last executing test programs: 2m4.457902435s ago: executing program 0 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000000010000000']) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1f, 0x3e7ffffffc, 0x0, 0x10}]) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1, 0x6, 0x3, 0x8) 2m4.308136705s ago: executing program 0 (id=358): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x63, &(0x7f0000000340)={&(0x7f0000000000)="e9ba8a03a61e683711005ed0d1d8ce5e51cefb272a4b3a70660b19319ac68d80f8936b329e3f575cdead", 0x2a}}, 0x20040814) 2m4.307834511s ago: executing program 0 (id=359): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1ff, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x11, 0x1, 0x0, 0x0, 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000001e80)=0x1a6, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f00000031c0)={0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r7, &(0x7f0000001440)=""/126, 0x7e, 0x41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5035, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000080)={0x8, [0x10000, 0x0, 0x1], [{}, {}, {0xf6a}, {0x6, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}, {0x3d1, 0xf788, 0x0, 0x1}, {0x8, 0x1ff, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x40, 0x1}, {0xfff, 0x3, 0x1, 0x1}, {0x986d, 0x8}, {0x8, 0x7f, 0x0, 0x0, 0x1}, {0x800, 0x2, 0x1, 0x0, 0x1}]}) 2m4.244319705s ago: executing program 0 (id=360): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000100)={0x7fff, 0x10001}, &(0x7f0000000180)) (async) prlimit64(0x0, 0xf, &(0x7f0000000100)={0x7fff, 0x10001}, &(0x7f0000000180)) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019", 0x21}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x9, 0xffff}, {0x1f, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x80}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc8c0}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x24008881) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x24008881) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f00000003c0)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000001300)={0x0, 0x400}, 0x8) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x5) (async) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2m3.188177688s ago: executing program 0 (id=362): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="16541d4b3209e3e2a44bf53cb94a887b93ab9d4327abeb3317e1e1018f968bf59327bc2d5d8132dd702b2661e5e6efb3a67483ebf784b8d14df7306b195be04d0031", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030000000000080006000001000005000d000000000008000600090000000800080009000000"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x10b0}, 0x1, 0x0, 0x0, 0x4004804}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='rose0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000/0x1000)=nil}) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000580)=0x3eba, 0x4) r8 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x980912}}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0x5, 0xffeb}, {0x1, 0x7}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0xc10) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m47.353490082s ago: executing program 32 (id=362): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="16541d4b3209e3e2a44bf53cb94a887b93ab9d4327abeb3317e1e1018f968bf59327bc2d5d8132dd702b2661e5e6efb3a67483ebf784b8d14df7306b195be04d0031", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030000000000080006000001000005000d000000000008000600090000000800080009000000"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x10b0}, 0x1, 0x0, 0x0, 0x4004804}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='rose0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000/0x1000)=nil}) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000580)=0x3eba, 0x4) r8 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x980912}}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0x5, 0xffeb}, {0x1, 0x7}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0xc10) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 47.035741607s ago: executing program 4 (id=1061): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x20, 0x3}, 0x5e, r0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r4, &(0x7f0000000000)=0x8, 0x12) close(r4) splice(r3, 0x0, r4, 0x0, 0x6a45, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000240)={r2}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r6}, &(0x7f0000000480), &(0x7f0000000540)=r4}, 0x20) ioctl$CDROMPAUSE(r5, 0x5301) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r8 = memfd_create(&(0x7f0000000100)='\x00', 0x0) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f00000001c0)={r8, 0x1, 0x8000}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x80, 0x0}, 0xe07e872420dfefca) r13 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r13, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0xd9252fc92b8883d4, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xe9) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x1}) unshare(0x2a020400) r14 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r14, &(0x7f0000000040)={0x0, 0x300, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 46.166191711s ago: executing program 4 (id=1069): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 38.449041946s ago: executing program 4 (id=1069): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 16.911040096s ago: executing program 4 (id=1069): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 11.794442633s ago: executing program 4 (id=1069): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.366700374s ago: executing program 4 (id=1069): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.776709321s ago: executing program 1 (id=1309): ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/213) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x408301, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x100) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x400900, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000200)) (async) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000240)={0x3, 0x3, 0x80000001, 0x1}) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280), 0x4) (async) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x5a1001, 0x0) close_range(r3, r5, 0x0) (async, rerun: 32) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f0000000340)={0x10000, 0x3d071ac8, 0xca5, 0xfffffc00, 0x6047, 0x5}) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$dsp(r7, &(0x7f0000000400)="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", 0x1000) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001400), 0x102, 0x0) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r7) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r9, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4004050) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001580), 0x2000, 0x0) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000015c0)={"3b466cd71dde0388e4305a60d67637ef0f23a2868ad982c5316e2e67666715b3", r10}) (async) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000001600)={0x1000, "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"}) write$P9_RXATTRCREATE(r7, &(0x7f0000002640)={0x7, 0x21, 0x2}, 0x7) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000002680)={0x2, 0x0, @pic={0xa, 0x4, 0xf2, 0x2, 0xb, 0x40, 0x81, 0x0, 0x3, 0x80, 0xf, 0x2, 0x5, 0x5, 0x3, 0xb}}) (async) fcntl$setstatus(r3, 0x4, 0x2000) (async, rerun: 32) splice(r7, &(0x7f00000028c0)=0x4, r0, &(0x7f0000002900)=0x6, 0x23, 0x6) (rerun: 32) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002940)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) 3.773163273s ago: executing program 1 (id=1312): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4042, 0x0) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.476560567s ago: executing program 1 (id=1319): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) (async, rerun: 32) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_clone(0x20000200, &(0x7f0000000300)="caca7c8a86e1f06f03758f0aa265ec6bf51632661ef27469bc39ab084724f4f42f6c13b05f031d1e5f40964710378ac74a15dfb371b98d53c6c9b1a4a0d0d7ca4fa9122ac24d61ea87c089cc6b81e4d4cc07b7e9eaee171dc7169cc24aec1daed8b14a996ae436c55ee2cbddfa9dcd724487d84ef1308765abdabec9c650083cd0a766bafcf9fa4c4539f24a46fc70a22cf77fe29a5338ef85dcadcfd8f903dae0be3a4652b5c648e1", 0xa9, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000003c0)="9a8a15c8ef574fc9e435b232db73bdca5aff681cb54a6de64aa4bcf89b4966a7dbe11f86ed1b0e60b5f004685cf907833cfd65dce4b7aebd28bef986027323d014c147c9844d251e09cf8143b76619d1aff759b78ccc7a7559dcbdbaf7cc3c4a2c32f7089e50cb7dac2774fd5bcd2b1ce8ec5380c030fa02693d36e7a8ea012dfd451f545a648340b246edb54c666f16c652e362351930323df0301f3bbad06dd939c7bdc409cd5c271bf437c64dac027c8b") sendfile(r0, r0, 0x0, 0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) (async) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="280000001200010200"/20, @ANYRES32=r2, @ANYBLOB="000090320000000008000a00", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x815}, 0x0) 3.407196665s ago: executing program 1 (id=1320): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) flock(r2, 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000240)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="280000000000000000000000b100000063011c00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.516373943s ago: executing program 1 (id=1328): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902"], 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r6, 0x15, 0x70bd2c, 0x25dedbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xa0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1040}, 0x20000090) preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/12, 0xc}], 0x1, 0x7ff, 0x4f) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 1.094926629s ago: executing program 2 (id=1331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x34, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}]]}, 0x34}}, 0x10) (async, rerun: 64) listen(r0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x359}, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 856.687343ms ago: executing program 3 (id=1334): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000300)=""/243, 0xf3}, 0x0) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x3}}, 0x14}}, 0x84) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) sendmsg$tipc(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)="b8d3d8e48974aae503984742e847457d61b9459b68100dbf05177b2436f9d642df271fd6b9aa365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb6f06952a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a3408000000c57c6f0cd8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636610f2e2c7945ed5000529e4f8f9", 0x99}], 0x1, 0x0, 0x0, 0x94}, 0x20004001) socket$kcm(0x29, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x91) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) preadv(r5, &(0x7f00000007c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/161, 0xa1}], 0x6, 0x7ff, 0x1) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000340)={[{@dyn}]}) mmap(&(0x7f0000934000/0x3000)=nil, 0x3000, 0x2000001, 0x31, 0xffffffffffffffff, 0xf983e000) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) 854.819758ms ago: executing program 3 (id=1335): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a3000000000140003"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x400001, 0x1a}, 0x18) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001a00010000f0ffffffffffff0a00002400000000fc"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 746.611527ms ago: executing program 3 (id=1336): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='cramfs\x00', 0x204001, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) read$msr(r1, &(0x7f0000000240)=""/221, 0xdd) 676.775387ms ago: executing program 3 (id=1337): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x3, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MAP={0x24, 0xe, {0x0, 0x3, 0x3, 0x2, 0x4, 0x8}}]}, 0x58}, 0x1, 0x2, 0x0, 0x2000c811}, 0x0) syz_usbip_server_init(0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000639000/0x2000)=nil, 0x2000}, 0x1}) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x90) syz_clone3(&(0x7f0000000000)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 516.521894ms ago: executing program 2 (id=1338): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0xc000) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000180)=0x7) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x63}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r2, 0x7, 0x3ff}, &(0x7f0000000280)=0x8) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x109, 0x103000) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000300)={0x5, 0x9, 0x0, [{0x209, 0xe, 0x9, 0x80, 0x8, 0x4, 0xb8, '\x00', 0x518}, {0x7, 0x3, 0x1, 0x7, 0x7, 0x80, 0xb0, '\x00', 0x100000000}, {0x5, 0x6, 0x0, 0x4, 0x1, 0x1, 0x57, '\x00', 0xc7f}, {0xd5, 0x8a7, 0x3, 0xc, 0x9, 0x3, 0x0, '\x00', 0x1}, {0x4, 0x9, 0x200, 0x3, 0x3, 0x7, 0x4, '\x00', 0x2}, {0xf16, 0x8, 0x6, 0x2, 0xf8, 0x5, 0x0, '\x00', 0x2}, {0x63e, 0x9, 0x3, 0x5, 0xc0, 0x2, 0x4, '\x00', 0x9}, {0xa2, 0x400, 0x1, 0x6, 0x55, 0xc1, 0x40, '\x00', 0x8}, {0x290, 0x0, 0x3, 0x7, 0x0, 0xfe, 0x8, '\x00', 0x9}]}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000580)={0x2, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000600)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000005c0)=0x4}) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000640)={0x0, 'vlan1\x00', {0x3}, 0x5}) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000002740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002700)={&(0x7f0000000700)={0x1f94, r7, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x48}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x70}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x42}, @NL80211_ATTR_CSA_IES={0x1f30, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x7, 0x200, 0x74c, 0xf001]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x2f0, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0xf, 0xd82}}, 0x100, @random=0x64c3, 0x110, @val={0x0, 0x1b, @random="8c28d605f1ad1122be2248dc3a68a60dcf1a8ca70d0d2f32650948"}, @void, @void, @val={0x4, 0x6, {0x3, 0x0, 0xb4, 0x9}}, @void, @val={0x5, 0xe2, {0xf7, 0xef, 0xb, "49ecf60c502f689f32ff2a40aceecc67889776f0523713a08b03f85b57c2ca6d6c21aeb10ce716ae52d64666f87f742d00462f0a4df9b5648e9c2380ae7922db33fc5dba330ecc3b8164441427d521fafce4ffee6841225949d7a5d0646e0e29bc0367009b13be752494d7788014ac80b2c15f85479e777927a152ba97d6a64eee3cd86256778011a95837633d6ee8daba49b4d7aa80c2bb0edd303e2f06a0eac84e66604e40f0db741a8c5c55df05b9e3fad70e425c0405fa33a6d0aa656050a95cc43cc5b64601f437e2fd865347f8450cfadd7a8d6b4600139100ccb75f"}}, @val={0x25, 0x3, {0x0, 0xb6, 0xd}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x4, 0x0, {0x3ff, 0x40, 0x0, 0xe, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x6, 0x7, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x3, 0x1, 0x0, 0x6, 0x30}}, @val={0x76, 0x6, {0x3, 0x8, 0x1d, 0x68be}}, [{0xdd, 0xa9, "7a1ad551a5014af0961c2faecc388016dced3fee55f99b392b92875cf61b367d3ae5e00a471701d7e61a172a990abcf3b32ff1d3623933efd12daa8a244239ece50d457dd04df8799da53580e06e30f77a22af7f3724dc4ef0725687fd6b2354f346de38a66689b67cfe6ca3a4e3f1405ef655bceba9461fb7d3280c9ec76339c4704042300310d5524daaa97a79d118155b1144954f799ef89e57e522280a24363f814970250a478e"}, {0xdd, 0x9f, "fdcf48c2767ee57e24e6d259f9582983e795061c9a681d70626a069be76ff9e3f11718ea1f99d22d0750626945ff059b0436628efe2fa45160d1527663ed110df133b0ed035379d923da0a81ce39b08e069200c7a3f0326452e4df1fb37ec61c338c2a7e88a2f0f64ca2e549deff5d5208151025e6415c4d1811fd033ac7a545d11ab00df5baf98c8af9d9615d2eb88fa4c1ac0eae4a06972250760b5128a4"}, {0xdd, 0x34, "9a714f237b2d578a96ad514826f83bee4b6035a9294f69ff7243ae3eb246627185afb14825e3f28a6061c4be5b70a89f17971108"}]}}, @NL80211_ATTR_BEACON_HEAD={0x21c, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @random="6aa26ab2c3b0", {0x9, 0x3}, @value=@ver_80211n={0x0, 0x82, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x6, @default, 0x1d08, @val={0x0, 0x1b, @random="20e087a27d917d672ccaf697c00c6d0f033b0a5357733485da7b24"}, @val={0x1, 0x6, [{0xb, 0x1}, {0x35, 0x1}, {0xc}, {0x48}, {0x36}, {0x48, 0x1}]}, @val={0x3, 0x1, 0x24}, @val={0x4, 0x6, {0x2, 0xc4, 0x800, 0x4}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x1, 0x0, {0x62193b33, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x8, 0x401, 0x3}}, @void, @void, @val={0x76, 0x6, {0xf7, 0x1, 0x22}}, [{0xdd, 0x4b, "3d7e83ffe16e8b311df663957d87db3b2c0f860c08a193ef757f7d59bc19fc6daaf7cdcf060e46883fbc680b7dd82d4084a4ac6e5b5a181071ce705a7e3e94fdc1be8393a86ee311c2c24d"}, {0xdd, 0x82, "3515480923a83c921d02673f142cb716acbf9592d15627cb3f3efabad165bb5f8233d4ad5b5e8bfec9c5d64ff41088def954129c5a03fc4089be533b1c54cab77c1cc1c214ec592d28d2ff0841e0ec6aa9c2b08f460874647b7b6dc312a6e47a8e1edd66d455bf75346c8db627744014cd9afe0f654bd6ffdc31a27d4bb8cf09cea9"}, {0xdd, 0x59, "e141f5d6e088aacf80a7b1af18cb4a068dbce123f4636fed3da8a61f85db61db17be4799273d7f373f6dff5598d314372413bfe25afde0dd5628c29d5640b38e8eb2ae49a0219883c6ae5f9a4ba9ecc2856481a2905a17ea30"}, {0xdd, 0x46, "119aec040d1af848823f5b556a97886bb6131b3030313f092dbd2a82dae7414a0e70eb4da374301060a33f2a7aa98147f522b61926e446e574759cc5eea8dc517e831e0baf78"}, {0xdd, 0x23, "5d43c02bad7dbf400dea0f5d4c1888022e1433ca87153d4dd10b5c59ed2b1034f447a7"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x11, 0x7f, [@supported_rates={0x1, 0x8, [{}, {0x30, 0x1}, {0x18, 0x1}, {0x2}, {0x48, 0x1}, {0x11, 0x1}, {0x12, 0x1}, {0x6c, 0x1}]}, @sec_chan_ofs={0x3e, 0x1, 0x8}]}, @NL80211_ATTR_IE_PROBE_RESP={0x136, 0x7f, [@chsw_timing={0x68, 0x4, {0x7ee, 0x5}}, @mesh_chsw={0x76, 0x6, {0x81, 0x1, 0x14, 0x1}}, @perr={0x84, 0x122, {0x8, 0x12, [{{}, @device_b, 0x3, @void, 0x29}, {{}, @device_a, 0x4, @void, 0x2b}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0xb}, {{}, @device_a, 0x2, @void, 0x7}, {{}, @broadcast, 0x5, @void, 0x2a}, {{}, @device_b, 0xfffffffa, @void, 0x25}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x2}, {{}, @broadcast, 0x2, @void, 0x33}, {{0x0, 0x1}, @device_a, 0x28bb, @value, 0x10}, {{0x0, 0x1}, @device_a, 0xffffffff, @value, 0xf}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x1a}, {{}, @device_a, 0x9e, @void, 0x1d}, {{0x0, 0x1}, @device_a, 0x7ff, @value=@broadcast, 0xa}, {{}, @device_a, 0x8a7, @void, 0x1a}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x42}, {{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0x33}, {{}, @broadcast, 0x72ee, @void, 0x37}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x21}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x35, 0x80, [@peer_mgmt={0x75, 0x8, {0x1, 0x0, @val=0x7, @val=0x7, @void}}, @chsw_timing={0x68, 0x4, {0x101, 0xfffb}}, @ssid={0x0, 0xf, @random="7856f2532a83e958f91336d831e012"}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0xd, 0x4, 0x3, 0x5}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x4, 0x7, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x3, 0x2, 0xfffd, 0xc, 0x9, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x6, 0xdb, 0x9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x0, 0x74f, 0x5, 0x3ff, 0x8, 0x4, 0xa, 0x101]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x10a8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9a, 0x3, "3de8d15d758c83f291fb860b83ac4e2967811603907dd961b4bd18e07058e46bb8b3a1dd7ca8c3173cbd1c19881cfc3f973363bc1f34d871c340f499ca07a65c1887d4692f38d1e01466cc9b99f9a6d62e5745889aad6d30b4944b33a0d42e148bb5045e9d95af44a2c50a69bc2a1d43aec745855fa05f0ba5d611ec60d0fd8b5581ee9c24c48407e571cbf1ecf34d949981e2dda346"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x12f, 0x7f, [@mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x9, 0xc0, 0x7, 0x5}}, @random={0x2, 0x16, "652acc2102cfacf4fe54401a664afe70ce1fd82af4ee"}, @mic={0x8c, 0x18, {0x18, "620935d1bbc9", @long="81d4fbfcc2b55ad3a048d1bdbb13c191"}}, @tim={0x5, 0xe7, {0x1, 0x8, 0xc, "7ded685c3d2a3065cb5e7b5b64a0ecbe775850be81585018bc06d525a121358215c0662f715b1fb23e73104469bd83c92cd508f3fea328bc3b92ff63e2d4f325dc27a461bb789caeb0d368f5a8048a0115a9292177b018cf0eb17d9b52e757274eeb20e4870e7e607add9edd299200c658d035915997bc4c8ffdf4c09a26c747e29dca96d23c6a64fe297fe29ae50f7077d79210b7fc7cfa90f6139e7e7b4fbe77dc4138852f549034187a84a7d20f2bc935bce9fdfa5a2d2c6d0b741c85ff3d313582a7015710900daa700a2f21ef2d9fa412f28d5633679d06c75ce0d65506776dabdf"}}]}, @NL80211_ATTR_BEACON_TAIL={0x253, 0xf, [@ht={0x2d, 0x1a, {0x2, 0x3, 0x1, 0x0, {0x1, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x10000, 0x10}}, @random={0x4, 0x7e, "b0cf47766ca6c40c6b6af2de17a16c077d0b2003b8b3f3da98f3a31591f920bdc58251b328534c7423b93380b61e1086a105a62603832b6e30af7e0a62060b9af904cb94e3fcc3cc9b7a02fa9b1dc1c5648378050e031cd8b1e65a049b1cb2ad9cb011d59c77e6a236ff982226b9c83d55f81285ff406c90c82e31cb42b2"}, @challenge={0x10, 0x1, 0xbb}, @measure_req={0x26, 0x6e, {0x6, 0x2, 0x7, "1a8d3e09ff7206edda55fa07aee6c8dc82f99ebd9fc9a2d20b43ebe7f4edcb70a02936be825c8d2cebafb76b964bd33417ea2832fe19f9b11e00997f3ab2c664b18d2af8c0fe52636f8eacd4758745883cf585f4f7673f50bf1c4ee40f4781461fd9c1ae87c9732a8c9259"}}, @tim={0x5, 0xf5, {0x5, 0xfa, 0x10, "6fb1fecf70e1f047e8a4f42f828b7f49d014d307c0183bb2eaadf15284b13f81348fe5570bcefdfa5665a85bd3442b3785a4ab843c8eafb96afa053e1b760a0e8a476458a18af2398b6b04b12bd91343e5bde77010d889c3557391151495520a678ecb2b44ca52fe2133fcb0583b9f79abcc1e290a327f3f3df9f8fffb886e3c98ce6c29c81cf325e6ba2fb2b1ef60690e4dd82fc7b9e98ba4eccc43184bc70502db38a2ae391aa99d53a3e370e75b67b4c7b539d11a04082ce73d9aeadb084d916ecf050d44c2e7daea967a95dff3d1bc01477dc03c8399f236ae2c86185332ac00b516e694dff5d20edc3b43af1f4ce636"}}, @mic={0x8c, 0x18, {0xc6c, "75fbe7c6e36e", @long="d62213355bfe468b6105e22e3010c4a8"}}, @mic={0x8c, 0x10, {0x798, "91f73aba5909", @short="6acdb32488c5ce6d"}}, @ssid={0x0, 0x1b, @random="b1e25cb1c8411dbfabec5df730d7a0ca4b87e0fceda2e8d05f1e96"}]}, @NL80211_ATTR_IE={0x86, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @preq={0x82, 0x46, {{0x0, 0x0, 0x1}, 0x80, 0x6, 0xff, @device_a, 0x3, @void, 0x4, 0xaf, 0x4, [{{0x1}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x2}, {{0x1}, @device_b, 0x8}, {{0x0, 0x0, 0x1}, @device_a, 0x268e}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x4, 0x0, @broadcast, 0x1, 0x5, 0x8}}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x40, @void, @void}}]}, @NL80211_ATTR_PROBE_RESP={0x3a0, 0x91, "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"}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xda}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2d9f1f535cb569b2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x102}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x1f94}, 0x1, 0x0, 0x0, 0xc}, 0xc0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000027c0)=@attr_other={0x0, 0x80, 0xd6, &(0x7f0000002780)=0x7}) write$tun(0xffffffffffffffff, &(0x7f0000002800)={@val={0x0, 0x88f5}, @void, @llc={@llc={0xf0, 0xd4, "91", "c087ea0d3967160e734d8e7034162fb9d78534784b5f870c5d65e148742f9619b906"}}}, 0x29) r8 = socket$inet(0x2, 0x5, 0x8001) r9 = geteuid() quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r9, &(0x7f0000002840)={0x7, 0x73e, 0x0, 0x1}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000002880)=0x2) fcntl$getownex(r6, 0x10, &(0x7f00000028c0)={0x0, 0x0}) fcntl$setown(r1, 0x8, r10) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000002900)) fcntl$getownex(r1, 0x10, &(0x7f0000002940)) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000002980)=0x8) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) ioctl$CDROM_MEDIA_CHANGED(r8, 0x5325, 0x8) 515.944483ms ago: executing program 2 (id=1339): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) r2 = userfaultfd(0xc1000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x6}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) (async) r4 = dup(r0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) (async) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xffffffec}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x7) (async) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xc, 0x11, r10, 0x100000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000bd1000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000001340)="0fae74a266b93d02000066b80000000066ba008000000f3066b9690300000f320f35663e662e660f38825c0c640f01c4f28b7d4bb8a5000f00d866b9800000c00f326635000400000f30ba210066b80000000066ef", 0x55}], 0x1, 0x3c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x408200, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000140)=0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYRES32=r10, @ANYRESDEC=r3, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40004080}, 0x20048004) 435.596489ms ago: executing program 2 (id=1340): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x103041) fsopen(&(0x7f0000000040)='jffs2\x00', 0x1) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) 356.701946ms ago: executing program 2 (id=1341): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r1, 0x331, 0x0, 0x25dfdbff, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1, 0x800}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}) (async) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) pipe2(&(0x7f0000000100), 0x84800) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x1010000, &(0x7f0000000080)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x10, 0x1, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0x80000001, 0x10000, 0x9, 0x2d9, 0x4, 0x40000003, 0xc5, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x7, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x1aac, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x4002, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x7, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0xc67d, 0x7, 0xffffffffffffff92, 0x100000001, 0x5, 0xe39, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x5, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000280), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) (async) r7 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) (async) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) 356.333703ms ago: executing program 2 (id=1342): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xaf4, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x1) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0x47, &(0x7f0000000040)=""/71}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x22008895}, 0x4000800) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x103800, 0x0) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xc0) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000000)={0x20, 0x6, 0x8, 0x8, 0xe5, 0x6, &(0x7f0000000200)="f5519a8d31219db72fb176042557af8bacea38060bf96eb4f66d0afb5b10e7a6f7ca699917411aecfbe55d3818d07bf6ab219c917bdb9234e0404781d8dfa2946bddf91110ec6c13bb8b63d00ee4da9523a98f969c82c09f244989d6a33898054c77a22f44f67d0ccf6826e6c9f117a2240f610da03739a8cdbdd093c4a6525f3c402b953d8e13426a56566467ab4c3678d43887807aa7e2c27070d7dd0148be244d7761715594a25650ea23c8477b00ef4f4bc07d9fbc624d82b65472d41da9566ea95cab5d179ff1a51df8cdccf634de97f915cf8d8257b924abd2432a592ae66495f03d"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000a000085000000ad0000009500000000000000b3cd91115eb8e652f2de1652464abeffe45ea5d02a47dd0af49d3cbdb819ac0afe07341685ca0461afbead16a3e9cb460665223ffb26b9fd6339402d71f59771e951e6ffa0e9c6c9a7352c6b"], &(0x7f0000000340)='GPL\x00', 0x13}, 0x94) 5.452414ms ago: executing program 1 (id=1343): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x4400) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x5, 0xad8b, {0x0}, {0xffffffffffffffff}, 0x9, 0x1}) (async) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)={0x3d8, 0x35, 0x110, 0x70bd2c, 0x25dfdbfe, {0x9}, [@typed={0x8, 0x96, 0x0, 0x0, @fd=r0}, @generic="83bb378d2757851bac70c6414ef3c68686e5d5a059fe311fe830bb97b10ef878b7437193aba3f35c025b18b589a70e96a0a9b02be4e9eaf63eaacdc7c4d33ba96e034664f9d6c2b5ad1cce3f0ba742e876a597f95d0e22c6da7c4061376e8f5de42339c8f556aa9897265549790eff3859d86e4f5f1c00025f2fad2e53cd28ffac5ec5a10325e027213bbb89e01fbe7594494779688a7794dbb88b96f1a9cc9494468d3b0286fd8bf088592c1bcd08a4be77ef82dd5f2a0e31823bd3d711c818d20401174384", @generic="f38a04f7af0f40a88227472745cde7b05f9391c014b196d9e9c0ed3b7315843e0160eeabcde7da11ecb40b7c10fee3aeb8da454ff6f8bed6b56f8ff53c9a09b84f9cf8a19de5578148989c8a3e6c7a474548e198de4fcf53e97a34d5d5eba23afddcfc2a757cdf9779f7f56b1301491f980f7a003003f8b5a4b5faa6f686", @nested={0x77, 0x14f, 0x0, 0x1, [@generic="6f336b44fccd4b06628103a71bb81ef032ac3c040567d47e21ce532e6432e7cbd016ba2b09c6105ce941dbc42d2a4e2791c571e972f0338900342c4b9642226da37fa579bf6a7e658cc24089b6f45619dc23c40fb8515e", @nested={0x4, 0x10d}, @generic="24d2fdb669c2b46b1ccfabaf12f0327cf21dcf03", @nested={0x4, 0x9c}]}, @typed={0x8, 0x4d, 0x0, 0x0, @u32}, @typed={0x4, 0x8f}, @generic="3ce35cb8f4cc214c5f617f4321a99fd63b09796b0548cbbfcd79e8c7d980b24b89af3c6f1074b75fb9d440aac16337d1d0453ef76b1a0664c283e6a16a41dac5d4db9c1e2512a4159e26c2780a025978dff2a2367f743445d03887fb51f81c6e6214721ca331864ac1118ce967d94875b74f101bddf79cb675ccf6d811c5c10fd5da27d272d3e0926e1ff389ea8bf01213381dd0703eb037c46e326e3772b09019e523519b73b8cb11c14d0268d782130278e0b69f04", @nested={0x12b, 0x151, 0x0, 0x1, [@nested={0x4, 0xdd}, @nested={0x4, 0x79}, @nested={0x4, 0x82}, @typed={0x8, 0x98, 0x0, 0x0, @uid=r3}, @generic="f85d2779524822c1e25bf43ef85e8f4dc26edcba904900c8d9915796eccea30677736a6a199382507345e6ca7df8cb08b232a95df88d1e4c56d5d3bf4bd6ff58f40c96e4982e7a914fb57afb5b861b6dd5e2b5900844ea95a7accf8eb961ec131f2810e1dfd2e10d1d4aa2f24a18b9f3c62cf1ac8e5209bb2d23d723476a814de1c37117a82da08596089aa2db9fac5447f73c04f4fd7e7e3fe789188e969741", @generic="4251aa8490a10335251cbba56c446ee1bc3d9737e96a0f6bccca213ddad9a03a2d2842d89654f0707bde66714911efbe8ea9ea12d7c70e628c1202e3dd672292544a8c356bce3335c00f71f23fbefd882b92d37a79c545929ea621dd5782e2d848d5521fcaf0bf32379d3c4c20d2754f454956"]}, @typed={0x8, 0xaa, 0x0, 0x0, @uid=r4}, @nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x81}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0xc0}, 0x20000905) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'erspan0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x80, 0x1, 0x3, 0x2, {{0x28, 0x4, 0x0, 0x20, 0xa0, 0x66, 0x0, 0x81, 0x29, 0x0, @local, @private=0xa010100, {[@noop, @generic={0x89, 0xe, "c1defa867afb954d016940f7"}, @noop, @noop, @ssrr={0x89, 0x23, 0x91, [@multicast2, @private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @remote, @private=0xa010102, @broadcast, @private=0xa010101]}, @timestamp_prespec={0x44, 0x34, 0x49, 0x3, 0x8, [{@multicast1, 0xadc7}, {@private=0xa010102, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2b9}]}, @rr={0x7, 0x23, 0x3d, [@multicast1, @private=0xa010101, @rand_addr=0x64010100, @empty, @empty, @rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@rand_addr=' \x01\x00', @in6=@private0, 0x4e21, 0x8, 0x4e23, 0x7, 0xa, 0x10, 0xa0, 0x1d, r6, r7}, {0x2, 0x0, 0x100, 0x10000, 0x1000, 0x8, 0x0, 0x4}, {0x9, 0x3, 0x651c, 0xd1}, 0x80000000, 0x6e6bbd, 0x1, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d6, 0x33}, 0xa, @in6=@private0, 0x0, 0x5, 0x1, 0xcf, 0x1a, 0x7, 0x9}}, 0xe8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, r9, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:v4l_device_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x1) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008001) (async) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2) sched_setscheduler(r2, 0x3, &(0x7f0000000c40)=0xbebe) (async) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000c80), 0x1, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r10, 0xc0044dff, &(0x7f0000000cc0)=0x4) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000d00)) (async) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000d40)={'filter\x00', 0x0, [0x8, 0xcff, 0x1000]}, &(0x7f0000000dc0)=0x44) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000e80)) r11 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r11, &(0x7f0000000f40)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r5, {0x74ef}}, './file0\x00'}) sendmsg$nl_route(r12, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)=@ipv6_deladdrlabel={0x24, 0x49, 0x100, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, r6, 0xb}, [@IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) bind$802154_dgram(r12, &(0x7f00000010c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r12, 0xc008551b, &(0x7f0000001100)={0x4, 0x1c, [0x5, 0x1ff, 0x7f, 0x47b, 0x4, 0x6, 0x0]}) (async) wait4(r2, &(0x7f0000001140), 0x40000005, 0x0) 5.279852ms ago: executing program 3 (id=1344): creat(&(0x7f0000000040)='./file0\x00', 0x47) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4180) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000000c0)={r5, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x5, 0x4d710649}, &(0x7f0000000100)=0xc) 0s ago: executing program 3 (id=1345): prlimit64(0x0, 0xb, &(0x7f0000000140)={0xa, 0x1000008b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote, @default, 0x0, [@bcast, @rose, @netrom, @default, @remote, @netrom]}, &(0x7f00000000c0)=0x40, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x3, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0xfffffffb}}, 0x30) write$FUSE_DIRENTPLUS(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES8=r1], 0xb0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x2710}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000100), 0xfffffed5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',posixacl']) kernel console output (not intermixed with test programs): s /devices/virtual/input/input17 [ 155.093755][ T8964] netlink: 'syz.2.854': attribute type 1 has an invalid length. [ 155.116751][ T8964] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 155.135437][ T60] usb usb6-port1: attempt power cycle [ 155.275355][ T5957] Bluetooth: hci4: command 0x0419 tx timeout [ 155.308187][ T8968] JFS: charset not found [ 155.315013][ T8975] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 155.322244][ T8975] x_tables: duplicate underflow at hook 3 [ 155.369854][ T8983] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 155.372666][ T8983] overlayfs: missing 'lowerdir' [ 155.495310][ T60] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 155.516007][ T60] usb 6-1: device descriptor read/8, error -71 [ 155.655321][ T2305] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 155.775348][ T60] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 155.785303][ T2305] usb 9-1: device descriptor read/64, error -71 [ 155.805751][ T60] usb 6-1: device descriptor read/8, error -71 [ 155.932605][ T60] usb usb6-port1: unable to enumerate USB device [ 156.045331][ T2305] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 156.185346][ T2305] usb 9-1: device descriptor read/64, error -71 [ 156.295475][ T2305] usb usb9-port1: attempt power cycle [ 156.349108][ T40] kauditd_printk_skb: 144 callbacks suppressed [ 156.349124][ T40] audit: type=1400 audit(1752305512.962:747): avc: denied { create } for pid=9042 comm="syz.2.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.358823][ T9043] bridge3: entered promiscuous mode [ 156.360714][ T9043] bridge3: entered allmulticast mode [ 156.421749][ T9045] loop6: detected capacity change from 0 to 7 [ 156.424623][ T9045] loop6: [POWERTEC] [ 156.451682][ T9047] __nla_validate_parse: 3 callbacks suppressed [ 156.451692][ T9047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.879'. [ 156.457793][ T9047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.879'. [ 156.514758][ T9052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.881'. [ 156.521785][ T60] IPVS: starting estimator thread 0... [ 156.586328][ T40] audit: type=1400 audit(1752305513.202:748): avc: denied { execute_no_trans } for pid=9059 comm="syz.2.884" path="/172/file2" dev="tmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.624597][ T40] audit: type=1400 audit(1752305513.232:749): avc: denied { create } for pid=9059 comm="syz.2.884" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 156.625816][ T9053] IPVS: using max 44 ests per chain, 105600 per kthread [ 156.631958][ T40] audit: type=1400 audit(1752305513.242:750): avc: denied { unlink } for pid=9059 comm="syz.2.884" name="file0" dev="tmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 156.640669][ T40] audit: type=1400 audit(1752305513.242:751): avc: denied { create } for pid=9059 comm="syz.2.884" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.645400][ T2305] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 156.647187][ T40] audit: type=1400 audit(1752305513.252:752): avc: denied { execute } for pid=9054 comm="syz.3.882" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 156.677255][ T2305] usb 9-1: device descriptor read/8, error -71 [ 156.720885][ T40] audit: type=1400 audit(1752305513.332:753): avc: denied { read } for pid=9069 comm="syz.2.887" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.728641][ T40] audit: type=1400 audit(1752305513.332:754): avc: denied { open } for pid=9069 comm="syz.2.887" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.732455][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 156.806513][ T9070] team0: Port device team_slave_0 removed [ 156.925344][ T2305] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 156.947904][ T2305] usb 9-1: device descriptor read/8, error -71 [ 156.973055][ T9076] 9pnet_fd: Insufficient options for proto=fd [ 157.006562][ T40] audit: type=1400 audit(1752305513.622:755): avc: denied { mounton } for pid=9077 comm="syz.2.891" path="/proc/541/task" dev="proc" ino=31949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 157.014193][ T40] audit: type=1400 audit(1752305513.622:756): avc: denied { mount } for pid=9077 comm="syz.2.891" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 157.055442][ T2305] usb usb9-port1: unable to enumerate USB device [ 157.275366][ T6022] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 157.346910][ T9083] usb usb8: usbfs: process 9083 (syz.1.892) did not claim interface 0 before use [ 157.455354][ T6022] usb 7-1: Using ep0 maxpacket: 16 [ 157.459341][ T6022] usb 7-1: unable to get BOS descriptor or descriptor too short [ 157.462240][ T6022] usb 7-1: no configurations [ 157.463836][ T6022] usb 7-1: can't read configurations, error -22 [ 157.689010][ T9097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9097 comm=syz.1.897 [ 157.689041][ T9098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9098 comm=syz.1.897 [ 157.985426][ T1463] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 158.139500][ T1463] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 158.142878][ T1463] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.146881][ T1463] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.149934][ T1463] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 158.154672][ T1463] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 158.157665][ T1463] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 158.160202][ T1463] usb 8-1: Manufacturer: syz [ 158.164091][ T1463] usb 8-1: config 0 descriptor?? [ 158.468257][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 158.572438][ T1463] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 158.577559][ T1463] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 158.701237][ T9138] tmpfs: Bad value for 'mpol' [ 158.715312][ T1475] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 158.875315][ T1475] usb 6-1: Using ep0 maxpacket: 16 [ 158.878404][ T837] usb 8-1: USB disconnect, device number 25 [ 158.878773][ T1475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.883987][ T1475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.887098][ T1475] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.891051][ T1475] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 158.893825][ T1475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.899057][ T1475] usb 6-1: config 0 descriptor?? [ 158.989436][ T5957] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 158.992801][ T9145] netlink: 'syz.4.912': attribute type 10 has an invalid length. [ 159.001097][ T9145] team0: Cannot enslave team device to itself [ 159.043557][ T9151] syz.4.914: attempt to access beyond end of device [ 159.043557][ T9151] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 159.056692][ T9151] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 159.128976][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 159.131691][ T9157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.916'. [ 159.133094][ T9156] netlink: 'syz.2.915': attribute type 3 has an invalid length. [ 159.137660][ T9156] netlink: 'syz.2.915': attribute type 3 has an invalid length. [ 159.322854][ T1475] HID 045e:07da: Invalid code 65791 type 1 [ 159.336140][ T1475] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0006/input/input18 [ 159.343200][ T1475] microsoft 0003:045E:07DA.0006: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 159.503456][ T9163] No control pipe specified [ 159.510441][ T9163] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 159.513330][ T9163] overlayfs: missing 'lowerdir' [ 159.540325][ T6022] usb 6-1: USB disconnect, device number 12 [ 159.574168][ T9166] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 159.759402][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 159.762449][ T9170] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 159.764702][ T9170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.085584][ T9172] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 160.092860][ T9173] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 160.119687][ T9175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.922'. [ 160.122793][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'. [ 162.383933][ T9229] __nla_validate_parse: 1 callbacks suppressed [ 162.383955][ T9229] netlink: 52 bytes leftover after parsing attributes in process `syz.3.934'. [ 162.988309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 162.994391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 162.997186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.000401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.053626][ T9242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29482 sclass=netlink_route_socket pid=9242 comm=syz.3.936 [ 163.159630][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 163.159645][ T40] audit: type=1400 audit(1752305519.772:805): avc: denied { create } for pid=9243 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.169788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.177636][ T40] audit: type=1400 audit(1752305519.772:806): avc: denied { write } for pid=9243 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.183280][ T40] audit: type=1400 audit(1752305519.792:807): avc: denied { watch watch_reads } for pid=9249 comm="syz.1.939" path="/215" dev="tmpfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 163.870811][ T9262] NILFS (nbd4): device size too small [ 163.917458][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.943'. [ 164.710985][ T40] audit: type=1400 audit(1752305521.322:808): avc: denied { write } for pid=9266 comm="syz.1.944" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 164.721183][ T40] audit: type=1400 audit(1752305521.322:809): avc: denied { create } for pid=9266 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 164.727551][ T40] audit: type=1400 audit(1752305521.322:810): avc: denied { bind } for pid=9266 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 164.735397][ T40] audit: type=1400 audit(1752305521.322:811): avc: denied { create } for pid=9266 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 164.769773][ T40] audit: type=1400 audit(1752305521.382:812): avc: denied { watch } for pid=9274 comm="syz.1.946" path="/218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.800410][ T40] audit: type=1400 audit(1752305521.382:813): avc: denied { watch_sb } for pid=9274 comm="syz.1.946" path="/218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.841502][ T40] audit: type=1400 audit(1752305521.452:814): avc: denied { getopt } for pid=9282 comm="syz.2.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.914436][ T9285] netfs: Couldn't get user pages (rc=-14) [ 165.175312][ T1475] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 165.335803][ T1475] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 165.338938][ T1475] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.341783][ T1475] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.345654][ T1475] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.348578][ T1475] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.351443][ T1475] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.355026][ T1475] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.358052][ T1475] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.360967][ T1475] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.364481][ T1475] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.367543][ T1475] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.370515][ T1475] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.373950][ T1475] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.377079][ T1475] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.381925][ T1475] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.386076][ T1475] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.389234][ T1475] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.392697][ T1475] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.396395][ T1475] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.399176][ T1475] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.401926][ T1475] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.405376][ T1475] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.408084][ T1475] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.411068][ T1475] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.415307][ T1475] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.420016][ T1475] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 165.423819][ T1475] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 165.427362][ T1475] usb 6-1: Product: syz [ 165.429265][ T1475] usb 6-1: Manufacturer: syz [ 165.431202][ T1475] usb 6-1: SerialNumber: syz [ 165.436586][ T1475] usb 6-1: config 0 descriptor?? [ 165.450109][ T1475] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 165.589891][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 165.654043][ T6022] usb 6-1: USB disconnect, device number 13 [ 165.659055][ T6022] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 165.706243][ T9293] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 167.219296][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.958'. [ 167.985297][ T837] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 168.156647][ T837] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.160752][ T837] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 168.168706][ T837] usb 6-1: New USB device found, idVendor=494f, idProduct=7e69, bcdDevice=51.78 [ 168.171777][ T837] usb 6-1: New USB device strings: Mfr=123, Product=174, SerialNumber=30 [ 168.174468][ T837] usb 6-1: Product: syz [ 168.176023][ T837] usb 6-1: Manufacturer: syz [ 168.178041][ T837] usb 6-1: SerialNumber: syz [ 168.182052][ T837] usb 6-1: config 0 descriptor?? [ 168.398549][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 168.398559][ T40] audit: type=1400 audit(1752305525.012:826): avc: denied { create } for pid=9330 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 168.407479][ T40] audit: type=1400 audit(1752305525.012:827): avc: denied { create } for pid=9330 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.413832][ T40] audit: type=1400 audit(1752305525.012:828): avc: denied { connect } for pid=9330 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.451427][ T40] audit: type=1400 audit(1752305525.062:829): avc: denied { write } for pid=9330 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.459081][ T40] audit: type=1400 audit(1752305525.062:830): avc: denied { write } for pid=9330 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 168.535410][ T1475] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 168.665329][ T1475] usb 7-1: device descriptor read/64, error -71 [ 168.905325][ T1475] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 169.035290][ T1475] usb 7-1: device descriptor read/64, error -71 [ 169.146670][ T1475] usb usb7-port1: attempt power cycle [ 169.185235][ C2] sched: DL replenish lagged too much [ 169.374134][ T40] audit: type=1400 audit(1752305525.982:831): avc: denied { map } for pid=9347 comm="syz.4.971" path="pipe:[32350]" dev="pipefs" ino=32350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 169.426784][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 169.515365][ T1475] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 169.545709][ T1475] usb 7-1: device descriptor read/8, error -71 [ 169.562533][ T9357] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 169.563825][ T40] audit: type=1400 audit(1752305526.172:832): avc: denied { create } for pid=9356 comm="syz.4.973" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 169.572885][ T9357] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.973'. [ 169.619737][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.620318][ T40] audit: type=1400 audit(1752305526.172:833): avc: denied { associate } for pid=9356 comm="syz.4.973" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 169.625153][ T40] audit: type=1400 audit(1752305526.182:834): avc: denied { associate } for pid=9356 comm="syz.4.973" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 169.669525][ T40] audit: type=1400 audit(1752305526.272:835): avc: denied { rmdir } for pid=7676 comm="syz-executor" name="file1" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 169.730645][ T9362] loop6: detected capacity change from 0 to 524287999 [ 169.762386][ T9362] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.764878][ T9362] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.768202][ T9362] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.770705][ T9362] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.773277][ T9362] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.775968][ T9362] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.778432][ T9362] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.782326][ T9362] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.784992][ T9362] ldm_validate_partition_table(): Disk read failed. [ 169.787412][ T9362] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.790084][ T9362] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.792673][ T9362] Dev loop6: unable to read RDB block 0 [ 169.796122][ T9362] loop6: unable to read partition table [ 169.803476][ T9362] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 169.813909][ T5366] ldm_validate_partition_table(): Disk read failed. [ 169.816088][ T1475] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 169.819223][ T5366] Dev loop6: unable to read RDB block 0 [ 169.821233][ T5366] loop6: unable to read partition table [ 169.836442][ T1475] usb 7-1: device descriptor read/8, error -71 [ 169.945575][ T1475] usb usb7-port1: unable to enumerate USB device [ 169.966443][ T9371] ptm ptm15: ldisc open failed (-12), clearing slot 15 [ 170.223400][ T1475] usb 6-1: USB disconnect, device number 14 [ 170.958375][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 171.137626][ T9397] netlink: 596 bytes leftover after parsing attributes in process `syz.1.988'. [ 171.293334][ T9405] input: syz1 as /devices/virtual/input/input19 [ 171.436652][ T9415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.994'. [ 171.450917][ T9415] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 171.453033][ T9415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.455535][ T9415] vhci_hcd vhci_hcd.0: Device attached [ 171.715291][ T837] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 171.808345][ T9428] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 171.810480][ T9428] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.815988][ T9428] vhci_hcd vhci_hcd.0: Device attached [ 171.824972][ T9429] vhci_hcd: connection closed [ 171.825561][ T46] vhci_hcd: stop threads [ 171.829504][ T46] vhci_hcd: release socket [ 171.831429][ T46] vhci_hcd: disconnect device [ 174.145635][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 174.368375][ T9414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.372251][ T9414] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 174.392239][ T9414] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 174.412439][ T9414] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 174.414323][ T9414] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 174.474472][ T9416] vhci_hcd: connection reset by peer [ 174.487825][ T7321] vhci_hcd: stop threads [ 174.489284][ T7321] vhci_hcd: release socket [ 174.505988][ T7321] vhci_hcd: disconnect device [ 174.978745][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 174.978755][ T40] audit: type=1326 audit(1752305531.592:853): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9460 comm="syz.4.1006" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe1d78e929 code=0x0 [ 175.110556][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'. [ 175.113428][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'. [ 175.115516][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.117935][ T9474] netlink: 'syz.2.1009': attribute type 20 has an invalid length. [ 175.158106][ T40] audit: type=1400 audit(1752305531.772:854): avc: denied { setopt } for pid=9473 comm="syz.4.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.215540][ T9484] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1010'. [ 175.317164][ T40] audit: type=1400 audit(1752305531.932:855): avc: denied { setcheckreqprot } for pid=9485 comm="syz.1.1012" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 175.317293][ T9486] SELinux: syz.1.1012 (9486) set checkreqprot to 1. This is no longer supported. [ 175.427990][ T9494] PKCS8: Unsupported PKCS#8 version [ 175.501002][ T40] audit: type=1400 audit(1752305532.112:856): avc: denied { bind } for pid=9496 comm="syz.3.1017" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.516504][ T40] audit: type=1400 audit(1752305532.122:857): avc: denied { name_bind } for pid=9496 comm="syz.3.1017" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 175.524930][ T40] audit: type=1400 audit(1752305532.122:858): avc: denied { node_bind } for pid=9496 comm="syz.3.1017" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 175.595368][ T9499] pimreg3: entered allmulticast mode [ 175.610372][ T40] audit: type=1400 audit(1752305532.222:859): avc: denied { write } for pid=9500 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.666444][ T40] audit: type=1400 audit(1752305532.282:860): avc: denied { append } for pid=9504 comm="syz.2.1020" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.667345][ T9505] netlink: 'syz.2.1020': attribute type 2 has an invalid length. [ 175.667362][ T9505] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1020'. [ 175.677744][ T40] audit: type=1400 audit(1752305532.292:861): avc: denied { write } for pid=9500 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 175.885304][ T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 175.940438][ T40] audit: type=1400 audit(1752305532.552:862): avc: denied { execute } for pid=9517 comm="syz.4.1024" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 176.065319][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 176.068246][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 176.075683][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 176.078583][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.081108][ T9] usb 8-1: Product: syz [ 176.082711][ T9] usb 8-1: Manufacturer: syz [ 176.084393][ T9] usb 8-1: SerialNumber: syz [ 176.092891][ T9] usb 8-1: config 0 descriptor?? [ 176.099670][ T9] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 176.113662][ T9] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 176.356975][ T9] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 176.422871][ T9] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 176.425913][ T9] em28xx 8-1:0.0: board has no eeprom [ 176.465372][ T5957] Bluetooth: hci4: command 0x0419 tx timeout [ 176.485365][ T9] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 176.487872][ T9] em28xx 8-1:0.0: dvb set to bulk mode. [ 176.494217][ T6022] em28xx 8-1:0.0: Binding DVB extension [ 176.496458][ T9] usb 8-1: USB disconnect, device number 26 [ 176.499555][ T9503] em28xx 8-1:0.0: writing to i2c device at 0x0 failed (error=-19) [ 176.517798][ T9] em28xx 8-1:0.0: Disconnecting em28xx [ 176.536095][ T6022] em28xx 8-1:0.0: Registering input extension [ 176.538864][ T9] em28xx 8-1:0.0: Closing input extension [ 176.656418][ T9] em28xx 8-1:0.0: Freeing device [ 176.677524][ T9537] BIDI support in bsg has been removed. [ 176.858027][ T837] vhci_hcd: vhci_device speed not set [ 177.168188][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 177.171476][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 177.184676][ T9544] bond4: entered promiscuous mode [ 177.186557][ T9544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.189347][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.218228][ T9544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.220705][ T9544] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 177.225094][ T9544] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 177.393507][ T9567] tipc: Started in network mode [ 177.395156][ T9567] tipc: Node identity ac1414aa, cluster identity 4711 [ 177.401272][ T9567] tipc: Enabled bearer , priority 10 [ 177.409955][ T9567] tipc: Enabled bearer , priority 0 [ 177.433058][ T9567] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 177.608444][ T9593] syz.3.1047: attempt to access beyond end of device [ 177.608444][ T9593] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 177.613323][ T9593] efs: cannot read volume header [ 177.673632][ T9599] dns_resolver: Unsupported server list version (0) [ 177.680098][ T9599] trusted_key: encrypted_key: insufficient parameters specified [ 177.698755][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 177.711646][ T9603] overlay: filesystem on ./bus not supported [ 177.890292][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 177.944558][ T9618] sp0: Synchronizing with TNC [ 178.378169][ T9627] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 178.381050][ T9627] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.407830][ T837] tipc: Node number set to 2886997162 [ 178.760756][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1064'. [ 179.097269][ T9648] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 179.100019][ T9648] overlayfs: missing 'lowerdir' [ 179.157883][ T9652] dlm: no locking on control device [ 179.265284][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.425776][ T9664] libceph: resolve ' [ 179.425776][ T9664] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 179.425776][ T9664] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 179.502999][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.506574][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.509516][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.512388][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.515140][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.630829][ T9669] chnl_net:caif_netlink_parms(): no params data found [ 179.715376][ T837] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 179.738232][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.740514][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.742822][ T9669] bridge_slave_0: entered allmulticast mode [ 179.748053][ T9669] bridge_slave_0: entered promiscuous mode [ 179.751296][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.757984][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.760392][ T9669] bridge_slave_1: entered allmulticast mode [ 179.763142][ T9669] bridge_slave_1: entered promiscuous mode [ 179.816153][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.820764][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.875813][ T837] usb 8-1: Using ep0 maxpacket: 8 [ 179.878632][ T837] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.880704][ T9669] team0: Port device team_slave_0 added [ 179.881597][ T837] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.881613][ T837] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.881625][ T837] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.881645][ T837] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 179.885434][ T9669] team0: Port device team_slave_1 added [ 179.886587][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.941403][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.943596][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.951621][ T9669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.956253][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.958410][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.966323][ T9669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.023080][ T9669] hsr_slave_0: entered promiscuous mode [ 180.025418][ T9669] hsr_slave_1: entered promiscuous mode [ 180.027458][ T9669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.029895][ T9669] Cannot create hsr debugfs directory [ 180.103434][ T837] usb 8-1: GET_CAPABILITIES returned 0 [ 180.105647][ T837] usbtmc 8-1:16.0: can't read capabilities [ 180.188047][ T9669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.307246][ T837] usb 8-1: USB disconnect, device number 27 [ 180.791607][ T9696] syz.1.1079 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 180.956841][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 180.956851][ T40] audit: type=1400 audit(1752305537.572:889): avc: denied { block_suspend } for pid=9700 comm="syz.1.1081" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.983816][ T9669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.054745][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 181.061985][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 181.267357][ T9669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.338866][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 181.341348][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 181.585377][ T5957] Bluetooth: hci1: command tx timeout [ 181.846041][ T2305] libceph: connect (1)[c::]:6789 error -101 [ 181.848323][ T2305] libceph: mon0 (1)[c::]:6789 connect error [ 181.870828][ T9712] ceph: No mds server is up or the cluster is laggy [ 181.914762][ T40] audit: type=1400 audit(1752305538.522:890): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 181.938293][ T9726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.949214][ T40] audit: type=1400 audit(1752305538.562:891): avc: denied { accept } for pid=9729 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 182.023103][ T40] audit: type=1400 audit(1752305538.632:892): avc: denied { mount } for pid=9734 comm="syz.1.1092" name="/" dev="pstore" ino=2612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 182.029296][ T9737] fuse: Unknown parameter '™›' [ 182.033747][ T40] audit: type=1400 audit(1752305538.632:893): avc: denied { remount } for pid=9734 comm="syz.1.1092" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 182.041605][ T40] audit: type=1400 audit(1752305538.642:894): avc: denied { append } for pid=9736 comm="syz.2.1093" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 182.049486][ T40] audit: type=1400 audit(1752305538.642:895): avc: denied { ioctl } for pid=9736 comm="syz.2.1093" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 182.058370][ T40] audit: type=1400 audit(1752305538.642:896): avc: denied { write } for pid=9734 comm="syz.1.1092" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 182.481999][ T9669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.180715][ T40] audit: type=1400 audit(1752305539.792:897): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 183.249801][ T9747] netlink: 'syz.3.1097': attribute type 4 has an invalid length. [ 183.287418][ T9750] bridge0: port 3(syz_tun) entered blocking state [ 183.290137][ T9750] bridge0: port 3(syz_tun) entered disabled state [ 183.292507][ T9750] syz_tun: entered allmulticast mode [ 183.298128][ T9750] syz_tun: entered promiscuous mode [ 183.300812][ T9750] bridge0: port 3(syz_tun) entered blocking state [ 183.303625][ T9750] bridge0: port 3(syz_tun) entered forwarding state [ 183.372507][ T9754] xt_HMARK: spi-set and port-set can't be combined [ 183.376920][ T9754] dlm: no locking on control device [ 183.524982][ T9758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1101'. [ 183.586532][ T40] audit: type=1400 audit(1752305540.202:898): avc: denied { bind } for pid=9761 comm="syz.3.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 183.665474][ T5957] Bluetooth: hci1: command tx timeout [ 183.845345][ T837] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 183.999502][ T837] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.003699][ T837] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.009067][ T837] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.012798][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.132600][ T9767] input: syz0 as /devices/virtual/input/input22 [ 184.170423][ T9669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.182516][ T9669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.194168][ T9769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.194682][ T9669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.208545][ T9669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.223498][ T837] usb 8-1: usb_control_msg returned -32 [ 184.226145][ T837] usbtmc 8-1:16.0: can't read capabilities [ 184.258053][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.266826][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.273285][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.275619][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.283360][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.286429][ T7311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.414489][ T9669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.534395][ T9669] veth0_vlan: entered promiscuous mode [ 184.539896][ T9669] veth1_vlan: entered promiscuous mode [ 184.555139][ T9669] veth0_macvtap: entered promiscuous mode [ 184.559324][ T9669] veth1_macvtap: entered promiscuous mode [ 184.568680][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.575697][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.582242][ T9669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.582882][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 184.584976][ T9669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.584994][ T9669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.585008][ T9669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.602526][ T9793] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 184.651205][ T7311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.653688][ T7311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.670339][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.672746][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.813874][ T837] usb 8-1: USB disconnect, device number 28 [ 185.126479][ T9798] evm: overlay not supported [ 186.222264][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 186.222275][ T40] audit: type=1400 audit(1752305542.830:904): avc: denied { mount } for pid=9805 comm="syz.3.1112" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 186.231639][ T40] audit: type=1400 audit(1752305542.840:905): avc: denied { remount } for pid=9805 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 186.231647][ T9806] devpts: Bad value for 'max' [ 186.241028][ T40] audit: type=1400 audit(1752305542.850:906): avc: denied { execstack } for pid=9805 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 186.270024][ T40] audit: type=1400 audit(1752305542.880:907): avc: denied { unmount } for pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 186.292848][ T40] audit: type=1400 audit(1752305542.900:908): avc: denied { connect } for pid=9807 comm="syz.3.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.299376][ T40] audit: type=1400 audit(1752305542.910:909): avc: denied { write } for pid=9807 comm="syz.3.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.308868][ T40] audit: type=1400 audit(1752305542.920:910): avc: denied { nlmsg_read } for pid=9807 comm="syz.3.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.315465][ T40] audit: type=1400 audit(1752305542.920:911): avc: denied { ioctl } for pid=9807 comm="syz.3.1113" path="socket:[38161]" dev="sockfs" ino=38161 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.352730][ T40] audit: type=1400 audit(1752305542.960:912): avc: denied { ioctl } for pid=9810 comm="syz.3.1114" path="socket:[37580]" dev="sockfs" ino=37580 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.360303][ T40] audit: type=1400 audit(1752305542.970:913): avc: denied { setopt } for pid=9810 comm="syz.3.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.485542][ T9814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.238281][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.252617][ T9816] netlink: 'syz.1.1116': attribute type 12 has an invalid length. [ 187.323394][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.330616][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.334234][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.337503][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.344739][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.469215][ T9825] chnl_net:caif_netlink_parms(): no params data found [ 187.571408][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.573722][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.576820][ T9825] bridge_slave_0: entered allmulticast mode [ 187.579475][ T9825] bridge_slave_0: entered promiscuous mode [ 187.582553][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.584776][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.587795][ T9825] bridge_slave_1: entered allmulticast mode [ 187.590524][ T9825] bridge_slave_1: entered promiscuous mode [ 187.641914][ T9825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.646445][ T9825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.706158][ T9825] team0: Port device team_slave_0 added [ 187.709625][ T9825] team0: Port device team_slave_1 added [ 187.760585][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.762780][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.771045][ T9825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.775377][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.777552][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.785817][ T9825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.839008][ T9825] hsr_slave_0: entered promiscuous mode [ 187.841292][ T9825] hsr_slave_1: entered promiscuous mode [ 187.843333][ T9825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.846031][ T9825] Cannot create hsr debugfs directory [ 188.926264][ T9848] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1120'. [ 188.940562][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.425633][ T5960] Bluetooth: hci1: command tx timeout [ 189.946712][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.959514][ T71] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 190.060966][ T9898] syzkaller0: entered promiscuous mode [ 190.063033][ T9898] syzkaller0: entered allmulticast mode [ 190.385779][ T9901] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 191.496448][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.509258][ T5960] Bluetooth: hci1: command tx timeout [ 191.564084][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 191.564096][ T40] audit: type=1400 audit(1752305548.170:929): avc: denied { getopt } for pid=9914 comm="syz.2.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 191.670312][ T40] audit: type=1400 audit(1752305548.280:930): avc: denied { create } for pid=9921 comm="syz.3.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 191.678059][ T40] audit: type=1400 audit(1752305548.290:931): avc: denied { sys_admin } for pid=9921 comm="syz.3.1141" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 191.713201][ T40] audit: type=1400 audit(1752305548.320:932): avc: denied { dac_read_search } for pid=9925 comm="syz.3.1141" capability=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 191.719908][ T40] audit: type=1400 audit(1752305548.330:933): avc: denied { dac_override } for pid=9925 comm="syz.3.1141" capability=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 192.591451][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1142'. [ 192.707950][ T40] audit: type=1400 audit(1752305549.320:934): avc: denied { map } for pid=9931 comm="syz.1.1143" path="socket:[36187]" dev="sockfs" ino=36187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 193.585394][ T5960] Bluetooth: hci1: command tx timeout [ 193.825346][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.988907][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.665379][ T5960] Bluetooth: hci1: command tx timeout [ 196.728316][ T40] audit: type=1400 audit(1752305553.340:935): avc: denied { write } for pid=9939 comm="syz.2.1145" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.838868][ T9945] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=531 sclass=netlink_xfrm_socket pid=9945 comm=syz.2.1146 [ 196.864343][ T40] audit: type=1400 audit(1752305553.470:936): avc: denied { read } for pid=9946 comm="syz.1.1147" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 196.873328][ T40] audit: type=1400 audit(1752305553.470:937): avc: denied { open } for pid=9946 comm="syz.1.1147" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 196.881595][ T40] audit: type=1400 audit(1752305553.490:938): avc: denied { bind } for pid=9949 comm="syz.3.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.955998][ T9958] syzkaller0: entered promiscuous mode [ 196.957959][ T9958] syzkaller0: entered allmulticast mode [ 196.979246][ T9962] netlink: 'syz.1.1151': attribute type 1 has an invalid length. [ 198.485944][ T9962] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 198.489300][ T9967] vlan0: entered allmulticast mode [ 198.493277][ T9967] geneve1: entered allmulticast mode [ 198.495007][ T12] bridge_slave_1: left allmulticast mode [ 198.496709][ T12] bridge_slave_1: left promiscuous mode [ 198.498429][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.509209][ T12] bridge_slave_0: left allmulticast mode [ 198.510915][ T12] bridge_slave_0: left promiscuous mode [ 198.512686][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.532084][ T40] audit: type=1400 audit(1752305555.130:939): avc: denied { map } for pid=9975 comm="syz.1.1153" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 198.642003][ T40] audit: type=1400 audit(1752305555.250:940): avc: denied { setopt } for pid=9975 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.828913][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.840362][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.844842][ T40] audit: type=1400 audit(1752305556.450:941): avc: denied { map } for pid=9983 comm="syz.1.1156" path="socket:[38375]" dev="sockfs" ino=38375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 199.847561][ T12] bond0 (unregistering): Released all slaves [ 199.857105][ T40] audit: type=1400 audit(1752305556.450:942): avc: denied { read accept } for pid=9983 comm="syz.1.1156" path="socket:[38375]" dev="sockfs" ino=38375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.185590][ T40] audit: type=1400 audit(1752305556.800:943): avc: denied { map } for pid=9990 comm="syz.2.1158" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 201.186174][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 201.186308][ T5960] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 201.254001][ T7328] Bluetooth: hci4: Frame reassembly failed (-84) [ 201.401377][T10056] syzkaller0: entered promiscuous mode [ 201.403142][T10056] syzkaller0: entered allmulticast mode [ 201.665319][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 203.265369][ T5957] Bluetooth: hci4: command 0xfc11 tx timeout [ 203.265431][ T5960] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 203.372011][ T40] audit: type=1400 audit(1752305559.980:944): avc: denied { execute } for pid=10110 comm="syz.3.1167" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 203.436527][T10121] FAULT_INJECTION: forcing a failure. [ 203.436527][T10121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.440577][T10121] CPU: 2 UID: 0 PID: 10121 Comm: syz.2.1168 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 203.440591][T10121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.440598][T10121] Call Trace: [ 203.440601][T10121] [ 203.440606][T10121] dump_stack_lvl+0x16c/0x1f0 [ 203.440640][T10121] should_fail_ex+0x512/0x640 [ 203.440664][T10121] _copy_from_user+0x2e/0xd0 [ 203.440679][T10121] io_files_update+0x56f/0x710 [ 203.440697][T10121] ? __pfx_io_files_update+0x10/0x10 [ 203.440710][T10121] ? __io_alloc_req_refill+0x191/0x500 [ 203.440722][T10121] ? __io_alloc_req_refill+0x27d/0x500 [ 203.440731][T10121] ? mark_held_locks+0x49/0x80 [ 203.440749][T10121] __io_issue_sqe+0xe8/0x7c0 [ 203.440766][T10121] io_issue_sqe+0x86/0xe50 [ 203.440778][T10121] io_submit_sqes+0x92d/0x2580 [ 203.440798][T10121] __do_sys_io_uring_enter+0xd6a/0x1630 [ 203.440811][T10121] ? __fget_files+0x20e/0x3c0 [ 203.440826][T10121] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 203.440839][T10121] ? fput+0x70/0xf0 [ 203.440848][T10121] ? ksys_write+0x1ac/0x250 [ 203.440860][T10121] ? __pfx_ksys_write+0x10/0x10 [ 203.440877][T10121] do_syscall_64+0xcd/0x4c0 [ 203.440892][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.440903][T10121] RIP: 0033:0x7f83e498e929 [ 203.440912][T10121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.440922][T10121] RSP: 002b:00007f83e57ca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 203.440932][T10121] RAX: ffffffffffffffda RBX: 00007f83e4bb5fa0 RCX: 00007f83e498e929 [ 203.440938][T10121] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000004 [ 203.440944][T10121] RBP: 00007f83e57ca090 R08: 0000000000000000 R09: 0000000000000000 [ 203.440950][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.440955][T10121] R13: 0000000000000000 R14: 00007f83e4bb5fa0 R15: 00007fff338c0c08 [ 203.440968][T10121] [ 203.517012][T10122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1167'. [ 203.522632][T10122] netem: invalid attributes len -17 [ 203.524306][T10122] netem: change failed [ 203.601975][T10132] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 203.604695][T10132] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 203.607626][T10132] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 203.610339][T10132] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 203.615748][T10132] geneve2: entered promiscuous mode [ 203.617414][T10132] geneve2: entered allmulticast mode [ 203.765590][T10144] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1171'. [ 203.769459][T10144] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1171'. [ 203.773216][T10144] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1171'. [ 203.812709][ T40] audit: type=1400 audit(1752305560.420:945): avc: denied { append } for pid=10146 comm="syz.2.1174" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 204.082105][T10167] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320 (640 ns) > initial count (16 ns). Using initial count to start timer. [ 204.264182][T10183] netlink: 'syz.3.1179': attribute type 6 has an invalid length. [ 204.266763][T10183] netlink: 135380 bytes leftover after parsing attributes in process `syz.3.1179'. [ 204.292844][T10187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1180'. [ 204.338418][ T12] hsr_slave_0: left promiscuous mode [ 204.343246][ T12] hsr_slave_1: left promiscuous mode [ 204.345156][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.348290][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.351873][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.354121][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.390138][ T12] veth1_macvtap: left promiscuous mode [ 204.392524][ T12] veth0_macvtap: left promiscuous mode [ 204.394902][ T12] veth1_vlan: left promiscuous mode [ 204.400432][ T12] veth0_vlan: left promiscuous mode [ 204.435435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 204.437089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 205.014242][T10208] SELinux: truncated policydb string identifier [ 205.014950][ T40] audit: type=1400 audit(1752305561.620:946): avc: denied { load_policy } for pid=10207 comm="syz.1.1173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 205.017415][T10208] SELinux: failed to load policy [ 205.322155][ T12] team0 (unregistering): Port device team_slave_1 removed [ 205.421747][ T12] team0 (unregistering): Port device team_slave_0 removed [ 205.689089][T10215] xt_hashlimit: size too large, truncated to 1048576 [ 205.740226][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 206.094259][ T40] audit: type=1400 audit(1752305562.700:947): avc: denied { write } for pid=10220 comm="syz.3.1182" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 206.103774][ T40] audit: type=1400 audit(1752305562.710:948): avc: denied { ioctl } for pid=10220 comm="syz.3.1182" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 206.117949][ T40] audit: type=1400 audit(1752305562.720:949): avc: denied { getopt } for pid=10220 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.124807][ T40] audit: type=1400 audit(1752305562.720:950): avc: denied { ioctl } for pid=10220 comm="syz.3.1182" path="socket:[39181]" dev="sockfs" ino=39181 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.144856][ T40] audit: type=1400 audit(1752305562.750:951): avc: denied { write } for pid=10223 comm="syz.1.1183" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.153718][T10226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.165983][T10226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.196136][ T9825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.205125][ T9825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.209914][ T9825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.214279][ T9825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.268715][ T9825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.280504][ T9825] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.285189][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.287476][ T7321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.303929][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.306095][ T7321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.328602][ T9825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.331885][ T9825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.386009][ T836] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 206.438476][ T9825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.594721][ T9825] veth0_vlan: entered promiscuous mode [ 206.600465][ T9825] veth1_vlan: entered promiscuous mode [ 206.619840][ T9825] veth0_macvtap: entered promiscuous mode [ 206.624483][ T9825] veth1_macvtap: entered promiscuous mode [ 206.636305][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.642129][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.648552][ T9825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.651439][ T9825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.654116][ T9825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.657232][ T9825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.724690][T10276] FAULT_INJECTION: forcing a failure. [ 206.724690][T10276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.728848][T10276] CPU: 0 UID: 0 PID: 10276 Comm: syz.1.1187 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 206.728863][T10276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 206.728870][T10276] Call Trace: [ 206.728873][T10276] [ 206.728877][T10276] dump_stack_lvl+0x16c/0x1f0 [ 206.728911][T10276] should_fail_ex+0x512/0x640 [ 206.728932][T10276] _copy_from_user+0x2e/0xd0 [ 206.728948][T10276] io_files_update+0x56f/0x710 [ 206.728965][T10276] ? __pfx_io_files_update+0x10/0x10 [ 206.728978][T10276] ? __io_alloc_req_refill+0x191/0x500 [ 206.728990][T10276] ? __io_alloc_req_refill+0x27d/0x500 [ 206.729000][T10276] ? mark_held_locks+0x49/0x80 [ 206.729018][T10276] __io_issue_sqe+0xe8/0x7c0 [ 206.729035][T10276] io_issue_sqe+0x86/0xe50 [ 206.729047][T10276] io_submit_sqes+0x92d/0x2580 [ 206.729066][T10276] __do_sys_io_uring_enter+0xd6a/0x1630 [ 206.729080][T10276] ? __fget_files+0x20e/0x3c0 [ 206.729094][T10276] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 206.729108][T10276] ? fput+0x70/0xf0 [ 206.729116][T10276] ? ksys_write+0x1ac/0x250 [ 206.729129][T10276] ? __pfx_ksys_write+0x10/0x10 [ 206.729146][T10276] do_syscall_64+0xcd/0x4c0 [ 206.729161][T10276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.729172][T10276] RIP: 0033:0x7fe488f8e929 [ 206.729181][T10276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.729191][T10276] RSP: 002b:00007fe489e9b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 206.729201][T10276] RAX: ffffffffffffffda RBX: 00007fe4891b5fa0 RCX: 00007fe488f8e929 [ 206.729208][T10276] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000004 [ 206.729214][T10276] RBP: 00007fe489e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 206.729220][T10276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.729225][T10276] R13: 0000000000000000 R14: 00007fe4891b5fa0 R15: 00007ffca52ffff8 [ 206.729239][T10276] [ 206.730849][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.764624][ T40] audit: type=1400 audit(1752305563.360:952): avc: denied { create } for pid=10277 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 206.767360][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.837856][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.840330][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.116542][T10287] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 207.136211][T10287] netlink: 'syz.2.1190': attribute type 21 has an invalid length. [ 207.176674][T10289] tipc: Enabling of bearer rejected, failed to enable media [ 207.739893][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 207.743265][T10293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1192'. [ 207.788921][T10293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1192'. [ 207.861258][ T40] audit: type=1400 audit(1752305564.470:953): avc: denied { write } for pid=10295 comm="syz.3.1193" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 208.876284][ T5957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.880847][ T5957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.883802][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.891485][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.894483][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.986972][T10313] chnl_net:caif_netlink_parms(): no params data found [ 209.075744][T10313] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.077982][T10313] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.080656][T10313] bridge_slave_0: entered allmulticast mode [ 209.083253][T10313] bridge_slave_0: entered promiscuous mode [ 209.086711][T10313] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.089119][T10313] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.091737][T10313] bridge_slave_1: entered allmulticast mode [ 209.094437][T10313] bridge_slave_1: entered promiscuous mode [ 209.140051][T10313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.144639][T10313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.208129][T10313] team0: Port device team_slave_0 added [ 209.211540][T10313] team0: Port device team_slave_1 added [ 209.260050][T10313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.263008][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.274057][T10313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.280126][T10313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.283030][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.293746][T10313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.353421][T10313] hsr_slave_0: entered promiscuous mode [ 209.356199][T10313] hsr_slave_1: entered promiscuous mode [ 209.359212][T10313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.361746][T10313] Cannot create hsr debugfs directory [ 209.441937][T10322] can0: slcan on ptm0. [ 209.469522][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 209.469535][ T40] audit: type=1400 audit(1752305566.080:956): avc: denied { ioctl } for pid=10324 comm="syz.1.1200" path="socket:[41078]" dev="sockfs" ino=41078 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 209.500397][T10326] bridge4: entered promiscuous mode [ 209.502068][T10326] bridge4: entered allmulticast mode [ 209.639821][T10313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.658708][T10337] bridge5: entered promiscuous mode [ 209.660445][T10337] bridge5: entered allmulticast mode [ 209.684315][ T40] audit: type=1400 audit(1752305566.290:957): avc: denied { write } for pid=10343 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 209.696407][T10346] syz_tun: entered allmulticast mode [ 209.699045][T10346] tipc: Started in network mode [ 209.700639][T10346] tipc: Node identity ac1414aa, cluster identity 4711 [ 209.703474][T10346] tipc: Enabled bearer , priority 10 [ 209.706087][T10346] syz_tun: left allmulticast mode [ 209.760779][ T40] audit: type=1400 audit(1752305566.370:958): avc: denied { unmount } for pid=6274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 209.781031][ T40] audit: type=1400 audit(1752305566.390:959): avc: denied { associate } for pid=10354 comm="syz.2.1208" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 209.812904][T10358] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 209.885620][T10321] can0 (unregistered): slcan off ptm0. [ 209.965349][ T9452] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 209.984538][ T40] audit: type=1400 audit(1752305566.590:960): avc: denied { lock } for pid=10361 comm="syz.2.1211" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=40096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 210.064137][T10367] Sensor A: ================= START STATUS ================= [ 210.066910][T10367] Sensor A: Test Pattern: 75% Colorbar [ 210.068722][T10367] Sensor A: Show Information: All [ 210.070303][T10367] Sensor A: Vertical Flip: false [ 210.071868][T10367] Sensor A: Horizontal Flip: false [ 210.073458][T10367] Sensor A: Brightness: 128 [ 210.074872][T10367] Sensor A: Contrast: 128 [ 210.076393][T10367] Sensor A: Hue: 0 [ 210.077614][T10367] Sensor A: Saturation: 128 [ 210.079059][T10367] Sensor A: ================== END STATUS ================== [ 210.095334][ T9452] usb 6-1: device descriptor read/64, error -71 [ 210.225709][ T5991] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 210.285071][T10313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.345298][ T9452] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 210.371226][T10313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.375523][ T5991] usb 7-1: Using ep0 maxpacket: 8 [ 210.378399][ T5991] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.381436][ T5991] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.384404][ T5991] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.387880][ T5991] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.391843][ T5991] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.394592][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.475418][ T9452] usb 6-1: device descriptor read/64, error -71 [ 210.497334][T10313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.575935][ T12] bridge_slave_1: left allmulticast mode [ 210.577726][ T12] bridge_slave_1: left promiscuous mode [ 210.579632][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.583903][ T12] bridge_slave_0: left allmulticast mode [ 210.586167][ T12] bridge_slave_0: left promiscuous mode [ 210.588244][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.598649][ T9452] usb usb6-port1: attempt power cycle [ 210.602062][ T5991] usb 7-1: GET_CAPABILITIES returned 0 [ 210.603877][ T5991] usbtmc 7-1:16.0: can't read capabilities [ 210.611377][ T40] audit: type=1400 audit(1752305567.220:961): avc: denied { read } for pid=10375 comm="syz.3.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.617931][ T40] audit: type=1400 audit(1752305567.230:962): avc: denied { write } for pid=10375 comm="syz.3.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.825295][ T5991] tipc: Node number set to 2886997162 [ 210.837033][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.841737][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.845714][ T12] bond0 (unregistering): Released all slaves [ 210.895705][T10313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.899630][T10313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.903411][T10313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.907526][T10313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.935356][ T9452] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 210.945400][ T5957] Bluetooth: hci1: command tx timeout [ 210.955462][T10313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.964121][T10313] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.967425][ T9452] usb 6-1: device descriptor read/8, error -71 [ 210.971756][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.974085][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.979944][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.982193][ T7321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.008560][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.011377][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.019897][ T24] usb 7-1: USB disconnect, device number 16 [ 211.111276][T10313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.204859][ T12] hsr_slave_0: left promiscuous mode [ 211.206685][ T9452] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 211.210043][ T12] hsr_slave_1: left promiscuous mode [ 211.212180][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.214562][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.217846][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.220446][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.227463][ T9452] usb 6-1: device descriptor read/8, error -71 [ 211.246323][ T12] veth1_macvtap: left promiscuous mode [ 211.248553][ T12] veth0_macvtap: left promiscuous mode [ 211.250791][ T12] veth1_vlan: left promiscuous mode [ 211.252954][ T12] veth0_vlan: left promiscuous mode [ 211.346849][ T9452] usb usb6-port1: unable to enumerate USB device [ 211.923470][ T12] team0 (unregistering): Port device team_slave_1 removed [ 212.012383][ T12] team0 (unregistering): Port device team_slave_0 removed [ 212.560495][T10440] syz_tun: entered allmulticast mode [ 212.571597][T10440] syz_tun: left allmulticast mode [ 212.610931][T10313] veth0_vlan: entered promiscuous mode [ 212.628108][T10313] veth1_vlan: entered promiscuous mode [ 212.653016][T10313] veth0_macvtap: entered promiscuous mode [ 212.656444][T10458] __nla_validate_parse: 2 callbacks suppressed [ 212.656457][T10458] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1223'. [ 212.657631][T10313] veth1_macvtap: entered promiscuous mode [ 212.671600][T10313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.683598][T10313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.688259][T10313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.691009][T10313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.693739][T10313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.697241][T10313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.760088][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.762563][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.782208][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.787619][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.930748][T10477] fuse: Bad value for 'user_id' [ 212.932741][T10477] fuse: Bad value for 'user_id' [ 213.226374][T10493] nvme_fabrics: missing parameter 'transport=%s' [ 213.230102][T10493] nvme_fabrics: missing parameter 'nqn=%s' [ 213.234543][ T40] audit: type=1800 audit(1752305569.840:963): pid=10493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1232" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 213.241943][ T40] audit: type=1400 audit(1752305569.850:964): avc: denied { ioctl } for pid=10492 comm="syz.2.1232" path="socket:[36308]" dev="sockfs" ino=36308 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.247769][T10496] nvme_fabrics: missing parameter 'transport=%s' [ 213.251537][T10496] nvme_fabrics: missing parameter 'nqn=%s' [ 213.459821][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 213.462730][T10510] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 213.465150][T10510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.470120][ T40] audit: type=1400 audit(1752305570.080:965): avc: denied { mounton } for pid=10509 comm="syz.2.1237" path="/281/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 213.471873][T10510] devpts: Bad value for 'uid' [ 213.478611][T10510] devpts: Bad value for 'uid' [ 213.553736][T10515] IPVS: length: 184 != 184344 [ 213.756438][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.225099][T10527] program syz.1.1242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.227932][T10527] ata1.00: invalid service action 31 [ 214.374375][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.377808][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.380726][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.383662][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.386881][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.487345][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.496834][T10533] chnl_net:caif_netlink_parms(): no params data found [ 214.539301][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 214.572040][T10533] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.574771][T10533] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.577140][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 214.577150][ T40] audit: type=1400 audit(1752305571.180:970): avc: denied { override_creds } for pid=10543 comm="syz.2.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 214.577865][T10533] bridge_slave_0: entered allmulticast mode [ 214.589050][T10533] bridge_slave_0: entered promiscuous mode [ 214.592135][T10533] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.594334][T10533] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.596723][T10533] bridge_slave_1: entered allmulticast mode [ 214.599380][T10533] bridge_slave_1: entered promiscuous mode [ 214.632025][T10533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.640749][T10533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.675114][T10533] team0: Port device team_slave_0 added [ 214.679337][T10533] team0: Port device team_slave_1 added [ 214.710453][T10533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.712632][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.721546][T10533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.725459][T10533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.727468][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.734682][T10533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.773855][T10533] hsr_slave_0: entered promiscuous mode [ 214.776095][T10533] hsr_slave_1: entered promiscuous mode [ 214.778395][T10533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.780492][T10533] Cannot create hsr debugfs directory [ 214.895811][ T5991] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 215.056863][ T5991] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 215.059474][ T5991] usb 7-1: config 0 has no interface number 0 [ 215.061453][ T5991] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 215.064749][ T5991] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 215.068218][ T5991] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 215.071711][ T5991] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 215.075019][ T5991] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 215.078328][ T5991] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.082338][ T5991] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 215.085094][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.088817][ T5991] usb 7-1: config 0 descriptor?? [ 215.091357][T10544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 215.093682][T10544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 215.100614][ T5991] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 215.164386][T10549] syzkaller0: entered promiscuous mode [ 215.166263][T10549] syzkaller0: entered allmulticast mode [ 215.178052][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.299221][ T5991] usb 7-1: USB disconnect, device number 17 [ 215.301171][ C3] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 215.304979][ T5991] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 215.503008][T10544] ldusb: No device or device unplugged -19 [ 215.978102][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1249'. [ 215.986142][T10559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.029930][ T40] audit: type=1400 audit(1752305572.640:971): avc: denied { getopt } for pid=10560 comm="syz.3.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 216.324516][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.370016][T10569] netlink: 'syz.2.1251': attribute type 1 has an invalid length. [ 216.372991][T10569] netlink: 'syz.2.1251': attribute type 4 has an invalid length. [ 216.377212][ T71] Bluetooth: Error in BCSP hdr checksum [ 216.382495][T10569] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1251'. [ 216.385372][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 216.465432][ T5960] Bluetooth: hci1: command tx timeout [ 216.481791][ T12] bridge_slave_1: left allmulticast mode [ 216.484036][ T12] bridge_slave_1: left promiscuous mode [ 216.488500][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.494014][ T12] bridge_slave_0: left allmulticast mode [ 216.495938][ T12] bridge_slave_0: left promiscuous mode [ 216.497814][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.743135][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.747568][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.751304][ T12] bond0 (unregistering): Released all slaves [ 216.774416][T10580] veth0: entered promiscuous mode [ 216.788426][T10580] veth0: left promiscuous mode [ 216.982403][ T5317] Bluetooth: hci5: sending frame failed (-49) [ 216.985656][ T5960] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 217.114234][ T12] hsr_slave_0: left promiscuous mode [ 217.122048][ T12] hsr_slave_1: left promiscuous mode [ 217.124076][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.126695][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.129344][ T40] audit: type=1400 audit(1752305573.740:972): avc: denied { read } for pid=10606 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 217.137194][ T40] audit: type=1400 audit(1752305573.740:973): avc: denied { create } for pid=10609 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 217.143932][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.146401][ T40] audit: type=1400 audit(1752305573.740:974): avc: denied { bind } for pid=10609 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 217.152482][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.156445][ T40] audit: type=1400 audit(1752305573.740:975): avc: denied { getopt } for pid=10609 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 217.181877][T10619] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1263'. [ 217.197515][ T12] veth1_macvtap: left promiscuous mode [ 217.199160][ T12] veth0_macvtap: left promiscuous mode [ 217.200791][ T12] veth1_vlan: left promiscuous mode [ 217.202299][ T12] veth0_vlan: left promiscuous mode [ 217.276383][T10625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1264'. [ 217.297837][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 217.299833][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 217.343437][ T24] libceph: connect (1)[c::]:6789 error -101 [ 217.345697][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 217.565710][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 217.570206][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 217.606377][ T24] libceph: connect (1)[c::]:6789 error -101 [ 217.608379][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 217.866734][ T12] team0 (unregistering): Port device team_slave_1 removed [ 217.936053][ T12] team0 (unregistering): Port device team_slave_0 removed [ 218.077361][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 218.079418][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 218.108944][T10625] ceph: No mds server is up or the cluster is laggy [ 218.111401][T10628] ceph: No mds server is up or the cluster is laggy [ 218.120254][ T24] libceph: connect (1)[c::]:6789 error -101 [ 218.122230][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 218.258601][T10632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.348211][ T40] audit: type=1400 audit(1752305574.960:976): avc: denied { getattr } for pid=10638 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 218.386061][ T5960] Bluetooth: hci4: command 0x1003 tx timeout [ 218.386087][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 218.460506][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1266'. [ 218.463535][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1266'. [ 218.520622][ T40] audit: type=1400 audit(1752305575.130:977): avc: denied { getopt } for pid=10638 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 218.545847][ T5957] Bluetooth: hci1: command tx timeout [ 218.562594][ T40] audit: type=1326 audit(1752305575.170:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.3.1268" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff12bf8e929 code=0x0 [ 218.575629][T10533] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.593352][T10533] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.605566][T10533] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.620050][T10533] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.707330][T10533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.728256][T10533] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.738037][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.741048][ T7321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.764221][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.766799][ T7328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.823072][T10533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.826564][T10533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.967415][T10533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.134391][T10533] veth0_vlan: entered promiscuous mode [ 219.140872][T10533] veth1_vlan: entered promiscuous mode [ 219.161281][T10533] veth0_macvtap: entered promiscuous mode [ 219.165710][T10533] veth1_macvtap: entered promiscuous mode [ 219.179252][T10533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.187809][T10533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.193153][T10533] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.197866][T10533] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.200771][T10533] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.203513][T10533] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.275604][ T7321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.278124][ T7321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.298363][ T7321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.300897][ T7321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.321204][T10705] kvm: apic: phys broadcast and lowest prio [ 219.329994][T10706] comedi: valid board names for 8255 driver are: [ 219.332130][T10706] 8255 [ 219.333039][T10706] comedi: valid board names for vmk80xx driver are: [ 219.335136][T10706] vmk80xx [ 219.336868][T10706] comedi: valid board names for usbduxsigma driver are: [ 219.340023][T10706] usbduxsigma [ 219.341263][T10706] comedi: valid board names for usbduxfast driver are: [ 219.343490][T10706] usbduxfast [ 219.344659][T10706] comedi: valid board names for usbdux driver are: [ 219.351624][T10706] usbdux [ 219.352610][T10706] comedi: valid board names for ni6501 driver are: [ 219.362836][T10706] ni6501 [ 219.365275][T10706] comedi: valid board names for dt9812 driver are: [ 219.367374][T10706] dt9812 [ 219.368321][T10706] comedi: valid board names for ni_labpc_cs driver are: [ 219.371491][T10706] ni_labpc_cs [ 219.372656][T10706] comedi: valid board names for ni_daq_700 driver are: [ 219.374887][T10706] ni_daq_700 [ 219.376530][T10706] comedi: valid board names for labpc_pci driver are: [ 219.378636][T10706] labpc_pci [ 219.379724][T10706] comedi: valid board names for adl_pci9118 driver are: [ 219.381912][T10706] pci9118dg [ 219.382952][T10706] pci9118hg [ 219.383999][T10706] pci9118hr [ 219.385115][T10706] comedi: valid board names for 8255_pci driver are: [ 219.387570][T10706] 8255_pci [ 219.388602][T10706] comedi: valid board names for s526 driver are: [ 219.390580][T10706] s526 [ 219.391490][T10706] comedi: valid board names for multiq3 driver are: [ 219.393530][T10706] multiq3 [ 219.394521][T10706] comedi: valid board names for pcmuio driver are: [ 219.396998][T10706] pcmuio48 [ 219.398094][T10706] pcmuio96 [ 219.399126][T10706] comedi: valid board names for pcmmio driver are: [ 219.412780][T10706] pcmmio [ 219.413764][T10706] comedi: valid board names for pcmda12 driver are: [ 219.416033][T10706] pcmda12 [ 219.417102][T10706] comedi: valid board names for pcmad driver are: [ 219.419116][T10706] pcmad12 [ 219.420123][T10706] pcmad16 [ 219.421127][T10706] comedi: valid board names for ni_labpc driver are: [ 219.423326][T10706] lab-pc-1200 [ 219.424447][T10706] lab-pc-1200ai [ 219.426129][T10706] lab-pc+ [ 219.427140][T10706] comedi: valid board names for atmio16 driver are: [ 219.429288][T10706] atmio16 [ 219.430279][T10706] atmio16d [ 219.431304][T10706] comedi: valid board names for ni_at_ao driver are: [ 219.433392][T10706] at-ao-6 [ 219.434382][T10706] at-ao-10 [ 219.435493][T10706] comedi: valid board names for ni_at_a2150 driver are: [ 219.437687][T10706] ni_at_a2150 [ 219.438807][T10706] comedi: valid board names for adq12b driver are: [ 219.440849][T10706] adq12b [ 219.441794][T10706] comedi: valid board names for mpc624 driver are: [ 219.443801][T10706] mpc624 [ 219.444745][T10706] comedi: valid board names for c6xdigio driver are: [ 219.446875][T10706] c6xdigio [ 219.447918][T10706] comedi: valid board names for aio_iiro_16 driver are: [ 219.450057][T10706] aio_iiro_16 [ 219.451091][T10706] comedi: valid board names for aio_aio12_8 driver are: [ 219.453190][T10706] aio_aio12_8 [ 219.454252][T10706] aio_ai12_8 [ 219.456232][T10706] aio_ao12_4 [ 219.458932][T10706] comedi: valid board names for fl512 driver are: [ 219.461010][T10706] fl512 [ 219.461919][T10706] comedi: valid board names for dmm32at driver are: [ 219.463902][T10706] dmm32at [ 219.464860][T10706] comedi: valid board names for dt282x driver are: [ 219.467328][T10706] dt2821 [ 219.468265][T10706] dt2821-f [ 219.469323][T10706] dt2821-g [ 219.470315][T10706] dt2823 [ 219.471256][T10706] dt2824-pgh [ 219.475043][T10706] dt2824-pgl [ 219.477540][T10706] dt2825 [ 219.478605][T10706] dt2827 [ 219.479688][T10706] dt2828 [ 219.480650][T10706] dt2829 [ 219.481649][T10706] dt21-ez [ 219.482620][T10706] dt23-ez [ 219.483609][T10706] dt24-ez [ 219.484592][T10706] dt24-ez-pgl [ 219.485664][T10706] comedi: valid board names for dt2817 driver are: [ 219.487781][T10706] dt2817 [ 219.488755][T10706] comedi: valid board names for dt2815 driver are: [ 219.490786][T10706] dt2815 [ 219.491731][T10706] comedi: valid board names for dt2814 driver are: [ 219.493723][T10706] dt2814 [ 219.494630][T10706] comedi: valid board names for dt2811 driver are: [ 219.496672][T10706] dt2811-pgh [ 219.497705][T10706] dt2811-pgl [ 219.498757][T10706] comedi: valid board names for dt2801 driver are: [ 219.500712][T10706] dt2801 [ 219.502197][T10706] comedi: valid board names for das6402 driver are: [ 219.504628][T10706] das6402-12 [ 219.505776][T10706] das6402-16 [ 219.506827][T10706] comedi: valid board names for das1800 driver are: [ 219.508817][T10706] das-1701st [ 219.509845][T10706] das-1701st-da [ 219.510984][T10706] das-1702st [ 219.512058][T10706] das-1702st-da [ 219.513197][T10706] das-1702hr [ 219.514265][T10706] das-1702hr-da [ 219.515668][T10706] das-1701ao [ 219.516824][T10706] das-1702ao [ 219.517954][T10706] das-1801st [ 219.519051][T10706] das-1801st-da [ 219.520210][T10706] das-1802st [ 219.521282][T10706] das-1802st-da [ 219.522391][T10706] das-1802hr [ 219.523466][T10706] das-1802hr-da [ 219.524582][T10706] das-1801hc [ 219.525737][T10706] das-1802hc [ 219.526804][T10706] das-1801ao [ 219.527885][T10706] das-1802ao [ 219.528961][T10706] comedi: valid board names for das800 driver are: [ 219.531016][T10706] das-800 [ 219.532027][T10706] cio-das800 [ 219.533095][T10706] das-801 [ 219.534085][T10706] cio-das801 [ 219.535148][T10706] das-802 [ 219.536210][T10706] cio-das802 [ 219.537297][T10706] cio-das802/16 [ 219.538430][T10706] comedi: valid board names for isa-das08 driver are: [ 219.540562][T10706] isa-das08 [ 219.541599][T10706] das08-pgm [ 219.542637][T10706] das08-pgh [ 219.543679][T10706] das08-pgl [ 219.544755][T10706] das08-aoh [ 219.545853][T10706] das08-aol [ 219.546895][T10706] das08-aom [ 219.547921][T10706] das08/jr-ao [ 219.549009][T10706] das08jr-16-ao [ 219.550102][T10706] pc104-das08 [ 219.551142][T10706] das08jr/16 [ 219.552192][T10706] comedi: valid board names for das16m1 driver are: [ 219.554189][T10706] das16m1 [ 219.555159][T10706] comedi: valid board names for dac02 driver are: [ 219.558262][T10706] dac02 [ 219.559192][T10706] comedi: valid board names for rti802 driver are: [ 219.561250][T10706] rti802 [ 219.562225][T10706] comedi: valid board names for rti800 driver are: [ 219.564612][T10706] rti800 [ 219.564833][ T40] audit: type=1400 audit(1752305576.170:979): avc: denied { read } for pid=10721 comm="syz.3.1281" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.565643][T10706] rti815 [ 219.567005][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1281'. [ 219.575647][T10706] comedi: valid board names for pcm3724 driver are: [ 219.577688][T10706] pcm3724 [ 219.578678][T10706] comedi: valid board names for pcl818 driver are: [ 219.581556][T10706] pcl818l [ 219.582562][T10706] pcl818h [ 219.583571][T10706] pcl818hd [ 219.584623][T10706] pcl818hg [ 219.585949][T10706] pcl818 [ 219.586926][T10706] pcl718 [ 219.587904][T10706] pcm3718 [ 219.588929][T10706] comedi: valid board names for pcl816 driver are: [ 219.590969][T10706] pcl816 [ 219.591937][T10706] pcl814b [ 219.592931][T10706] comedi: valid board names for pcl812 driver are: [ 219.594972][T10706] pcl812 [ 219.595997][T10706] pcl812pg [ 219.597020][T10706] acl8112pg [ 219.598080][T10706] acl8112dg [ 219.599144][T10706] acl8112hg [ 219.600193][T10706] a821pgl [ 219.601193][T10706] a821pglnda [ 219.602253][T10706] a821pgh [ 219.603252][T10706] a822pgl [ 219.604236][T10706] a822pgh [ 219.605310][T10706] a823pgl [ 219.606316][T10706] a823pgh [ 219.607712][T10706] pcl813 [ 219.609131][T10706] pcl813b [ 219.610495][T10706] acl8113 [ 219.611501][T10706] iso813 [ 219.612496][T10706] acl8216 [ 219.613548][T10706] a826pg [ 219.614557][T10706] comedi: valid board names for pcl730 driver are: [ 219.616730][T10706] pcl730 [ 219.617676][T10706] iso730 [ 219.619336][T10706] acl7130 [ 219.620333][T10706] pcm3730 [ 219.621316][T10706] pcl725 [ 219.622255][T10706] p8r8dio [ 219.623251][T10706] acl7225b [ 219.624260][T10706] p16r16dio [ 219.625404][T10706] pcl733 [ 219.626354][T10706] pcl734 [ 219.627370][T10706] opmm-1616-xt [ 219.628508][T10706] pearl-mm-p [ 219.629596][T10706] ir104-pbf [ 219.630635][T10706] comedi: valid board names for pcl726 driver are: [ 219.632658][T10706] pcl726 [ 219.633865][T10706] pcl727 [ 219.634816][T10706] pcl728 [ 219.636235][T10706] acl6126 [ 219.637227][T10706] acl6128 [ 219.638209][T10706] comedi: valid board names for pcl724 driver are: [ 219.640248][T10706] pcl724 [ 219.641197][T10706] pcl722 [ 219.642139][T10706] pcl731 [ 219.643083][T10706] acl7122 [ 219.644080][T10706] acl7124 [ 219.645073][T10706] pet48dio [ 219.646209][T10706] pcmio48 [ 219.647205][T10706] onyx-mm-dio [ 219.648339][T10706] comedi: valid board names for pcl711 driver are: [ 219.650382][T10706] pcl711 [ 219.651342][T10706] pcl711b [ 219.652327][T10706] acl8112hg [ 219.653367][T10706] acl8112dg [ 219.653598][ T40] audit: type=1400 audit(1752305576.260:980): avc: denied { append } for pid=10727 comm="syz.3.1284" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 219.654396][T10706] comedi: valid board names for amplc_pc263 driver are: [ 219.663994][T10706] pc263 [ 219.664923][T10706] comedi: valid board names for amplc_pc236 driver are: [ 219.667557][T10706] pc36at [ 219.668854][T10706] comedi: valid board names for amplc_dio200 driver are: [ 219.671009][T10706] pc212e [ 219.671972][T10706] pc214e [ 219.672919][T10706] pc215e [ 219.673867][T10706] pc218e [ 219.674811][T10706] pc272e [ 219.675841][T10706] comedi: valid board names for comedi_parport driver are: [ 219.679556][T10706] comedi_parport [ 219.680847][T10706] comedi: valid board names for comedi_test driver are: [ 219.682981][T10706] comedi_test [ 219.684634][T10706] comedi: valid board names for comedi_bond driver are: [ 219.687163][T10706] comedi_bond [ 219.820903][T10741] FAULT_INJECTION: forcing a failure. [ 219.820903][T10741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.825325][T10741] CPU: 0 UID: 0 PID: 10741 Comm: syz.3.1287 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 219.825342][T10741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.825348][T10741] Call Trace: [ 219.825352][T10741] [ 219.825356][T10741] dump_stack_lvl+0x16c/0x1f0 [ 219.825375][T10741] should_fail_ex+0x512/0x640 [ 219.825391][T10741] _copy_from_user+0x2e/0xd0 [ 219.825406][T10741] io_files_update+0x56f/0x710 [ 219.825423][T10741] ? __pfx_io_files_update+0x10/0x10 [ 219.825436][T10741] ? __io_alloc_req_refill+0x191/0x500 [ 219.825448][T10741] ? __io_alloc_req_refill+0x27d/0x500 [ 219.825457][T10741] ? mark_held_locks+0x49/0x80 [ 219.825477][T10741] __io_issue_sqe+0xe8/0x7c0 [ 219.825498][T10741] io_issue_sqe+0x86/0xe50 [ 219.825510][T10741] io_submit_sqes+0x92d/0x2580 [ 219.825530][T10741] __do_sys_io_uring_enter+0xd6a/0x1630 [ 219.825544][T10741] ? __fget_files+0x20e/0x3c0 [ 219.825558][T10741] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 219.825572][T10741] ? fput+0x70/0xf0 [ 219.825581][T10741] ? ksys_write+0x1ac/0x250 [ 219.825594][T10741] ? __pfx_ksys_write+0x10/0x10 [ 219.825610][T10741] do_syscall_64+0xcd/0x4c0 [ 219.825626][T10741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.825637][T10741] RIP: 0033:0x7ff12bf8e929 [ 219.825646][T10741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.825655][T10741] RSP: 002b:00007ff12cecc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 219.825666][T10741] RAX: ffffffffffffffda RBX: 00007ff12c1b5fa0 RCX: 00007ff12bf8e929 [ 219.825672][T10741] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000004 [ 219.825678][T10741] RBP: 00007ff12cecc090 R08: 0000000000000000 R09: 0000000000000000 [ 219.825684][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.825690][T10741] R13: 0000000000000000 R14: 00007ff12c1b5fa0 R15: 00007ffed1667f58 [ 219.825703][T10741] [ 219.827501][ T40] audit: type=1400 audit(1752305576.430:981): avc: denied { append } for pid=10742 comm="syz.1.1288" name="pfkey" dev="proc" ino=4026533431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 219.827529][ T40] audit: type=1400 audit(1752305576.430:982): avc: denied { map } for pid=10742 comm="syz.1.1288" path="/proc/962/net/pfkey" dev="proc" ino=4026533431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 219.884996][T10749] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 219.919506][T10749] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 219.919583][ C2] vkms_vblank_simulate: vblank timer overrun [ 219.925375][T10749] vhci_hcd vhci_hcd.0: Device attached [ 219.932923][T10750] vhci_hcd: connection closed [ 219.933934][ T46] vhci_hcd: stop threads [ 219.937193][ T46] vhci_hcd: release socket [ 219.938655][ T46] vhci_hcd: disconnect device [ 220.198644][ T40] audit: type=1400 audit(1752305576.810:983): avc: denied { read write } for pid=10755 comm="syz.1.1292" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 220.199336][T10758] UHID_CREATE from different security context by process 968 (syz.1.1292), this is not allowed. [ 220.205922][ T40] audit: type=1400 audit(1752305576.810:984): avc: denied { open } for pid=10755 comm="syz.1.1292" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 220.350716][ T40] audit: type=1400 audit(1752305576.960:985): avc: denied { ioctl } for pid=10773 comm="syz.1.1297" path="socket:[42423]" dev="sockfs" ino=42423 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 220.355536][T10774] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 220.383970][T10777] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1298'. [ 220.412197][ T40] audit: type=1400 audit(1752305577.020:986): avc: denied { ioctl } for pid=10780 comm="syz.1.1299" path="socket:[43219]" dev="sockfs" ino=43219 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 220.420508][ T40] audit: type=1400 audit(1752305577.020:987): avc: denied { write } for pid=10780 comm="syz.1.1299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 220.517742][ T40] audit: type=1400 audit(1752305577.130:988): avc: denied { write } for pid=10785 comm="syz.3.1301" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 220.526721][ T40] audit: type=1400 audit(1752305577.140:989): avc: denied { getopt } for pid=10785 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.116655][T10812] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1308'. [ 221.126807][T10814] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1308'. [ 221.146293][ T71] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.719660][T10824] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 221.721681][T10821] IPVS: stopping master sync thread 10824 ... [ 221.815136][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 221.843154][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.849668][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.852735][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.856027][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.858579][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.919338][T10836] block nbd1: not configured, cannot reconfigure [ 221.961386][T10835] chnl_net:caif_netlink_parms(): no params data found [ 222.084358][T10835] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.087910][T10835] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.090405][T10835] bridge_slave_0: entered allmulticast mode [ 222.093361][T10835] bridge_slave_0: entered promiscuous mode [ 222.096861][T10835] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.099266][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.101513][T10835] bridge_slave_1: entered allmulticast mode [ 222.104141][T10835] bridge_slave_1: entered promiscuous mode [ 222.137480][T10835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.142028][T10835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.173017][T10835] team0: Port device team_slave_0 added [ 222.181375][T10835] team0: Port device team_slave_1 added [ 222.223240][T10876] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 222.227730][T10835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.230055][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.238788][T10835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.242937][T10835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.245108][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.253665][T10835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.256679][T10876] syz.2.1322 (10876) used greatest stack depth: 19784 bytes left [ 222.286883][T10879] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 222.290611][T10879] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1323'. [ 222.297953][T10835] hsr_slave_0: entered promiscuous mode [ 222.300652][T10835] hsr_slave_1: entered promiscuous mode [ 222.303121][T10835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.306152][T10835] Cannot create hsr debugfs directory [ 222.358269][ T7328] Bluetooth: hci4: Frame reassembly failed (-84) [ 222.361504][T10881] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 222.668547][ T71] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.739497][ T71] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.801719][ T71] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.887119][ T71] bridge_slave_1: left allmulticast mode [ 222.889028][ T71] bridge_slave_1: left promiscuous mode [ 222.890934][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.895820][ T71] bridge_slave_0: left allmulticast mode [ 222.897617][ T71] bridge_slave_0: left promiscuous mode [ 222.899499][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.915271][ T6019] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 223.065343][ T6019] usb 8-1: Using ep0 maxpacket: 8 [ 223.068230][ T6019] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 223.070651][ T6019] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.073626][ T6019] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.076932][ T6019] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.080214][ T6019] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.084064][ T6019] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.086987][ T6019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.191221][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.196117][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.201698][ T71] bond0 (unregistering): Released all slaves [ 223.294362][ T6019] usb 8-1: GET_CAPABILITIES returned 0 [ 223.296673][ T6019] usbtmc 8-1:16.0: can't read capabilities [ 223.496816][T10887] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 223.505340][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 223.511692][ T2305] usb 8-1: USB disconnect, device number 29 [ 223.560835][ T71] hsr_slave_0: left promiscuous mode [ 223.563397][ T71] hsr_slave_1: left promiscuous mode [ 223.565444][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.568687][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.572803][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.575129][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.598940][ T71] veth1_macvtap: left promiscuous mode [ 223.600801][ T71] veth0_macvtap: left promiscuous mode [ 223.603802][ T71] veth1_vlan: left promiscuous mode [ 223.605684][ T71] veth0_vlan: left promiscuous mode [ 223.655315][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 223.658151][ T9] usb 6-1: config 0 has no interfaces? [ 223.660680][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.663593][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 223.670142][ T9] usb 6-1: SerialNumber: syz [ 223.673365][ T9] usb 6-1: config 0 descriptor?? [ 223.908083][ T5960] Bluetooth: hci1: command tx timeout [ 224.253571][ T71] team0 (unregistering): Port device team_slave_1 removed [ 224.322201][ T71] team0 (unregistering): Port device team_slave_0 removed [ 224.388466][ T5960] Bluetooth: hci4: command 0xfc11 tx timeout [ 224.393186][ T5957] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 224.585136][T10934] netlink: del zone limit has 4 unknown bytes [ 224.673432][T10939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1335'. [ 224.677359][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 224.677371][ T40] audit: type=1400 audit(1752305581.290:1056): avc: denied { module_request } for pid=10938 comm="syz.3.1335" kmod="ip_set_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 224.696849][T10939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1335'. [ 224.747845][ T40] audit: type=1400 audit(1752305581.360:1057): avc: denied { mounton } for pid=10942 comm="syz.3.1336" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 224.747890][T10943] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 224.774022][T10943] cramfs: wrong magic [ 224.811708][ T40] audit: type=1400 audit(1752305581.420:1058): avc: denied { read } for pid=10944 comm="syz.3.1337" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.819388][ T40] audit: type=1400 audit(1752305581.420:1059): avc: denied { open } for pid=10944 comm="syz.3.1337" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.828954][ T40] audit: type=1400 audit(1752305581.430:1060): avc: denied { ioctl } for pid=10944 comm="syz.3.1337" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.883725][T10946] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 224.885809][T10946] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 224.889418][T10946] vhci_hcd vhci_hcd.0: Device attached [ 224.895448][T10946] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 224.897504][T10946] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 224.899999][T10946] vhci_hcd vhci_hcd.0: Device attached [ 224.902967][T10946] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 224.905310][T10946] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 224.907856][T10946] vhci_hcd vhci_hcd.0: Device attached [ 224.945124][ T2305] usb 6-1: USB disconnect, device number 20 [ 224.949611][T10945] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 224.956636][T10951] vhci_hcd: connection closed [ 224.958239][ T7321] vhci_hcd: stop threads [ 224.961274][ T7321] vhci_hcd: release socket [ 224.962717][ T7321] vhci_hcd: disconnect device [ 224.965263][T10949] vhci_hcd: connection closed [ 224.966303][T10947] vhci_hcd: connection closed [ 224.966345][ T7328] vhci_hcd: stop threads [ 224.970757][ T7328] vhci_hcd: release socket [ 224.972293][ T7328] vhci_hcd: disconnect device [ 224.973960][ T7328] vhci_hcd: stop threads [ 224.975473][ T7328] vhci_hcd: release socket [ 224.976891][ T7328] vhci_hcd: disconnect device [ 224.977605][ T40] audit: type=1400 audit(1752305581.590:1061): avc: denied { create } for pid=10954 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 224.988057][ T40] audit: type=1400 audit(1752305581.590:1062): avc: denied { ioctl } for pid=10954 comm="syz.2.1338" path="socket:[44391]" dev="sockfs" ino=44391 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 225.008960][T10835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.014001][T10835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.027485][T10835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.041297][T10835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.067702][ T40] audit: type=1400 audit(1752305581.680:1063): avc: denied { write } for pid=10967 comm="syz.2.1340" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 225.082998][T10968] bridge0: port 3(veth0_to_bridge) entered blocking state [ 225.087530][T10968] bridge0: port 3(veth0_to_bridge) entered disabled state [ 225.090366][T10968] veth0_to_bridge: entered allmulticast mode [ 225.094012][T10968] veth0_to_bridge: entered promiscuous mode [ 225.096146][T10968] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.100260][T10968] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 225.104793][T10968] bridge0: port 3(veth0_to_bridge) entered blocking state [ 225.107595][T10968] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 225.139731][T10835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.141069][ T40] audit: type=1400 audit(1752305581.750:1064): avc: denied { read } for pid=10969 comm="syz.2.1341" dev="nsfs" ino=4026533500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 225.148667][ T40] audit: type=1400 audit(1752305581.750:1065): avc: denied { open } for pid=10969 comm="syz.2.1341" path="net:[4026533500]" dev="nsfs" ino=4026533500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 225.149826][T10835] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.168399][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.170759][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.178805][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.181801][ T7321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.292660][T10835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.418759][T10835] veth0_vlan: entered promiscuous mode [ 225.423508][T10835] veth1_vlan: entered promiscuous mode [ 225.438584][T10835] veth0_macvtap: entered promiscuous mode [ 225.442376][T10835] veth1_macvtap: entered promiscuous mode [ 225.451347][T10835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.459108][T10835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.462795][T10835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.466756][T10835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.469596][T10835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.472915][T10835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.504948][T10989] 9pnet_fd: Insufficient options for proto=fd [ 225.542462][T10996] ------------[ cut here ]------------ [ 225.544460][T10996] WARNING: CPU: 1 PID: 10996 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 225.547966][T10996] Modules linked in: [ 225.549484][T10996] CPU: 1 UID: 0 PID: 10996 Comm: syz.3.1345 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 225.555179][T10996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.558804][T10996] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 225.561257][T10996] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 0b f2 7b 0e 00 75 0b c6 05 02 f2 7b 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 225.568667][T10996] RSP: 0018:ffffc90005eb78d8 EFLAGS: 00010246 [ 225.571200][T10996] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 225.574511][T10996] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040d40 [ 225.577239][T10996] RBP: 0000001000008b00 R08: 0000000000000007 R09: 0000000000000000 [ 225.579713][T10996] R10: 0000001000008b00 R11: 0000000000000001 R12: 0000000000000019 [ 225.582169][T10996] R13: 1ffff92000bd6f30 R14: 0000001000008b00 R15: 0000000000000019 [ 225.585618][T10996] FS: 00007ff12cecc6c0(0000) GS:ffff8880d6815000(0000) knlGS:0000000000000000 [ 225.589877][T10996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.592649][T10996] CR2: 0000200000001000 CR3: 0000000031f76000 CR4: 0000000000352ef0 [ 225.595937][T10996] Call Trace: [ 225.597313][T10996] [ 225.598663][T10996] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 225.601251][T10996] ? kasan_quarantine_put+0x10a/0x240 [ 225.603555][T10996] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.605573][T10996] ? kfree+0x2b4/0x4d0 [ 225.606868][T10996] ? p9_client_clunk+0x12a/0x170 [ 225.608622][T10996] ? p9_client_clunk+0x12f/0x170 [ 225.610217][T10996] ? v9fs_fid_get_acl+0x7a/0x120 [ 225.611788][T10996] __alloc_pages_noprof+0xb/0x1b0 [ 225.613414][T10996] ___kmalloc_large_node+0x84/0x1e0 [ 225.615045][T10996] ? v9fs_fid_get_acl+0x7a/0x120 [ 225.616719][T10996] __kmalloc_large_node_noprof+0x1c/0x70 [ 225.618479][T10996] __kmalloc_noprof.cold+0xc/0x61 [ 225.620101][T10996] ? __pfx_iget5_locked+0x10/0x10 [ 225.621690][T10996] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 225.623596][T10996] v9fs_fid_get_acl+0x7a/0x120 [ 225.625108][T10996] v9fs_get_acl+0xee/0x530 [ 225.626707][T10996] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 225.628472][T10996] v9fs_mount+0x4fd/0xa30 [ 225.628473][T10978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.629885][T10996] ? __pfx_v9fs_mount+0x10/0x10 [ 225.633835][T10978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.634022][T10996] ? cap_capable+0xb3/0x250 [ 225.636907][T10978] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 225.637738][T10996] ? __pfx_v9fs_mount+0x10/0x10 [ 225.641431][T10996] legacy_get_tree+0x109/0x220 [ 225.643496][T10996] vfs_get_tree+0x8e/0x340 [ 225.644893][T10996] path_mount+0x1414/0x2020 [ 225.646401][T10996] ? kmem_cache_free+0x2d1/0x4d0 [ 225.647964][T10996] ? __pfx_path_mount+0x10/0x10 [ 225.649504][T10996] ? putname+0x154/0x1a0 [ 225.650844][T10996] __x64_sys_mount+0x28d/0x310 [ 225.652353][T10996] ? __pfx___x64_sys_mount+0x10/0x10 [ 225.654051][T10996] do_syscall_64+0xcd/0x4c0 [ 225.655704][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.657562][T10996] RIP: 0033:0x7ff12bf8e929 [ 225.658969][T10996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.664946][T10996] RSP: 002b:00007ff12cecc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.667607][T10996] RAX: ffffffffffffffda RBX: 00007ff12c1b5fa0 RCX: 00007ff12bf8e929 [ 225.670083][T10996] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 225.672550][T10996] RBP: 00007ff12c010b39 R08: 0000200000000580 R09: 0000000000000000 [ 225.675015][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.677556][T10996] R13: 0000000000000000 R14: 00007ff12c1b5fa0 R15: 00007ffed1667f58 [ 225.680017][T10996] [ 225.681016][T10996] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 225.683298][T10996] CPU: 1 UID: 0 PID: 10996 Comm: syz.3.1345 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 225.687000][T10996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.690309][T10996] Call Trace: [ 225.691377][T10996] [ 225.692314][T10996] dump_stack_lvl+0x3d/0x1f0 [ 225.693823][T10996] panic+0x71c/0x800 [ 225.695067][T10996] ? __pfx_panic+0x10/0x10 [ 225.696489][T10996] ? show_trace_log_lvl+0x29b/0x3e0 [ 225.698125][T10996] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 225.700032][T10996] check_panic_on_warn+0xab/0xb0 [ 225.701590][T10996] __warn+0xf6/0x3c0 [ 225.702823][T10996] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 225.704724][T10996] report_bug+0x3c3/0x580 [ 225.706078][T10996] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 225.707969][T10996] handle_bug+0x184/0x210 [ 225.709354][T10996] exc_invalid_op+0x17/0x50 [ 225.710798][T10996] asm_exc_invalid_op+0x1a/0x20 [ 225.712319][T10996] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 225.714580][T10996] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 0b f2 7b 0e 00 75 0b c6 05 02 f2 7b 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 225.720458][T10996] RSP: 0018:ffffc90005eb78d8 EFLAGS: 00010246 [ 225.722239][T10996] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 225.724732][T10996] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040d40 [ 225.727230][T10996] RBP: 0000001000008b00 R08: 0000000000000007 R09: 0000000000000000 [ 225.729688][T10996] R10: 0000001000008b00 R11: 0000000000000001 R12: 0000000000000019 [ 225.732146][T10996] R13: 1ffff92000bd6f30 R14: 0000001000008b00 R15: 0000000000000019 [ 225.734636][T10996] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 225.736604][T10996] ? kasan_quarantine_put+0x10a/0x240 [ 225.738277][T10996] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.739924][T10996] ? kfree+0x2b4/0x4d0 [ 225.741223][T10996] ? p9_client_clunk+0x12a/0x170 [ 225.742785][T10996] ? p9_client_clunk+0x12f/0x170 [ 225.744384][T10996] ? v9fs_fid_get_acl+0x7a/0x120 [ 225.745934][T10996] __alloc_pages_noprof+0xb/0x1b0 [ 225.747523][T10996] ___kmalloc_large_node+0x84/0x1e0 [ 225.749144][T10996] ? v9fs_fid_get_acl+0x7a/0x120 [ 225.750688][T10996] __kmalloc_large_node_noprof+0x1c/0x70 [ 225.752375][T10996] __kmalloc_noprof.cold+0xc/0x61 [ 225.753980][T10996] ? __pfx_iget5_locked+0x10/0x10 [ 225.755556][T10996] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 225.757411][T10996] v9fs_fid_get_acl+0x7a/0x120 [ 225.758921][T10996] v9fs_get_acl+0xee/0x530 [ 225.760366][T10996] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 225.762088][T10996] v9fs_mount+0x4fd/0xa30 [ 225.763479][T10996] ? __pfx_v9fs_mount+0x10/0x10 [ 225.765000][T10996] ? cap_capable+0xb3/0x250 [ 225.766428][T10996] ? __pfx_v9fs_mount+0x10/0x10 [ 225.767958][T10996] legacy_get_tree+0x109/0x220 [ 225.769483][T10996] vfs_get_tree+0x8e/0x340 [ 225.770887][T10996] path_mount+0x1414/0x2020 [ 225.772340][T10996] ? kmem_cache_free+0x2d1/0x4d0 [ 225.773930][T10996] ? __pfx_path_mount+0x10/0x10 [ 225.775491][T10996] ? putname+0x154/0x1a0 [ 225.776857][T10996] __x64_sys_mount+0x28d/0x310 [ 225.778364][T10996] ? __pfx___x64_sys_mount+0x10/0x10 [ 225.780060][T10996] do_syscall_64+0xcd/0x4c0 [ 225.781504][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.783380][T10996] RIP: 0033:0x7ff12bf8e929 [ 225.784783][T10996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.790679][T10996] RSP: 002b:00007ff12cecc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.793364][T10996] RAX: ffffffffffffffda RBX: 00007ff12c1b5fa0 RCX: 00007ff12bf8e929 [ 225.795819][T10996] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 225.798256][T10996] RBP: 00007ff12c010b39 R08: 0000200000000580 R09: 0000000000000000 [ 225.800696][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.803168][T10996] R13: 0000000000000000 R14: 00007ff12c1b5fa0 R15: 00007ffed1667f58 [ 225.805610][T10996] [ 225.807266][T10996] Kernel Offset: disabled [ 225.808619][T10996] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:33:02 Registers: info registers vcpu 0 CPU#0 RAX=00000000001e4007 RBX=0000000000000000 RCX=ffffffff8b883c79 RDX=0000000000000000 RSI=ffffffff8de32a0e RDI=ffffffff8c158f60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98350 R15=0000000000000000 RIP=ffffffff8b8827df RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6715000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8494cd1a4d26d4ea d8491060af222b39 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 df1c1a037a4f83cb 51f3b15b87743332 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a7d317221bd84ce1 3d0e4ea57c4b73be ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d011aa1dd8b76e0 a2399e0934a9bbb0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010c80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c00000046000000 0000203c89ccf625 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000018000000 380000001a000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3200000089cccd0f 000006ed89ccc7fc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 89cd563b89cf35e1 d80000000000014d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a700ce319236561 199fbf16c8a7bc5e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d77c1902aceb16d 364b4bf61853a5ad ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bc1e5 RDI=ffffffff9b0c52a0 RBP=ffffffff9b0c5260 RSP=ffffc90005eb7240 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000005b R14=ffffffff9b0c5260 R15=ffffffff855bc180 RIP=ffffffff855bc20f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff12cecc6c0 ffffffff 00c00000 GS =0000 ffff8880d6815000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=0000000031f76000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000020001 Opmask02=00000000ffff7fdf Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005612fffdbe00 00005612fffdbe00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005612fffbf9e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feff21f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feff21f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c431d1c1a141601 5c43000611171d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4b7f752e92c64a2 0000561661330ee9 0000000000000411 0000000000000031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002d1 0000000000000070 32706f6f6c2f6b00 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c2c346d2c 383261722c463831 2c4538312c443831 2c4338312c423831 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4138312c393831 2c3838312c373831 2c3638312c353831 2c3438312c333831 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c3238312c313831 2c3038312c463731 2c4537312c443731 2c4337312c423731 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4137312c393731 2c3837312c373731 2c3637312c353731 2c3437312c333731 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000017a0a7 RBX=0000000000000002 RCX=ffffffff8b883c79 RDX=0000000000000000 RSI=ffffffff8de32a0e RDI=ffffffff8c158f60 RBP=ffffed1003c53910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801e29c880 R14=ffffffff90a98350 R15=0000000000000000 RIP=ffffffff8b8827df RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6915000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555564d2f808 CR3=0000000033b57000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c46c97f600 000055c46c97f600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe40cc0400 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f636f6c6c615f5f 20353339343a632e 636f6c6c615f6567 61702f6d6d207461 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656a626f3a755f6d 65747379733d7478 65746e6f63742074 5f6d64617379733a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f6d6461737973 3a746f6f723d7478 65746e6f63732030 3035333335363230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343d6f6e69202273 66736e223d766564 20225d3030353333 35363230345b3a74 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e223d68746170 2022313433312e32 2e7a7973223d6d6d 6f63203936393031 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff91f3e000 RDX=ffffc90003b5ef4d RSI=0000000000000001 RDI=ffffffff91335970 RBP=ffffc90003b5ef60 RSP=ffffc90003b5eea8 R8 =ffffffff91f3e004 R9 =0000000000000000 R10=0000000000000000 R11=00000000000a87d0 R12=ffffc90003b5ef68 R13=ffffc90003b5ef18 R14=ffffc90003b5ef4d R15=0000000000000002 RIP=ffffffff816adc61 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556f04a500 ffffffff 00c00000 GS =0000 ffff8880d6a15000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe489ce56c0 CR3=0000000051efd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca5300380 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe489011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe489011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe489011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe489011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe489011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe489011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000