfs directory [ 45.810334][ T5941] team0: Port device team_slave_1 added [ 45.814044][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.816092][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.823546][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.848267][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.850224][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.858925][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.877083][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.879044][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.886278][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.933743][ T5948] hsr_slave_0: entered promiscuous mode [ 45.935761][ T5948] hsr_slave_1: entered promiscuous mode [ 45.937653][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.940126][ T5948] Cannot create hsr debugfs directory [ 45.977135][ T5941] hsr_slave_0: entered promiscuous mode [ 45.979163][ T5941] hsr_slave_1: entered promiscuous mode [ 45.981325][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.983469][ T5941] Cannot create hsr debugfs directory [ 46.107283][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.113328][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.117049][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.128113][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.159818][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.164448][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.169470][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.179496][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.208418][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.213843][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.217428][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.220549][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.241935][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.247298][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.251673][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.256104][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.286518][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.313045][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.321456][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.323495][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.326921][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.335355][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.337347][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.355520][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.360558][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.371781][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.373860][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.382231][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.384243][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.388445][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.395272][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.403113][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.411680][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.413723][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.422668][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.424703][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.425769][ T39] audit: type=1400 audit(1737462994.574:114): avc: denied { sys_module } for pid=5944 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.433450][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.446260][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.448324][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.451393][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.453584][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.493232][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.509743][ T5944] veth0_vlan: entered promiscuous mode [ 46.518731][ T5944] veth1_vlan: entered promiscuous mode [ 46.532323][ T5944] veth0_macvtap: entered promiscuous mode [ 46.537669][ T5944] veth1_macvtap: entered promiscuous mode [ 46.553229][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.557977][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.567682][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.580590][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.584331][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.587737][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.591654][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.608722][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.620765][ T5948] veth0_vlan: entered promiscuous mode [ 46.625168][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.636195][ T5948] veth1_vlan: entered promiscuous mode [ 46.652772][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.655108][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.679696][ T5948] veth0_macvtap: entered promiscuous mode [ 46.679750][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.683632][ T5941] veth0_vlan: entered promiscuous mode [ 46.685155][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.693735][ T5948] veth1_macvtap: entered promiscuous mode [ 46.698365][ T5947] veth0_vlan: entered promiscuous mode [ 46.702642][ T5941] veth1_vlan: entered promiscuous mode [ 46.711985][ T5947] veth1_vlan: entered promiscuous mode [ 46.718213][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.722426][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.727183][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.727523][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.736313][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.739323][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.743022][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.748671][ T5948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.751477][ T5948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.754637][ T5948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.757900][ T5948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.774086][ T5941] veth0_macvtap: entered promiscuous mode [ 46.778403][ T5941] veth1_macvtap: entered promiscuous mode [ 46.798682][ T5947] veth0_macvtap: entered promiscuous mode [ 46.801730][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.804739][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.807592][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.810586][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.815132][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.827847][ T5947] veth1_macvtap: entered promiscuous mode [ 46.833426][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.836310][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.838972][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.842092][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.845560][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.859740][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.862463][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.864975][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.867486][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.871206][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.874197][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.876920][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.879790][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.883291][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.886199][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.889357][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.898209][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.901390][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.905214][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.909244][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.913322][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.917353][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.921898][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.933074][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.933441][ T5947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.935339][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.938743][ T5947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.944698][ T5947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.948078][ T5947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.961983][ T5953] Bluetooth: hci2: command tx timeout [ 46.961988][ T5289] Bluetooth: hci0: command tx timeout [ 46.963886][ T65] Bluetooth: hci3: command tx timeout [ 46.971142][ T65] Bluetooth: hci1: command tx timeout [ 46.978501][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.980879][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.011942][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.017093][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.039633][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.042199][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.059571][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.062415][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.078305][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.080612][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.109430][ T6015] loop2: detected capacity change from 0 to 2 [ 47.115191][ T6015] Dev loop2: unable to read RDB block 2 [ 47.116950][ T6015] loop2: AHDI p4 [ 47.118015][ T6015] loop2: partition table partially beyond EOD, truncated [ 47.254494][ T6030] syz.1.7: attempt to access beyond end of device [ 47.254494][ T6030] loop1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 47.258139][ T6030] qnx6: unable to read the first superblock [ 47.260464][ T6030] syz.1.7: attempt to access beyond end of device [ 47.260464][ T6030] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 47.264249][ T6030] qnx6: unable to read the first superblock [ 47.265970][ T6030] qnx6: unable to read the first superblock [ 47.291084][ T6036] fuse: Unknown parameter 'g[ө߉r00000000000000000000' [ 47.320544][ T6041] kAFS: unparsable volume name [ 47.413718][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 47.538075][ T6045] blackhole_netdev_xmit(): Dropping skb. [ 47.540211][ T6045] blackhole_netdev_xmit(): Dropping skb. [ 47.542582][ T6045] blackhole_netdev_xmit(): Dropping skb. [ 47.544617][ T6045] blackhole_netdev_xmit(): Dropping skb. [ 47.546397][ T6045] blackhole_netdev_xmit(): Dropping skb. [ 47.548280][ T6045] blackhole_netdev_xmit(): Dropping skb. [ 47.550659][ T6045] blackhole_netdev_xmit(): Dropping skb. [ 47.554080][ T6045] blackhole_netdev_xmit(): Dropping skb. [ 47.556349][ T6045] blackhole_netdev_xmit(): Dropping skb. [ 47.558716][ T6045] blackhole_netdev_xmit(): Dropping skb. [ 47.581734][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 47.586367][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.590278][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.594231][ T30] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 47.597420][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.605852][ T30] usb 7-1: config 0 descriptor?? [ 47.942519][ T6061] bond0: entered promiscuous mode [ 47.944050][ T6061] bond_slave_0: entered promiscuous mode [ 47.945658][ T6061] bond_slave_1: entered promiscuous mode [ 47.948001][ T6061] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 47.951214][ T6061] bond0: left promiscuous mode [ 47.952973][ T6061] bond_slave_0: left promiscuous mode [ 47.954706][ T6061] bond_slave_1: left promiscuous mode [ 48.017722][ T30] elan 0003:04F3:0755.0002: failed to start in urb: -90 [ 48.021634][ T30] elan 0003:04F3:0755.0002: hidraw1: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 48.089222][ T6066] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 48.094320][ T6066] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 48.132168][ T6070] tty tty22: ldisc open failed (-12), clearing slot 21 [ 48.189068][ T6080] tmpfs: Unknown parameter 'm' [ 48.273617][ T833] usb 7-1: USB disconnect, device number 2 [ 48.380741][ T6099] delete_channel: no stack [ 48.410278][ T6105] loop2: detected capacity change from 0 to 2 [ 48.414232][ T6105] Dev loop2: unable to read RDB block 2 [ 48.415906][ T6105] loop2: AHDI p4 [ 48.417225][ T6105] loop2: partition table partially beyond EOD, truncated [ 48.474030][ T6022] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.478450][ T6022] process 'syz.2.6' launched '/dev/fd/11' with NULL argv: empty string added [ 48.491091][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.651800][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 48.654643][ T35] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 48.657042][ T35] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 48.659594][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 48.662356][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.665107][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 48.667883][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.671719][ T35] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 48.674296][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.678003][ T35] usb 5-1: config 0 descriptor?? [ 48.810988][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 48.884440][ T35] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 48.941273][ T30] usb 6-1: device descriptor read/64, error -71 [ 49.041102][ T65] Bluetooth: hci0: command tx timeout [ 49.041198][ T5289] Bluetooth: hci3: command tx timeout [ 49.041284][ T5953] Bluetooth: hci2: command tx timeout [ 49.051143][ T5289] Bluetooth: hci1: command tx timeout [ 49.140744][ C3] usblp0: nonzero read bulk status received: -71 [ 49.144129][ T72] usb 5-1: USB disconnect, device number 2 [ 49.149268][ T6088] usblp0: error -71 reading from printer [ 49.152057][ T72] usblp0: removed [ 49.190975][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.206043][ T6139] loop2: detected capacity change from 0 to 2 [ 49.208723][ T6139] Dev loop2: unable to read RDB block 2 [ 49.210340][ T6139] loop2: AHDI p4 [ 49.212718][ T6139] loop2: partition table partially beyond EOD, truncated [ 49.321063][ T30] usb 6-1: device descriptor read/64, error -71 [ 49.441221][ T30] usb usb6-port1: attempt power cycle [ 49.681469][ T5990] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 49.687794][ T39] kauditd_printk_skb: 120 callbacks suppressed [ 49.687808][ T39] audit: type=1400 audit(1737462997.834:235): avc: denied { read write } for pid=6168 comm="syz.0.37" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.699516][ T39] audit: type=1400 audit(1737462997.834:236): avc: denied { open } for pid=6168 comm="syz.0.37" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.716816][ T6174] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 49.719656][ T6174] hsr0: entered allmulticast mode [ 49.721884][ T6174] hsr_slave_0: entered allmulticast mode [ 49.723949][ T6174] hsr_slave_1: entered allmulticast mode [ 49.727805][ T6174] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.734641][ T6175] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 49.778214][ T39] audit: type=1400 audit(1737462997.924:237): avc: denied { getopt } for pid=6178 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.802064][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 49.821590][ T30] usb 6-1: device descriptor read/8, error -71 [ 49.831124][ T5990] usb 7-1: Using ep0 maxpacket: 32 [ 49.834631][ T5990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.838822][ T5990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.842795][ T5990] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 49.846322][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.850965][ T5990] usb 7-1: config 0 descriptor?? [ 49.887485][ T6183] loop2: detected capacity change from 0 to 2 [ 49.889655][ T6183] Dev loop2: unable to read RDB block 2 [ 49.892471][ T6183] loop2: AHDI p4 [ 49.893588][ T6183] loop2: partition table partially beyond EOD, truncated [ 49.937997][ T39] audit: type=1400 audit(1737462998.084:238): avc: denied { create } for pid=6184 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.938951][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 49.943865][ T39] audit: type=1400 audit(1737462998.084:239): avc: denied { write } for pid=6184 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.943884][ T39] audit: type=1400 audit(1737462998.084:240): avc: denied { nlmsg_write } for pid=6184 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.948914][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 49.962964][ T6185] Zero length message leads to an empty skb [ 50.005564][ T39] audit: type=1400 audit(1737462998.154:241): avc: denied { mount } for pid=6186 comm="syz.0.43" name="/" dev="overlay" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.009759][ T6187] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 50.061052][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 50.064305][ T39] audit: type=1400 audit(1737462998.214:242): avc: denied { bind } for pid=6188 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.083094][ T30] usb 6-1: device descriptor read/8, error -71 [ 50.179855][ T39] audit: type=1400 audit(1737462998.324:243): avc: denied { read write } for pid=6192 comm="syz.0.45" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 50.187216][ T39] audit: type=1400 audit(1737462998.324:244): avc: denied { open } for pid=6192 comm="syz.0.45" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 50.194132][ T30] usb usb6-port1: unable to enumerate USB device [ 50.280027][ T5990] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 50.342295][ T6211] ip6t_srh: unknown srh match flags 4000 [ 50.393317][ T6217] loop2: detected capacity change from 0 to 2 [ 50.397301][ T6217] Dev loop2: unable to read RDB block 2 [ 50.398943][ T6217] loop2: AHDI p4 [ 50.400033][ T6217] loop2: partition table partially beyond EOD, truncated [ 50.450736][ T6228] netlink: 'syz.0.53': attribute type 3 has an invalid length. [ 50.455734][ T6228] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 50.458747][ T6228] netlink: 216 bytes leftover after parsing attributes in process `syz.0.53'. [ 50.462680][ T6228] NCSI netlink: No device for ifindex 33022 [ 50.465934][ T6228] syz.0.53: attempt to access beyond end of device [ 50.465934][ T6228] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 50.469755][ T6228] VFS: could not find a valid V7 on nbd0. [ 50.509708][ T6233] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 50.515264][ T6233] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 50.717782][ T6256] loop2: detected capacity change from 0 to 2 [ 50.719865][ T6256] Dev loop2: unable to read RDB block 2 [ 50.722768][ T6256] loop2: AHDI p4 [ 50.724055][ T6256] loop2: partition table partially beyond EOD, truncated [ 50.748583][ T6260] capability: warning: `syz.0.62' uses deprecated v2 capabilities in a way that may be insecure [ 50.754231][ T6260] overlayfs: missing 'lowerdir' [ 50.818087][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 51.122173][ T65] Bluetooth: hci3: command tx timeout [ 51.122239][ T5953] Bluetooth: hci2: command tx timeout [ 51.122754][ T5289] Bluetooth: hci1: command tx timeout [ 51.131092][ T5953] Bluetooth: hci0: command tx timeout [ 51.531961][ T6281] kvm: emulating exchange as write [ 51.759305][ T6300] loop2: detected capacity change from 0 to 2 [ 51.762121][ T6300] Dev loop2: unable to read RDB block 2 [ 51.763909][ T6300] loop2: AHDI p4 [ 51.765180][ T6300] loop2: partition table partially beyond EOD, truncated [ 51.981775][ T1456] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 52.131113][ T1456] usb 6-1: Using ep0 maxpacket: 8 [ 52.134564][ T1456] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.138192][ T1456] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 52.141399][ T1456] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 52.145230][ T1456] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 52.148407][ T1456] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 52.151252][ T1456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.156555][ T1456] hub 6-1:1.0: bad descriptor, ignoring hub [ 52.158944][ T1456] hub 6-1:1.0: probe with driver hub failed with error -5 [ 52.165740][ T1456] cdc_wdm 6-1:1.0: skipping garbage [ 52.167794][ T1456] cdc_wdm 6-1:1.0: skipping garbage [ 52.172041][ T1456] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 52.174115][ T1456] cdc_wdm 6-1:1.0: Unknown control protocol [ 52.200984][ T833] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.296751][ T6336] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.327220][ T6342] netlink: 'syz.2.78': attribute type 10 has an invalid length. [ 52.329468][ T6342] netlink: 2 bytes leftover after parsing attributes in process `syz.2.78'. [ 52.332715][ T6342] team0: entered promiscuous mode [ 52.334366][ T6342] team_slave_0: entered promiscuous mode [ 52.336095][ T6342] team_slave_1: entered promiscuous mode [ 52.337858][ T6342] bridge0: port 3(team0) entered blocking state [ 52.339730][ T6342] bridge0: port 3(team0) entered disabled state [ 52.342334][ T6342] team0: entered allmulticast mode [ 52.343834][ T6342] team_slave_0: entered allmulticast mode [ 52.345523][ T6342] team_slave_1: entered allmulticast mode [ 52.348144][ T6342] bridge0: port 3(team0) entered blocking state [ 52.350102][ T6342] bridge0: port 3(team0) entered forwarding state [ 52.353525][ T6342] netlink: 'syz.2.78': attribute type 10 has an invalid length. [ 52.356097][ T6342] netlink: 2 bytes leftover after parsing attributes in process `syz.2.78'. [ 52.359213][ T6342] netlink: 'syz.2.78': attribute type 10 has an invalid length. [ 52.362219][ T6342] netlink: 2 bytes leftover after parsing attributes in process `syz.2.78'. [ 52.365194][ T6342] netlink: 'syz.2.78': attribute type 10 has an invalid length. [ 52.367441][ T6342] netlink: 2 bytes leftover after parsing attributes in process `syz.2.78'. [ 52.370017][ T6342] netlink: 'syz.2.78': attribute type 10 has an invalid length. [ 52.370987][ T833] usb 5-1: Using ep0 maxpacket: 8 [ 52.372839][ T6342] netlink: 2 bytes leftover after parsing attributes in process `syz.2.78'. [ 52.375530][ T833] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 52.376882][ T6342] netlink: 'syz.2.78': attribute type 10 has an invalid length. [ 52.379467][ T833] usb 5-1: config 179 has no interface number 0 [ 52.379494][ T833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 52.379514][ T833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 52.381956][ T6342] netlink: 2 bytes leftover after parsing attributes in process `syz.2.78'. [ 52.397723][ T5988] usb 7-1: USB disconnect, device number 3 [ 52.397759][ T833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.402981][ T833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 52.406110][ T833] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 52.410410][ T833] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 52.413041][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.417440][ T6321] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 52.492619][ T6352] loop2: detected capacity change from 0 to 2 [ 52.494945][ T6352] Dev loop2: unable to read RDB block 2 [ 52.496629][ T6352] loop2: AHDI p4 [ 52.497603][ T6352] loop2: partition table partially beyond EOD, truncated [ 52.521350][ T6333] usb 6-1: USB disconnect, device number 6 [ 52.628593][ T6333] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input5 [ 52.826440][ T6384] loop2: detected capacity change from 0 to 2 [ 52.828765][ T6384] Dev loop2: unable to read RDB block 2 [ 52.830422][ T6384] loop2: AHDI p4 [ 52.831793][ T6384] loop2: partition table partially beyond EOD, truncated [ 52.852981][ T6387] syz.3.90 uses obsolete (PF_INET,SOCK_PACKET) [ 52.895574][ T6387] loop2: detected capacity change from 0 to 7 [ 52.899024][ T6387] Dev loop2: unable to read RDB block 7 [ 52.901768][ T6387] loop2: unable to read partition table [ 52.904304][ T6387] loop2: partition table beyond EOD, truncated [ 52.906981][ T6387] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 53.023627][ T6406] VFS: could not find a valid V7 on nullb0. [ 53.189588][ T6418] loop2: detected capacity change from 0 to 2 [ 53.192046][ T6418] Dev loop2: unable to read RDB block 2 [ 53.193781][ T6418] loop2: AHDI p4 [ 53.194898][ T6418] loop2: partition table partially beyond EOD, truncated [ 53.201523][ T5953] Bluetooth: hci0: command tx timeout [ 53.201537][ T65] Bluetooth: hci2: command tx timeout [ 53.211284][ T65] Bluetooth: hci3: command tx timeout [ 53.211302][ T5953] Bluetooth: hci1: command tx timeout [ 53.593205][ T6459] loop2: detected capacity change from 0 to 2 [ 53.595371][ T6459] Dev loop2: unable to read RDB block 2 [ 53.596986][ T6459] loop2: AHDI p4 [ 53.598056][ T6459] loop2: partition table partially beyond EOD, truncated [ 53.709857][ T6461] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 53.713055][ T6461] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 53.744220][ T6399] 9pnet_fd: p9_fd_create_tcp (6399): problem connecting socket to 127.0.0.1 [ 54.128988][ T6485] xt_CT: No such helper "pptp" [ 54.200814][ T6500] xt_hashlimit: size too large, truncated to 1048576 [ 54.254810][ T6505] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 54.515259][ T6508] loop2: detected capacity change from 0 to 2 [ 54.518555][ T6508] Dev loop2: unable to read RDB block 2 [ 54.520691][ T6508] loop2: AHDI p4 [ 54.522315][ T6508] loop2: partition table partially beyond EOD, truncated [ 54.747438][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 54.747451][ T39] audit: type=1400 audit(1737465562.899:296): avc: denied { ioctl } for pid=6512 comm="syz.1.119" path="socket:[10762]" dev="sockfs" ino=10762 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.750052][ T6513] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 54.758707][ T6513] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 54.763111][ T6513] vhci_hcd vhci_hcd.0: Device attached [ 54.769137][ T6513] vhci_hcd vhci_hcd.0: port 0 already used [ 54.772583][ T6514] vhci_hcd: connection closed [ 54.774433][ T11] vhci_hcd: stop threads [ 54.777665][ T11] vhci_hcd: release socket [ 54.779025][ T11] vhci_hcd: disconnect device [ 55.085174][ T30] usb 5-1: USB disconnect, device number 3 [ 55.085250][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 55.091612][ T30] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 55.095804][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 55.156130][ T39] audit: type=1400 audit(1737465563.309:297): avc: denied { create } for pid=6521 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 55.204241][ T6523] __nla_validate_parse: 5 callbacks suppressed [ 55.204256][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.121'. [ 55.244606][ T6529] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 55.247251][ T6529] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.251476][ T6529] vhci_hcd vhci_hcd.0: Device attached [ 55.256088][ T6530] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 55.259845][ T83] vhci_hcd: stop threads [ 55.263266][ T83] vhci_hcd: release socket [ 55.264103][ T6529] sp0: Synchronizing with TNC [ 55.264592][ T83] vhci_hcd: disconnect device [ 55.311677][ T6538] netlink: 64 bytes leftover after parsing attributes in process `syz.1.124'. [ 55.339238][ T6524] net_ratelimit: 596 callbacks suppressed [ 55.339249][ T6524] blackhole_netdev_xmit(): Dropping skb. [ 55.342645][ T6524] blackhole_netdev_xmit(): Dropping skb. [ 55.344286][ T6524] blackhole_netdev_xmit(): Dropping skb. [ 55.346032][ T6524] blackhole_netdev_xmit(): Dropping skb. [ 55.347669][ T6524] blackhole_netdev_xmit(): Dropping skb. [ 55.349294][ T6524] blackhole_netdev_xmit(): Dropping skb. [ 55.351016][ T6524] blackhole_netdev_xmit(): Dropping skb. [ 55.352663][ T6524] blackhole_netdev_xmit(): Dropping skb. [ 55.354300][ T6524] blackhole_netdev_xmit(): Dropping skb. [ 55.355944][ T6524] blackhole_netdev_xmit(): Dropping skb. [ 55.376748][ T6543] netlink: 'syz.3.125': attribute type 11 has an invalid length. [ 55.380601][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.383223][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.386813][ T6543] bridge0: entered allmulticast mode [ 55.400633][ T39] audit: type=1400 audit(1737465563.549:298): avc: denied { checkpoint_restore } for pid=6541 comm="syz.3.125" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.441618][ T6550] loop2: detected capacity change from 0 to 2 [ 55.444552][ T6550] Dev loop2: unable to read RDB block 2 [ 55.446741][ T6550] loop2: AHDI p4 [ 55.448185][ T6550] loop2: partition table partially beyond EOD, truncated [ 55.589979][ T6560] ======================================================= [ 55.589979][ T6560] WARNING: The mand mount option has been deprecated and [ 55.589979][ T6560] and is ignored by this kernel. Remove the mand [ 55.589979][ T6560] option from the mount to silence this warning. [ 55.589979][ T6560] ======================================================= [ 55.590010][ T39] audit: type=1400 audit(1737465563.739:299): avc: denied { remount } for pid=6558 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.704701][ T39] audit: type=1400 audit(1737465563.859:300): avc: denied { setopt } for pid=6564 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.766694][ T39] audit: type=1400 audit(1737465563.919:301): avc: denied { setopt } for pid=6564 comm="syz.3.129" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.766832][ T6565] x_tables: duplicate underflow at hook 1 [ 55.775141][ T39] audit: type=1400 audit(1737465563.929:302): avc: denied { append } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.775787][ T6565] overlay: Bad value for 'workdir' [ 55.781213][ T39] audit: type=1400 audit(1737465563.929:303): avc: denied { mounton } for pid=6564 comm="syz.3.129" path="/40/bus" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.802807][ T39] audit: type=1400 audit(1737465563.959:304): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.812451][ T39] audit: type=1400 audit(1737465563.959:305): avc: denied { open } for pid=5941 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.869179][ T6574] netlink: 'syz.3.132': attribute type 29 has an invalid length. [ 55.873372][ T6574] netlink: 'syz.3.132': attribute type 29 has an invalid length. [ 55.878909][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 55.896084][ T6574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2130 sclass=netlink_route_socket pid=6574 comm=syz.3.132 [ 55.931432][ T6580] Cannot find set identified by id 65534 to match [ 55.932020][ T6579] loop2: detected capacity change from 0 to 2 [ 55.935581][ T6579] Dev loop2: unable to read RDB block 2 [ 55.937227][ T6579] loop2: AHDI p4 [ 55.938441][ T6579] loop2: partition table partially beyond EOD, truncated [ 56.019001][ T6596] netlink: 76 bytes leftover after parsing attributes in process `syz.3.137'. [ 56.073327][ T6603] netlink: 'syz.2.138': attribute type 3 has an invalid length. [ 56.075574][ T6603] netlink: 132 bytes leftover after parsing attributes in process `syz.2.138'. [ 56.164918][ T6613] mmap: syz.2.139 (6613) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.205107][ T6622] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ܻ}rءÑV§jPb [ 56.213751][ T6623] binder: 6621:6623 ioctl c0306201 200003c0 returned -22 [ 56.260816][ T6634] loop2: detected capacity change from 0 to 2 [ 56.263024][ T6634] Dev loop2: unable to read RDB block 2 [ 56.264694][ T6634] loop2: AHDI p4 [ 56.265758][ T6634] loop2: partition table partially beyond EOD, truncated [ 56.691721][ T6672] xt_socket: unknown flags 0x8 [ 56.965041][ T6696] overlayfs: disabling nfs_export due to verity=on [ 57.033247][ T6699] loop2: detected capacity change from 0 to 2 [ 57.035647][ T6699] Dev loop2: unable to read RDB block 2 [ 57.037508][ T6699] loop2: AHDI p4 [ 57.038823][ T6699] loop2: partition table partially beyond EOD, truncated [ 57.086228][ T6701] overlay: filesystem on ./bus not supported as upperdir [ 57.103375][ T6701] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 57.107645][ T6701] evm: overlay not supported [ 57.223124][ T6722] ip6t_srh: unknown srh match flags 4000 [ 57.292791][ T6738] netlink: 'syz.1.161': attribute type 8 has an invalid length. [ 57.295908][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 57.341368][ T6747] netlink: 'syz.1.163': attribute type 29 has an invalid length. [ 57.344353][ T6747] netlink: 'syz.1.163': attribute type 29 has an invalid length. [ 57.378933][ T6747] netlink: 524 bytes leftover after parsing attributes in process `syz.1.163'. [ 57.405066][ T6754] loop2: detected capacity change from 0 to 2 [ 57.407145][ T6754] Dev loop2: unable to read RDB block 2 [ 57.408824][ T6754] loop2: AHDI p4 [ 57.409920][ T6754] loop2: partition table partially beyond EOD, truncated [ 57.457010][ T5953] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 57.458896][ T5953] Bluetooth: Wrong link type (-22) [ 57.460760][ T5953] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 57.462145][ T6760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 57.463398][ T5953] Bluetooth: Wrong link type (-22) [ 57.467806][ T6760] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 57.916303][ T6790] unknown channel width for channel at 909000KHz? [ 57.921528][ T6790] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 57.923827][ T6790] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 57.926882][ T6790] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 57.929149][ T6790] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 57.958520][ T6793] QAT: Device 1 not found [ 58.091554][ T6799] loop2: detected capacity change from 0 to 2 [ 58.093704][ T6799] Dev loop2: unable to read RDB block 2 [ 58.095346][ T6799] loop2: AHDI p4 [ 58.096545][ T6799] loop2: partition table partially beyond EOD, truncated [ 58.243787][ T6807] netlink: 72 bytes leftover after parsing attributes in process `syz.3.178'. [ 58.432553][ T6333] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.447678][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 58.553245][ T6845] loop2: detected capacity change from 0 to 2 [ 58.555311][ T6845] Dev loop2: unable to read RDB block 2 [ 58.556896][ T6845] loop2: AHDI p4 [ 58.557935][ T6845] loop2: partition table partially beyond EOD, truncated [ 58.601101][ T6333] usb 5-1: Using ep0 maxpacket: 8 [ 58.612371][ T6333] usb 5-1: config 0 has no interfaces? [ 58.616387][ T6333] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.620043][ T6333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.624973][ T6333] usb 5-1: Product: syz [ 58.628773][ T6333] usb 5-1: Manufacturer: syz [ 58.630755][ T6333] usb 5-1: SerialNumber: syz [ 58.635630][ T6333] usb 5-1: config 0 descriptor?? [ 58.661079][ T6851] block nbd1: Device being setup by another task [ 58.713061][ T833] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.868124][ T1456] usb 5-1: USB disconnect, device number 4 [ 58.884521][ T833] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 58.888079][ T833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.891364][ T833] usb 8-1: Product: syz [ 58.893050][ T833] usb 8-1: Manufacturer: syz [ 58.894813][ T833] usb 8-1: SerialNumber: syz [ 58.901640][ T833] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 58.925170][ T833] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 59.060932][ T6333] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.240967][ T6333] usb 7-1: Using ep0 maxpacket: 8 [ 59.243974][ T6333] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 59.246380][ T6333] usb 7-1: config 179 has no interface number 0 [ 59.248276][ T6333] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 59.251416][ T6333] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 59.254597][ T6333] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 59.257729][ T6333] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 59.261052][ T6333] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 59.264790][ T6333] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 59.267329][ T6333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.271997][ T6867] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 59.418108][ T5953] block nbd1: Receive control failed (result -32) [ 59.418666][ T6850] block nbd1: shutting down sockets [ 59.478830][ T6333] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input6 [ 59.686489][ T8] usb 7-1: USB disconnect, device number 4 [ 59.688193][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 59.688211][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 59.694079][ T8] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 59.743197][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.746095][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.827683][ T6914] loop2: detected capacity change from 0 to 2 [ 59.830480][ T6914] Dev loop2: unable to read RDB block 2 [ 59.832649][ T6914] loop2: AHDI p4 [ 59.834041][ T6914] loop2: partition table partially beyond EOD, truncated [ 59.903541][ T39] kauditd_printk_skb: 162 callbacks suppressed [ 59.903551][ T39] audit: type=1400 audit(1737465568.059:468): avc: denied { create } for pid=6917 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.911006][ T39] audit: type=1400 audit(1737465568.059:469): avc: denied { setopt } for pid=6917 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.957053][ T6918] bond0: entered promiscuous mode [ 59.958523][ T6918] bond_slave_0: entered promiscuous mode [ 59.960359][ T6918] bond_slave_1: entered promiscuous mode [ 59.967734][ T39] audit: type=1400 audit(1737465568.119:470): avc: denied { bind } for pid=6917 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.999628][ T39] audit: type=1400 audit(1737465568.149:471): avc: denied { bind } for pid=6917 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.005057][ T833] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 60.007308][ T833] ath9k_htc: Failed to initialize the device [ 60.025886][ T833] usb 8-1: ath9k_htc: USB layer deinitialized [ 60.053669][ T6920] IPv6: Can't replace route, no match found [ 60.057955][ T39] audit: type=1400 audit(1737465568.209:472): avc: denied { setattr } for pid=6919 comm="syz.0.201" name="file0" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.087193][ T39] audit: type=1400 audit(1737465568.239:473): avc: denied { name_bind } for pid=6921 comm="syz.0.202" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.090710][ T6922] netlink: 'syz.0.202': attribute type 2 has an invalid length. [ 60.128725][ T39] audit: type=1400 audit(1737465568.279:474): avc: denied { write } for pid=6923 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.138553][ T39] audit: type=1400 audit(1737465568.279:475): avc: denied { read } for pid=6923 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.259654][ T6933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.206'. [ 60.277175][ T6935] loop2: detected capacity change from 0 to 2 [ 60.279863][ T6935] Dev loop2: unable to read RDB block 2 [ 60.283799][ T6935] loop2: AHDI p4 [ 60.285249][ T6935] loop2: partition table partially beyond EOD, truncated [ 60.330770][ T39] audit: type=1400 audit(1737465568.479:476): avc: denied { create } for pid=6942 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.343755][ T39] audit: type=1400 audit(1737465568.499:477): avc: denied { append } for pid=6936 comm="syz.0.208" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 60.353002][ T6945] ------------[ cut here ]------------ [ 60.354612][ T6945] WARNING: CPU: 0 PID: 6945 at mm/page_alloc.c:4729 __alloc_pages_noprof+0x1f66/0x2470 [ 60.357402][ T6945] Modules linked in: [ 60.359535][ T6945] CPU: 0 UID: 0 PID: 6945 Comm: syz.0.208 Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0 [ 60.364344][ T6945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.367331][ T6945] RIP: 0010:__alloc_pages_noprof+0x1f66/0x2470 [ 60.369049][ T6945] Code: 24 38 41 89 c6 0f b6 c0 44 8b ac 24 84 00 00 00 89 44 24 18 e9 a8 f7 ff ff 90 0f 0b 90 e9 b6 f7 ff ff c6 05 30 f7 58 0e 01 90 <0f> 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00 [ 60.374924][ T6945] RSP: 0018:ffffc9000df5f898 EFLAGS: 00010246 [ 60.376906][ T6945] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 60.379516][ T6945] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 60.381906][ T6945] RBP: 00000003fffffee4 R08: 0000000000000005 R09: 0000000000000000 [ 60.384137][ T6945] R10: 00000000ffffffb9 R11: 0000000000000000 R12: 0000000000000016 [ 60.386339][ T6945] R13: 1ffff92001bebf27 R14: 00000003fffffee4 R15: ffffffff853ea557 [ 60.388686][ T6945] FS: 00007f029667e6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 60.391628][ T6945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.393468][ T6945] CR2: 000000110c2fcc20 CR3: 000000004e742000 CR4: 0000000000352ef0 [ 60.395722][ T6945] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.398236][ T6945] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.400548][ T6945] Call Trace: [ 60.401638][ T6945] [ 60.402683][ T6945] ? __warn+0xea/0x3c0 [ 60.404047][ T6945] ? __alloc_pages_noprof+0x1f66/0x2470 [ 60.405596][ T6945] ? report_bug+0x3c0/0x580 [ 60.406954][ T6945] ? handle_bug+0x54/0xa0 [ 60.407362][ T6937] netlink: 56 bytes leftover after parsing attributes in process `syz.0.208'. [ 60.408243][ T6945] ? exc_invalid_op+0x17/0x50 [ 60.408256][ T6945] ? asm_exc_invalid_op+0x1a/0x20 [ 60.408272][ T6945] ? drm_syncobj_array_find+0x37/0x3b0 [ 60.415552][ T6945] ? __alloc_pages_noprof+0x1f66/0x2470 [ 60.417149][ T6945] ? hlock_class+0x4e/0x130 [ 60.418489][ T6945] ? __lock_acquire+0xcc5/0x3c40 [ 60.419907][ T6945] ? hlock_class+0x4e/0x130 [ 60.421476][ T6945] ? mark_lock+0xb5/0xc60 [ 60.422715][ T6945] ? stack_depot_save_flags+0x28/0x9c0 [ 60.424253][ T6945] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 60.425832][ T6945] ? mark_lock+0xb5/0xc60 [ 60.427033][ T6945] ? hlock_class+0x4e/0x130 [ 60.428465][ T6945] ? find_held_lock+0x2d/0x110 [ 60.430038][ T6945] ? __pfx_mark_lock+0x10/0x10 [ 60.431838][ T6945] ? hlock_class+0x4e/0x130 [ 60.433543][ T6945] ? __lock_acquire+0x15a9/0x3c40 [ 60.435293][ T6945] ? drm_syncobj_array_find+0x37/0x3b0 [ 60.437015][ T6945] ___kmalloc_large_node+0x84/0x1b0 [ 60.438653][ T6945] __kmalloc_large_node_noprof+0x1c/0x70 [ 60.440468][ T6945] ? __pfx___lock_acquire+0x10/0x10 [ 60.442257][ T6945] __kmalloc_noprof.cold+0xc/0x61 [ 60.443692][ T6945] drm_syncobj_array_find+0x37/0x3b0 [ 60.445177][ T6945] ? find_held_lock+0x2d/0x110 [ 60.446873][ T6945] drm_syncobj_timeline_wait_ioctl+0x23a/0x390 [ 60.449188][ T6945] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 60.451683][ T6945] ? drm_dev_enter+0x4c/0x170 [ 60.453280][ T6945] drm_ioctl_kernel+0x1e6/0x3d0 [ 60.454845][ T6945] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 60.456805][ T6945] ? __might_fault+0xe3/0x190 [ 60.458203][ T6945] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 60.459796][ T6945] ? __might_fault+0xe3/0x190 [ 60.461583][ T6945] drm_ioctl+0x5d6/0xc00 [ 60.462884][ T6945] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 60.465031][ T6945] ? __pfx_drm_ioctl+0x10/0x10 [ 60.466525][ T6945] ? __pfx_lock_release+0x10/0x10 [ 60.468127][ T6945] ? selinux_file_ioctl+0x180/0x270 [ 60.469839][ T6945] ? selinux_file_ioctl+0xb4/0x270 [ 60.471579][ T6945] ? __pfx_drm_ioctl+0x10/0x10 [ 60.473266][ T6945] __x64_sys_ioctl+0x190/0x200 [ 60.474788][ T6945] do_syscall_64+0xcd/0x250 [ 60.476237][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.478087][ T6945] RIP: 0033:0x7f0295785d29 [ 60.479428][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.485432][ T6945] RSP: 002b:00007f029667e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.488058][ T6945] RAX: ffffffffffffffda RBX: 00007f0295976080 RCX: 00007f0295785d29 [ 60.490509][ T6945] RDX: 0000000020000280 RSI: 00000000c03064ca RDI: 0000000000000005 [ 60.493242][ T6945] RBP: 00007f0295801b08 R08: 0000000000000000 R09: 0000000000000000 [ 60.495743][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.498059][ T6945] R13: 0000000000000000 R14: 00007f0295976080 R15: 00007ffedd745ec8 [ 60.500544][ T6945] [ 60.501644][ T6945] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 60.503834][ T6945] CPU: 0 UID: 0 PID: 6945 Comm: syz.0.208 Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0 [ 60.507029][ T6945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.510372][ T6945] Call Trace: [ 60.511329][ T6945] [ 60.512375][ T6945] dump_stack_lvl+0x3d/0x1f0 [ 60.513986][ T6945] panic+0x71d/0x800 [ 60.515199][ T6945] ? __pfx_panic+0x10/0x10 [ 60.516637][ T6945] ? show_trace_log_lvl+0x29d/0x3d0 [ 60.518324][ T6945] ? __alloc_pages_noprof+0x1f66/0x2470 [ 60.519878][ T6945] check_panic_on_warn+0xab/0xb0 [ 60.521274][ T6945] __warn+0xf6/0x3c0 [ 60.522376][ T6945] ? __alloc_pages_noprof+0x1f66/0x2470 [ 60.524043][ T6945] report_bug+0x3c0/0x580 [ 60.525411][ T6945] handle_bug+0x54/0xa0 [ 60.526765][ T6945] exc_invalid_op+0x17/0x50 [ 60.528194][ T6945] asm_exc_invalid_op+0x1a/0x20 [ 60.529749][ T6945] RIP: 0010:__alloc_pages_noprof+0x1f66/0x2470 [ 60.531528][ T6945] Code: 24 38 41 89 c6 0f b6 c0 44 8b ac 24 84 00 00 00 89 44 24 18 e9 a8 f7 ff ff 90 0f 0b 90 e9 b6 f7 ff ff c6 05 30 f7 58 0e 01 90 <0f> 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00 [ 60.537357][ T6945] RSP: 0018:ffffc9000df5f898 EFLAGS: 00010246 [ 60.539132][ T6945] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 60.541433][ T6945] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 60.544014][ T6945] RBP: 00000003fffffee4 R08: 0000000000000005 R09: 0000000000000000 [ 60.546501][ T6945] R10: 00000000ffffffb9 R11: 0000000000000000 R12: 0000000000000016 [ 60.548726][ T6945] R13: 1ffff92001bebf27 R14: 00000003fffffee4 R15: ffffffff853ea557 [ 60.550959][ T6945] ? drm_syncobj_array_find+0x37/0x3b0 [ 60.552689][ T6945] ? hlock_class+0x4e/0x130 [ 60.554141][ T6945] ? __lock_acquire+0xcc5/0x3c40 [ 60.555907][ T6945] ? hlock_class+0x4e/0x130 [ 60.557409][ T6945] ? mark_lock+0xb5/0xc60 [ 60.558687][ T6945] ? stack_depot_save_flags+0x28/0x9c0 [ 60.560232][ T6945] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 60.561982][ T6945] ? mark_lock+0xb5/0xc60 [ 60.563166][ T6945] ? hlock_class+0x4e/0x130 [ 60.564756][ T6945] ? find_held_lock+0x2d/0x110 [ 60.566103][ T6945] ? __pfx_mark_lock+0x10/0x10 [ 60.567449][ T6945] ? hlock_class+0x4e/0x130 [ 60.568756][ T6945] ? __lock_acquire+0x15a9/0x3c40 [ 60.570210][ T6945] ? drm_syncobj_array_find+0x37/0x3b0 [ 60.572047][ T6945] ___kmalloc_large_node+0x84/0x1b0 [ 60.573971][ T6945] __kmalloc_large_node_noprof+0x1c/0x70 [ 60.575627][ T6945] ? __pfx___lock_acquire+0x10/0x10 [ 60.577340][ T6945] __kmalloc_noprof.cold+0xc/0x61 [ 60.578923][ T6945] drm_syncobj_array_find+0x37/0x3b0 [ 60.580587][ T6945] ? find_held_lock+0x2d/0x110 [ 60.582251][ T6945] drm_syncobj_timeline_wait_ioctl+0x23a/0x390 [ 60.584562][ T6945] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 60.586514][ T6945] ? drm_dev_enter+0x4c/0x170 [ 60.587908][ T6945] drm_ioctl_kernel+0x1e6/0x3d0 [ 60.589320][ T6945] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 60.591241][ T6945] ? __might_fault+0xe3/0x190 [ 60.592617][ T6945] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 60.594172][ T6945] ? __might_fault+0xe3/0x190 [ 60.595548][ T6945] drm_ioctl+0x5d6/0xc00 [ 60.596780][ T6945] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 60.598711][ T6945] ? __pfx_drm_ioctl+0x10/0x10 [ 60.600132][ T6945] ? __pfx_lock_release+0x10/0x10 [ 60.601589][ T6945] ? selinux_file_ioctl+0x180/0x270 [ 60.603085][ T6945] ? selinux_file_ioctl+0xb4/0x270 [ 60.604587][ T6945] ? __pfx_drm_ioctl+0x10/0x10 [ 60.606073][ T6945] __x64_sys_ioctl+0x190/0x200 [ 60.607489][ T6945] do_syscall_64+0xcd/0x250 [ 60.608818][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.610528][ T6945] RIP: 0033:0x7f0295785d29 [ 60.611830][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.617744][ T6945] RSP: 002b:00007f029667e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.621269][ T6945] RAX: ffffffffffffffda RBX: 00007f0295976080 RCX: 00007f0295785d29 [ 60.623572][ T6945] RDX: 0000000020000280 RSI: 00000000c03064ca RDI: 0000000000000005 [ 60.625828][ T6945] RBP: 00007f0295801b08 R08: 0000000000000000 R09: 0000000000000000 [ 60.628066][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.630275][ T6945] R13: 0000000000000000 R14: 00007f0295976080 R15: 00007ffedd745ec8 [ 60.632522][ T6945] [ 60.634469][ T6945] Kernel Offset: disabled [ 60.635848][ T6945] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:36:48 Registers: info registers vcpu 0 CPU#0 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851f5465 RDI=ffffffff9ab32e20 RBP=ffffffff9ab32de0 RSP=ffffc9000df5f1d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=000000000000003a R14=ffffffff851f5400 R15=0000000000000000 RIP=ffffffff851f548f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f029667e6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2fcc20 CR3=000000004e742000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0295802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0295802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0295802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0295802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0295802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0295802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=000000006a64e000 RCX=000ffffffffff000 RDX=000000006a64e000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000ecffa00 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000025 R11=0000000000000005 R12=ffffc9000ecffd80 R13=ffff88802b57f1f0 R14=0000000000000025 R15=0000000000000000 RIP=ffffffff819a31e0 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1774bbe500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1774c1b000 CR3=00000000327dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000024 Opmask01=0000000000204440 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01010100ffffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746174732d6b6f 6f682f6463706368 642f6e75722f7261 762f00662d006d72 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000613ff RBX=0000000000000002 RCX=ffffffff8b2d8369 RDX=0000000000000000 RSI=ffffffff8b6cda60 RDI=ffffffff8bd2c420 RBP=ffffed1003ad2000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d690000 R14=ffffffff90609b50 R15=0000000000000000 RIP=ffffffff8b2d974f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f029667ed58 CR3=000000004a520000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000010 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1b962300 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a58602a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a58602aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a58602aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a58602ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a58602b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a58602c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=a99dff8d16a07d00 RBX=ffff88802639d422 RCX=0000000000000005 RDX=dffffc0000000000 RSI=ffff88802639d400 RDI=ffff88802639c880 RBP=ffffc90000708a88 RSP=ffffc90000708950 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff96e74cdf R11=0000000000000004 R12=0000000000000002 R13=ffff88802639c880 R14=0000000000000000 R15=1ffff920000e1130 RIP=ffffffff8176807a RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f83a8b8b6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000140 CR3=0000000051aae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a7e02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a7e02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a7e02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a7e02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a7e02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a7e02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a7f4b488 00007f83a7f4b480 00007f83a7f4b478 00007f83a7f4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a8aad100 00007f83a7f4b440 00007f83a7f4b458 00007f83a7f4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a7f4b498 00007f83a7f4b490 00007f83a7f4b488 00007f83a7f4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000