last executing test programs: 2.359779998s ago: executing program 0 (id=507): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000000)='\x00\x00', 0x2, 0x0, &(0x7f0000000080)={0x11, 0x2, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x20044055) read$FUSE(r3, &(0x7f0000000cc0)={0x2020}, 0x2020) 2.359375776s ago: executing program 0 (id=508): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x1, 0xf, "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", 0x7, 0xe, 0xf1, 0x2, 0xfe, 0x8, 0x9, 0x1}}}, 0x120) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12021, 0x0) sendmsg$sock(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)="9e71b93506a6a947b3a82beeafee9cf8", 0x10}], 0x1}, 0x20000011) 1.500032764s ago: executing program 0 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x2f, 0x1, 0x3, "1c13ebdaf2f20d57185fd75a206d58e85b2197edb1479b0400", 0x32315241}) 1.498768643s ago: executing program 0 (id=528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "bb7428fe2cdc0e6f62d65877624ccfc5"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x37}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_PMKID={0x14, 0x55, "20e1ce555fab101f65edbe4721b47bea"}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x410, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x3f4, 0x5, 0x0, 0x1, [{0x11c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ac}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xc6b99d0791165774}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x114, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}]}, 0x410}, 0x1, 0x0, 0x0, 0x40000}, 0x40004000) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x29, 0xfa, 0x2, 0x1, 0x4e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x1, 0x7fff, 0x9}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0x3, 0x6}}, './file0\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x13, &(0x7f0000000700)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @generic={0x8, 0x7, 0xf, 0xfff, 0x40}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0x1dff47bc1de5db5f, 0x3, 0x0, 0x4}], &(0x7f00000007c0)='GPL\x00', 0x0, 0x1d, &(0x7f0000000800)=""/29, 0x40e00, 0x0, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x3, 0x6, 0x0, 0x83a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r6], 0x0, 0x10, 0x9, @void, @value}, 0x94) lseek(r3, 0xe3af, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b00)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff0001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x120, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x79, 0xa8, @random="11ef0606259ebc3c9a43ccd7e1af2fe5c92377defbe15a57d3e16c77df8f109916758e5dfe2b7fbe74af71d35d8726fbe8cd04f6d3bb43c0eb2c494236e439939666c8630f51accea741bb053a15f69b909036f9ed762e89e0e5c2381c99746213a049b2240288a04d0a210190448570ee1c6c587b"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = socket$caif_seqpacket(0x25, 0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r8, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x54, r9, 0x100, 0x70bd27, 0xfb61, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c0}, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000001040)={{0x9, 0x7, 0x6, 0x800, 'syz0\x00', 0x7}, 0x1, [0x0, 0x2, 0xffffffffffffff76, 0x100000001, 0x5, 0x88, 0x3, 0x0, 0x4, 0x3, 0x8e, 0xe7c, 0x6, 0xf, 0x0, 0x1ff, 0x0, 0x4, 0xf, 0x8, 0x8001, 0x74c800, 0x1, 0x3, 0x6, 0x54133748, 0x0, 0x100, 0x32, 0x6, 0x8, 0x10000, 0x10000, 0x7, 0x1, 0x5, 0x3, 0x9, 0x100, 0xe, 0x3, 0xffffffffffff78ba, 0x5, 0x219, 0x10000, 0x279b5951, 0x4, 0x8, 0x1ff, 0x2, 0xfffffffffffffffc, 0x2, 0x3, 0x5, 0x0, 0xcd81, 0x9, 0x2a, 0x5, 0x0, 0x0, 0x2, 0x7, 0x6543, 0x6, 0x0, 0x10000, 0x5, 0x1, 0x80000001, 0x5, 0x0, 0x0, 0x400, 0x8, 0x7, 0x490a, 0x6, 0x100000001, 0x4, 0x6cb5, 0x1, 0xb64, 0x1, 0x1, 0x5, 0xb, 0x2, 0x8, 0x5, 0x7, 0x8, 0x8, 0x4, 0x1, 0x3, 0x1, 0xda, 0x10, 0xff, 0xfff, 0x5, 0x2, 0x6, 0x5d, 0x375, 0xbc, 0x3, 0x6, 0x6, 0x101, 0x9, 0xfffffffffffff001, 0x4, 0x5, 0x4, 0x100000000, 0x5, 0x7fffffffffffffff, 0x1, 0x1, 0x80000001, 0x2, 0x4, 0xa5e, 0x5, 0x100, 0x100000000]}) ioctl$RTC_VL_CLR(r5, 0x7014) socket$inet6(0xa, 0x5, 0x39b) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001540)={0x1, [0x0]}, &(0x7f0000001580)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000015c0)={r11}, &(0x7f0000001600)=0x8) syz_emit_vhci(&(0x7f0000001640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0xcc}, @l2cap_cid_signaling={{0xc8}, [@l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x64, 0x7, 0xb, 0x4360}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x36fb, 0xff}}, @l2cap_conf_req={{0x4, 0x1, 0x47}, {0x8, 0x401, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0x1, 0x0, 0xe2, 0x7, 0x1, 0x6d}}, @l2cap_conf_flushto={0x2, 0x2, 0x4b}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0x43}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x2, 0x87f, 0xfff, 0xffff24f2, 0x2}}]}}, @l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0xbb7, 0x8, 0xed, 0x3}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0xad35, 0x327b, 0x8001, 0x8}}, @l2cap_move_chan_req={{0xe, 0xd9, 0x3}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x3, 0x4}, {0x2, 0x2}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x5}}, @l2cap_conf_rsp={{0x5, 0x1, 0x2f}, {0x6, 0x1000, 0x1ff, [@l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x0, 0x5, 0x0, 0x4, 0xb}}, @l2cap_conf_flushto={0x2, 0x2, 0x1}]}}, @l2cap_create_chan_req={{0xc, 0xfb, 0x5}, {0xb, 0x0, 0x17}}]}}, 0xd1) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000001740), &(0x7f0000001780)=0x4) syz_emit_vhci(&(0x7f00000017c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@none, "3db0ccdbc8ef00e8519657d06a0a4a9f", 0x7b}}}, 0x1a) recvmmsg(r2, &(0x7f0000003f80)=[{{&(0x7f0000001800)=@ieee802154, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001880)=""/90, 0x5a}, {&(0x7f0000001900)=""/107, 0x6b}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/12, 0xc}, {&(0x7f00000029c0)=""/173, 0xad}], 0x5, &(0x7f0000002b00)=""/4096, 0x1000}, 0xd70f}, {{&(0x7f0000003b00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003b80)=""/210, 0xd2}, {&(0x7f0000003c80)}, {&(0x7f0000003cc0)=""/121, 0x79}, {&(0x7f0000003d40)=""/186, 0xba}, {&(0x7f0000003e00)=""/30, 0x1e}, {&(0x7f0000003e40)=""/26, 0x1a}], 0x6, &(0x7f0000003f00)=""/107, 0x6b}, 0x4}], 0x2, 0x2, &(0x7f0000004000)={0x77359400}) 1.108336992s ago: executing program 1 (id=530): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400581, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) (async) fcntl$getown(r0, 0x9) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000240)={r1, 0xf0f}) (async) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000001240)={0x7, 0x0, [{0xc0000000, 0x0, 0x7, 0x81, 0x4}, {0x1, 0x3, 0xffff, 0x2, 0x80000000}, {0xc0000000, 0x800, 0x80000001, 0x1, 0x4}, {0x80000008, 0x1, 0x3, 0x7, 0x7}, {0xc000001f, 0x0, 0xfffffffb, 0x2, 0x20d}, {0x40000001, 0x1000000, 0x308fa6ec, 0x8, 0x7}, {0x40000001, 0xffa, 0x0, 0x584, 0x6}]}) (async) r2 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f0000001300)={0x2, 0x4e21, @private=0xa010102}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0xa10}}, './file0\x00'}) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000001380)=""/4096) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002380)={0xa, @sliced={0x7, [0xc3, 0x7, 0x7, 0x0, 0x4, 0x8, 0x17, 0x7, 0xfff7, 0x4, 0x7, 0x6, 0x3, 0x1000, 0x0, 0x4, 0x8, 0x3c0, 0x6, 0x3, 0x40d6, 0xc, 0xc773, 0x0, 0x2, 0x2, 0x6, 0x9, 0x7, 0x1000, 0x17a, 0x8, 0x200, 0x1, 0xff, 0x9, 0x0, 0x5, 0xe53, 0x3, 0x5, 0x9, 0xfa17, 0x2, 0xfc00, 0x9, 0x2, 0x8001], 0x101}}) r4 = syz_open_dev$sndctrl(&(0x7f0000002480), 0x0, 0x200000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000024c0)=""/248) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000025c0)=0x7) (async) futex(&(0x7f0000002600)=0x2, 0x9, 0x2, &(0x7f0000002640)={0x77359400}, &(0x7f0000002680)=0x1, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002740)={'ip6_vti0\x00', &(0x7f00000026c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x42, 0x7f, 0x8, @private1, @local, 0x80, 0x40, 0xb08, 0xdd}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002800)={'ip6_vti0\x00', &(0x7f0000002780)={'syztnl1\x00', r5, 0x29, 0xf, 0x4, 0x100, 0x18, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, 0x80, 0x40, 0x5, 0x2}}) (async) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000002840)) clock_gettime(0x0, &(0x7f0000002880)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002900)={{r6, r7+10000000}, {r8, r9+60000000}}, &(0x7f0000002940)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000002980)=0x3) (async) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f0000002a00)={0x0, 0x8, 0x4, '\x00', &(0x7f00000029c0)=0x15}) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000002a80), r3) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000002bc0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x98, r11, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x44001}, 0x4040000) recvmmsg(r2, &(0x7f0000002c00), 0x0, 0x10004, &(0x7f0000002c40)={0x77359400}) r12 = accept4$inet6(r0, 0x0, &(0x7f0000002c80), 0x800) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000002cc0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf, r5}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002d00)=""/36, 0x24}], 0x1) 1.10731721s ago: executing program 1 (id=532): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}, {@dev}, {@dev}]}]}}}}}}}, 0x0) 1.049551863s ago: executing program 1 (id=533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="eb4c4142c0a0e09e", 0x8}, {&(0x7f00000002c0)="37c502f55d9aea335dea80d1bcdacabac7080ca18293eb93d460bdc0a47285a458ac6bcc6795551361", 0x29}, {&(0x7f0000000300)="cb1890f9fdf9944e47ed5a4b5fc89d0e5e26b85046", 0x15}, {&(0x7f0000000340)="a3783986116a9e29041f5baec26bed8a0055ac180d63b4f876b14b01456aedef5667af4b90ad1a3d1271246f92de061bffcddb73b5d42ff0bdc974ca8b033498ff77c4474a239aa99accd061f3fda9d64f6e9232ccfbc1bbca3b8689204727cee2f2a7041dc0818e590b3fdb8d", 0x6d}, {&(0x7f0000000440)="9461c6540f18d9be6ab97adc6d22250613947d38fca5c99e2c465ebe622076fbc21629a2ef6202070b9ce4b4f899d2399fb92d2ec1835ed94382739d79d9da5eb97d44a11b7dcc99f49ef324cc7150e8464996efd393abfe1a57da6c8ace0ce0fea5122ba47a37ea54276f72d9a2e722793945a2cf0ae400ac8ee839ab3e3fb3e282d6aea172c72ed96481fa063b30dd56beb0e5063d199a016bf20c8e0fee69189e4baf5824a972cd8617175c51e21fbbcdc48d1f9154ed8af8", 0xba}, {&(0x7f0000000500)="32e3def5b07c9800e7baebb202f80f6fc1cb1fa277ceb2", 0x17}, {&(0x7f0000000540)="0e947cffad98e5", 0x7}], 0x7, 0x2) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="2b0000000400000000000000000000000100000000000000feffff09ffffffff03"], 0x2b) 1.048323777s ago: executing program 1 (id=534): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000200)=r0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 1.044113432s ago: executing program 1 (id=535): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x3b) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x22d41, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r4 = timerfd_create(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001800038005000400fc000000080002000000000004000500180001801400000000000000000000b72c5d9cf6042ecf000b8ad8c428da07278d5a9666f89a3275353b5f8b5cd848"], 0x44}}, 0x0) timerfd_settime(r4, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000140)={0x10, 0x0, r7}, 0x10) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001fc0)=""/4095, 0xfff}], 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000400)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x202}}, 0x50) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r9, &(0x7f0000000040)) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 928.277478ms ago: executing program 2 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="00000000000000002800128009000100766c404b95ca00540a000018000800080005005ccdef495d3c71656e7f2f59788b3bc88277060c7581", @ANYRES64=r2], 0x50}, 0x1, 0xba01, 0x0, 0x40000}, 0x4004005) 835.610493ms ago: executing program 2 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x86) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0xc, 0xfeff, 0x0, 0x100000, 0x2000000000, 0xfffffffffffffffe, 0x0, 0xfeff}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x5}, 0x0, [0x0, 0x20000, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffe, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x1, 0x1, 0x20, 0x0, 0x7, 0xffffffffffffffff, 0xfffffffffffffffd, 0x10, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x10, 0xfffffffffffffffc, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xb988, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x200, 0x0, 0x0, 0x0, 0x2]}) syz_init_net_socket$ax25(0x3, 0x5, 0xcd00) ioprio_set$uid(0x3, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x5}, &(0x7f0000000480)=0x0, &(0x7f0000000500)) r6 = eventfd2(0x9, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r6, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r7, 0x0) recvfrom(r7, 0x0, 0x0, 0x42, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 779.676664ms ago: executing program 2 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) (async) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, r0, 0x7}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb], 0x0, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000001010400000000000000000a0000003c0002802c00018014000300fe8000000000000000000000000000aa140004f6dacbaa0700000000000000000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010000d040000ff030000000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000002000128009000100766c616e00000000100002800c000200", @ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x490000, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x38, r7, 0x6}, 0xc) (async) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000140)={@multicast1, @private=0xa010101, 0x0, "084e4c86fc7082f5aefcc0b489a9943bfe839a4399376ae839c26e2eff6518e7", 0x8, 0x7, 0x89a, 0x1}, 0x3c) (async) signalfd4(r4, &(0x7f0000000580)={[0x3327ce19]}, 0x8, 0x0) (async) sendto$packet(r1, &(0x7f0000000500)="d7d1ae72fbe4a4692120b62cdfca01533ce834ab04002f64493ff0478cb44a18cf59ca382860e1178831797c303a15fb4bc769cdcd25dd7cab84", 0x3a, 0x40005, &(0x7f0000000540)={0x11, 0x15, r7, 0x1, 0x4, 0x6, @link_local}, 0x14) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f00000001c0)=0x1, 0x4) (async) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x80, 0xda, 0x900000, 0x2, 0x76e, 0x6, 0xd6dc, 0x6, 0x1000, 0xa0, 0xfffffffffffffff8, 0x4, 0x0, 0x80, 0x9, 0xfff], 0x0, 0x8100}) 649.717117ms ago: executing program 2 (id=541): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2d8001, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0x9, 0x0, [0x4, 0x4, 0x1ff, 0x4, 0x8000], [0x7, 0x8, 0x1, 0x5, 0x8000000000000001, 0x0, 0x7, 0x1, 0x6, 0x5, 0x8, 0xfffffffffffff920, 0x6, 0x6, 0x100000000, 0x4, 0x8, 0xc32, 0xa, 0xffffffffffff8001, 0x5, 0xff, 0x7, 0xffffffffffffffff, 0x80000000, 0x7, 0x2, 0x5, 0xfffffffffffffffa, 0x3, 0x6de, 0x8, 0x80000000, 0x7, 0x0, 0x8, 0x7, 0xa0000, 0x3, 0x7ff, 0x96, 0x9b, 0x7e, 0xed3, 0x8001, 0x0, 0x5, 0x9, 0x2, 0x9, 0x40, 0x7, 0x8, 0x2, 0x1ff, 0x7, 0x52c, 0x7, 0x3, 0xe858, 0x6, 0x100, 0x7fffffffffffffff, 0x3d, 0x8, 0x0, 0x6, 0x9168, 0xf, 0x80000000, 0x2, 0x1000, 0x2, 0x7, 0x9db, 0x0, 0x80000000, 0xa4d, 0x663, 0x0, 0x100, 0x5, 0x9, 0x6, 0x6, 0x6, 0x7fffffff, 0x3, 0x7fffffffffffffff, 0x8, 0x19b, 0x4, 0x7, 0x40, 0x4f, 0x7, 0xffffffffffffffff, 0x7fffffffffffffff, 0x8, 0x4, 0x2, 0x0, 0x9, 0x9, 0x8, 0x5, 0x8, 0x2, 0x2, 0x80000000, 0x34b, 0x10000, 0xffffffffffff7425, 0x7, 0x8ab, 0x5, 0x5, 0x8, 0xfff, 0x80000001, 0x9]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000480)={0x0, 0x7, 0x1, [0xbd2f, 0x2df6, 0x9, 0xe8f, 0x776a], [0x4, 0x3, 0x2, 0x2, 0xffffffffffffffff, 0x7ff, 0x772b56b3, 0x0, 0x3, 0x7, 0xd, 0x4, 0x9, 0xffffffff, 0xc, 0x1000, 0x8000000000000000, 0x41b, 0xffffffffffffffff, 0x4, 0x80, 0x1000, 0x3, 0x40000000000000, 0x800100000000000, 0x1, 0x5, 0x2, 0x3ff, 0x79b, 0xe7fe0000, 0x7, 0x9, 0x8000000000000000, 0x9, 0xfff, 0x57, 0x4c9, 0x3, 0x10, 0x1, 0x5, 0x7, 0x6, 0x9, 0x7, 0x81, 0xde, 0x0, 0x7ff, 0xfffffffffffffffd, 0x6, 0xffffffffffffff2e, 0xc, 0x31e, 0x0, 0x2, 0x8, 0x1, 0xffffffffffffffff, 0x1, 0x3, 0x7, 0x8001, 0x41, 0x3, 0x0, 0x0, 0x3, 0xefbe, 0x8, 0x2, 0xd93, 0x2, 0xc00000000000, 0x2, 0x7fff, 0x3, 0xd, 0x100000001, 0x5, 0x5, 0x6, 0x6, 0xffff, 0x8, 0x3, 0xc, 0x30000, 0xf8, 0xfffffffffffffc01, 0x0, 0x2, 0x80000000000, 0xfffffffffffffff7, 0x7, 0x6, 0x2, 0xffffffffffffffff, 0x8000000000000000, 0x2, 0x5, 0x2, 0x8000000000000001, 0x100000000, 0x9, 0x7, 0x4, 0x3, 0x6, 0x8, 0x8, 0x378, 0x40, 0x9, 0x100, 0x1, 0xffffffffffffffff, 0x6, 0x6, 0x4]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000008c0)={0x0, 0x6, 0x7, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000cc0)={0x1e, 0x1, {0x7ff, @usage=0x6, r1, 0x5, 0x2, 0x4, 0x8, 0x2, 0x4, @usage=0x92d6, 0x9, 0x40, [0x38f86d82, 0x23b, 0x8, 0x4, 0xefeb, 0x2]}, {0x144, @usage=0x3f, r2, 0xfffffffffffffff7, 0xe0, 0xffffffff, 0xb61, 0x7ff, 0x21, @struct={0x6, 0x3}, 0xffff, 0xff, [0x9, 0x7, 0x5, 0x390c, 0x2, 0x8]}, {0x9, @usage, r3, 0x3, 0x9, 0x17b, 0x9, 0x5, 0x448, @usage=0x4, 0xfffff838, 0x0, [0x0, 0x5, 0xd42d, 0x2b0a, 0x800, 0x2]}, {0x1ff, 0x2, 0x6be}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r5, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc801}, 0x20040001) bpf$ENABLE_STATS(0x20, &(0x7f0000001200), 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000001240)={0xc8c2, 0xc, 0x0, 0xca}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={r0, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000001380)=[{}, {}], 0x10, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0xec, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000015c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000016c0)={'syztnl1\x00', &(0x7f0000001600)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x4, 0xb, {{0x27, 0x4, 0x0, 0x1, 0x9c, 0x67, 0x0, 0x3, 0x0, 0x0, @private=0xa010101, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x97, 0x1, 0x3, [{@multicast2, 0x8}, {@remote, 0xfffffff2}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x1c1a0}, {@multicast1, 0x7}]}, @noop, @lsrr={0x83, 0xb, 0xd1, [@loopback, @multicast2]}, @generic={0x88, 0x7, "8d15ae722b"}, @noop, @timestamp_prespec={0x44, 0x34, 0x8b, 0x3, 0x9, [{@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff88a}, {@broadcast, 0x874}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}, {@remote, 0x6}, {@remote, 0x9d92390}]}, @cipso={0x86, 0x15, 0x1, [{0x1, 0xf, "7391959b8a5aaf6d7a76661d64"}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000017c0)={'gre0\x00', &(0x7f0000001700)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0xd9, 0x9f6, {{0x20, 0x4, 0x0, 0x6, 0x80, 0x64, 0x0, 0xfa, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x13, 0x3c, [@loopback, @local, @broadcast, @broadcast]}, @timestamp={0x44, 0x10, 0x1f, 0x0, 0x2, [0x100, 0xff, 0x5]}, @rr={0x7, 0x2b, 0x9, [@broadcast, @rand_addr=0x64010102, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x27, 0x3, 0x9, [{@local, 0x7f}, {@remote, 0x9}, {@loopback, 0x1ff}]}, @end]}}}}}) getpeername$packet(r0, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001a40)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001880)={0x14c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) bind$xdp(r0, &(0x7f0000001a80)={0x2c, 0x4, r8, 0x11, r0}, 0x10) r11 = syz_io_uring_setup(0x3f81, &(0x7f0000001ac0)={0x0, 0x433b, 0x2000, 0x0, 0x15b, 0x0, r0}, &(0x7f0000001b40), &(0x7f0000001b80)) ioctl(r11, 0xfffffffa, &(0x7f0000001bc0)="c7a678292030584a2386326d2ce9cd9902c1871ce9c8ff98058e16769fdf8a73a3148ad66b2ea5fa1ba371b9f8c615e03a7dad48a65ee94569ff361d8cc11561b5e1f3bb0604406c3077d93fc757b7a32c6e42767fe23d8da6d8e395f4526bf0ddebedcdc48cbc6bb64e4c73b35f87687b757e3a1137f345896851642cb0faa7eb77a9c2ba138cf409566dede43f27e543ed0dfb87") r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001cc0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000001e40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xd0, r12, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004885}, 0x0) getdents64(r0, &(0x7f0000001e80)=""/4096, 0x1000) getsockname$packet(r0, &(0x7f0000002e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002ec0)=0x14) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000002f00)=0xa0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000002f40)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000002fc0)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002f80)='wg0\x00', 0x3, 0x6, 0x5}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000003040)=0x8, 0x4) fcntl$setstatus(r4, 0x4, 0x44800) io_setup(0x100, &(0x7f0000003080)) 647.843637ms ago: executing program 0 (id=543): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x1b, 0x1a, 0x1}, 0x1c}}, 0x0) (async, rerun: 32) shutdown(r0, 0x1) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)="9cdedb135a39f7b5015a3d3fb66dee85ba3902eb41695425ef907aaa8acca03f84df675cfd69693957bea03c60a24d6d1a542d314cc7bc", 0x37) 647.125517ms ago: executing program 0 (id=544): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000ffffff00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) setsockopt$sock_cred(r1, 0x1, 0x10, &(0x7f00000015c0), 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080), 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000140)={0xa, 0x4e20, 0x1, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="ea9bbf8fe9907d856a97a96b5fa6b4e2edeb297b24565b21d4eef0e2c21d37392071b7c4541dd541164dd0132afd8258b496df9c", 0x34}, {&(0x7f0000000300)="1fe4760c2d9a6b265b4187d0d3f99836f9a59ffc812ec91e59fa375d7fa60e85484de4b28f25fa3de57a3d4f2914f86aa1d2785c901e104f1a4b8cd443b734ef11c7aa52bd9c885609175a25e925374e0a50a352c4c3fd2a7099e5c36601ab26b60d7f16af26e3ad54100e319a3893e6cbb92b7a2fd123a74e00da57f1c474f6017cddf96ff63daac2e0a7308303df7c294f7c76fb48dc805d8de8dcf04528b0f03b25bb214aa7a404d4fe725e57d8350db01a83f4c14d8f65056167e3cd16178335d7fdfbc1eaafc382afaa912b51140af0f36199d01126ae", 0xd9}, {&(0x7f0000000400)="77d1466aa9c277da519ac3ba06c87242276e554342cc9387d3a28e0d04a4b5d326f6be33cf84384b2856783ffe3cddff24abcc9af59e8c278b190b81bbfc79a4b545b89332677d6c8a76ae567126db49df86202eac5052e863e314f2a3d44460a2ad10c5ae4d0a7f84b47eeb6711ab411c0f7b114ab603c142b05ef65319417a354d891178b96b41fd6dbc3d3a8fe70ee83c03a48d885308e964d31d48b071a29bd080f9", 0xa4}, {&(0x7f00000004c0)="fcbc3c70429df544e1a255e37a1d244d729554fbaeaf6aa974f5e3ea87da26594d62416133038379112882b77e174ef16e08f34f7814e811d93a77c54cfc77ca4ed153e153bdefd318cb193e1f9c6638340eaf59847184de4c907487eccb50b3f868d669c2be3e505444ece7cb10b993ac1c3bbbb222ed870c246a3c5787350027a7c233c25a5cff3c0de3b76629be78cdceb0ed756772caf3ec9cb0", 0x9c}], 0x4, &(0x7f0000000580)=[@rthdrdstopts={{0xd0, 0x29, 0x37, {0xc, 0x16, '\x00', [@enc_lim={0x4, 0x1, 0xc8}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x81, 0x8b, "09b5c08352dbfc1e1eaa8137d69ffef147c950e99bf5c0c3305caed7b938dbea1473cd8483b618b6ed6fc78c153871ed66b5f6c14cf1723ae32de3a1b99785ff9ab6933b21cbd6102c1acd8c8b8e29c98899d745f542c8760a0f1eab05c60a90929a2c31f5d87d791e115f6bd2cde846e013d4a96d8b9664a094eca1a389221aac12cd5e910627f2fa20f4"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xd0}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffecd) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000b40)=0x4000000, 0x4) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x10, 0x80002, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10012, r7, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r6, 0xc00c6211, 0x0) r9 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r9, 0x6, 0x10, 0x0, 0x44) set_mempolicy_home_node(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0) 529.338348ms ago: executing program 2 (id=545): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) brk(0x75555ede6001) (async) ioctl$TIOCGPGRP(r1, 0x80186803, &(0x7f0000000100)) read$char_usb(r0, &(0x7f0000001500)=""/4098, 0x1002) (async) pwrite64(r0, &(0x7f0000000040)="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", 0x1000, 0xab) (async) syz_usb_connect(0x6, 0x3df, &(0x7f0000001040)={{0x12, 0x1, 0x110, 0x2f, 0x65, 0x81, 0x8, 0xdf6, 0x68, 0x6efd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3cd, 0x2, 0x7, 0x0, 0x60, 0x4, [{{0x9, 0x4, 0x48, 0x3, 0x1, 0x2f, 0x8, 0xe9, 0x1, [], [{{0x9, 0x5, 0x80, 0x1, 0x40, 0x4, 0x5, 0x3}}]}}, {{0x9, 0x4, 0x4, 0x8, 0xf, 0x10, 0x5f, 0x2f, 0x96, [], [{{0x9, 0x5, 0x1, 0x4, 0x400, 0x2, 0x80, 0x17}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x65, 0x9, 0xdd, [@generic={0x62, 0xb, "2d8cd8a02a9276fac870fbace2b046e468f0783150e1bc946801ca64fc6428ee028465db1f927d867995b9748911cfdb4b3fa003e7f8882826548107e74762e449791736c7520f88bad5f575320ebb9048ca729896f87a71818fa8f09367397b"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0xf9, 0x0, 0x2, [@generic={0x64, 0x6, "04368651eb3bc694ab9f0a81b00ca7db00d290032f85ec11e267578676b7b8ac2560bf46cf08c99585e62af7c898a44b45c90b4ea26a1d6633f60932e535a41aecfc077b670838f402527bd0d7c08451bb925f692f57189284fbc2b684c8372bbc4a"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x7, 0x8, 0xbb, [@generic={0x6f, 0x21, "b4c371b406454be7768ba8d19d571b57c86760bb25f0b3d22c39b3b71bebc6fae63351ae03d6c9fb352d057543a01e70b179f001630a9f2fbc4c2e9a5c3daeca4feba3f5ff12e8ebf115eacb4b9d74b13cb8944870e13e844c123a8b59ff0164b431510ca702fec137a2eb59f0"}, @generic={0xd8, 0x8, "989caf6a7eee1e469c91fbbeae8561a184f76e03f93fbf7f7b5bf72b5db521983d6fcb62ce769cc9aa29f4fc2a726d32986cdffb376617496555cd9bcdd84caea700c53a3d0430009dc481842e721852d8ea5605a9b79ac8121dbb96be921425ccfc65115aca48e55361e9e6f45cf529ba3a59365b5d95cb7764f3bb207db2ed896e5f13c573baed60fa5de5d11662969aad0ef6262b5fd64c6bc2f1940c9f1289ddd0553e637e6703c845e4f6d6a9e182b5c76f708b480696525014bad53a4e73a7596d8986436d7ffa176d7b73c52157382c075c76"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x6, 0x1, 0xeb, [@generic={0x38, 0x6, "1cec3893fffe6ee215c7a045412ecf5666f133e1931d32ccc1e19c903839f0fcea9f1cf01c5b14ccba3d1207bc88e4555202f48d75ac"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}, {{0x9, 0x5, 0x7, 0xe, 0x10, 0xf, 0xfb, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x1, 0x5, 0x9, [@generic={0x3, 0xf, "d6"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x90, 0x2, 0x5e}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0xb, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x8, 0x8, 0x8}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x97, 0x9, 0x4}}, {{0x9, 0x5, 0x12, 0x0, 0x200, 0x8, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xffff}, @generic={0xa2, 0x7, "4daf73594566ac1ce678582a0f852d102a39a10fc972f3004edcd2d7854d578ce66f1d534feed7c25e77572130c88a5b06ece91bc4b4863e5d9eeca08087e5e5e30a1fef1aa0a92632dffeec0cf2ab1d4d7e17f73109a25b4e43caa5fbd9b64af885fb60a220ea65c521df81e13d97f0bcdc241eda582cd5bfe15c8240fe45a641342167343fb5dcb8c5eacd356f5d63f121abe3d8f68919d56efac5a3c6f6a8"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x6, 0x9, 0xa7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xff81}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x7, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x9d, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8}]}}]}}]}}]}}, &(0x7f0000002840)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x200, 0x9, 0xf, 0x42, 0x40, 0x3}, 0x49, &(0x7f0000001480)={0x5, 0xf, 0x49, 0x6, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x800, 0xf00, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "41c012ed94b7720d5dbbdd6875855510"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ce9cae5f8471c09f09e3aa085242af54"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xc, 0x2f, 0x3}]}, 0x8, [{0x4, &(0x7f0000002540)=@lang_id={0x4, 0x3, 0x3c01}}, {0x86, &(0x7f0000002580)=@string={0x86, 0x3, "ebd9c73843cad768c148076293c7c3a02fa8d688f8dae97803cca74a37d877f5db73e4eac27b1a263b32e97657c54840d667acc3c1661a249c7e0ab33309c02467b6e9534bef9373b041ede516a734a3780bef340dcab70b07a6e7522001ffe41399c8a4f6476ca6abded9db756f9564e42b797339958c40e62304863fe57b9b0badf106"}}, {0x12, &(0x7f0000002640)=@string={0x12, 0x3, "29c2ae8fcc6f1453fb44b2420d173147"}}, {0x7, &(0x7f0000002680)=@string={0x7, 0x3, "817691b3e7"}}, {0x80, &(0x7f00000026c0)=@string={0x80, 0x3, "2f08940bad8c7f3330cd80225549e0028b5f7b71094a626e3cd882180936722861fa81b6b2c913d3e4403ce42e0c349f1b6195df7a620f7fc8339f3295146e36822fbdb8dc19e7518bfca8ec4f50f63cd9f2fb2f0cbcc5955283c4674b271b098ffc39e483d37aee597ad1987ec7789a8627afb7a83a1b6cb76bf2877bd8"}}, {0x39, &(0x7f0000002740)=@string={0x39, 0x3, "86bed69689a9fb6f0340d230db7cce949bd76d4d2ee47b471daaaae50bd3c9b62712363363fcf4063ea286476069e91d7d5cb4674e0721"}}, {0x3f, &(0x7f0000002780)=@string={0x3f, 0x3, "80d4d3cc77630c80b938d132cbc55260f3b040fb0986603a1f661baad6fe5258808d13c220e10d65da65da6c76eebfafb21df50ddbe8761962ba1410ef"}}, {0x46, &(0x7f00000027c0)=@string={0x46, 0x3, "80b3c4a2b03d744df7d0d2cd1f3f356bb0379cf4f68a33537af691828505cb6402d6eff9a407338d6b7a6eb6baaa2ccebc3a5f4e04bf96c076528171034def330f0c97da"}}]}) 409.416831ms ago: executing program 3 (id=547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x6, 0x4, 0x28, @remote, @rand_addr=' \x01\x00', 0x700, 0x700, 0x7, 0x24d6}}) connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x4, r2, 0x1, 0x2, 0x6, @link_local}, 0x14) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0xa9, &(0x7f0000000640)=""/169, 0x0, 0x32, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5ba2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) 349.117442ms ago: executing program 3 (id=548): capget(0x0, &(0x7f0000000180)={0x10000, 0xfffffffe}) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x20, 0x0) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) socket(0x2, 0x2, 0x1) (async, rerun: 32) socket$kcm(0x2, 0x5, 0x84) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x5887, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x3400, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000002240)={r12}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f0000000000)={r8}) (async, rerun: 64) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x100000000) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async, rerun: 64) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (rerun: 64) 348.804711ms ago: executing program 3 (id=549): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0xeaf7, 0x80000) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0x9, 0x4) close(r3) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 108.001441ms ago: executing program 3 (id=550): syz_emit_ethernet(0x279, &(0x7f0000000280)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x243, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x7, {0xe, 0x6, "2cfc7b", 0xa65, 0x2b, 0xff, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x3a, 0x12, 0x4, 0x9, 0x5, 0x20, 0x7, [@mcast1, @rand_addr=' \x01\x00', @remote, @empty, @dev={0xfe, 0x80, '\x00', 0xc}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @loopback]}, @srh={0x2, 0x6, 0x4, 0x3, 0x8, 0x0, 0x6, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x2a}]}, @dstopts={0x21, 0x23, '\x00', [@ra={0x5, 0x2, 0xff7f}, @generic={0x6, 0xb8, "1c1d756dbed3a31d5876e2a50bd9f31b25094bcb50e406e8a91d81882eda2383c32a1761b178bf345e555af75aad6dd2e83ed3ebb4219d0a91cd4ce0cc0894bfafabb8da2947859a4c82c50838ce39e020b45e45328f42e83687ec719e4ab7c8dabe73876e7d41be1296b4bf5dcf5daca0e51cd2c5a870235979a75347fa15b7af85ef3329f9675d08b02b466cdbe273a7f7b13489ac5f6bed224f9d2308e3ac11ae61978d5c9dfac3ec12b4e6064edcd26a01fca2fa40c3"}, @generic={0x2, 0x53, "6b535ff3d8b1a3ff0a951d8ddf185a41223623790be8ecce6fe89b36c5ffc4fbea1a93566fce3ca0372b0d8acabf325265ff14f6a23f8c4b46dcb865be67eee2b22ed4c32433a1ca007ccee6effddd747e1e42"}, @pad1, @pad1]}], "61d36eee9283bb8652b7b20751129a098170828d312c617f7046e2"}}}}}}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0x58}, 0x1, 0x0, 0x0, 0x48011}, 0x10044000) 107.076924ms ago: executing program 1 (id=551): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x37, 0x400001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x8, 0x3, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000280)={r3}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000280)={r3}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4a}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0xd, 0x1, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x8, 0xc7, &(0x7f00000003c0)=""/199, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x6, 0x0, 0x5e4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, r4, r4, r4, r4, r4], 0x0, 0x10, 0x1, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4283c2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x402100, 0x0) (async) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x402100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) (async) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_execute_start\x00', r6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_execute_start\x00', r6}, 0x18) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r11, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd26792040000006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d84"], 0x114}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES8=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0xfffffd0c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 106.805614ms ago: executing program 3 (id=552): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x1000, 0x0}, 0x8) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x9, @none}}}, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = getpid() r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004f80)=[{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000005380)="c700ae867af181dc0452ee584771c0c044dc3dedcc695e961e687c5c3eaa0fdc7268a494e27c05cad87d89aa6930693238e2c23cf0935850f3b8f7a9a440f102a14d42bb2fde965a5116a981f867bde50ac5fb96847616a773929a9c6caca05806a24ac429dcd4a17cb39c8468bdddee3d4fbc021b1a1f7a5cb3f27b95919e79a57129edbd734760a4856ca4a66ed8c2f76a29f1d95f7d3efd49155bf6ed7a19ae47c964bd05c956545e06b0c2cabc47fd53ad4952e055bcd4b3b541a355ec66070c4931d864", 0xc6}], 0x1}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)=""/34, 0x22}, {&(0x7f00000002c0)=""/163, 0xa3}], 0x2}}], 0x1, 0x0, 0x0) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f00000000c0)={0x19, 0x2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r2}}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000501000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 59.911668ms ago: executing program 3 (id=553): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x3000) (async) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x3f, &(0x7f0000003540)=0x100, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 0s ago: executing program 2 (id=554): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000000b41b92c81de1d77f0000000000fe80000000810a91b79a0000d94456702c2ae10000000000000000aa00004e200401907821dba20d00060000"], 0x0) 0s ago: executing program 2 (id=555): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x48, 0x19, 0x15, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x2c, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x8000500}}, @typed={0x11, 0xb, 0x0, 0x0, @str='/dev/net/tun\x00'}]}]}, 0x48}], 0x1}, 0x0) (async) write$P9_RLERROR(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000070200010000"], 0xa) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0x80000) kernel console output (not intermixed with test programs): [ 31.070592][ T39] audit: type=1400 audit(1731134282.061:80): avc: denied { write } for pid=5854 comm="sh" path="pipe:[7329]" dev="pipefs" ino=7329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 31.076526][ T39] audit: type=1400 audit(1731134282.061:81): avc: denied { rlimitinh } for pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.081325][ T39] audit: type=1400 audit(1731134282.061:82): avc: denied { siginh } for pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.089156][ T39] audit: type=1400 audit(1731134283.091:83): avc: denied { read } for pid=5342 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.094898][ T39] audit: type=1400 audit(1731134283.091:84): avc: denied { append } for pid=5342 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.100505][ T39] audit: type=1400 audit(1731134283.091:85): avc: denied { open } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.106394][ T39] audit: type=1400 audit(1731134283.091:86): avc: denied { getattr } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:20961' (ED25519) to the list of known hosts. [ 32.438243][ T39] audit: type=1400 audit(1731134283.441:87): avc: denied { name_bind } for pid=5875 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.068007][ T5890] cgroup: Unknown subsys name 'net' [ 34.177112][ T5890] cgroup: Unknown subsys name 'cpuset' [ 34.180261][ T5890] cgroup: Unknown subsys name 'rlimit' [ 34.382774][ T5931] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.944646][ T5890] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.059305][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 37.059321][ T39] audit: type=1400 audit(1731134288.061:105): avc: denied { execmem } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.203798][ T39] audit: type=1400 audit(1731134288.201:106): avc: denied { create } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.213925][ T39] audit: type=1400 audit(1731134288.201:107): avc: denied { read write } for pid=5942 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.220568][ T39] audit: type=1400 audit(1731134288.201:108): avc: denied { open } for pid=5942 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.226742][ T39] audit: type=1400 audit(1731134288.211:109): avc: denied { ioctl } for pid=5942 comm="syz-executor" path="socket:[7374]" dev="sockfs" ino=7374 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.232712][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.248939][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.252422][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.255326][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.257792][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.258469][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.260985][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.262826][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.264965][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.267008][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.268772][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.270164][ T5952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.272203][ T5955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.273079][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.273506][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.273977][ T5952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.275413][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.276397][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.278288][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.279758][ T39] audit: type=1400 audit(1731134288.281:110): avc: denied { read } for pid=5950 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.290955][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.291902][ T39] audit: type=1400 audit(1731134288.281:111): avc: denied { open } for pid=5950 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.301326][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.303343][ T39] audit: type=1400 audit(1731134288.281:112): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.306542][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.312017][ T5947] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.314491][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.442157][ T39] audit: type=1400 audit(1731134288.441:113): avc: denied { module_request } for pid=5950 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.463698][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 37.473048][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 37.513031][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 37.530641][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 37.595348][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.597078][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.599025][ T5950] bridge_slave_0: entered allmulticast mode [ 37.600943][ T5950] bridge_slave_0: entered promiscuous mode [ 37.614640][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.616647][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.618459][ T5944] bridge_slave_0: entered allmulticast mode [ 37.620379][ T5944] bridge_slave_0: entered promiscuous mode [ 37.624195][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.626468][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.628281][ T5944] bridge_slave_1: entered allmulticast mode [ 37.630207][ T5944] bridge_slave_1: entered promiscuous mode [ 37.641042][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.642932][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.644730][ T5950] bridge_slave_1: entered allmulticast mode [ 37.647251][ T5950] bridge_slave_1: entered promiscuous mode [ 37.726231][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.738522][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.746920][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.758724][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.780357][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.782782][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.784699][ T5942] bridge_slave_0: entered allmulticast mode [ 37.787106][ T5942] bridge_slave_0: entered promiscuous mode [ 37.813634][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.815844][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.817810][ T5949] bridge_slave_0: entered allmulticast mode [ 37.819833][ T5949] bridge_slave_0: entered promiscuous mode [ 37.829088][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.831092][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.833151][ T5942] bridge_slave_1: entered allmulticast mode [ 37.835577][ T5942] bridge_slave_1: entered promiscuous mode [ 37.847093][ T5944] team0: Port device team_slave_0 added [ 37.848799][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.850613][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.852441][ T5949] bridge_slave_1: entered allmulticast mode [ 37.854402][ T5949] bridge_slave_1: entered promiscuous mode [ 37.858511][ T5950] team0: Port device team_slave_0 added [ 37.867993][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.871635][ T5944] team0: Port device team_slave_1 added [ 37.881195][ T5950] team0: Port device team_slave_1 added [ 37.883625][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.920010][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.946987][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.948809][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.956162][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.960406][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.963050][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.965226][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.971559][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.976602][ T5942] team0: Port device team_slave_0 added [ 37.978844][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.980509][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.988232][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.999051][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.000871][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.007620][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.013867][ T5942] team0: Port device team_slave_1 added [ 38.049061][ T5949] team0: Port device team_slave_0 added [ 38.051598][ T5949] team0: Port device team_slave_1 added [ 38.053420][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.055405][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.062987][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.092534][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.094424][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.101399][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.121652][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.123512][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.131038][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.145327][ T5950] hsr_slave_0: entered promiscuous mode [ 38.147361][ T5950] hsr_slave_1: entered promiscuous mode [ 38.149735][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.151555][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.157902][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.162561][ T5944] hsr_slave_0: entered promiscuous mode [ 38.164402][ T5944] hsr_slave_1: entered promiscuous mode [ 38.166722][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.168813][ T5944] Cannot create hsr debugfs directory [ 38.233866][ T5942] hsr_slave_0: entered promiscuous mode [ 38.236056][ T5942] hsr_slave_1: entered promiscuous mode [ 38.237840][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.239851][ T5942] Cannot create hsr debugfs directory [ 38.242907][ T5949] hsr_slave_0: entered promiscuous mode [ 38.245500][ T5949] hsr_slave_1: entered promiscuous mode [ 38.247293][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.249309][ T5949] Cannot create hsr debugfs directory [ 38.408941][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.412903][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.420484][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.428719][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.441287][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.461244][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.464442][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.467824][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.491319][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.498994][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.502602][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.506684][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.537679][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.540656][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.543725][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.548421][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.558410][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.569541][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.589943][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.592646][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.602465][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.607322][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.609174][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.630290][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.638824][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.640696][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.648251][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.650104][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.663985][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.693355][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.697615][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.699524][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.703653][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.703746][ T39] audit: type=1400 audit(1731134289.701:114): avc: denied { sys_module } for pid=5944 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.711076][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.712886][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.727356][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.748754][ T215] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.750855][ T215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.757658][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.759557][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.766869][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.786148][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.804755][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.820303][ T5944] veth0_vlan: entered promiscuous mode [ 38.824453][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.832642][ T5944] veth1_vlan: entered promiscuous mode [ 38.846512][ T5950] veth0_vlan: entered promiscuous mode [ 38.853762][ T5950] veth1_vlan: entered promiscuous mode [ 38.863721][ T5944] veth0_macvtap: entered promiscuous mode [ 38.867602][ T5944] veth1_macvtap: entered promiscuous mode [ 38.871599][ T5942] veth0_vlan: entered promiscuous mode [ 38.875646][ T5942] veth1_vlan: entered promiscuous mode [ 38.880974][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.889545][ T5950] veth0_macvtap: entered promiscuous mode [ 38.892420][ T5950] veth1_macvtap: entered promiscuous mode [ 38.896458][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.904424][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.907524][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.910639][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.913096][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.916413][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.918692][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.920901][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.929128][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.932641][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.935984][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.944163][ T5942] veth0_macvtap: entered promiscuous mode [ 38.947350][ T5950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.949544][ T5950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.951639][ T5950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.953890][ T5950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.961321][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.964406][ T5942] veth1_macvtap: entered promiscuous mode [ 38.978638][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.981461][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.983968][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.986963][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.990030][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.001892][ T5949] veth0_vlan: entered promiscuous mode [ 39.008777][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.011482][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.013991][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.017117][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.020235][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.034481][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.034690][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.036869][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.036895][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.036909][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.046445][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.048800][ T5949] veth1_vlan: entered promiscuous mode [ 39.079592][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.081598][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.097871][ T5949] veth0_macvtap: entered promiscuous mode [ 39.100333][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.101047][ T5949] veth1_macvtap: entered promiscuous mode [ 39.102306][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.108077][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.110430][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.120991][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.121331][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.128897][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.131417][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.134086][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.137629][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.140245][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.143846][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.150113][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.152805][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.156281][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.159504][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.162078][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.164789][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.168176][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.172202][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.174293][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.179009][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.181346][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.183619][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.186407][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.190678][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.190692][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.196155][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.229246][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.231441][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.251845][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.253340][ T6010] dccp_invalid_packet: P.Data Offset(59) too large [ 39.253947][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.315752][ T5945] Bluetooth: hci1: command tx timeout [ 39.317362][ T5945] Bluetooth: hci0: command tx timeout [ 39.318851][ T5945] Bluetooth: hci3: command tx timeout [ 39.323841][ T6013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 39.328373][ T6012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 39.333090][ T6019] SELinux: policydb string  does not match my string SE Linux [ 39.335432][ T6019] SELinux: failed to load policy [ 39.369273][ T6021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 39.370924][ T6021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 39.380058][ T6021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 39.395266][ T5947] Bluetooth: hci2: command tx timeout [ 39.397444][ T6021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 39.399071][ T6021] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 39.411052][ T6021] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 39.414014][ T6021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 39.415728][ T6021] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 39.418412][ T6021] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 39.420636][ T6021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 39.422796][ T6021] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 39.424410][ T6029] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 39.426389][ T6029] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 39.429428][ T6021] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 39.429839][ T6029] vhci_hcd vhci_hcd.0: Device attached [ 39.579271][ T6040] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 39.605423][ T6006] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 39.647699][ T6044] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 39.694940][ T5983] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 39.698341][ T5985] usb 44-1: SetAddress Request (2) to port 0 [ 39.700459][ T5985] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 39.707851][ T6047] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 39.717260][ T5945] Bluetooth: hci2: unknown advertising packet type: 0x72 [ 39.717296][ T5945] Bluetooth: hci2: Dropping invalid advertising data [ 39.721000][ T5945] Bluetooth: hci2: Malformed LE Event: 0x02 [ 39.834882][ T5983] usb 8-1: device descriptor read/64, error -71 [ 39.896688][ T6048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 39.984995][ T6006] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 40.074954][ T5983] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 40.204971][ T5983] usb 8-1: device descriptor read/64, error -71 [ 40.257295][ T6052] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 40.288551][ T11] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 40.291112][ T11] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 40.325041][ T5983] usb usb8-port1: attempt power cycle [ 40.564956][ T6034] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.664923][ T5983] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 40.685316][ T5983] usb 8-1: device descriptor read/8, error -71 [ 40.724931][ T6034] usb 6-1: Using ep0 maxpacket: 8 [ 40.728223][ T6034] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 40.730619][ T6034] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 40.732882][ T6034] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 40.735344][ T6034] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 40.738566][ T6034] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 40.740833][ T6034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.924861][ T5983] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 40.945454][ T5983] usb 8-1: device descriptor read/8, error -71 [ 40.952514][ T6034] usb 6-1: usb_control_msg returned -32 [ 40.954079][ T6034] usbtmc 6-1:16.0: can't read capabilities [ 41.054994][ T5983] usb usb8-port1: unable to enumerate USB device [ 41.308006][ T6073] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19'. [ 41.404933][ T5945] Bluetooth: hci0: command 0x040f tx timeout [ 41.484912][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 41.484998][ T5954] Bluetooth: hci1: command 0x040f tx timeout [ 41.485076][ T5947] Bluetooth: hci2: command 0x040f tx timeout [ 41.512457][ T6006] usb 6-1: USB disconnect, device number 2 [ 41.982829][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.985567][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.214880][ T6006] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 42.248456][ T39] kauditd_printk_skb: 83 callbacks suppressed [ 42.248466][ T39] audit: type=1400 audit(1731134293.251:198): avc: denied { create } for pid=6083 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.256470][ T39] audit: type=1400 audit(1731134293.261:199): avc: denied { setopt } for pid=6083 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.259544][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 42.261616][ T39] audit: type=1400 audit(1731134293.261:200): avc: denied { create } for pid=6083 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 42.264999][ T6084] warning: `syz.0.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 42.268852][ T39] audit: type=1400 audit(1731134293.261:201): avc: denied { create } for pid=6083 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.278008][ T39] audit: type=1400 audit(1731134293.271:202): avc: denied { write } for pid=6083 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 42.283171][ T39] audit: type=1400 audit(1731134293.271:203): avc: denied { nlmsg_read } for pid=6083 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 42.301399][ T39] audit: type=1400 audit(1731134293.301:204): avc: denied { setopt } for pid=6085 comm="syz.0.24" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.308307][ T39] audit: type=1400 audit(1731134293.311:205): avc: denied { ioctl } for pid=6085 comm="syz.0.24" path="socket:[10575]" dev="sockfs" ino=10575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.329122][ T39] audit: type=1400 audit(1731134293.331:206): avc: denied { read } for pid=6087 comm="syz.0.25" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.334973][ T39] audit: type=1400 audit(1731134293.341:207): avc: denied { open } for pid=6087 comm="syz.0.25" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.364875][ T6006] usb 7-1: Using ep0 maxpacket: 16 [ 42.367631][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.371222][ T6006] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.374626][ T6006] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.377314][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.380274][ T6006] usb 7-1: config 0 descriptor?? [ 42.421863][ T6030] vhci_hcd: connection reset by peer [ 42.424682][ T1164] vhci_hcd: stop threads [ 42.426351][ T1164] vhci_hcd: release socket [ 42.428230][ T1164] vhci_hcd: disconnect device [ 42.441458][ T6091] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.447627][ T6091] bridge1: entered promiscuous mode [ 42.448987][ T6091] bridge1: entered allmulticast mode [ 42.477574][ T6094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 42.479890][ T6094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 42.501109][ T6099] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 42.503118][ T6099] SELinux: failed to load policy [ 42.505425][ T6099] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 42.508551][ T6099] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 42.512336][ T6099] syz.3.29 uses obsolete (PF_INET,SOCK_PACKET) [ 42.898185][ T6109] netlink: 56 bytes leftover after parsing attributes in process `syz.0.26'. [ 42.906557][ T6109] ubi1: attaching mtd0 [ 42.907828][ T6109] ubi1 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 43.115009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.163782][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.38'. [ 43.168692][ T5954] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 43.172875][ T6130] capability: warning: `syz.3.38' uses deprecated v2 capabilities in a way that may be insecure [ 43.249796][ T6141] netlink: 56 bytes leftover after parsing attributes in process `syz.3.42'. [ 43.254273][ T6141] ubi1: attaching mtd0 [ 43.255869][ T6141] ubi1 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 43.312323][ T6145] tipc: Started in network mode [ 43.313705][ T6145] tipc: Node identity f7, cluster identity 4711 [ 43.315862][ T6145] tipc: Node number set to 247 [ 43.469720][ T6153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.47'. [ 43.473726][ T6154] netlink: 48 bytes leftover after parsing attributes in process `syz.3.47'. [ 43.476610][ T5954] Bluetooth: hci0: command 0x040f tx timeout [ 43.555072][ T5954] Bluetooth: hci3: command 0x040f tx timeout [ 43.555171][ T5945] Bluetooth: hci2: command 0x040f tx timeout [ 43.564908][ T5945] Bluetooth: hci1: command 0x040f tx timeout [ 43.724961][ T5984] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 43.886606][ T5984] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.889284][ T5984] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 43.892319][ T5984] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 43.895157][ T5984] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 43.897432][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.901645][ T6139] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 43.904614][ T5984] hub 6-1:1.0: bad descriptor, ignoring hub [ 43.906512][ T5984] hub 6-1:1.0: probe with driver hub failed with error -5 [ 43.908539][ T5984] cdc_wdm 6-1:1.0: skipping garbage [ 43.910230][ T5984] cdc_wdm 6-1:1.0: skipping garbage [ 43.913175][ T5984] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 43.914711][ T5984] cdc_wdm 6-1:1.0: Unknown control protocol [ 44.215129][ T829] usb 6-1: USB disconnect, device number 3 [ 44.254942][ T5984] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.404883][ T5984] usb 5-1: Using ep0 maxpacket: 8 [ 44.407716][ T5984] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 44.409900][ T5984] usb 5-1: config 179 has no interface number 0 [ 44.411529][ T5984] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 44.414415][ T5984] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 44.417523][ T5984] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 44.420298][ T5984] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 44.423128][ T5984] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 44.426445][ T5984] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 44.428709][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.432722][ T6164] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 44.541494][ T6166] netlink: 56 bytes leftover after parsing attributes in process `syz.3.51'. [ 44.546557][ T6166] ubi1: attaching mtd0 [ 44.547828][ T6166] ubi1 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 44.632035][ T6168] Zero length message leads to an empty skb [ 44.644995][ T6168] syz.3.52 (6168) used greatest stack depth: 19072 bytes left [ 44.645910][ T5984] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input5 [ 44.703153][ T6175] dns_resolver: Unsupported server list version (126) [ 44.755419][ T5985] usb 44-1: device descriptor read/8, error -110 [ 44.759891][ T6184] netlink: 'syz.3.58': attribute type 1 has an invalid length. [ 44.848395][ T6003] usb 5-1: USB disconnect, device number 2 [ 44.848422][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 44.852956][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 44.853042][ T6003] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 44.982979][ T6006] usbhid 7-1:0.0: can't add hid device: -71 [ 44.984571][ T6006] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 44.996025][ T6006] usb 7-1: USB disconnect, device number 2 [ 45.155330][ T5985] usb usb44-port1: attempt power cycle [ 45.242778][ T5945] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 45.438081][ T6228] team0: No ports can be present during mode change [ 45.466299][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.71'. [ 45.468575][ T6231] netem: invalid attributes len -16 [ 45.469970][ T6231] netem: change failed [ 45.538815][ T6239] netlink: 56 bytes leftover after parsing attributes in process `syz.0.75'. [ 45.542411][ T6239] ubi1: attaching mtd0 [ 45.543482][ T6239] ubi1 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 45.559931][ T5945] Bluetooth: hci0: command 0x040f tx timeout [ 45.564080][ T6243] netlink: 'syz.3.76': attribute type 13 has an invalid length. [ 45.571341][ T6243] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.576475][ T6244] overlayfs: failed to set uuid (16/file1, err=-1); falling back to uuid=null. [ 45.578935][ T6244] overlayfs: failed to verify upper root origin [ 45.637140][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 45.642527][ T6253] lo speed is unknown, defaulting to 1000 [ 45.644167][ T6253] lo speed is unknown, defaulting to 1000 [ 45.644952][ T5945] Bluetooth: hci1: command 0x040f tx timeout [ 45.645083][ T5954] Bluetooth: hci2: command 0x040f tx timeout [ 45.647296][ T6253] lo speed is unknown, defaulting to 1000 [ 45.652571][ T6253] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.657039][ T6253] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 45.676095][ T6253] lo speed is unknown, defaulting to 1000 [ 45.678553][ T6253] lo speed is unknown, defaulting to 1000 [ 45.680456][ T6253] lo speed is unknown, defaulting to 1000 [ 45.682363][ T6253] lo speed is unknown, defaulting to 1000 [ 45.688147][ T6253] overlayfs: workdir and upperdir must be separate subtrees [ 45.735306][ T5985] usb usb44-port1: unable to enumerate USB device [ 46.014895][ T6006] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 46.146783][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 46.166812][ T6006] usb 8-1: config 0 has an invalid interface number: 179 but max is 2 [ 46.168953][ T6006] usb 8-1: config 0 has an invalid interface number: 191 but max is 2 [ 46.171014][ T6006] usb 8-1: config 0 has an invalid interface descriptor of length 6, skipping [ 46.171495][ T5954] Bluetooth: hci2: unexpected event for opcode 0x200c [ 46.173268][ T6006] usb 8-1: config 0 has an invalid interface number: 158 but max is 2 [ 46.173280][ T6006] usb 8-1: config 0 has no interface number 0 [ 46.173288][ T6006] usb 8-1: config 0 has no interface number 1 [ 46.173296][ T6006] usb 8-1: config 0 has no interface number 2 [ 46.173728][ T6274] syz.1.86[6274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.173770][ T6274] syz.1.86[6274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.173815][ T6274] syz.1.86[6274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.188748][ T6006] usb 8-1: config 0 interface 179 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 46.194478][ T6006] usb 8-1: config 0 interface 191 altsetting 36 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 46.198718][ T6006] usb 8-1: config 0 interface 191 altsetting 36 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 46.202046][ T6006] usb 8-1: config 0 interface 158 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 46.204876][ T6006] usb 8-1: config 0 interface 191 has no altsetting 0 [ 46.206658][ T6006] usb 8-1: config 0 interface 158 has no altsetting 0 [ 46.209852][ T6006] usb 8-1: Dual-Role OTG device on HNP port [ 46.211629][ T6006] usb 8-1: New USB device found, idVendor=1d19, idProduct=1104, bcdDevice=4a.cc [ 46.213984][ T6006] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.216132][ T6006] usb 8-1: Product: âš›àªî¦ƒè¼”뛇轾ሟไ껚銋⸧＆ê«èšžå³¸7旎ᾂନ⎃ï¯ã¦„㕈櫖ൟ磩ᒸ氖른ç“í„Šâ—絢⎴㢨î¢Ø±äµ°ëµ²è±”ฌ牴砹뚎 [ 46.220137][ T6006] usb 8-1: Manufacturer: 枎䲕ᤄ૮å€î²¤å‰¹é‘俦潕骜詒㜑ꆻ㟘鎶씼넉ڕഛéŒç¤ï´°ê•°è®†å½•Õ•æª‚짠愰 [ 46.223362][ T6006] usb 8-1: SerialNumber: Ъ [ 46.226687][ T6006] usb 8-1: config 0 descriptor?? [ 46.298158][ T6276] jfs: Unrecognized mount option "0x0000000000000004" or missing value [ 46.354302][ T6280] netlink: 'syz.1.89': attribute type 12 has an invalid length. [ 46.448114][ T6006] usb 8-1: USB disconnect, device number 6 [ 46.484245][ T6284] process 'syz.1.91' launched './file1' with NULL argv: empty string added [ 46.566339][ T6294] sctp: [Deprecated]: syz.1.95 (pid 6294) Use of int in max_burst socket option deprecated. [ 46.566339][ T6294] Use struct sctp_assoc_value instead [ 46.585870][ T6294] No control pipe specified [ 46.589008][ T6294] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.95'. [ 46.591325][ T6294] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 46.612298][ T6301] netlink: 56 bytes leftover after parsing attributes in process `syz.0.97'. [ 46.616165][ T6301] ubi1: attaching mtd0 [ 46.617235][ T6301] ubi1 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 46.649012][ T6306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=69 sclass=netlink_route_socket pid=6306 comm=syz.0.99 [ 46.674472][ T6308] netlink: 'syz.0.100': attribute type 62 has an invalid length. [ 46.988646][ T6320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.102'. [ 46.991518][ T6320] netlink: 'syz.0.102': attribute type 7 has an invalid length. [ 46.993598][ T6320] netlink: 'syz.0.102': attribute type 8 has an invalid length. [ 46.996633][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 47.004066][ T6320] syz_tun: entered promiscuous mode [ 47.007414][ T6320] batadv_slave_1: entered promiscuous mode [ 47.009520][ T6320] syz_tun: left promiscuous mode [ 47.011219][ T6320] batadv_slave_1: left promiscuous mode [ 47.036023][ T6335] overlayfs: failed to set uuid (38/file1, err=-1); falling back to uuid=null. [ 47.038841][ T6335] overlayfs: failed to verify upper root origin [ 47.102144][ T6345] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.108'. [ 47.104673][ T6345] openvswitch: netlink: ERSPAN option length err (len 2817, max 255). [ 47.271824][ T39] kauditd_printk_skb: 99 callbacks suppressed [ 47.271838][ T39] audit: type=1400 audit(1731134298.271:307): avc: denied { read } for pid=6353 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.281473][ T39] audit: type=1400 audit(1731134298.271:308): avc: denied { open } for pid=6353 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.289446][ T39] audit: type=1400 audit(1731134298.271:309): avc: denied { getattr } for pid=6353 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.297542][ T39] audit: type=1400 audit(1731134298.281:310): avc: denied { write } for pid=6352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.305022][ T39] audit: type=1400 audit(1731134298.281:311): avc: denied { add_name } for pid=6352 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.312672][ T39] audit: type=1400 audit(1731134298.311:312): avc: denied { remove_name } for pid=6355 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2237 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.475680][ T39] audit: type=1400 audit(1731134298.481:313): avc: denied { listen } for pid=6366 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.559088][ T39] audit: type=1800 audit(1731134298.561:314): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.113" name="/newroot/36/file0" dev="tmpfs" ino=220 res=0 errno=0 [ 47.634947][ T5947] Bluetooth: hci0: command 0x040f tx timeout [ 47.642230][ T39] audit: type=1400 audit(1731134298.641:315): avc: denied { bind } for pid=6390 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.715019][ T5947] Bluetooth: hci1: command 0x040f tx timeout [ 47.715042][ T5298] Bluetooth: hci3: command 0x040f tx timeout [ 48.011978][ T6413] lo speed is unknown, defaulting to 1000 [ 48.071265][ T39] audit: type=1400 audit(1731134299.071:316): avc: denied { getattr } for pid=6417 comm="syz.0.119" name="/" dev="9p" ino=37100296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.073720][ T6418] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 48.107633][ T6418] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 48.118650][ T6418] cramfs: wrong magic [ 48.120921][ T6418] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 48.122728][ T6418] binder: 6417:6418 ioctl 4018620d 20000100 returned -1 [ 48.246431][ T6440] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 48.258022][ T6440] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 48.348636][ T6453] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 48.351026][ T6452] [U] J"—E:ÀÆ" [ 48.373929][ T6456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64598 sclass=netlink_route_socket pid=6456 comm=syz.3.133 [ 48.506883][ T6003] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 48.515058][ T5945] Bluetooth: hci3: unexpected event for opcode 0x200a [ 48.655024][ T6003] usb 7-1: Using ep0 maxpacket: 32 [ 48.657937][ T6003] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 48.660880][ T6003] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 48.663750][ T6003] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 48.666797][ T6003] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 48.670127][ T6003] usb 7-1: config 0 interface 0 has no altsetting 0 [ 48.673255][ T6003] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 48.676129][ T6003] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 48.678288][ T6003] usb 7-1: Product: syz [ 48.679376][ T6003] usb 7-1: Manufacturer: syz [ 48.680595][ T6003] usb 7-1: SerialNumber: syz [ 48.683175][ T6003] usb 7-1: config 0 descriptor?? [ 48.687431][ T6003] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 48.691924][ T6003] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 48.706874][ T6466] evm: overlay not supported [ 48.754966][ T35] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 48.906109][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 48.909105][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 48.911984][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.915510][ T35] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.917851][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.923518][ T35] usb 8-1: config 0 descriptor?? [ 48.925256][ T6460] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 48.943323][ T6442] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 48.943561][ T5982] usb 7-1: USB disconnect, device number 3 [ 48.945300][ C2] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 48.949525][ T5982] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 49.094967][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 49.144325][ T35] usbhid 8-1:0.0: can't add hid device: -71 [ 49.148847][ T35] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 49.161538][ T35] usb 8-1: USB disconnect, device number 7 [ 49.184751][ T6484] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 49.188037][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.190985][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.192059][ T6484] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 49.394941][ T5945] Bluetooth: hci2: command 0x040f tx timeout [ 49.462348][ T5849] IPVS: starting estimator thread 0... [ 49.478921][ T6526] kvm: emulating exchange as write [ 49.555111][ T6529] IPVS: using max 36 ests per chain, 86400 per kthread [ 49.575585][ T6536] fuse: Bad value for 'fd' [ 49.606329][ T6533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6533 comm=syz.3.154 [ 49.708232][ T6540] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 49.710379][ T6540] __nla_validate_parse: 4 callbacks suppressed [ 49.710386][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.157'. [ 49.715271][ T5954] Bluetooth: hci0: command 0x040f tx timeout [ 49.795036][ T5954] Bluetooth: hci1: command 0x040f tx timeout [ 49.907394][ T6541] ALSA: mixer_oss: invalid OSS volume '¢' [ 49.926846][ T6575] netlink: 'syz.3.166': attribute type 9 has an invalid length. [ 49.929051][ T6575] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.166'. [ 50.079855][ T6604] netlink: 'syz.0.174': attribute type 10 has an invalid length. [ 50.090813][ T6604] team0: Port device netdevsim0 added [ 50.105885][ T6582] nbd2: detected capacity change from 0 to 22 [ 50.111198][ T6567] block nbd2: shutting down sockets [ 50.117852][ T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.120577][ T51] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.122765][ T5957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.129558][ T5957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.133475][ T5957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.138886][ T5957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.140735][ T6607] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 50.141284][ T5957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.143011][ T6607] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.175'. [ 50.148711][ T5957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.151496][ T5957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.153864][ T5957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.156591][ T5957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.158947][ T5957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.161694][ T6567] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.164507][ T6567] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.167756][ T5957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.170120][ T5957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.172227][ T5957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.174579][ T5957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.176701][ T5957] ldm_validate_partition_table(): Disk read failed. [ 50.178517][ T5957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.180899][ T5957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.183034][ T5957] Dev nbd2: unable to read RDB block 0 [ 50.184579][ T5957] nbd2: unable to read partition table [ 50.186435][ T5957] nbd2: partition table beyond EOD, truncated [ 50.192253][ T5957] ldm_validate_partition_table(): Disk read failed. [ 50.194132][ T5957] Dev nbd2: unable to read RDB block 0 [ 50.196197][ T5957] nbd2: unable to read partition table [ 50.197692][ T5957] nbd2: partition table beyond EOD, truncated [ 50.338502][ T6630] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 50.341066][ T6630] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 50.412018][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 50.442285][ T6650] netlink: 100 bytes leftover after parsing attributes in process `syz.2.187'. [ 50.467954][ T5954] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 50.549834][ T6657] netlink: 56 bytes leftover after parsing attributes in process `syz.0.189'. [ 50.553494][ T6657] ubi1: attaching mtd0 [ 50.554604][ T6657] ubi1 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 50.586895][ T6659] netlink: 'syz.0.190': attribute type 8 has an invalid length. [ 51.150563][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 51.154634][ T6667] vlan2: entered allmulticast mode [ 51.268173][ T6674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.277227][ T6674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.327121][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 51.412420][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 51.415540][ T6686] IPVS: Error joining to the multicast group [ 51.465495][ T6693] capability: warning: `syz.0.200' uses 32-bit capabilities (legacy support in use) [ 51.474994][ T5954] Bluetooth: hci2: command 0x040f tx timeout [ 51.511805][ T6695] syzkaller0: entered promiscuous mode [ 51.513280][ T6695] syzkaller0: entered allmulticast mode [ 51.932037][ T215] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 52.305811][ T39] kauditd_printk_skb: 74 callbacks suppressed [ 52.305826][ T39] audit: type=1400 audit(1731134303.311:391): avc: denied { mount } for pid=6714 comm="syz.2.205" name="/" dev="hugetlbfs" ino=13745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 52.306209][ T6717] ======================================================= [ 52.306209][ T6717] WARNING: The mand mount option has been deprecated and [ 52.306209][ T6717] and is ignored by this kernel. Remove the mand [ 52.306209][ T6717] option from the mount to silence this warning. [ 52.306209][ T6717] ======================================================= [ 52.307615][ T39] audit: type=1400 audit(1731134303.311:392): avc: denied { remount } for pid=6714 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 52.314318][ T6717] ubi0: attaching mtd0 [ 52.336701][ T6717] ubi0: scanning is finished [ 52.337925][ T6717] ubi0: empty MTD device detected [ 52.357401][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 52.362790][ T6716] netlink: 'syz.2.205': attribute type 4 has an invalid length. [ 52.368582][ T6716] veth1_macvtap: left promiscuous mode [ 52.429268][ T6717] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 52.431377][ T6717] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 52.433397][ T6717] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 52.438654][ T6717] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 52.440652][ T39] audit: type=1400 audit(1731134303.441:393): avc: denied { write } for pid=6726 comm="syz.1.208" path="socket:[14461]" dev="sockfs" ino=14461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.444643][ T6717] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 52.449295][ T6717] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 52.451396][ T6717] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 525841502 [ 52.453958][ T6717] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 52.457164][ T6728] ubi0: background thread "ubi_bgt0d" started, PID 6728 [ 52.468734][ T39] audit: type=1400 audit(1731134303.471:394): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 52.496404][ T39] audit: type=1400 audit(1731134303.501:395): avc: denied { setopt } for pid=6735 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.501547][ T39] audit: type=1400 audit(1731134303.501:396): avc: denied { write } for pid=6735 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.555622][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 52.633146][ T39] audit: type=1400 audit(1731134303.631:397): avc: denied { append } for pid=6747 comm="syz.1.214" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.749428][ T39] audit: type=1400 audit(1731134303.751:398): avc: denied { open } for pid=6761 comm="syz.3.219" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 52.894238][ T39] audit: type=1400 audit(1731134303.891:399): avc: denied { write } for pid=6777 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.895310][ T6779] overlayfs: missing 'lowerdir' [ 53.053212][ T6795] pim6reg: entered allmulticast mode [ 53.055132][ T6797] fuse: Bad value for 'fd' [ 53.083296][ T39] audit: type=1400 audit(1731134304.081:400): avc: denied { checkpoint_restore } for pid=6798 comm="syz.3.230" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.185978][ T6806] openvswitch: netlink: Message has 241 unknown bytes. [ 53.206040][ T6812] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 53.343051][ T6819] lo speed is unknown, defaulting to 1000 [ 53.375138][ T6826] netlink: 'syz.2.237': attribute type 10 has an invalid length. [ 53.381133][ T6826] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 53.386222][ T35] IPVS: starting estimator thread 0... [ 53.386815][ T6819] tipc: Started in network mode [ 53.389047][ T6819] tipc: Node identity ac1414aa, cluster identity 4711 [ 53.390794][ T6819] tipc: Enabling of bearer rejected, failed to enable media [ 53.409592][ T6830] ubi: mtd0 is already attached to ubi0 [ 53.496437][ T6828] IPVS: using max 35 ests per chain, 84000 per kthread [ 53.509821][ T68] tipc: Left network mode [ 53.564919][ T5954] Bluetooth: hci2: command 0x040f tx timeout [ 53.669912][ T68] IPVS: stop unused estimator thread 0... [ 54.282968][ T6903] FAULT_INJECTION: forcing a failure. [ 54.282968][ T6903] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.286414][ T6903] CPU: 2 UID: 0 PID: 6903 Comm: syz.3.257 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 54.289065][ T6903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.291872][ T6903] Call Trace: [ 54.292753][ T6903] [ 54.293534][ T6903] dump_stack_lvl+0x16c/0x1f0 [ 54.294806][ T6903] should_fail_ex+0x497/0x5b0 [ 54.296066][ T6903] _copy_from_user+0x2e/0xd0 [ 54.297213][ T6903] ctrl_cdev_ioctl+0x145/0x3d0 [ 54.298430][ T6903] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 54.299726][ T6903] ? selinux_file_ioctl+0x180/0x270 [ 54.301030][ T6903] ? selinux_file_ioctl+0xb4/0x270 [ 54.302365][ T6903] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 54.303749][ T6903] __x64_sys_ioctl+0x18f/0x220 [ 54.304996][ T6903] do_syscall_64+0xcd/0x250 [ 54.306190][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.307672][ T6903] RIP: 0033:0x7fcd22b7e719 [ 54.308829][ T6903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.313775][ T6903] RSP: 002b:00007fcd23a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.316155][ T6903] RAX: ffffffffffffffda RBX: 00007fcd22d35f80 RCX: 00007fcd22b7e719 [ 54.318203][ T6903] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000007 [ 54.320196][ T6903] RBP: 00007fcd23a07090 R08: 0000000000000000 R09: 0000000000000000 [ 54.322236][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.324295][ T6903] R13: 0000000000000000 R14: 00007fcd22d35f80 R15: 00007ffc16e0c478 [ 54.326351][ T6903] [ 54.465802][ T6913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6913 comm=syz.0.260 [ 54.497805][ T6915] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 54.499829][ T6915] netlink: 'syz.0.261': attribute type 2 has an invalid length. [ 54.503733][ T6915] mmap: syz.0.261 (6915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.511722][ T6915] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 54.513575][ T6915] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 54.516120][ T6915] vhci_hcd vhci_hcd.0: Device attached [ 54.519043][ T6916] vhci_hcd: connection closed [ 54.519166][ T1164] vhci_hcd: stop threads [ 54.521593][ T1164] vhci_hcd: release socket [ 54.522835][ T1164] vhci_hcd: disconnect device [ 54.964872][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.114951][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 55.118330][ T35] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 55.120552][ T35] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.123128][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.126663][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.129366][ T35] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.133028][ T35] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 55.135743][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.211131][ T6934] __nla_validate_parse: 12 callbacks suppressed [ 55.211147][ T6934] netlink: 56 bytes leftover after parsing attributes in process `syz.0.266'. [ 55.216845][ T6934] ubi: mtd0 is already attached to ubi0 [ 55.218415][ T6934] FAULT_INJECTION: forcing a failure. [ 55.218415][ T6934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.221974][ T6934] CPU: 1 UID: 0 PID: 6934 Comm: syz.0.266 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 55.224750][ T6934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.227528][ T6934] Call Trace: [ 55.228404][ T6934] [ 55.229189][ T6934] dump_stack_lvl+0x16c/0x1f0 [ 55.230423][ T6934] should_fail_ex+0x497/0x5b0 [ 55.231651][ T6934] _copy_to_user+0x32/0xd0 [ 55.231736][ T6936] netlink: 56 bytes leftover after parsing attributes in process `syz.3.267'. [ 55.232819][ T6934] simple_read_from_buffer+0xd0/0x160 [ 55.237028][ T6934] proc_fail_nth_read+0x198/0x270 [ 55.238309][ T6934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.239694][ T6934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.241099][ T6934] vfs_read+0x1df/0xbe0 [ 55.242117][ T6934] ? __fget_files+0x23a/0x3f0 [ 55.243346][ T6934] ? fdget_pos+0x24c/0x360 [ 55.244506][ T6934] ? __pfx_lock_release+0x10/0x10 [ 55.245804][ T6934] ? trace_lock_acquire+0x14a/0x1d0 [ 55.247123][ T6934] ? __pfx_vfs_read+0x10/0x10 [ 55.248300][ T6934] ? __pfx___mutex_lock+0x10/0x10 [ 55.249707][ T6934] ? __fget_files+0x244/0x3f0 [ 55.251028][ T6934] ksys_read+0x12f/0x260 [ 55.252158][ T6934] ? __pfx_ksys_read+0x10/0x10 [ 55.253441][ T6934] do_syscall_64+0xcd/0x250 [ 55.254657][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.256206][ T6934] RIP: 0033:0x7fb9db77d15c [ 55.257385][ T6934] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 55.263208][ T6934] RSP: 002b:00007fb9dc5f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.265864][ T6934] RAX: ffffffffffffffda RBX: 00007fb9db935f80 RCX: 00007fb9db77d15c [ 55.267918][ T6934] RDX: 000000000000000f RSI: 00007fb9dc5f10a0 RDI: 0000000000000008 [ 55.269885][ T6934] RBP: 00007fb9dc5f1090 R08: 0000000000000000 R09: 0000000000000000 [ 55.271825][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.274046][ T6934] R13: 0000000000000000 R14: 00007fb9db935f80 R15: 00007fff7eba46e8 [ 55.276155][ T6934] [ 55.339628][ T35] usb 6-1: GET_CAPABILITIES returned 0 [ 55.341136][ T35] usbtmc 6-1:16.0: can't read capabilities [ 55.343275][ T6946] bond1: entered allmulticast mode [ 55.360328][ T6948] overlayfs: statfs failed on './file0' [ 55.367237][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 55.369997][ T6950] IPVS: Error joining to the multicast group [ 55.566435][ T30] usb 6-1: USB disconnect, device number 4 [ 55.890312][ T6968] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.027718][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 56.030633][ T6971] netlink: 108 bytes leftover after parsing attributes in process `syz.2.278'. [ 56.034643][ T6971] netlink: 108 bytes leftover after parsing attributes in process `syz.2.278'. [ 56.037149][ T6971] netlink: 84 bytes leftover after parsing attributes in process `syz.2.278'. [ 56.092183][ T6976] netlink: 56 bytes leftover after parsing attributes in process `syz.1.280'. [ 56.095310][ T5945] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 56.101557][ T6976] ubi: mtd0 is already attached to ubi0 [ 56.121751][ T6977] syz.2.279: attempt to access beyond end of device [ 56.121751][ T6977] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 56.127453][ T6977] ptrace attach of "/syz-executor exec"[6974] was attempted by "/syz-executor exec"[6977] [ 56.131460][ T6979] netlink: 47 bytes leftover after parsing attributes in process `syz.1.281'. [ 56.208682][ T6985] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.361086][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 56.383910][ T7003] ubi: mtd0 is already attached to ubi0 [ 56.427816][ T7008] zonefs (nullb0) ERROR: Not a zoned block device [ 56.436834][ T7008] nftables ruleset with unbound set [ 56.536102][ T7009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.540097][ T7009] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.544200][ T7009] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.546882][ T7009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.552567][ T7009] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.588586][ T7030] netlink: 'syz.2.297': attribute type 1 has an invalid length. [ 56.864715][ T7043] bond0: entered promiscuous mode [ 56.866224][ T7043] bond_slave_0: entered promiscuous mode [ 56.867836][ T7043] bond_slave_1: entered promiscuous mode [ 56.872033][ T7042] bond0: left promiscuous mode [ 56.873473][ T7042] bond_slave_0: left promiscuous mode [ 56.875074][ T7042] bond_slave_1: left promiscuous mode [ 56.914416][ T7047] usb usb8: usbfs: process 7047 (syz.1.301) did not claim interface 0 before use [ 57.186998][ T7049] hid-generic 0003:0627:0001.0001: pid 7049 passed too short report [ 57.536171][ T5954] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 57.606668][ T7065] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 57.610664][ T7065] netlink: 'syz.3.305': attribute type 2 has an invalid length. [ 57.728841][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 57.728853][ T39] audit: type=1400 audit(1731134308.731:440): avc: denied { nosuid_transition } for pid=7074 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 57.735905][ T39] audit: type=1400 audit(1731134308.731:441): avc: denied { transition } for pid=7074 comm="syz.2.308" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F5202864656C6574656429 dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 57.745571][ T39] audit: type=1400 audit(1731134308.731:442): avc: denied { entrypoint } for pid=7074 comm="syz.2.308" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F5202864656C6574656429 dev="tmpfs" ino=1036 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.754675][ T39] audit: type=1400 audit(1731134308.731:443): avc: denied { share } for pid=7074 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 57.760168][ T39] audit: type=1400 audit(1731134308.731:444): avc: denied { noatsecure } for pid=7074 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 57.768000][ T7085] vcan0: MTU too low for tipc bearer [ 57.769533][ T7085] tipc: Enabling of bearer rejected, failed to enable media [ 57.839957][ T7102] xt_l2tp: v2 doesn't support IP mode [ 57.875184][ T39] audit: type=1400 audit(1731134308.871:445): avc: denied { getopt } for pid=7096 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.880752][ T39] audit: type=1400 audit(1731134308.871:446): avc: denied { execute } for pid=7103 comm="syz.1.316" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 57.962641][ T39] audit: type=1400 audit(1731134308.961:447): avc: denied { create } for pid=7108 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 57.970761][ T39] audit: type=1400 audit(1731134308.971:448): avc: denied { write } for pid=7108 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 57.976395][ T7109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.984512][ T7111] mac80211_hwsim hwsim7 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 58.046017][ T7121] lo speed is unknown, defaulting to 1000 [ 58.067146][ T39] audit: type=1326 audit(1731134309.071:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.2.321" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed7c37e719 code=0x0 [ 58.088887][ T7119] xt_nfacct: accounting object `sy' does not exists [ 58.147395][ T30] IPVS: starting estimator thread 0... [ 58.150925][ T7132] tipc: Started in network mode [ 58.152232][ T7132] tipc: Node identity ac1414aa, cluster identity 4711 [ 58.154310][ T7132] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 58.156251][ T7132] tipc: Enabled bearer , priority 10 [ 58.234984][ T7133] IPVS: using max 35 ests per chain, 84000 per kthread [ 58.247237][ T7132] netlink: 'syz.1.323': attribute type 5 has an invalid length. [ 58.286038][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 58.424866][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 58.564919][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 58.595919][ T5954] Bluetooth: hci2: command 0x040f tx timeout [ 58.595952][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 58.595970][ T5298] Bluetooth: hci1: command 0x040f tx timeout [ 58.595994][ T5298] Bluetooth: hci0: command 0x040f tx timeout [ 58.705204][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 58.730446][ T7173] tmpfs: Unknown parameter 'he' [ 58.731126][ T7175] netlink: 'syz.3.336': attribute type 10 has an invalid length. [ 58.734320][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.736468][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.737695][ T7173] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 58.742577][ T7175] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.744417][ T7175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.746694][ T7175] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.748541][ T7175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.752180][ T7175] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 58.775327][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 58.777184][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 58.780533][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 58.783182][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 58.818554][ T30] libceph: connect (1)[c::]:6789 error -101 [ 58.820254][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 58.845766][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 58.867109][ T7193] ubi: mtd0 is already attached to ubi0 [ 58.892129][ T7195] 9pnet_fd: Insufficient options for proto=fd [ 58.918614][ T7191] ipip0: entered promiscuous mode [ 58.955059][ T7196] jfs: Unrecognized mount option "gid=" or missing value [ 58.955915][ T5945] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 58.984882][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 59.046398][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 59.048036][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 59.076155][ T30] libceph: connect (1)[c::]:6789 error -101 [ 59.077846][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 59.122469][ T7213] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 59.124903][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 59.139492][ T7213] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 59.142118][ T7213] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 59.198477][ T7215] rtc_cmos 00:05: Alarms can be up to one day in the future [ 59.268471][ T30] tipc: Node number set to 2886997162 [ 59.565133][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 59.566900][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 59.585159][ T30] libceph: connect (1)[c::]:6789 error -101 [ 59.586884][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 59.595939][ T7180] ceph: No mds server is up or the cluster is laggy [ 59.596000][ T7188] ceph: No mds server is up or the cluster is laggy [ 59.648047][ T7303] trusted_key: encrypted_key: master key parameter '' is invalid [ 59.688098][ T7307] netlink: 'syz.1.357': attribute type 2 has an invalid length. [ 59.698963][ T30] rtc_cmos 00:05: Alarms can be up to one day in the future [ 59.701500][ T30] rtc_cmos 00:05: Alarms can be up to one day in the future [ 59.703952][ T30] rtc_cmos 00:05: Alarms can be up to one day in the future [ 59.706840][ T30] rtc_cmos 00:05: Alarms can be up to one day in the future [ 59.708737][ T30] rtc rtc0: __rtc_set_alarm: err=-22 [ 59.722964][ T7311] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 59.728312][ T7312] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 59.741163][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 59.744082][ T7312] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 59.763597][ T7312] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 59.771126][ T7312] bond1 (unregistering): Released all slaves [ 59.795815][ T7320] /dev/sg0: Can't lookup blockdev [ 59.854684][ T7324] ubi: mtd0 is already attached to ubi0 [ 60.105523][ T7337] ALSA: mixer_oss: invalid OSS volume '' [ 60.185690][ T7341] tmpfs: Bad value for 'huge' [ 60.203008][ T5945] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 60.231885][ T7347] NILFS (nbd1): device size too small [ 60.548158][ T7364] Cannot find del_set index 0 as target [ 60.585017][ T30] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 60.627753][ T7373] block nbd1: not configured, cannot reconfigure [ 60.645411][ T7376] netlink: 'syz.0.383': attribute type 1 has an invalid length. [ 60.656720][ T7376] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 60.659424][ T7376] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 60.663950][ T7376] bond1: (slave vxcan3): making interface the new active one [ 60.667101][ T7376] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 60.675412][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 60.675610][ T5954] Bluetooth: hci0: command 0x040f tx timeout [ 60.757560][ T30] usb 7-1: config 0 interface 0 altsetting 18 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.760935][ T30] usb 7-1: config 0 interface 0 altsetting 18 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 60.763753][ T30] usb 7-1: config 0 interface 0 altsetting 18 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 60.767043][ T30] usb 7-1: config 0 interface 0 has no altsetting 0 [ 60.770189][ T30] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 60.772545][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.774614][ T30] usb 7-1: Product: syz [ 60.775782][ T30] usb 7-1: Manufacturer: syz [ 60.777005][ T30] usb 7-1: SerialNumber: syz [ 60.779360][ T30] usb 7-1: config 0 descriptor?? [ 60.782221][ T7359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 61.055932][ T30] appledisplay 7-1:0.0: Error while getting initial brightness: -110 [ 61.059181][ T30] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110 [ 61.260218][ T7413] netlink: 'syz.1.393': attribute type 11 has an invalid length. [ 61.263054][ T7413] __nla_validate_parse: 15 callbacks suppressed [ 61.263063][ T7413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.393'. [ 61.504941][ T1015] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.568791][ T7417] netlink: 140 bytes leftover after parsing attributes in process `syz.3.373'. [ 61.654866][ T1015] usb 5-1: Using ep0 maxpacket: 8 [ 61.657359][ T1015] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 61.659433][ T1015] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.662003][ T1015] usb 5-1: config 0 has no interface number 0 [ 61.663648][ T1015] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.666848][ T1015] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.669644][ T1015] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.672496][ T1015] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.675699][ T1015] usb 5-1: config 0 interface 52 has no altsetting 0 [ 61.677405][ T1015] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 61.679705][ T1015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.682891][ T1015] usb 5-1: config 0 descriptor?? [ 61.886631][ T1015] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.52/input/input10 [ 61.963381][ T7433] input: syz0 as /devices/virtual/input/input11 [ 62.072437][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 62.489882][ T7446] xt_cgroup: invalid path, errno=-2 [ 62.755911][ T39] kauditd_printk_skb: 43 callbacks suppressed [ 62.755921][ T39] audit: type=1400 audit(1731134313.761:493): avc: denied { ioctl } for pid=7452 comm="syz.3.403" path="socket:[18658]" dev="sockfs" ino=18658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.006916][ T5954] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 63.009239][ T5954] Bluetooth: hci1: Injecting HCI hardware error event [ 63.012966][ T5954] Bluetooth: hci1: hardware error 0x00 [ 63.250881][ T7462] netlink: 168 bytes leftover after parsing attributes in process `syz.1.406'. [ 63.324921][ C1] net_ratelimit: 5 callbacks suppressed [ 63.324932][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 63.346147][ T7468] trusted_key: syz.1.409 sent an empty control message without MSG_MORE. [ 63.360328][ T74] usb 7-1: USB disconnect, device number 4 [ 63.371053][ T7473] netlink: 168 bytes leftover after parsing attributes in process `syz.1.410'. [ 63.416330][ T39] audit: type=1326 audit(1731134314.421:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.1.413" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39ee97e719 code=0x0 [ 63.479185][ T39] audit: type=1400 audit(1731134314.481:495): avc: denied { setopt } for pid=7483 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 63.519466][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 63.564716][ T39] audit: type=1400 audit(1731134314.561:496): avc: denied { read } for pid=7491 comm="syz.2.416" lport=33122 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.571724][ T39] audit: type=1400 audit(1731134314.571:497): avc: denied { shutdown } for pid=7491 comm="syz.2.416" lport=33122 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.601906][ T7504] netlink: 56 bytes leftover after parsing attributes in process `syz.3.419'. [ 63.645212][ T7508] Bluetooth: MGMT ver 1.23 [ 63.649155][ T7508] validate_nla: 1 callbacks suppressed [ 63.649163][ T7508] netlink: 'syz.2.420': attribute type 3 has an invalid length. [ 63.652648][ T7508] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 63.656572][ T7508] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.420'. [ 63.684405][ T7512] binder: 7511:7512 ioctl c00c620f 20000000 returned -22 [ 63.691675][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'. [ 63.704868][ T7512] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 63.721836][ T39] audit: type=1326 audit(1731134314.721:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.424" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd22b7e719 code=0x0 [ 63.752889][ T39] audit: type=1400 audit(1731134314.751:499): avc: denied { append } for pid=7522 comm="syz.2.426" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.752961][ T7523] random: crng reseeded on system resumption [ 63.833223][ T7525] ERROR: device name not specified. [ 64.260731][ T829] usb 5-1: USB disconnect, device number 3 [ 64.275408][ T5945] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 64.277905][ T5945] Bluetooth: hci2: Injecting HCI hardware error event [ 64.280689][ T5947] Bluetooth: hci2: hardware error 0x00 [ 64.285133][ T5360] udevd[5360]: worker [5932] terminated by signal 33 (Unknown signal 33) [ 64.287543][ T5360] udevd[5360]: worker [5932] failed while handling '/devices/virtual/block/loop0' [ 64.290452][ T5360] udevd[5360]: worker [5957] terminated by signal 33 (Unknown signal 33) [ 64.292755][ T5360] udevd[5360]: worker [5957] failed while handling '/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.52/input/input10' [ 64.354885][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 64.425466][ T39] audit: type=1400 audit(1731134315.431:500): avc: denied { watch_mount } for pid=7528 comm="syz.2.428" path="/78" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.431384][ T39] audit: type=1804 audit(1731134315.431:501): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.428" name="/newroot/78/bus/bus" dev="overlay" ino=444 res=1 errno=0 [ 64.573032][ T7536] netlink: 56 bytes leftover after parsing attributes in process `syz.3.430'. [ 64.577163][ T7536] ubi: mtd0 is already attached to ubi0 [ 64.615363][ T829] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.695897][ T39] audit: type=1400 audit(1731134315.701:502): avc: denied { setopt } for pid=7540 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.774861][ T829] usb 5-1: Using ep0 maxpacket: 8 [ 64.777597][ T829] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 64.779570][ T829] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.782442][ T829] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.785824][ T829] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.788855][ T829] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 64.792094][ T829] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 64.794035][ T829] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.797768][ T829] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.800859][ T829] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.803731][ T829] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 64.807811][ T829] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 64.809728][ T829] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.812561][ T829] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.816026][ T829] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.819128][ T829] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 64.824529][ T829] usb 5-1: string descriptor 0 read error: -22 [ 64.826352][ T829] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 64.828715][ T829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.833554][ T829] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 64.850204][ T7559] xt_socket: unknown flags 0x50 [ 65.028633][ T7583] bridge: RTM_NEWNEIGH with invalid ether address [ 65.074959][ T5954] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 65.187923][ T5985] usb 5-1: USB disconnect, device number 4 [ 65.394965][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 65.437241][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.584871][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 65.589836][ T30] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 65.592055][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.594608][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.597353][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.599935][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.603346][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.605797][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.735141][ T7607] netem: change failed [ 65.746105][ T7572] ceph: No mds server is up or the cluster is laggy [ 65.814455][ T30] usb 6-1: usb_control_msg returned -32 [ 65.817343][ T30] usbtmc 6-1:16.0: can't read capabilities [ 65.984895][ T5985] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 66.146391][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.149340][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.151935][ T5985] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.155658][ T5985] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 66.158107][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.161206][ T5985] usb 5-1: config 0 descriptor?? [ 66.355006][ T5947] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 66.434961][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 66.522654][ T7617] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 66.568979][ T5985] wacom 0003:056A:0043.0002: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 66.575152][ T5985] wacom 0003:056A:0043.0002: hidraw1: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.0-1/input0 [ 66.581962][ T5985] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:056A:0043.0002/input/input12 [ 66.728578][ T7623] __nla_validate_parse: 3 callbacks suppressed [ 66.728588][ T7623] netlink: 56 bytes leftover after parsing attributes in process `syz.3.459'. [ 66.766135][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.769556][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.848275][ T7626] 9pnet_fd: Insufficient options for proto=fd [ 66.971257][ T5947] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 67.042668][ T74] usb 5-1: USB disconnect, device number 5 [ 67.096477][ T7639] syz.2.466 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.114998][ T7639] ALSA: seq fatal error: cannot create timer (-22) [ 67.371692][ T7647] netlink: 56 bytes leftover after parsing attributes in process `syz.2.468'. [ 67.379229][ T7647] ubi: mtd0 is already attached to ubi0 [ 67.474865][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 67.811994][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 67.812005][ T39] audit: type=1400 audit(1731134318.811:527): avc: denied { ioctl } for pid=7666 comm="syz.3.474" path="socket:[17894]" dev="sockfs" ino=17894 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.837935][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.475'. [ 67.840350][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.475'. [ 67.852335][ T7677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59664 sclass=netlink_route_socket pid=7677 comm=syz.0.477 [ 67.857202][ T7677] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 67.863896][ T7677] CIFS mount error: No usable UNC path provided in device string! [ 67.863896][ T7677] [ 67.867064][ T7677] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 67.869732][ T39] audit: type=1400 audit(1731134318.871:528): avc: denied { write } for pid=7676 comm="syz.0.477" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 67.876238][ T7677] 9pnet_fd: Insufficient options for proto=fd [ 67.914787][ T7684] geneve2: entered promiscuous mode [ 67.916299][ T7684] geneve2: entered allmulticast mode [ 67.967030][ T7686] overlay: Unknown parameter 'appraise' [ 68.079067][ T7695] binder: 7694:7695 ioctl c0306201 200001c0 returned -14 [ 68.081336][ T7695] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 68.083347][ T7695] netlink: 9384 bytes leftover after parsing attributes in process `syz.3.483'. [ 68.167351][ T7703] pim6reg1: entered promiscuous mode [ 68.168623][ T7703] pim6reg1: entered allmulticast mode [ 68.171752][ T39] audit: type=1400 audit(1731134319.171:529): avc: denied { mounton } for pid=7702 comm="syz.3.484" path="/160/file0/file0" dev="ramfs" ino=17396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 68.173104][ T7703] syz.3.484: attempt to access beyond end of device [ 68.173104][ T7703] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 68.180673][ T7703] vxfs: unable to read disk superblock at 1 [ 68.182382][ T7703] syz.3.484: attempt to access beyond end of device [ 68.182382][ T7703] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 68.186377][ T7703] vxfs: unable to read disk superblock at 8 [ 68.188061][ T7703] vxfs: can't find superblock. [ 68.190304][ T5985] usb 6-1: USB disconnect, device number 5 [ 68.192321][ T39] audit: type=1400 audit(1731134319.191:530): avc: denied { name_bind } for pid=7702 comm="syz.3.484" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 68.260412][ T39] audit: type=1400 audit(1731134319.261:531): avc: denied { write } for pid=7706 comm="syz.2.486" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 68.286814][ T39] audit: type=1400 audit(1731134319.291:532): avc: denied { ioctl } for pid=7706 comm="syz.2.486" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 68.286941][ T7707] netlink: 'syz.2.486': attribute type 13 has an invalid length. [ 68.425911][ T39] audit: type=1400 audit(1731134319.431:533): avc: denied { map } for pid=7709 comm="syz.2.488" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.467628][ T7712] input: syz0 as /devices/virtual/input/input15 [ 68.484029][ T7712] tmpfs: Cannot change global quota limit on remount [ 68.485214][ T39] audit: type=1400 audit(1731134319.481:534): avc: denied { remount } for pid=7711 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.515587][ T39] audit: type=1400 audit(1731134319.521:535): avc: denied { create } for pid=7716 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 68.524867][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 68.545246][ T5985] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 68.706069][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.708957][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.711453][ T5985] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.714875][ T5985] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 68.717171][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.720054][ T5985] usb 6-1: config 0 descriptor?? usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 68.824730][ T39] audit: type=1400 audit(1731134319.821:536): avc: denied { create } for pid=7756 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 68.829955][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.494'. [ 68.829993][ T7757] 3: renamed from bridge_slave_1 (while UP) [ 68.839569][ T7757] netlink: 104 bytes leftover after parsing attributes in process `syz.0.494'. [ 68.884935][ T35] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 69.036218][ T35] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 69.038546][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 69.041812][ T35] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.049542][ T35] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 69.051950][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 69.056023][ T35] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.060879][ T35] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 69.063342][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 69.067930][ T35] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.073540][ T35] usb 7-1: string descriptor 0 read error: -22 [ 69.077764][ T35] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 69.080653][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.092721][ T35] adutux 7-1:168.0: interrupt endpoints not found [ 69.127823][ T5985] acrux 0003:1A34:0802.0003: hidraw1: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 69.130811][ T5985] acrux 0003:1A34:0802.0003: no inputs found [ 69.132344][ T5985] acrux 0003:1A34:0802.0003: Failed to enable force feedback support, error: -19 [ 69.293012][ T30] usb 7-1: USB disconnect, device number 5 [ 69.333921][ T7799] FAT-fs (nullb0): bogus number of reserved sectors [ 69.336279][ T7799] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 69.339056][ T7799] FAT-fs (nullb0): bogus number of reserved sectors [ 69.340887][ T7799] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 69.390494][ T7806] netlink: 'syz.0.506': attribute type 39 has an invalid length. [ 69.476329][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.479671][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.545365][ T35] usb 6-1: USB disconnect, device number 6 [ 69.554936][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 69.643389][ T7826] random: crng reseeded on system resumption [ 69.831058][ T7831] tipc: Enabling of bearer rejected, already enabled [ 69.917989][ T7836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.007070][ T7839] tipc: Enabling of bearer rejected, failed to enable media [ 70.152139][ T7860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.523'. [ 70.156731][ T7860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.159639][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49168 sclass=netlink_route_socket pid=7856 comm=syz.3.521 [ 70.165774][ T7860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.594907][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 70.604925][ T5947] Bluetooth: hci0: command 0x040f tx timeout [ 70.604955][ T5982] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 70.608378][ T5982] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 71.007401][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.009324][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.034049][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 71.293498][ T7935] binder: 7926:7935 ioctl c00c6211 0 returned -14 [ 71.645023][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 71.739386][ T7953] netlink: 19 bytes leftover after parsing attributes in process `syz.1.551'. [ 71.802123][ T7961] lo speed is unknown, defaulting to 1000 [ 71.845771][ T7969] ================================================================== [ 71.847884][ T7969] BUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x19e8/0x1cf0 [ 71.849906][ T7969] Read of size 4 at addr ffffc90004727038 by task syz.2.555/7969 [ 71.852742][ T7969] [ 71.853904][ T7969] CPU: 2 UID: 0 PID: 7969 Comm: syz.2.555 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 71.856599][ T7969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.859336][ T7969] Call Trace: [ 71.860196][ T7969] [ 71.860909][ T7969] dump_stack_lvl+0x116/0x1f0 [ 71.862145][ T7969] print_report+0xc3/0x620 [ 71.863307][ T7969] ? __virt_addr_valid+0x5e/0x590 [ 71.864614][ T7969] kasan_report+0xd9/0x110 [ 71.865785][ T7969] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 71.867067][ T7969] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 71.868351][ T7969] acpi_nfit_ctl+0x19e8/0x1cf0 [ 71.869600][ T7969] ? rcu_is_watching+0x12/0xc0 [ 71.871087][ T7969] ? trace_contention_end+0xea/0x140 [ 71.872461][ T7969] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 71.873773][ T7969] ? __mutex_lock+0x1a6/0x9c0 [ 71.874994][ T7969] ? __might_fault+0x13b/0x190 [ 71.876233][ T7969] ? nd_ioctl+0xf7a/0x18c0 [ 71.877387][ T7969] ? __pfx___mutex_lock+0x10/0x10 [ 71.878695][ T7969] ? __might_fault+0xe3/0x190 [ 71.879916][ T7969] nd_ioctl+0x13bc/0x18c0 [ 71.881034][ T7969] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 71.882584][ T7969] ? __pfx_nd_ioctl+0x10/0x10 [ 71.883780][ T7969] ? trace_lock_acquire+0x14a/0x1d0 [ 71.885045][ T7969] ? selinux_file_ioctl+0x180/0x270 [ 71.886288][ T7969] ? selinux_file_ioctl+0xb4/0x270 [ 71.887542][ T7969] ? __pfx_bus_ioctl+0x10/0x10 [ 71.888874][ T7969] __x64_sys_ioctl+0x18f/0x220 [ 71.890485][ T7969] do_syscall_64+0xcd/0x250 [ 71.891860][ T7969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.893393][ T7969] RIP: 0033:0x7fed7c37e719 [ 71.894551][ T7969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.899607][ T7969] RSP: 002b:00007fed7d0de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.901727][ T7969] RAX: ffffffffffffffda RBX: 00007fed7c535f80 RCX: 00007fed7c37e719 [ 71.903761][ T7969] RDX: 0000000020000140 RSI: 00000000c008640a RDI: 0000000000000007 [ 71.905776][ T7969] RBP: 00007fed7c3f139e R08: 0000000000000000 R09: 0000000000000000 [ 71.907804][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.910457][ T7969] R13: 0000000000000000 R14: 00007fed7c535f80 R15: 00007ffd21b491f8 [ 71.912681][ T7969] [ 71.913487][ T7969] [ 71.914122][ T7969] The buggy address belongs to the virtual mapping at [ 71.914122][ T7969] [ffffc90004727000, ffffc90004729000) created by: [ 71.914122][ T7969] nd_ioctl+0xf14/0x18c0 [ 71.918534][ T7969] [ 71.919155][ T7969] The buggy address belongs to the physical page: [ 71.920792][ T7969] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802a9ff360 pfn:0x2a9ff [ 71.923345][ T7969] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.925154][ T7969] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 71.927269][ T7969] raw: ffff88802a9ff360 0000000000000000 00000001ffffffff 0000000000000000 [ 71.929920][ T7969] page dumped because: kasan: bad access detected [ 71.931919][ T7969] page_owner tracks the page as allocated [ 71.933389][ T7969] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 7969, tgid 7968 (syz.2.555), ts 71845731047, free_ts 71845629823 [ 71.937906][ T7969] post_alloc_hook+0x2d1/0x350 [ 71.939153][ T7969] get_page_from_freelist+0xf7d/0x2d10 [ 71.940555][ T7969] __alloc_pages_noprof+0x223/0x25a0 [ 71.942094][ T7969] alloc_pages_bulk_noprof+0x77c/0x1110 [ 71.943536][ T7969] alloc_pages_bulk_array_mempolicy_noprof+0x250/0x11f0 [ 71.945334][ T7969] __vmalloc_node_range_noprof+0x517/0x15a0 [ 71.946881][ T7969] vmalloc_noprof+0x6b/0x90 [ 71.948078][ T7969] nd_ioctl+0xf14/0x18c0 [ 71.949544][ T7969] __x64_sys_ioctl+0x18f/0x220 [ 71.951301][ T7969] do_syscall_64+0xcd/0x250 [ 71.952571][ T7969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.954086][ T7969] page last free pid 5985 tgid 5985 stack trace: [ 71.955723][ T7969] free_unref_page+0x5f4/0xdc0 [ 71.956968][ T7969] vfree+0x17a/0x890 [ 71.958000][ T7969] bpf_prog_free_deferred+0x53f/0x6f0 [ 71.959397][ T7969] process_one_work+0x9c5/0x1ba0 [ 71.960689][ T7969] worker_thread+0x6c8/0xf00 [ 71.961895][ T7969] kthread+0x2c1/0x3a0 [ 71.962972][ T7969] ret_from_fork+0x45/0x80 [ 71.964133][ T7969] ret_from_fork_asm+0x1a/0x30 [ 71.965383][ T7969] [ 71.966021][ T7969] Memory state around the buggy address: [ 71.967460][ T7969] ffffc90004726f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 71.969931][ T7969] ffffc90004726f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 71.972380][ T7969] >ffffc90004727000: 00 00 00 00 00 00 00 03 f8 f8 f8 f8 f8 f8 f8 f8 [ 71.974686][ T7969] ^ [ 71.976211][ T7969] ffffc90004727080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 71.978208][ T7969] ffffc90004727100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 71.980271][ T7969] ================================================================== [ 71.984272][ T7969] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.986468][ T7969] CPU: 2 UID: 0 PID: 7969 Comm: syz.2.555 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 71.989215][ T7969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.991998][ T7969] Call Trace: [ 71.992890][ T7969] [ 71.993671][ T7969] dump_stack_lvl+0x3d/0x1f0 [ 71.994902][ T7969] panic+0x71d/0x800 [ 71.995940][ T7969] ? __pfx_panic+0x10/0x10 [ 71.997118][ T7969] ? preempt_schedule_thunk+0x1a/0x30 [ 71.998534][ T7969] ? preempt_schedule_common+0x44/0xc0 [ 71.999967][ T7969] ? check_panic_on_warn+0x1f/0xb0 [ 72.001306][ T7969] check_panic_on_warn+0xab/0xb0 [ 72.002613][ T7969] end_report+0x117/0x180 [ 72.003754][ T7969] kasan_report+0xe9/0x110 [ 72.004934][ T7969] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 72.006245][ T7969] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 72.007528][ T7969] acpi_nfit_ctl+0x19e8/0x1cf0 [ 72.008791][ T7969] ? rcu_is_watching+0x12/0xc0 [ 72.010060][ T7969] ? trace_contention_end+0xea/0x140 [ 72.011444][ T7969] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 72.012798][ T7969] ? __mutex_lock+0x1a6/0x9c0 [ 72.014039][ T7969] ? __might_fault+0x13b/0x190 [ 72.015298][ T7969] ? nd_ioctl+0xf7a/0x18c0 [ 72.016483][ T7969] ? __pfx___mutex_lock+0x10/0x10 [ 72.017811][ T7969] ? __might_fault+0xe3/0x190 [ 72.019066][ T7969] nd_ioctl+0x13bc/0x18c0 [ 72.020203][ T7969] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 72.021740][ T7969] ? __pfx_nd_ioctl+0x10/0x10 [ 72.022983][ T7969] ? trace_lock_acquire+0x14a/0x1d0 [ 72.024351][ T7969] ? selinux_file_ioctl+0x180/0x270 [ 72.025712][ T7969] ? selinux_file_ioctl+0xb4/0x270 [ 72.027060][ T7969] ? __pfx_bus_ioctl+0x10/0x10 [ 72.028311][ T7969] __x64_sys_ioctl+0x18f/0x220 [ 72.029529][ T7969] do_syscall_64+0xcd/0x250 [ 72.030731][ T7969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.032264][ T7969] RIP: 0033:0x7fed7c37e719 [ 72.033434][ T7969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.038411][ T7969] RSP: 002b:00007fed7d0de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.040565][ T7969] RAX: ffffffffffffffda RBX: 00007fed7c535f80 RCX: 00007fed7c37e719 [ 72.042623][ T7969] RDX: 0000000020000140 RSI: 00000000c008640a RDI: 0000000000000007 [ 72.044671][ T7969] RBP: 00007fed7c3f139e R08: 0000000000000000 R09: 0000000000000000 [ 72.046732][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.048771][ T7969] R13: 0000000000000000 R14: 00007fed7c535f80 R15: 00007ffd21b491f8 [ 72.050810][ T7969] [ 72.052211][ T7969] Kernel Offset: disabled [ 72.053355][ T7969] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:38:42 Registers: info registers vcpu 0 CPU#0 RAX=000000000011abd5 RBX=0000000000000000 RCX=ffffffff8b237429 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1b3c0 RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5848 R15=0000000000000000 RIP=ffffffff8b23880f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fed7d09bf98 CR3=000000004f04e000 CR4=00352ef0 DR0=0000000000001000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000010000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c50c488 00007fed7c50c480 00007fed7c50c478 00007fed7c50c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7d06d100 00007fed7c50c440 00007fed7c50c458 00007fed7c50c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c50c498 00007fed7c50c490 00007fed7c50c488 00007fed7c50c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006b40000 RBX=ffff888108ae0000 RCX=ffffffff816ed571 RDX=1ffff1102115c231 RSI=ffffffff864bbbef RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc900008b0eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=dffffc0000000000 R14=ffff888108ae1188 R15=0000000000000000 RIP=ffffffff864bbc17 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555583ba5500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000557ef5f00908 CR3=000000001209e000 CR4=00352ef0 DR0=0000000000001000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000010000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555583bb8730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555583bb84a8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555583bbc288 0000555583bbbea0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000033323935 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0610002010000602 4ba6080288000502 8280100002800404 0130b20002000714 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0108000781e00300 08000781d80307ba 08000781d0030008 0018030008001003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000782900303ffff ffff040782800303 ffffffff040781f0 030008000781e803 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00078080040a1000 060102a800020007 0008000782a00300 0800078298032008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 042ea400306c7463 646e2f7665642f01 ffffffffffffffff e708018003019010 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010680041ece0800 0100000408060601 16b0408080080006 80030580041880c3 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9094080001000004 080606010ea40002 0007000800058003 0004000184860800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01800401c7100008 042ea400306c7463 646e2f7665642f01 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e708018003019010 00078080040a1000 060102a800020007 0008000782a00300 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b8a45 RDI=ffffffff9aaebc40 RBP=ffffffff9aaebc00 RSP=ffffc9000335f598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000036393754 R12=0000000000000000 R13=0000000000000020 R14=ffffffff850b89e0 R15=0000000000000000 RIP=ffffffff850b8a6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fed7d0de6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002000d000 CR3=000000004f04e000 CR4=00352ef0 DR0=0000000000001000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000010000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c3f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c50c488 00007fed7c50c480 00007fed7c50c478 00007fed7c50c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7d06d100 00007fed7c50c440 00007fed7c50c458 00007fed7c50c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed7c50c498 00007fed7c50c490 00007fed7c50c488 00007fed7c50c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000093c1d RBX=0000000000000003 RCX=ffffffff8b237429 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1b3c0 RBP=ffffed1003b5b488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801dada440 R14=ffffffff905f5848 R15=0000000000000000 RIP=ffffffff8b23880f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fed7d0bdd58 CR3=000000004eb22000 CR4=00352ef0 DR0=0000000000001000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000010000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ee9f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ee9f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ee9f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ee9f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ee9f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ee9f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000020000000 b70000000c000000 8500000000000003 b700000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f3174940d32ce664 6f000000049267d2 eba8f0d0d55d171f 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63bbbe5946817937 8adcdc6e40f43655 931274916f28b62a 2fbfc6ad307365be ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 846dbf17cbb48563 09e9133ab42226e2 dafb9cac866ec846 62bd47da56d27e6d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69b38c56e2a501c3 d263bbbe59468179 378adcdc6e40f436 55931274916f28b6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2fbfc6ad307365 bef3174940d32ce6 646f000000049267 d2eba8f0d0d55d17 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f630c744b097f6c 5167aa1d2d33e840 763a91cceaf29a7f dbbce584bbb9b6cb ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000