last executing test programs: 1m17.156157809s ago: executing program 1 (id=521): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x8200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x402040) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f00000000c0)=0x10) sendmmsg$alg(r3, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3ea94163448412ba8", 0x10}, {&(0x7f0000000140)="ebe7a0e9026cfd16478dcec55a00001926aae1efd7e0054afa6935849e6098ed884e7cb51726b346a971f94ff635bbb095873048", 0x34}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="7305da440e4cbcd13ada63de5f", 0xd}, {&(0x7f0000000680)="103503a14842c5d8833150e9dcb614147f6f54e397b45f74fc27e88c6315e939667c74f34f785c4b6a9786ac1b870d02aba9dd86f3e7c1b6557bc97b124fa78a6f67d818b76df08ea9d4ddd9b35a198c34b776b80dc230cc1848286ae239c1a014d7d5e0b23ae47287bf02658c8b826db6", 0x71}], 0x2, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}, @iv={0xd0, 0x117, 0x2, 0xbc, "c3de8922b0c06fd38a661abb2a955e10660efbf19ceb9250ded1d7bf2894f3d038ae6be7b9740a7d998e91c652d1abfc1d4616ebaf80b0a90c6cc3f938b4155da2976bd26c838ed2e6792b2f17f753c17c8de1910e4af2e76c3cbeab7922bba70bde4d3c8fd25e19faf4c8ea9806d91cf8d8c2dd53e5dc0c194776046946f8f696c83cf61d81bc498f70d06a3be95cb265ad8efdc27d22ac94c04ce4ca14644b0db7bb26f4087e23bcca60b5af7b198fba1652a581344c562b412e13"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xb0, 0x117, 0x2, 0x9c, "89e107e147317e5623ebf1c8a358abeb390e9041856de687494aa410be775356d9ae1d3ae08b998a3beca8b69201e7482d399ff53d4b51dff9764aee25a4bd766e04f9f702d1dbe785b69ae7fad36cdb457a613bed344f8a3df0dd5755320b4ad7580d255626a7f5b50e10af94138f498deeecb225b8cbc072ff6352b59eaf6a8000721b246f0139e08715ecf3f36ed0f76dd36bfe2e661d15f85b7d"}], 0x1e0, 0x8000}], 0x2, 0x4040484) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000004080)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x9, @loopback, 0xe4a9}, 0x1c, 0x0}}], 0x1, 0x814) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x1, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e20, 0x27a3, @loopback, 0x3}, 0x1c) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000002c0)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa26b9e4080f01c966b81f6269e766ba000000000f30653e0f01c50c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x56}], 0x1, 0x0, 0x0, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r10, 0xc0045543, &(0x7f0000000040)) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000000)={0x0, [[0x7fff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x0, 0x0, 0xc000, 0x5], [0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0x2]], '\x00', [{}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5f08, 0x6}, {}, {}, {}, {}, {0x4, 0x8}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) 1m16.729482396s ago: executing program 1 (id=530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f00000005c0)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) r3 = socket$inet(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000540)="2ea9af42f87e0dd3cf40ac2e1f5c8c49c78d1bef469106d7401bdf60a9c14a0ae8221384299bc57f5ef0915a39948db4c574e477a9a6e76fd9158285aa3fe062cd9c93a40302eb61a95de6b16aa77a9df88610a2c00692e7e9f0b2971229d9978647b61e91bdbc1fdf79c58a91e49340a11c6b548920d903cf17065bddf469e11afaf819f686da7369e572fafb9ec88f96c03a294ad8d10feebe1fe375115e747222ded9310b015719d207cc16a06f8d6367cfc235fe8c1638aea1a9196d4b6b57be2edaae0977fc988d", 0xca, 0x3, 0x0, 0x1, r4}, &(0x7f0000000140)) read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1m15.830556222s ago: executing program 1 (id=551): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f00000002c0)="80d72de805d11e7b8dcbcc93593fb61d3d48f656605c1e6c54156c38e57db810", &(0x7f00000004c0)=@buf="0225354732c3a0951e291d4a70431e22e2dde4b8a85aff22543fc56a39b999348a3faba6c6c70429fd4f8cb1d65a60cd9dd5a1b737639b9fdc5e8d0a83c7560cd8805aec9290962b85410a6f10d01ee3c52607197d2abe0f67c407f07c694c334a4c64079563a70ec5fa0276340619f035f162c27f97083361a0c1351dd7e08e6d780b4716c080dc438a3ef2409374c62e9926e62969cbfe278f3221de150c3d49f6e00e6aeff331b52c7b78cd0edd4e288c4d3e762829b49a040f5c7ed3a1509697780af8810c10a694e7a00f069d0531b4bc3b0df4cb9c30188b07298814781078a2ff0cbc16ce325966", 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000a00)=ANY=[], 0x2b08}, 0x1, 0x0, 0x0, 0x4090}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x4) setsockopt$inet_buf(r2, 0x0, 0x26, &(0x7f00000000c0)="6b64b7a3b50c7b7245ee836b2d95f4cbcd779180f7e306d433bb42ec1ab2e6634c460059a876a3df0a6906a9c7ab7c35b7", 0x31) r5 = socket$netlink(0x10, 0x3, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r3}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1m15.770222327s ago: executing program 1 (id=555): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$char_usb(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x9, 0x8}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) dup(r0) 1m15.709982925s ago: executing program 1 (id=556): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x1406, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x44000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f00000000c0)="4978a763cb3c58e653c84a5278fc6ccc7be66974474f692a442aa499fff17e2bfdfa47566a8aa7a9f3265c91ad8c73e7ad3197b6550ed0d18ce18cd5adfd3be9feb9c2bcb1b89118ec4b965861babdb2be48220fbf8b21f749bc86d5715708625615ad2e90503a4abd8e2ce7ce7b1514bbc67340", &(0x7f0000000240)=""/169, &(0x7f0000000000)="8beac9c39e", &(0x7f0000000140)="e55d3eb882534422486d6282726abedc326f19bca9598d751ccd1d4ce4107ad9e1d5a8351fb60670e772c72c836b40", 0x400, r1, 0x4}, 0x38) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket(0xf, 0x3, 0xfffffffd) bind$inet(r3, &(0x7f0000000340)={0x22, 0x4e22, @remote}, 0x10) 1m15.708621097s ago: executing program 1 (id=558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8fad}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x53}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x400c0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206050000000000000000000100000605000400000000000900020073797a31000000000c000780050015008b0000000500050002000000050001000600000014000300686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8fad}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x53}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x400c0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206050000000000000000000100000605000400000000000900020073797a31000000000c000780050015008b0000000500050002000000050001000600000014000300686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) (async) 1m0.44710679s ago: executing program 32 (id=558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8fad}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x53}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x400c0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206050000000000000000000100000605000400000000000900020073797a31000000000c000780050015008b0000000500050002000000050001000600000014000300686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8fad}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x53}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x400c0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206050000000000000000000100000605000400000000000900020073797a31000000000c000780050015008b0000000500050002000000050001000600000014000300686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) (async) 1.717630619s ago: executing program 2 (id=1732): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_WEIGHT={0x8, 0xf, 0x2}]}, 0x44}}, 0x0) 1.640051572s ago: executing program 2 (id=1734): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x26, 0x0, "66cf60f27f847cfed875590293f8a6aa1a421c8fbfba6c77b2ec160b5b16ba0536a0d959340e20e92544663e9d51e5a13af6fa6d554b0563fa2771288fac6cf1268c8925129d74c75114e33862bed77a"}, 0xd8) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1}) lseek(r0, 0x20000, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000200)=0xa, 0x4) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, 0x1405, 0x300, 0x70bd2d, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x40400c4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x67a8, @empty, 0xf}}, 0x1, 0x4, 0x2, 0x0, 0x80000001}, &(0x7f00000004c0)=0x98) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0xa}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000540)={r4, 0x9}, 0x8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/249, 0xf9, 0x1, &(0x7f0000000680)=""/62, 0x3e}, &(0x7f0000000700)=0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) sendmsg$nfc_llcp(r5, &(0x7f0000000940)={&(0x7f0000000780)={0x27, r6, 0x1, 0x7, 0x2c, 0xf7, "1f478f96e38c3770e4ff42e79d80b97543e463d2f7e3d529b106141bb9503732c660a083cf56fd32dd0f1fec8ea1ea5cc6e3e7c9551241c829d3d9c994c94c", 0xc}, 0x60, &(0x7f0000000880)=[{&(0x7f0000000800)="6bedece1f0b5bcab3b68b9cf79565151a0e6e644cebf894c78dbd70d4be5a47505bbf4e207b164afca73d2aff156b241c8bacbda6ef9dad23108f8a0f4498c7d86a655da2fd5fa9216d530d32b84f056696ed325f7a6ad131b6efd546ed30d572ff15399798e533a616f4a684e9695e71aed30040d98f7", 0x77}], 0x1, &(0x7f00000008c0)={0x58, 0x3a, 0x5, "0b5d657849ee83fe36a826897b2c93e718a5497b82fb9600cc49afbb6b37049cad64d55de080769f2ad3e243040f94b1127a93346e3530e9b3b9fe7918708aa6d4b139383b"}, 0x58, 0x20004084}, 0xffb41b79bbfde64a) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r7, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x15, 0x7, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40097}, 0x40008c0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={&(0x7f0000000ac0)="0579da821c0ad8feae980738a712087c6a518cb3b259f6a926c16cde3270a24b16c013235affe932a27cd6e32a053319f7066a56e6aa0862ccafc4aca9227abeba94568ecd99731549105f04031987d18ff9914fe9349b862c783c5ee21801536b146e8dfc687002a56885639d773264599b27e5be6dee98", &(0x7f0000000b40)=""/18, &(0x7f0000000b80)="1a82e738aa818b7e76390744d32b60637a5f9b25cee1bcb0a6e9b44fed88e0cf6e903a5c0bc145964b2bbca72d8a611f1a7b24710a3b1fabf735cb82c93bb0f8622b872caba856b674602bac548cfc3b916f7a98fd6a2c689e8ec3d2276ae076caa9bda97fcef5996c432c385ff2f3a881a9234269e86933329a0e011335b40440a8e65e601146a919621d194e56937a071b41bf45b5f016e4aa2fb790a82cf09f850211a667e3885388c0fb", &(0x7f0000000c40)="b761f8b58493381b00", 0x7, r5, 0x4}, 0x38) accept4(r1, &(0x7f0000000cc0)=@caif=@dbg, &(0x7f0000000d40)=0x80, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) writev(r5, &(0x7f0000000f80)=[{&(0x7f0000000e80)="b37b860c40875e425689bac91bdfbcb1937840801528b894755792add4d3e8e5c8b5c7538cb76cd72172dcd1cc1e500debc7771b93c1a8be3ec028b8f2ce8d5798bf7b87f5726e3f18fe36a0d73bf3417ad4c4555b68b7d8fa0e2ae2193e5e3094f3b4d9b9d06c80c6edc9babfc3edfb6197d5c1bf2f1bd784e29f99addd6b6c6d9902bdec5e425b17f0158b177c7a242de375446f603abd7b592007e16996d239767998c684deb5f7772852b982c9a3bf6adc1d82d4b9bddab22ae166746440e8ed4332cf9a4c7207cf84f1f5a3f8d2a7e08da9e4a954b73d932256861b78866fd4", 0xe2}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) mmap(&(0x7f0000ddc000/0x4000)=nil, 0x4000, 0x2000002, 0x10010, r2, 0x9c267000) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000fc0)={r4, 0x9, 0x30}, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r8, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}}, 0x8800) 1.63954618s ago: executing program 3 (id=1735): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) write$input_event(r0, &(0x7f0000000040)={{}, 0x11, 0x101, 0x5}, 0x18) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x3ff, 0x0, 0x8}, {0x2d2, 0x0, 0x5}]}) sendto$llc(r0, &(0x7f00000000c0)="c645c7ea5519db39e7bc77641fa3e63b59dd31d43635c65289ae5b520c48b8065848201d7e73a803d1143ef6d68acf9878f662a5bce57ff3ae7c6bd3c7425646841e5d71c90557289c69b433bc5e57514789bad9491cd985446e8cc0c59d1258d36c62e1fda4ac6d123fd8d4dcc9cf4441578590ba4dae247d0caf142c7197f013e533d14d4007a9853c4f80eb3a4bf396a6f43f32a5f007c2bb323d98ce72005bfba910e88e3a8b9dd0cd", 0xab, 0x40, &(0x7f0000000180)={0x1a, 0x325, 0x6, 0x6, 0x4, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x1, 0x2, 0x2, 0x4, 0x6, 0x8ca}, &(0x7f0000000200)=0x20) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x2, 'virt_wifi0\x00', 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x1410, 0x400, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/131, 0x83}], 0x2, 0x5, 0xbd1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x90) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000680), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20080000}, 0x0) close_range(r0, r0, 0x2) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x10000) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x470a00, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) r6 = accept$inet6(r0, &(0x7f00000008c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000900)=0x1c) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000940)={@local}, &(0x7f0000000980)=0x14) mkdir(&(0x7f00000009c0)='./file0\x00', 0x168) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r5, 0x81204101, &(0x7f0000000a00)) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000b40)={@mcast2, 0x0}, &(0x7f0000000b80)=0x14) close_range(r7, r7, 0x0) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', r8, 0x4, 0xcb, 0xa7, 0x5, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8, 0x7800, 0x2, 0x7}}) nanosleep(&(0x7f0000000cc0)={0x0, 0x989680}, &(0x7f0000000d00)) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x84, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sound_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004}, 0x0) 1.639324345s ago: executing program 2 (id=1736): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000500)={{0x5, 0x3}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xa0d1, @local, 0x10000}, 0x1c) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002d18b4649875e30835e0611e79cd72b384738fa7"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) syz_emit_ethernet(0xb4, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x8, 0xa6, 0x65, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @remote}, {0x4e22, 0x4e21, 0x92, 0x0, @wg=@data={0x4, 0x93e3, 0x804, "c07b8451117f97eaedfdf854786f453b9eccddbbe0cd18e3a752d9515a978ba2d7dd67daa53617352eab7a424be1d3a59e3e408a3454b982d0dd74ea82e15cb71c6a794a4c00bfb4ebdf223993e0efdf592488bcbc7c1a059208bb2bba5ef17290d6305c5d05911e8a138d05d88a9cd5aec089a8a06efda428ee"}}}}}}, 0x0) 1.539892586s ago: executing program 3 (id=1737): prctl$PR_PAC_RESET_KEYS(0x36, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000500000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018000000ffffffd000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x48, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.53438711s ago: executing program 3 (id=1738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xdf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x3) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x17}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x2000) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000300)={'macsec0\x00', 0xf35}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@private, @multicast2, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x1, 0xe, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7817, 0x700, 0x743, 0x4087}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000005c0)={0xfb, "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"}) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000800)={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @enc_lim={0x4, 0x1, 0x7f}, @pad1, @jumbo={0xc2, 0x4, 0x2}]}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv6_delroute={0x40, 0x19, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x10, 0xe, 0xfe, 0x3, 0xff, 0xa, 0x1000}, [@RTA_MARK={0x8, 0x10, 0x8}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_EXPIRES={0x8, 0x17, 0x1ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$inet6_int(r6, 0x29, 0xce, &(0x7f0000000940), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000980)={0x7, 'bridge_slave_1\x00', {0x10a}, 0x66}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, r2, 0x796, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x74}, 0x1, 0x0, 0x0, 0x24040001}, 0x4000880) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000b80)=r9) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r10, 0x800, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8c0) sendto$inet6(r6, &(0x7f0000000d00)="8bdaf951c14f01bc375bda1886270a192e77672182ad9b", 0x17, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xcc, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa0}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x99d}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0xcc}, 0x1, 0x0, 0x0, 0x844}, 0x4800) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000f80)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f40)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r11 = syz_open_procfs$userns(0x0, &(0x7f0000001000)) sendmsg$nl_route(r9, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)=@RTM_GETNSID={0x34, 0x5a, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r11}, @NETNSA_FD={0x8, 0x3, r9}, @NETNSA_FD={0x8, 0x3, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NL80211_CMD_JOIN_OCB(r9, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r2, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x80800) 1.48014859s ago: executing program 3 (id=1739): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r2 = io_uring_setup(0x1731, &(0x7f0000000380)={0x0, 0xfffffffc, 0x3681, 0xffffffff, 0x26f}) io_uring_enter(r2, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x12000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000000000000a00000002"]) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@userptr={0x0, 0x0, 0x4, 0x112000, 0x3, {}, {0x4, 0xc, 0xd9, 0x6, 0xf, 0x2, "c82d0b02"}, 0x3, 0x2, {&(0x7f0000000080)}, 0x80000000}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000042000b002e0e23ad7000fedbdf25050000020800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0xc, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5457, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, "a9872c1672d92f052f98a1aa41eda503b5bcf2"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x20, @empty}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r8, 0x0}]) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 1.024764158s ago: executing program 0 (id=1749): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000008000002000000400004803c0001800b0001006e756d67656e00002c000280080004400000000708000340000000000800014000000001080001400000000c08000240000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r4, @ANYBLOB="70c00000080000002400128011000a006272696467655f736c61766500000000247ac11b385a534d260c0005"], 0x44}}, 0x4000040) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000100)={r6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x2a, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000140)={0x3, {{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0xff}}, 0x0, 0x4, [{{0xa, 0x4e22, 0x7, @local, 0x6e57}}, {{0xa, 0x4e21, 0x9, @loopback, 0x8}}, {{0xa, 0x4e21, 0x1, @empty, 0x7}}, {{0xa, 0x4e20, 0x2, @mcast2, 0x1}}]}, 0x290) 940.170101ms ago: executing program 0 (id=1750): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000eb0000000001000000940000930600003e5f0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="0100000000d30a00626c00000000", @ANYRES32=0x0], 0x18}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001280)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x8, 0xe}, {0x2, 0x4}}}, 0x24}}, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x6, 0xbc, &(0x7f00000003c0)=""/188, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x1, 0x7fffffff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000200)=[r4, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f0000000480)=[{0x5, 0x4, 0xb, 0x5}, {0x4, 0x2, 0x7, 0xc}, {0x1, 0x5, 0x8, 0x3}, {0x0, 0x1, 0xe, 0xc}, {0x4, 0x5, 0x1, 0x8}, {0x4, 0x4, 0x2, 0x8}, {0x1, 0x3, 0xb, 0x6}], 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000000c0)='task_newtask\x00', r5, 0x0, 0x8}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x0) 939.687628ms ago: executing program 0 (id=1751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000005c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) socket$inet(0x2, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f0000000540)="2ea9af42f87e0dd3cf40ac2e1f5c8c49c78d1bef469106d7401bdf60a9c14a0ae8221384299bc57f5ef0915a39948db4c574e477a9a6e76fd9158285aa3fe062cd9c93a40302eb61a95de6b16aa77a9df88610a2c00692e7e9f0b2971229d9978647b61e91bdbc1fdf79c58a91e49340a11c6b548920d903cf17065bddf469e11afaf819f686da7369e572fafb9ec88f96c03a294ad8d10feebe1fe375115e747222ded9310b015719d207cc16a06f8d6367cfc235fe8c1638aea1a9196d4b6b57be2edaae0977fc988d", 0xca, 0x3, 0x0, 0x1, r2}, &(0x7f0000000140)) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 789.05315ms ago: executing program 2 (id=1756): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) (async) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./bus\x00') 739.648747ms ago: executing program 2 (id=1758): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02030aba2cc71b08bf93000000000000"], 0x10}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x8000000000000000, 0x88400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000180), 0x43) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000200)) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2", 0xe}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) symlink(&(0x7f0000000100)='./file2\x00', &(0x7f00000001c0)='./file0/file0\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r4, 0x9, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="040100001a0001000000000000000000fc010000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 612.147589ms ago: executing program 4 (id=1759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x9, &(0x7f00003b5000/0x3000)=nil, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c}, {0xe9b, 0x0, 0xfc, 0xffff7ffd}]}, 0x10) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000540)={0x8, 0x10001, 0xfffff053, 0x0, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000000400)=""/203}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r8, 0x79f, &(0x7f00000001c0)=0xa0000) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r9, 0x20}, {0xffffffffffffffff, 0x4}], 0x2, &(0x7f0000000500)={0x0, 0x989680}, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x24, r3, 0x1, 0x70bd2b, 0xfffffffb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x20008884) 508.386728ms ago: executing program 2 (id=1760): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x2, 0x80000000}) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000100)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bind$packet(r1, &(0x7f0000000100)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003800)='net/igmp6\x00') fcntl$setownex(r2, 0xf, &(0x7f0000003880)={0x1}) (async) fcntl$setownex(r2, 0xf, &(0x7f0000003880)={0x1}) fcntl$getflags(r2, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x18, &(0x7f0000000140), 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x18, &(0x7f0000000140), 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001d80)={r3}, 0x4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001d80)={r3}, 0x4) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) (async) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000580)={0x0, 0x52, 0x6c, "afad6c874d3dcd33a29e0c8aa67997bb1a92dd2ba5452d69c08468ea1a23044542a79c779c850fe26c3bc7914305dc95e4f6c58da2c3c2d0c28f0d0cb6ef3c62bdb9bd590b6a2dc92cbe4d3ef70b92ccee21b2a222ed0672456b378a7c52b2aa20f77db904ebc569eee8c9ca"}, 0x74) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000580)={0x0, 0x52, 0x6c, "afad6c874d3dcd33a29e0c8aa67997bb1a92dd2ba5452d69c08468ea1a23044542a79c779c850fe26c3bc7914305dc95e4f6c58da2c3c2d0c28f0d0cb6ef3c62bdb9bd590b6a2dc92cbe4d3ef70b92ccee21b2a222ed0672456b378a7c52b2aa20f77db904ebc569eee8c9ca"}, 0x74) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001940)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x9}}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x3f2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x9}}, @fwd={0xd}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x4, 0x2}, {0x5, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}]}, {0x0, [0x0, 0x61, 0x61]}}, &(0x7f0000001dc0)=""/248, 0xb9, 0xf8, 0x0, 0x401, 0x10000, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a00)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x411, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b40)=@o_path={&(0x7f0000001b00)='./file0\x00', 0x0, 0x4008, r4}, 0x18) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b40)=@o_path={&(0x7f0000001b00)='./file0\x00', 0x0, 0x4008, r4}, 0x18) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@o_path={&(0x7f0000001b80)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="d33ed4080fb9b9cbe77b6c5a180000000001000000000022f18e2666074942000900000095000000000000005449d00a2501ea772156f427fe5c13d2f64aaf5cdd994e920db7778256489bd1dc7ca6699e5093d0789637ae6f98d9f13243ef234df537b9db59167fed4d6ca1972b10210eead4b5f202c64968d0278d88bdbd5ccd47aa154b4e52efa8e50776"], &(0x7f0000000780)='GPL\x00', 0x4, 0x1000, &(0x7f00000007c0)=""/4096, 0x41100, 0xc, '\x00', 0x0, 0x18, r5, 0x8, &(0x7f0000001980)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000019c0)={0x1, 0x1, 0x64a, 0x10}, 0x10, 0x2a2af, r4, 0x0, &(0x7f0000001c80)=[r6, r7, 0x1, 0xffffffffffffffff, 0x1, r8, r9, r10], 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r11, &(0x7f0000000700)={0xa, {0x9, 0x9, 0x81}}, 0xa) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) r13 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r13, 0xc018480d, &(0x7f0000000640)={0x2, 0x3, 0xffffffff, 0x9, 0xfff, 0x9}) (async) ioctl$HIDIOCGUCODE(r13, 0xc018480d, &(0x7f0000000640)={0x2, 0x3, 0xffffffff, 0x9, 0xfff, 0x9}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2500, 0x0) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r14, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f0000000680)=0x4) 448.785593ms ago: executing program 3 (id=1761): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r0, 0x5608, 0x3) r1 = open(0x0, 0x800, 0x70) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0x6) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000040)=0x1c) keyctl$dh_compute(0x17, &(0x7f0000000d80), &(0x7f0000000dc0)=""/229, 0xe5, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=virtio,mmap,cache=none,cache=loose,posixacl']) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000e00)=""/229, &(0x7f0000000f00)=0xe5) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x220c00, 0x108) 448.368814ms ago: executing program 4 (id=1762): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="050600000100000005000f006c0000000c0006000100000001000000e4f63951aa9fd3749ba244c716935b97332c4bd9fa4ee6d056193e593282e5e79f8cf4576032394d79831f2e29e4b32001315e"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x86dd, @gre={{0x5, 0x4, 0x1, 0x11, 0x58, 0x6a, 0x0, 0x9, 0x2f, 0x0, @local, @loopback}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0xff, 0x1, 0x0, 0x0, 0x1, 0x13}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0x49}, 0x2, {0x7f, 0x5, 0x0, 0x1a, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000304000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="15020000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xba01}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="050600000100000005000f006c0000000c0006000100000001000000e4f63951aa9fd3749ba244c716935b97332c4bd9fa4ee6d056193e593282e5e79f8cf4576032394d79831f2e29e4b32001315e"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendto$packet(r2, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x86dd, @gre={{0x5, 0x4, 0x1, 0x11, 0x58, 0x6a, 0x0, 0x9, 0x2f, 0x0, @local, @loopback}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0xff, 0x1, 0x0, 0x0, 0x1, 0x13}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0x49}, 0x2, {0x7f, 0x5, 0x0, 0x1a, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000304000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="15020000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0xba01}, 0x0) (async) 369.059749ms ago: executing program 4 (id=1763): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x648292e1, @local, 0x29}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) poll(&(0x7f0000000140), 0x0, 0x1) 368.114199ms ago: executing program 3 (id=1764): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x8, 0x8, 0x112, r5, 0x8001, '\x00', r2, r6, 0x0, 0x2, 0x4, 0x7, @void, @value, @void, @value}, 0x50) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001080), 0x88000, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f00000011c0)={0x4, 0x1, &(0x7f00000010c0)=[0xf54f], &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000034e40000000000000000050001000600000005000400000000000900020073797a31000000000c00078008000640ff070000000005000200000014000300686173683a69702c706f72742c697000"], 0x58}}, 0x2) write$UHID_INPUT(r0, &(0x7f0000000c00)={0xfc, {"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", 0x1000}}, 0x1006) 367.465237ms ago: executing program 4 (id=1765): preadv2(0xffffffffffffffff, &(0x7f0000002240)=[{&(0x7f0000002040)=""/76, 0x4c}], 0x1, 0x8, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) 367.009919ms ago: executing program 4 (id=1766): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006110740000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r1}, &(0x7f0000001e40), &(0x7f0000001e80)=r2}, 0x20) sendmsg$rds(r0, &(0x7f0000001a00)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x23cdc43, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 270.555573ms ago: executing program 4 (id=1767): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r0, 0x560f, &(0x7f00000002c0)={0xb}) socket(0x2b, 0x1, 0x1) r1 = socket$inet6(0xa, 0x1, 0x100) sendto$inet6(r1, &(0x7f0000000380)="06077d5f3053676c11bb35e2d69bc1297709c3f7ac67996cfca072909840fbfb8b2f23ba0bb7c5721203efa00a5a0b300283e54d5d77808492c90eec27679996b2391a5414a639c179898bf0ee486c6f6b3ece430263a17ccc9693bc00b489443a7e6a8d034db292b3577d4ace153dc658b7ccee99d74d7cd8e8f505dcc93b1b276d85f7b1ef7d52196f38b743cc637c978d5947cd92c122664791231208f0bf8a0bb5d958e1d24c3e7f6d6c8eb3bd943d9600b85fc43b460f9d5e36b14adc35e4f249fc2b89e090603e7f93092865cd2fb53deac633642953bc1451282b5c3d1384a75d06a3465adbbce0c45945", 0xee, 0x24000080, &(0x7f0000000080)={0xa, 0x4e20, 0x7fff, @loopback, 0x1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x6, 0xd, 0x79}) 59.978753ms ago: executing program 0 (id=1768): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x200, 0x7a, 0x0, 0x80}, &(0x7f00000003c0)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004000000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 59.74078ms ago: executing program 0 (id=1769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454ce, 0x0) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)={r3, 0x5, 0xf12, "c14008e8776d1f8fde45d2074066f8267d74d75f209607ea63cb8eeff6ec4b89a705c1798937a5185dcae565aec6f79903b880be1faaf238fb"}) 0s ago: executing program 0 (id=1770): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x9, 0x0, 0x8004, 0xfffffffe, 0x9a, 0x0, 0xffffffff, 0x5, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1}, &(0x7f0000000180)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000000340)={0x3, 0x8, 0xb, 0x6, 0x4, 0x8, 0x3, 0x8f, 0x3, 0x2, 0x82, "c2bc2c66d437e915dc8a9dc96db5ab8f4223640b754d230f2dd29a113579f5ad"}) getsockopt(r3, 0x28, 0x9, 0x0, &(0x7f0000000240)) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0xfffffee}}], 0x48}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r7, 0x1, 0x14, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): tdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.283418][ T7529] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.285669][ T7529] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.289429][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 70.291798][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 70.356302][ T40] audit: type=1400 audit(1744652646.208:555): avc: denied { execute_no_trans } for pid=7535 comm="syz.3.442" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=20440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 70.363581][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 70.374808][ T40] audit: type=1326 audit(1744652646.228:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7537 comm="syz.1.443" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd736d8d169 code=0x0 [ 70.403553][ T40] audit: type=1400 audit(1744652646.258:557): avc: denied { watch watch_reads } for pid=7539 comm="syz.3.444" path="/proc/234" dev="proc" ino=22570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 70.436341][ T40] audit: type=1400 audit(1744652646.288:558): avc: denied { setopt } for pid=7542 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.466580][ T40] audit: type=1400 audit(1744652646.318:559): avc: denied { create } for pid=7547 comm="syz.3.446" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.472277][ T40] audit: type=1400 audit(1744652646.318:560): avc: denied { ioctl } for pid=7547 comm="syz.3.446" path="socket:[22574]" dev="sockfs" ino=22574 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.482320][ T40] audit: type=1400 audit(1744652646.338:561): avc: denied { unlink } for pid=5938 comm="syz-executor" name="file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.501946][ T7550] netlink: 'syz.3.447': attribute type 9 has an invalid length. [ 70.514321][ T7552] netlink: 'syz.3.447': attribute type 9 has an invalid length. [ 70.629915][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.449'. [ 70.969631][ T40] audit: type=1400 audit(1744652646.818:562): avc: denied { mount } for pid=7575 comm="syz.3.453" name="/" dev="ramfs" ino=22041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 71.007311][ T7576] overlayfs: missing 'lowerdir' [ 71.076184][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.077997][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.080864][ T7593] netlink: 57 bytes leftover after parsing attributes in process `syz.0.458'. [ 71.149790][ T7605] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 71.152272][ T7605] overlayfs: missing 'lowerdir' [ 71.232551][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.293320][ T7619] vlan0: entered promiscuous mode [ 71.575878][ T7668] Bluetooth: hci0: unsupported parameter 2327 [ 71.577810][ T7668] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 71.643837][ T7681] IPv6: NLM_F_REPLACE set, but no existing node found! [ 71.858239][ T7702] x_tables: duplicate underflow at hook 1 [ 71.905863][ T7707] autofs4:pid:7707:validate_dev_ioctl: path string terminator missing for cmd(0xc018937d) [ 71.908832][ T7707] xt_hashlimit: max too large, truncated to 1048576 [ 71.912007][ T7707] xt_bpf: check failed: parse error [ 71.915928][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 71.943172][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 72.034443][ T67] Bluetooth: hci2: command tx timeout [ 72.082729][ T7731] bond_slave_0: entered allmulticast mode [ 72.172060][ T7739] gfs2: path_lookup on 6(+dQnB!eUV!`: 8DSE y|YT{-,mb/ returned error -2 [ 72.175058][ T7738] netlink: 'syz.3.500': attribute type 39 has an invalid length. [ 72.381107][ T7760] netlink: 'syz.1.507': attribute type 10 has an invalid length. [ 72.468329][ T7766] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 72.570824][ T7771] batman_adv: batadv0: Adding interface: dummy0 [ 72.573442][ T7771] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.583289][ T7771] batman_adv: batadv0: Interface activated: dummy0 [ 72.620348][ T7773] xt_l2tp: missing protocol rule (udp|l2tpip) [ 73.533729][ T7826] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 73.684665][ T7833] dlm: non-version read from control device 211 [ 73.688119][ T7833] sctp: [Deprecated]: syz.2.531 (pid 7833) Use of int in maxseg socket option. [ 73.688119][ T7833] Use struct sctp_assoc_value instead [ 73.884371][ T7844] 9pnet_virtio: no channels available for device qY3aK [ 74.187262][ T7868] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 74.192822][ T7869] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 74.198132][ T7868] batman_adv: batadv0: Adding interface: team0 [ 74.199948][ T7868] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.210947][ T7868] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 74.214441][ T7869] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 74.216698][ T7869] team0: entered promiscuous mode [ 74.218082][ T7869] team_slave_0: entered promiscuous mode [ 74.219697][ T7869] team_slave_1: entered promiscuous mode [ 74.222402][ T7869] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.224670][ T7869] batman_adv: batadv0: Interface activated: team0 [ 74.226474][ T7869] batman_adv: batadv0: Interface deactivated: team0 [ 74.228273][ T7869] batman_adv: batadv0: Removing interface: team0 [ 74.230449][ T7869] bridge0: port 3(team0) entered blocking state [ 74.232320][ T7869] bridge0: port 3(team0) entered disabled state [ 74.234262][ T7869] team0: entered allmulticast mode [ 74.235680][ T7869] team_slave_0: entered allmulticast mode [ 74.237248][ T7869] team_slave_1: entered allmulticast mode [ 74.240092][ T7869] bridge0: port 3(team0) entered blocking state [ 74.242681][ T7869] bridge0: port 3(team0) entered forwarding state [ 74.278380][ T7875] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 74.350352][ T7878] syz.3.547: attempt to access beyond end of device [ 74.350352][ T7878] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 74.355493][ T7878] efs: cannot read volume header [ 74.396502][ T7878] netlink: 'syz.3.547': attribute type 10 has an invalid length. [ 74.399795][ T7878] bond0: (slave wlan1): Opening slave failed [ 74.411004][ T7877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.449586][ T7882] bridge_slave_0: default FDB implementation only supports local addresses [ 74.488032][ T7884] trusted_key: encrypted_key: insufficient parameters specified [ 74.639549][ T7906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.641611][ T7906] IPv6: NLM_F_CREATE should be set when creating new route [ 74.643676][ T7906] IPv6: NLM_F_CREATE should be set when creating new route [ 75.227349][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 75.227364][ T40] audit: type=1400 audit(1744652651.068:597): avc: denied { map } for pid=7914 comm="syz.2.561" path="socket:[24067]" dev="sockfs" ino=24067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.239653][ T40] audit: type=1400 audit(1744652651.068:598): avc: denied { read } for pid=7914 comm="syz.2.561" path="socket:[24067]" dev="sockfs" ino=24067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.370742][ T7922] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 75.559754][ T7932] vxcan1: tx address claim with different name [ 75.638149][ T40] audit: type=1400 audit(1744652651.488:599): avc: denied { ioctl } for pid=7936 comm="syz.3.569" path="socket:[25004]" dev="sockfs" ino=25004 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.702611][ T65] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 75.855597][ T65] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.857707][ T65] usb 5-1: config 0 has no interface number 0 [ 75.859358][ T65] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 75.862120][ T65] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 75.864834][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.868424][ T65] usb 5-1: config 0 descriptor?? [ 75.870269][ T7929] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.875087][ T65] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 75.886888][ T7947] __nla_validate_parse: 14 callbacks suppressed [ 75.886898][ T7947] netlink: 88 bytes leftover after parsing attributes in process `syz.3.573'. [ 75.935677][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 75.948761][ T7952] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20003 [ 75.956770][ T40] audit: type=1326 audit(1744652651.808:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7953 comm="syz.2.575" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0bb58d169 code=0x0 [ 76.019937][ T40] audit: type=1400 audit(1744652651.868:601): avc: denied { append } for pid=7958 comm="syz.3.577" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 76.078198][ T7964] dvmrp5: entered allmulticast mode [ 76.082067][ T7964] dvmrp5: left allmulticast mode [ 76.087782][ T1329] usb 5-1: USB disconnect, device number 7 [ 76.139079][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 76.187215][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 76.265243][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'. [ 76.305835][ T7976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.349486][ T40] audit: type=1400 audit(1744652652.198:602): avc: denied { ioctl } for pid=7977 comm="syz.3.583" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 76.356234][ T40] audit: type=1400 audit(1744652652.198:603): avc: denied { ioctl } for pid=7977 comm="syz.3.583" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 76.363346][ T40] audit: type=1400 audit(1744652652.198:604): avc: denied { ioctl } for pid=7977 comm="syz.3.583" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 76.463695][ T40] audit: type=1400 audit(1744652652.318:605): avc: denied { ioctl } for pid=7989 comm="syz.3.586" path="socket:[24212]" dev="sockfs" ino=24212 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.674669][ T8001] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 76.685035][ T8001] vlan3: entered allmulticast mode [ 76.686522][ T8001] bond0: entered allmulticast mode [ 76.688035][ T8001] bond_slave_0: entered allmulticast mode [ 76.690086][ T8001] bond_slave_1: entered allmulticast mode [ 76.842003][ T8010] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 76.847346][ T40] audit: type=1400 audit(1744652652.698:606): avc: denied { create } for pid=8011 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 76.907311][ T8022] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 76.916034][ T8021] xt_hashlimit: invalid rate [ 76.949382][ T8024] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 76.966032][ T8024] evm: overlay not supported [ 76.969841][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 77.138464][ T8047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=8047 comm=syz.2.603 [ 77.212730][ T5981] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 77.364186][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.367304][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.370089][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.375395][ T5981] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.379426][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.393208][ T5981] usb 5-1: config 0 descriptor?? [ 77.393919][ T8065] veth1_macvtap: left promiscuous mode [ 77.396307][ T8065] macsec0: entered promiscuous mode [ 77.397767][ T8065] macsec0: entered allmulticast mode [ 77.404893][ T8065] veth1_macvtap: entered promiscuous mode [ 77.406485][ T8065] veth1_macvtap: entered allmulticast mode [ 77.408288][ T8065] macsec0: left promiscuous mode [ 77.409876][ T8065] macsec0: left allmulticast mode [ 77.411391][ T8065] veth1_macvtap: left allmulticast mode [ 77.598346][ T8079] SELinux: ebitmap start bit (67108864) is beyond the end of the bitmap (1472) [ 77.602667][ T8079] SELinux: failed to load policy [ 77.805269][ T5981] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 77.807636][ T5981] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 77.809656][ T5981] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 77.811652][ T5981] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 77.814371][ T5981] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 77.816355][ T5981] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 77.818667][ T5981] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 77.823950][ T5981] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 77.836115][ T8092] validate_nla: 3 callbacks suppressed [ 77.836125][ T8092] netlink: 'syz.2.617': attribute type 32 has an invalid length. [ 77.840437][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 77.855222][ T8092] (unnamed net_device) (uninitialized): option coupled_control: invalid value (2) [ 78.191747][ T8101] cgroup: name respecified [ 78.897218][ T8125] bond1 (unregistering): Released all slaves [ 79.053781][ T8131] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 79.056439][ T8131] SELinux: failed to load policy [ 79.515934][ T8154] tmpfs: Bad value for 'mpol' [ 79.588156][ T8160] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 79.591697][ T8160] SELinux: failed to load policy [ 79.635399][ T8162] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 79.745762][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 79.803338][ T24] usb 5-1: USB disconnect, device number 8 [ 80.845766][ T8201] Bluetooth: Invalid byte 03 after esc byte [ 80.966242][ T8214] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 81.038188][ T8216] : entered promiscuous mode [ 81.262013][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 81.262023][ T40] audit: type=1326 audit(1744652657.108:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.2.656" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0bb58d169 code=0x0 [ 81.322853][ T833] cfg80211: failed to load regulatory.db [ 81.927469][ T8228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.658'. [ 81.930746][ T8228] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 81.941568][ T40] audit: type=1400 audit(1744652657.788:621): avc: denied { accept } for pid=8226 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 82.170599][ T5952] Bluetooth: Wrong link type (-22) [ 82.175151][ T40] audit: type=1400 audit(1744652658.028:622): avc: denied { setopt } for pid=8231 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.261091][ T8234] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 82.265719][ T8236] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 82.298964][ T40] audit: type=1400 audit(1744652658.148:623): avc: denied { nlmsg_write } for pid=8237 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 82.332284][ T8241] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 82.335054][ T8241] SELinux: failed to load policy [ 82.440817][ T8245] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 82.444621][ T8245] SELinux: failed to load policy [ 82.483606][ T8248] bond0: (slave rose0): Releasing backup interface [ 82.544488][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 82.549824][ T40] audit: type=1400 audit(1744652658.398:624): avc: denied { bind } for pid=8253 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.567749][ T40] audit: type=1400 audit(1744652658.398:625): avc: denied { name_bind } for pid=8253 comm="syz.2.667" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 82.577863][ T40] audit: type=1400 audit(1744652658.398:626): avc: denied { node_bind } for pid=8253 comm="syz.2.667" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 82.587727][ T40] audit: type=1400 audit(1744652658.398:627): avc: denied { listen } for pid=8253 comm="syz.2.667" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.596086][ T40] audit: type=1400 audit(1744652658.398:628): avc: denied { accept } for pid=8253 comm="syz.2.667" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.832513][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 82.945571][ T8300] kvm: Disabled LAPIC found during irq injection [ 83.068474][ T8322] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 83.072361][ T8322] SELinux: failed to load policy [ 83.108496][ T8326] netlink: 'syz.3.677': attribute type 4 has an invalid length. [ 83.147178][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 83.153489][ T40] audit: type=1400 audit(1744652658.998:629): avc: denied { ioctl } for pid=8330 comm="syz.2.675" path="socket:[25898]" dev="sockfs" ino=25898 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 83.361007][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 83.380352][ T8355] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 83.382999][ T8355] SELinux: failed to load policy [ 83.384435][ T8360] netlink: 'syz.2.687': attribute type 1 has an invalid length. [ 83.411673][ T8360] bond1: (slave gretap1): making interface the new active one [ 83.414381][ T8360] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 83.416820][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'. [ 83.419368][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'. [ 83.467219][ T8368] kAFS: Can only specify source 'none' with -o dyn [ 83.603509][ T8384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8384 comm=syz.3.695 [ 83.617876][ T8385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8385 comm=syz.3.695 [ 83.623737][ T8387] ufs: You didn't specify the type of your ufs filesystem [ 83.623737][ T8387] [ 83.623737][ T8387] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 83.623737][ T8387] [ 83.623737][ T8387] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 83.633101][ T8387] ufs: ufstype=old is supported read-only [ 83.653238][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 83.663401][ T8387] ufs: ufs_fill_super(): bad magic number [ 83.793076][ T8396] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 83.795801][ T8396] SELinux: failed to load policy [ 84.564312][ T8422] vlan3: entered promiscuous mode [ 84.565848][ T8422] bridge0: entered promiscuous mode [ 84.567755][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 84.570586][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'. [ 84.573581][ T8424] netlink: 'syz.2.706': attribute type 18 has an invalid length. [ 84.578724][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 84.581234][ T8424] netlink: 'syz.2.706': attribute type 18 has an invalid length. [ 84.584277][ T8424] netlink: 'syz.2.706': attribute type 18 has an invalid length. [ 84.586840][ T8424] netlink: 'syz.2.706': attribute type 18 has an invalid length. [ 84.590094][ T8424] netlink: 'syz.2.706': attribute type 18 has an invalid length. [ 84.593414][ T8424] netlink: 'syz.2.706': attribute type 18 has an invalid length. [ 84.595795][ T8424] netlink: 'syz.2.706': attribute type 18 has an invalid length. [ 84.598175][ T8424] netlink: 'syz.2.706': attribute type 18 has an invalid length. [ 84.621579][ T8426] vlan2: entered allmulticast mode [ 84.625505][ T8426] bond0: entered allmulticast mode [ 84.645046][ T8431] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 84.666962][ T8433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.676186][ T8433] team0: Device ipvlan1 failed to register rx_handler [ 84.866886][ T8441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.645046][ T8512] syzkaller1: entered promiscuous mode [ 85.647217][ T8512] syzkaller1: entered allmulticast mode [ 85.854753][ T8526] SELinux: ebitmap start bit (67108864) is beyond the end of the bitmap (1472) [ 85.860054][ T8526] SELinux: failed to load policy [ 86.438741][ T8571] x_tables: duplicate underflow at hook 3 [ 86.525222][ T8575] sctp: [Deprecated]: syz.0.749 (pid 8575) Use of int in max_burst socket option deprecated. [ 86.525222][ T8575] Use struct sctp_assoc_value instead [ 86.530417][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 86.530427][ T40] audit: type=1400 audit(1744652662.378:649): avc: denied { read write } for pid=8574 comm="syz.0.749" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.540012][ T40] audit: type=1400 audit(1744652662.378:650): avc: denied { open } for pid=8574 comm="syz.0.749" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.547461][ T40] audit: type=1400 audit(1744652662.388:651): avc: denied { ioctl } for pid=8574 comm="syz.0.749" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.596480][ T8576] SELinux: policydb string SE L does not match my string SE Linux [ 86.599138][ T8576] SELinux: failed to load policy [ 86.882549][ T5981] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 87.044223][ T5981] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.047504][ T5981] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.051423][ T5981] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.055201][ T5981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 87.059357][ T5981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 87.065396][ T5981] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.068884][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.071916][ T5981] usb 5-1: Product: syz [ 87.074572][ T5981] usb 5-1: Manufacturer: syz [ 87.081500][ T5981] cdc_wdm 5-1:1.0: skipping garbage [ 87.083933][ T5981] cdc_wdm 5-1:1.0: skipping garbage [ 87.090734][ T8580] __nla_validate_parse: 21 callbacks suppressed [ 87.090748][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 87.093409][ T5981] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 87.098446][ T5981] cdc_wdm 5-1:1.0: Unknown control protocol [ 87.122029][ T8580] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 87.161041][ T40] audit: type=1400 audit(1744652663.008:652): avc: denied { audit_write } for pid=8581 comm="syz.2.752" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.168707][ T40] audit: type=1400 audit(1744652663.018:653): avc: denied { name_bind 0x1000000 } for pid=8581 comm="syz.2.752" path="socket:[26109]" dev="sockfs" ino=26109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 87.249900][ T40] audit: type=1326 audit(1744652663.098:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8583 comm="syz.2.753" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0bb58d169 code=0x0 [ 87.839421][ T8578] batman_adv: batadv0: Interface deactivated: dummy0 [ 87.842106][ T8578] batman_adv: batadv0: Removing interface: dummy0 [ 87.879637][ T7462] usb 5-1: USB disconnect, device number 9 [ 88.096180][ T8592] netlink: 830 bytes leftover after parsing attributes in process `syz.2.755'. [ 88.100596][ T8592] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 88.327638][ T8596] validate_nla: 3 callbacks suppressed [ 88.327654][ T8596] netlink: 'syz.2.756': attribute type 14 has an invalid length. [ 88.414084][ T40] audit: type=1400 audit(1744652664.268:655): avc: denied { wake_alarm } for pid=8599 comm="syz.0.757" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.427134][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.757'. [ 88.483622][ T8602] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 88.577872][ T40] audit: type=1400 audit(1744652664.428:656): avc: denied { map } for pid=8608 comm="syz.0.761" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.588346][ T8609] loop6: detected capacity change from 0 to 524287999 [ 88.592551][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.595368][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.596399][ T40] audit: type=1400 audit(1744652664.448:657): avc: denied { setattr } for pid=8608 comm="syz.0.761" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 88.599019][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.608545][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.612092][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.614832][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.617274][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.619899][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.624184][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.626776][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.629101][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.631748][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.634984][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.638387][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.641519][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.645020][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.648259][ T8609] ldm_validate_partition_table(): Disk read failed. [ 88.651295][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.654553][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.657704][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.661116][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.664638][ T8609] Dev loop6: unable to read RDB block 0 [ 88.667723][ T8609] loop6: unable to read partition table [ 88.670256][ T8609] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 89.455355][ T6006] hid-generic 0007:0004:0003.0006: item fetching failed at offset 3/4 [ 89.457800][ T6006] hid-generic 0007:0004:0003.0006: probe with driver hid-generic failed with error -22 [ 89.460539][ T40] audit: type=1400 audit(1744652665.308:658): avc: denied { ioctl } for pid=8619 comm="syz.0.764" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 89.520305][ T8622] Mount JFS Failure: -22 [ 89.521641][ T8622] jfs_mount failed w/return code = -22 [ 89.962045][ T8639] ptrace attach of "/syz-executor exec"[8640] was attempted by "/syz-executor exec"[8639] [ 90.097642][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.101034][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.107896][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.114108][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.119491][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.622048][ T8642] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 90.821018][ T8643] chnl_net:caif_netlink_parms(): no params data found [ 90.841387][ T1141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.888896][ T8668] netlink: 'syz.0.776': attribute type 2 has an invalid length. [ 90.907255][ T8643] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.909363][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.911414][ T8643] bridge_slave_0: entered allmulticast mode [ 90.913884][ T8643] bridge_slave_0: entered promiscuous mode [ 90.917342][ T8643] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.919357][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.921481][ T8643] bridge_slave_1: entered allmulticast mode [ 90.925338][ T8643] bridge_slave_1: entered promiscuous mode [ 90.963496][ T8643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.975841][ T1141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.983793][ T8643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.015025][ T8643] team0: Port device team_slave_0 added [ 91.018245][ T8643] team0: Port device team_slave_1 added [ 91.050178][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.052128][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.062925][ T8643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.079069][ T1141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.086050][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.088003][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.096463][ T8643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.140167][ T8643] hsr_slave_0: entered promiscuous mode [ 91.142165][ T8643] hsr_slave_1: entered promiscuous mode [ 91.144201][ T8643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.146319][ T8643] Cannot create hsr debugfs directory [ 91.163710][ T1141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.192966][ T1139] Bluetooth: hci3: Frame reassembly failed (-84) [ 91.195965][ T1241] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 91.397248][ T1141] dvmrp0 (unregistering): left allmulticast mode [ 91.550145][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.557119][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.562109][ T1141] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 91.566222][ T1141] bond0 (unregistering): Released all slaves [ 91.576146][ T1141] bond1 (unregistering): Released all slaves [ 91.601720][ T6006] syz1: Port: 1 Link DOWN [ 91.615341][ T8680] bridge0: port 1(veth0_to_bridge) entered blocking state [ 91.617314][ T8680] bridge0: port 1(veth0_to_bridge) entered disabled state [ 91.619563][ T8680] veth0_to_bridge: entered allmulticast mode [ 91.621960][ T8680] veth0_to_bridge: entered promiscuous mode [ 91.624760][ T8680] bridge0: port 1(veth0_to_bridge) entered blocking state [ 91.626742][ T8680] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 91.676216][ T8643] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.690541][ T8643] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.732553][ T8643] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.741914][ T8643] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.755826][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 91.755840][ T40] audit: type=1400 audit(1744652667.608:666): avc: denied { write } for pid=8687 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.817561][ T40] audit: type=1400 audit(1744652667.668:667): avc: denied { create } for pid=8689 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 91.838967][ T8643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.862927][ T8691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.903015][ T8643] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.910108][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.912137][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.917102][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.919109][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.958230][ T40] audit: type=1400 audit(1744652667.808:668): avc: denied { egress } for pid=58 comm="kworker/2:1" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 91.971978][ T40] audit: type=1400 audit(1744652667.808:669): avc: denied { sendto } for pid=58 comm="kworker/2:1" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 91.983072][ T40] audit: type=1400 audit(1744652667.838:670): avc: denied { connect } for pid=8718 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.991003][ T1141] hsr_slave_0: left promiscuous mode [ 91.991605][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 91.999507][ T1141] hsr_slave_1: left promiscuous mode [ 92.001900][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.005675][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.018080][ T67] block nbd0: Receive control failed (result -107) [ 92.035187][ T1141] veth1_macvtap: left promiscuous mode [ 92.036936][ T1141] veth0_macvtap: left promiscuous mode [ 92.038588][ T1141] veth1_vlan: left promiscuous mode [ 92.041452][ T1141] veth0_vlan: left promiscuous mode [ 92.073614][ T8722] nbd0: detected capacity change from 0 to 32 [ 92.077572][ T6083] block nbd0: Dead connection, failed to find a fallback [ 92.079670][ T6083] block nbd0: shutting down sockets [ 92.082085][ T6083] ldm_validate_partition_table(): Disk read failed. [ 92.084563][ T6083] Dev nbd0: unable to read RDB block 0 [ 92.086660][ T6083] nbd0: unable to read partition table [ 92.094329][ T6083] ldm_validate_partition_table(): Disk read failed. [ 92.096445][ T6083] Dev nbd0: unable to read RDB block 0 [ 92.098333][ T6083] nbd0: unable to read partition table [ 92.148093][ T40] audit: type=1400 audit(1744652667.998:671): avc: denied { sqpoll } for pid=8735 comm="syz.3.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.154966][ T40] audit: type=1400 audit(1744652667.998:672): avc: denied { map } for pid=8735 comm="syz.3.792" path="socket:[27300]" dev="sockfs" ino=27300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 92.196071][ T67] Bluetooth: hci4: command tx timeout [ 92.618656][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 92.676146][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 92.734509][ T1142] smc: removing ib device syz1 [ 93.153173][ T8731] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 93.184431][ T40] audit: type=1400 audit(1744652669.038:673): avc: denied { write } for pid=8745 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.211148][ T8643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.232543][ T67] Bluetooth: hci3: command 0x1003 tx timeout [ 93.234011][ T5952] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 93.397204][ T8643] veth0_vlan: entered promiscuous mode [ 93.401331][ T8643] veth1_vlan: entered promiscuous mode [ 93.429551][ T8772] netlink: 'syz.0.798': attribute type 3 has an invalid length. [ 93.431811][ T8772] netlink: 224 bytes leftover after parsing attributes in process `syz.0.798'. [ 93.471791][ T8643] veth0_macvtap: entered promiscuous mode [ 93.477552][ T8777] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 93.504812][ T8643] veth1_macvtap: entered promiscuous mode [ 93.560199][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.566384][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.571744][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.577063][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.580198][ T8782] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2 [ 93.581894][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.594180][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.608559][ T8643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.616359][ T8643] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.629924][ T8643] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.633763][ T8643] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.663874][ T40] audit: type=1400 audit(1744652669.518:674): avc: denied { view } for pid=8784 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 93.721034][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.727671][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.734799][ T8793] SELinux: failed to load policy [ 93.748577][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.752505][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.768163][ T40] audit: type=1400 audit(1744652669.618:675): avc: denied { mounton } for pid=8643 comm="syz-executor" path="/syzkaller.ayV4eO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 93.794561][ T8799] 9pnet: Found fid 0 not clunked [ 93.934709][ T8819] openvswitch: netlink: Missing valid actions attribute. [ 93.937100][ T8819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.023484][ T8833] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 94.026034][ T8833] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 94.246937][ T8861] 9pnet_fd: Insufficient options for proto=fd [ 94.272537][ T5952] Bluetooth: hci4: command tx timeout [ 94.530821][ T8886] SELinux: failed to load policy [ 94.623285][ T8893] 9pnet_fd: p9_fd_create_unix (8893): problem connecting socket: ./file2: -2 [ 94.636142][ T8896] trusted_key: syz.0.828 sent an empty control message without MSG_MORE. [ 94.688827][ T8899] afs: Unknown parameter '0xffffffffffffffff' [ 94.741014][ T8905] IPVS: persistence engine module ip_vs_pe_" not found [ 94.770598][ T8909] syz.0.830 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.780896][ T8909] program syz.0.830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.784393][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'. [ 94.787724][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 94.816638][ T7462] hid (null): unknown global tag 0xc [ 94.818662][ T7462] hid (null): invalid report_count 53078 [ 94.823951][ T8913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.831'. [ 94.826536][ T7462] hid-generic 06C2:0BFD:0020.0007: unknown global tag 0xc [ 94.828598][ T7462] hid-generic 06C2:0BFD:0020.0007: item 0 0 1 12 parsing failed [ 94.830978][ T7462] hid-generic 06C2:0BFD:0020.0007: probe with driver hid-generic failed with error -22 [ 95.074769][ T8937] atomic_op ffff888012106998 conn xmit_atomic 0000000000000000 [ 95.077767][ T8937] xt_hashlimit: size too large, truncated to 1048576 [ 95.390837][ T8956] netlink: 'syz.0.839': attribute type 4 has an invalid length. [ 95.446046][ T8960] fuse: Unknown parameter '' [ 96.352535][ T5952] Bluetooth: hci4: command tx timeout [ 96.704173][ T8987] 9pnet_fd: Insufficient options for proto=fd [ 96.856516][ T8991] SELinux: ebitmap start bit (67108864) is beyond the end of the bitmap (1472) [ 96.860982][ T8991] SELinux: failed to load policy [ 97.182593][ T65] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 97.335561][ T65] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 97.338181][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.340422][ T65] usb 7-1: Product: syz [ 97.341655][ T65] usb 7-1: Manufacturer: syz [ 97.344259][ T65] usb 7-1: SerialNumber: syz [ 97.347258][ T65] usb 7-1: config 0 descriptor?? [ 97.551149][ T24] usb 7-1: USB disconnect, device number 4 [ 97.750755][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 97.750771][ T40] audit: type=1400 audit(1744652673.598:690): avc: denied { create } for pid=9013 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 97.760990][ T40] audit: type=1400 audit(1744652673.608:691): avc: denied { write } for pid=9013 comm="syz.4.857" path="socket:[31856]" dev="sockfs" ino=31856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 97.769959][ T40] audit: type=1400 audit(1744652673.608:692): avc: denied { nlmsg_read } for pid=9013 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 97.819061][ T9020] tmpfs: Bad value for 'mpol' [ 97.821121][ T9020] tmpfs: Bad value for 'mpol' [ 97.828250][ T9020] tmpfs: Bad value for 'mpol' [ 97.829842][ T9020] tmpfs: Bad value for 'mpol' [ 97.831282][ T9020] tmpfs: Bad value for 'mpol' [ 97.835483][ T9020] tmpfs: Bad value for 'mpol' [ 97.837661][ T9020] tmpfs: Bad value for 'mpol' [ 97.839730][ T9020] tmpfs: Bad value for 'mpol' [ 97.841767][ T9020] tmpfs: Bad value for 'mpol' [ 97.844039][ T40] audit: type=1400 audit(1744652673.698:693): avc: denied { getattr } for pid=9016 comm="syz.0.858" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=31923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.854865][ T9020] tmpfs: Bad value for 'mpol' [ 97.856342][ T9020] tmpfs: Bad value for 'mpol' [ 97.857792][ T9020] tmpfs: Bad value for 'mpol' [ 97.859261][ T9020] tmpfs: Bad value for 'mpol' [ 97.860958][ T9020] tmpfs: Bad value for 'mpol' [ 97.862939][ T9020] tmpfs: Bad value for 'mpol' [ 97.864717][ T9020] tmpfs: Bad value for 'mpol' [ 97.866178][ T9020] tmpfs: Bad value for 'mpol' [ 97.867635][ T9020] tmpfs: Bad value for 'mpol' [ 97.869090][ T9020] tmpfs: Bad value for 'mpol' [ 97.870529][ T9020] tmpfs: Bad value for 'mpol' [ 97.872415][ T9020] tmpfs: Bad value for 'mpol' [ 97.874151][ T9020] tmpfs: Bad value for 'mpol' [ 97.876181][ T9020] tmpfs: Bad value for 'mpol' [ 97.878366][ T9020] tmpfs: Bad value for 'mpol' [ 97.880388][ T9020] tmpfs: Bad value for 'mpol' [ 97.883457][ T9020] tmpfs: Bad value for 'mpol' [ 97.885025][ T9020] tmpfs: Bad value for 'mpol' [ 97.886507][ T9020] tmpfs: Bad value for 'mpol' [ 97.887958][ T9020] tmpfs: Bad value for 'mpol' [ 97.889462][ T9020] tmpfs: Bad value for 'mpol' [ 97.890897][ T9020] tmpfs: Bad value for 'mpol' [ 97.892354][ T9020] tmpfs: Bad value for 'mpol' [ 97.894126][ T9020] tmpfs: Bad value for 'mpol' [ 97.895587][ T9020] tmpfs: Bad value for 'mpol' [ 97.897038][ T9020] tmpfs: Bad value for 'mpol' [ 97.898643][ T9020] tmpfs: Bad value for 'mpol' [ 97.900749][ T9020] tmpfs: Bad value for 'mpol' [ 97.903313][ T9020] tmpfs: Bad value for 'mpol' [ 97.906032][ T9020] tmpfs: Bad value for 'mpol' [ 97.907513][ T9020] tmpfs: Bad value for 'mpol' [ 97.908967][ T9020] tmpfs: Bad value for 'mpol' [ 97.910430][ T9020] tmpfs: Bad value for 'mpol' [ 97.912276][ T9020] tmpfs: Bad value for 'mpol' [ 97.914681][ T9020] tmpfs: Bad value for 'mpol' [ 97.916719][ T9020] tmpfs: Bad value for 'mpol' [ 97.918771][ T9020] tmpfs: Bad value for 'mpol' [ 97.920609][ T9020] tmpfs: Bad value for 'mpol' [ 97.923001][ T9020] tmpfs: Bad value for 'mpol' [ 97.924835][ T9020] tmpfs: Bad value for 'mpol' [ 97.926307][ T9020] tmpfs: Bad value for 'mpol' [ 97.927727][ T9020] tmpfs: Bad value for 'mpol' [ 97.929152][ T9020] tmpfs: Bad value for 'mpol' [ 97.930785][ T9020] tmpfs: Bad value for 'mpol' [ 97.934875][ T9020] tmpfs: Bad value for 'mpol' [ 97.936803][ T9020] tmpfs: Bad value for 'mpol' [ 97.938796][ T9020] tmpfs: Bad value for 'mpol' [ 97.940820][ T9020] tmpfs: Bad value for 'mpol' [ 97.943739][ T9020] tmpfs: Bad value for 'mpol' [ 97.945318][ T9020] tmpfs: Bad value for 'mpol' [ 97.946763][ T9020] tmpfs: Bad value for 'mpol' [ 97.948188][ T9020] tmpfs: Bad value for 'mpol' [ 97.950423][ T9020] tmpfs: Bad value for 'mpol' [ 97.952201][ T9020] tmpfs: Bad value for 'mpol' [ 97.954461][ T9020] tmpfs: Bad value for 'mpol' [ 97.956250][ T9020] tmpfs: Bad value for 'mpol' [ 98.432625][ T5952] Bluetooth: hci4: command tx timeout [ 98.723633][ T9061] netlink: 256 bytes leftover after parsing attributes in process `syz.3.869'. [ 98.826037][ T9072] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 98.830913][ T9074] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 98.834721][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.872'. [ 98.877679][ T9080] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 98.925215][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 98.925529][ T40] audit: type=1400 audit(1744652674.778:694): avc: denied { name_bind } for pid=9088 comm="syz.2.878" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 98.934620][ T9090] bond_slave_0: left allmulticast mode [ 98.947589][ T9090] macsec1: left allmulticast mode [ 98.949047][ T9090] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 98.951261][ T9090] vlan2: left allmulticast mode [ 98.954005][ T9090] bond0: left allmulticast mode [ 99.093202][ T40] audit: type=1400 audit(1744652674.948:695): avc: denied { mount } for pid=9100 comm="syz.4.881" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 99.112263][ T40] audit: type=1400 audit(1744652674.958:696): avc: denied { unmount } for pid=8643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 99.232187][ T9106] xt_hashlimit: size too large, truncated to 1048576 [ 99.283314][ T40] audit: type=1400 audit(1744652675.138:697): avc: denied { listen } for pid=9105 comm="syz.4.883" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.611699][ T9068] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.613905][ T9068] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 99.625293][ T9068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.627098][ T9068] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 99.631732][ T9068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.633862][ T9068] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 99.639584][ T9068] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.643823][ T9068] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 99.786442][ T9134] netlink: 'syz.0.890': attribute type 9 has an invalid length. [ 100.030222][ T9167] SELinux: failed to load policy [ 100.032487][ T40] audit: type=1400 audit(1744652675.878:698): avc: denied { bind } for pid=9170 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.133309][ T40] audit: type=1400 audit(1744652675.988:699): avc: denied { listen } for pid=9186 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.139873][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.909'. [ 100.143460][ T9195] xt_l2tp: unknown flags: 17 [ 100.144968][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.909'. [ 100.148187][ T9187] netlink: 'syz.2.909': attribute type 39 has an invalid length. [ 100.312281][ T9223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.920'. [ 100.346728][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 100.651931][ T9249] trusted_key: encrypted_key: insufficient parameters specified [ 100.654736][ T9249] program syz.2.929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.711810][ T9251] SELinux: ebitmap start bit (67108864) is beyond the end of the bitmap (1472) [ 100.716462][ T9251] SELinux: failed to load policy [ 100.814358][ T9260] vim2m vim2m.0: vidioc_s_fmt queue busy [ 101.445837][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 101.451448][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 101.577893][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 101.750327][ T9349] program syz.4.959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.807702][ T9359] netlink: 'syz.0.963': attribute type 16 has an invalid length. [ 101.809908][ T9359] netlink: 'syz.0.963': attribute type 17 has an invalid length. [ 101.821505][ T9359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.215104][ T833] kernel read not supported for file /swradio6 (pid: 833 comm: kworker/0:2) [ 102.255161][ T9391] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 102.464809][ T9424] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 102.542546][ T9427] mkiss: ax0: crc mode is auto. [ 102.597238][ T9429] tmpfs: Cannot change global quota limit on remount [ 102.601283][ T9429] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 102.692608][ T957] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 102.842734][ T957] usb 9-1: Using ep0 maxpacket: 8 [ 102.845711][ T957] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.848477][ T957] usb 9-1: config 0 has no interface number 0 [ 102.850181][ T957] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.853617][ T957] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.856213][ T957] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.860047][ T957] usb 9-1: config 0 descriptor?? [ 102.862600][ T833] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 102.864137][ T957] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 103.025637][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.028763][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.031442][ T833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.035185][ T833] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.037686][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.045599][ T833] usb 7-1: config 0 descriptor?? [ 103.068327][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.072108][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.087483][ T5998] usb 9-1: USB disconnect, device number 2 [ 103.452358][ T833] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 103.456925][ T833] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 103.811191][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.815587][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.825560][ C0] plantronics 0003:047F:FFFF.0008: hid_field_extract() called with n (132) > 32! (swapper/0) [ 104.892592][ T5998] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 106.414373][ T833] usb 7-1: USB disconnect, device number 5 [ 114.368556][ T9521] netlink: 'syz.4.998': attribute type 1 has an invalid length. [ 114.370708][ T9521] netlink: 'syz.4.998': attribute type 2 has an invalid length. [ 114.401100][ T9525] mkiss: ax0: crc mode is auto. [ 114.421092][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 114.421102][ T40] audit: type=1400 audit(1744652690.268:709): avc: denied { accept } for pid=9536 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.423525][ T9536] delete_channel: no stack [ 114.460941][ T9544] blktrace: Concurrent blktraces are not allowed on sg0 [ 114.462219][ T40] audit: type=1400 audit(1744652690.308:710): avc: denied { watch } for pid=9546 comm="syz.2.1007" path="/303/file0" dev="tmpfs" ino=1617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.463744][ T9544] __nla_validate_parse: 8 callbacks suppressed [ 114.463752][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 114.467332][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 114.474019][ T40] audit: type=1400 audit(1744652690.318:711): avc: denied { ioctl } for pid=9546 comm="syz.2.1007" path="socket:[30579]" dev="sockfs" ino=30579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.474880][ T9547] geneve2: entered promiscuous mode [ 114.488191][ T9547] geneve2: entered allmulticast mode [ 114.536094][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.546526][ T40] audit: type=1400 audit(1744652690.398:712): avc: denied { setattr } for pid=9553 comm="syz.4.1010" path="/dev/ubi_ctrl" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.560386][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 114.563055][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1008'. [ 114.686592][ T9580] wg1 speed is unknown, defaulting to 1000 [ 114.689132][ T9580] wg1 speed is unknown, defaulting to 1000 [ 114.693006][ T9580] wg1 speed is unknown, defaulting to 1000 [ 114.698859][ T9580] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.702817][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 114.704674][ T9578] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 114.708436][ T9578] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1017'. [ 114.709009][ T9580] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 114.713391][ T9578] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1017'. [ 114.716024][ T40] audit: type=1400 audit(1744652690.558:713): avc: denied { map } for pid=9577 comm="syz.4.1017" path="socket:[30609]" dev="sockfs" ino=30609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.726812][ T40] audit: type=1400 audit(1744652690.558:714): avc: denied { accept } for pid=9577 comm="syz.4.1017" path="socket:[30609]" dev="sockfs" ino=30609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.783339][ T9582] hsr_slave_1 (unregistering): left promiscuous mode [ 114.787897][ T9580] wg1 speed is unknown, defaulting to 1000 [ 114.790808][ T9580] wg1 speed is unknown, defaulting to 1000 [ 114.793446][ T9580] wg1 speed is unknown, defaulting to 1000 [ 114.795758][ T9580] wg1 speed is unknown, defaulting to 1000 [ 114.798423][ T9580] wg1 speed is unknown, defaulting to 1000 [ 114.936622][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 114.956607][ T9598] kAFS: No cell specified [ 115.022153][ T9628] veth0_virt_wifi: mtu less than device minimum [ 115.122739][ T9651] dccp_v6_rcv: dropped packet with invalid checksum [ 115.126341][ T9651] tmpfs: Bad value for 'mpol' [ 115.179822][ T9646] overlayfs: failed to resolve './file0': -2 [ 115.241291][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 115.267346][ T40] audit: type=1400 audit(1744652691.118:715): avc: denied { ioctl } for pid=9663 comm="syz.4.1042" path="socket:[30655]" dev="sockfs" ino=30655 ioctlcmd=0xfff scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.329631][ T9674] i2c i2c-1: Invalid block write size 34 [ 115.436700][ T9674] openvswitch: netlink: Tunnel attr 157 out of range max 16 [ 115.437834][ T9678] sp0: Synchronizing with TNC [ 115.556972][ T40] audit: type=1400 audit(1744652691.408:716): avc: denied { read } for pid=9683 comm="syz.0.1049" path="socket:[32709]" dev="sockfs" ino=32709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.616729][ T9693] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1050'. [ 115.619789][ T40] audit: type=1400 audit(1744652691.468:717): avc: denied { getopt } for pid=9692 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.304220][ T9769] ALSA: seq fatal error: cannot create timer (-22) [ 116.366994][ T9773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.395293][ T9781] erspan0: default FDB implementation only supports local addresses [ 116.400217][ C0] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 116.403166][ C0] sr 2:0:0:0: [sr0] tag#10 CDB: Pre-fetch(16) 90 a6 14 b8 5e 96 bc 59 55 c7 c4 37 [ 116.428334][ T9785] netlink: 'syz.4.1080': attribute type 10 has an invalid length. [ 116.430897][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.433145][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.438584][ T9785] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.440589][ T9785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.442773][ T9785] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.444766][ T9785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.449042][ T9785] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 116.577601][ T9805] x_tables: ip_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 116.584781][ T9807] ufs: You didn't specify the type of your ufs filesystem [ 116.584781][ T9807] [ 116.584781][ T9807] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 116.584781][ T9807] [ 116.584781][ T9807] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 116.593806][ T9807] ufs: ufstype=old is supported read-only [ 116.595585][ T9807] ufs: ufs_fill_super(): bad magic number [ 116.605358][ T40] audit: type=1400 audit(1744652692.458:718): avc: denied { map } for pid=9808 comm="syz.4.1087" path="/proc/210/net/ip6_tables_names" dev="proc" ino=4026533918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 116.618829][ T9809] xfs: Unknown parameter 'norecoveryl/rcu_expedited' [ 116.647865][ T9818] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 116.709079][ T9827] syz.2.1093: attempt to access beyond end of device [ 116.709079][ T9827] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 116.715347][ T9827] exFAT-fs (nbd2): unable to read boot sector [ 116.717059][ T9827] exFAT-fs (nbd2): failed to read boot sector [ 116.718763][ T9827] exFAT-fs (nbd2): failed to recognize exfat type [ 116.745685][ T9833] IPv4: Oversized IP packet from 127.202.26.0 [ 116.798656][ T9838] syzkaller0: entered promiscuous mode [ 116.800237][ T9838] syzkaller0: entered allmulticast mode [ 116.845721][ T9842] tmpfs: Bad value for 'mpol' [ 117.669813][ T9846] nftables ruleset with unbound chain [ 117.731532][ T9849] [U] E`_Tv=B UQ;֮Y\9P [ 117.777805][ T9858] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 118.178394][ T9883] vlan3: entered promiscuous mode [ 118.179829][ T9883] bridge0: entered promiscuous mode [ 118.265492][ T9895] wg1 speed is unknown, defaulting to 1000 [ 118.520445][ T9909] netlink: 'syz.0.1119': attribute type 7 has an invalid length. [ 118.672553][ T5952] Bluetooth: hci0: command tx timeout [ 118.725228][ T9941] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 119.084587][ T9998] Invalid source name [ 119.085779][ T9998] UBIFS error (pid: 9998): cannot open "/dev/sg0", error -22 [ 119.416459][T10024] wg1 speed is unknown, defaulting to 1000 [ 119.443179][T10029] netlink: 'syz.4.1155': attribute type 4 has an invalid length. [ 119.460192][T10030] netlink: 'syz.4.1155': attribute type 4 has an invalid length. [ 119.467636][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 119.467645][ T40] audit: type=1400 audit(1744652695.318:725): avc: denied { append } for pid=10023 comm="syz.3.1154" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.479528][T10031] input: syz1 as /devices/virtual/input/input11 [ 119.552013][ T40] audit: type=1400 audit(1744652695.398:726): avc: denied { create } for pid=10034 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.558722][ T40] audit: type=1400 audit(1744652695.398:727): avc: denied { write } for pid=10034 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.564669][ T40] audit: type=1400 audit(1744652695.398:728): avc: denied { nlmsg_write } for pid=10034 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.640175][ T40] audit: type=1400 audit(1744652695.488:729): avc: denied { execmem } for pid=10041 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 119.653122][ T40] audit: type=1800 audit(1744652695.508:730): pid=10048 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1160" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 119.697983][ T40] audit: type=1400 audit(1744652695.548:731): avc: denied { audit_read } for pid=10050 comm="syz.3.1161" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.757405][T10056] __nla_validate_parse: 9 callbacks suppressed [ 119.757417][T10056] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1162'. [ 119.766216][T10056] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1162'. [ 119.769129][T10056] unsupported nlmsg_type 40 [ 119.833186][T10062] hpfs: hpfs_map_sector(): read error [ 119.885228][ T40] audit: type=1400 audit(1744652695.738:732): avc: denied { bind } for pid=10071 comm="syz.0.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.908238][T10076] tipc: Enabling of bearer rejected, already enabled [ 119.910950][ T40] audit: type=1400 audit(1744652695.758:733): avc: denied { map } for pid=10075 comm="syz.3.1168" path="socket:[35438]" dev="sockfs" ino=35438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.915800][T10078] tipc: Enabling of bearer rejected, already enabled [ 119.953769][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'. [ 119.969988][T10087] rtc_cmos 00:05: Alarms can be up to one day in the future [ 120.011930][T10092] overlayfs: failed to clone upperpath [ 120.070829][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 120.074049][ T6006] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 120.078482][T10103] lo: entered promiscuous mode [ 120.079831][T10103] lo: entered allmulticast mode [ 120.085851][T10103] tunl0: entered promiscuous mode [ 120.086112][ T40] audit: type=1400 audit(1744652695.938:734): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 120.087506][T10103] tunl0: entered allmulticast mode [ 120.095372][T10103] gre0: entered promiscuous mode [ 120.097297][T10103] gre0: entered allmulticast mode [ 120.099037][T10103] gretap0: entered promiscuous mode [ 120.100488][T10103] gretap0: entered allmulticast mode [ 120.103066][T10103] erspan0: entered promiscuous mode [ 120.104530][T10103] erspan0: entered allmulticast mode [ 120.106344][T10103] ip_vti0: entered promiscuous mode [ 120.107870][T10103] ip_vti0: entered allmulticast mode [ 120.109643][T10103] ip6_vti0: entered promiscuous mode [ 120.111110][T10103] ip6_vti0: entered allmulticast mode [ 120.113083][T10103] sit0: entered promiscuous mode [ 120.114507][T10103] sit0: entered allmulticast mode [ 120.116148][T10103] ip6tnl0: entered promiscuous mode [ 120.117620][T10103] ip6tnl0: entered allmulticast mode [ 120.119374][T10103] ip6gre0: entered promiscuous mode [ 120.120858][T10103] ip6gre0: entered allmulticast mode [ 120.123087][T10103] syz_tun: entered promiscuous mode [ 120.124555][T10103] syz_tun: entered allmulticast mode [ 120.126580][T10103] ip6gretap0: entered promiscuous mode [ 120.128097][T10103] ip6gretap0: entered allmulticast mode [ 120.129978][T10103] bridge0: entered allmulticast mode [ 120.131918][T10103] bond0: entered promiscuous mode [ 120.133794][T10103] bond0: entered allmulticast mode [ 120.135800][T10103] team0: entered promiscuous mode [ 120.137430][T10103] team0: entered allmulticast mode [ 120.139385][T10103] dummy0: entered promiscuous mode [ 120.141125][T10103] dummy0: entered allmulticast mode [ 120.144018][T10103] nlmon0: entered promiscuous mode [ 120.145546][T10103] nlmon0: entered allmulticast mode [ 120.147482][T10103] caif0: entered promiscuous mode [ 120.148897][T10103] caif0: entered allmulticast mode [ 120.150314][T10103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.139143][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 121.177943][T10147] wg1 speed is unknown, defaulting to 1000 [ 121.225159][T10155] ipip0: entered promiscuous mode [ 121.230239][T10154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1193'. [ 121.283367][T10168] FAULT_INJECTION: forcing a failure. [ 121.283367][T10168] name failslab, interval 1, probability 0, space 0, times 1 [ 121.286876][T10168] CPU: 3 UID: 0 PID: 10168 Comm: syz.4.1196 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 121.286889][T10168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.286896][T10168] Call Trace: [ 121.286900][T10168] [ 121.286904][T10168] dump_stack_lvl+0x16c/0x1f0 [ 121.286933][T10168] should_fail_ex+0x512/0x640 [ 121.286948][T10168] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 121.286961][T10168] should_failslab+0xc2/0x120 [ 121.286973][T10168] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 121.286983][T10168] ? __pfx___might_resched+0x10/0x10 [ 121.286998][T10168] ? alloc_vmap_area+0x613/0x2970 [ 121.287014][T10168] alloc_vmap_area+0x613/0x2970 [ 121.287033][T10168] ? __pfx_alloc_vmap_area+0x10/0x10 [ 121.287050][T10168] __get_vm_area_node+0x1a7/0x300 [ 121.287067][T10168] __vmalloc_node_range_noprof+0x277/0x1540 [ 121.287083][T10168] ? sel_write_load+0x2ac/0x1bd0 [ 121.287100][T10168] ? sel_write_load+0x2ac/0x1bd0 [ 121.287114][T10168] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.287129][T10168] ? avc_has_perm+0x11a/0x1c0 [ 121.287143][T10168] ? sel_write_load+0x2ac/0x1bd0 [ 121.287154][T10168] vmalloc_noprof+0x6b/0x90 [ 121.287170][T10168] ? sel_write_load+0x2ac/0x1bd0 [ 121.287181][T10168] sel_write_load+0x2ac/0x1bd0 [ 121.287197][T10168] ? __lock_acquire+0xaa4/0x1ba0 [ 121.287208][T10168] ? __pfx_sel_write_load+0x10/0x10 [ 121.287230][T10168] vfs_write+0x25c/0x1180 [ 121.287238][T10168] ? __pfx_sel_write_load+0x10/0x10 [ 121.287252][T10168] ? __pfx___mutex_lock+0x10/0x10 [ 121.287266][T10168] ? __pfx_vfs_write+0x10/0x10 [ 121.287279][T10168] ? __fget_files+0x20e/0x3c0 [ 121.287293][T10168] ksys_write+0x12a/0x240 [ 121.287302][T10168] ? __pfx_ksys_write+0x10/0x10 [ 121.287310][T10168] ? rcu_is_watching+0x12/0xc0 [ 121.287327][T10168] do_syscall_64+0xcd/0x260 [ 121.287343][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.287353][T10168] RIP: 0033:0x7f4a1938d169 [ 121.287361][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.287371][T10168] RSP: 002b:00007f4a1a1ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.287381][T10168] RAX: ffffffffffffffda RBX: 00007f4a195a5fa0 RCX: 00007f4a1938d169 [ 121.287387][T10168] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000003 [ 121.287393][T10168] RBP: 00007f4a1a1ba090 R08: 0000000000000000 R09: 0000000000000000 [ 121.287399][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.287405][T10168] R13: 0000000000000000 R14: 00007f4a195a5fa0 R15: 00007ffc022a4548 [ 121.287418][T10168] [ 121.287561][T10168] syz.4.1196: vmalloc error: size 24684, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 121.292295][T10171] netlink: 'syz.0.1197': attribute type 11 has an invalid length. [ 121.295302][T10168] ,cpuset=/,mems_allowed=0-1 [ 121.295436][T10168] CPU: 2 UID: 0 PID: 10168 Comm: syz.4.1196 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 121.295450][T10168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.295456][T10168] Call Trace: [ 121.295459][T10168] [ 121.295463][T10168] dump_stack_lvl+0x16c/0x1f0 [ 121.295480][T10168] warn_alloc+0x248/0x3a0 [ 121.295492][T10168] ? __pfx_warn_alloc+0x10/0x10 [ 121.295511][T10168] ? kfree+0x2b6/0x4d0 [ 121.295529][T10168] ? __get_vm_area_node+0x1e5/0x300 [ 121.295547][T10168] __vmalloc_node_range_noprof+0xd31/0x1540 [ 121.295567][T10168] ? sel_write_load+0x2ac/0x1bd0 [ 121.295583][T10168] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.295599][T10168] ? avc_has_perm+0x11a/0x1c0 [ 121.295612][T10168] ? sel_write_load+0x2ac/0x1bd0 [ 121.295624][T10168] vmalloc_noprof+0x6b/0x90 [ 121.295639][T10168] ? sel_write_load+0x2ac/0x1bd0 [ 121.295651][T10168] sel_write_load+0x2ac/0x1bd0 [ 121.295667][T10168] ? __lock_acquire+0xaa4/0x1ba0 [ 121.295678][T10168] ? __pfx_sel_write_load+0x10/0x10 [ 121.295700][T10168] vfs_write+0x25c/0x1180 [ 121.295708][T10168] ? __pfx_sel_write_load+0x10/0x10 [ 121.295722][T10168] ? __pfx___mutex_lock+0x10/0x10 [ 121.295737][T10168] ? __pfx_vfs_write+0x10/0x10 [ 121.295751][T10168] ? __fget_files+0x20e/0x3c0 [ 121.295766][T10168] ksys_write+0x12a/0x240 [ 121.295775][T10168] ? __pfx_ksys_write+0x10/0x10 [ 121.295783][T10168] ? rcu_is_watching+0x12/0xc0 [ 121.295800][T10168] do_syscall_64+0xcd/0x260 [ 121.295816][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.295826][T10168] RIP: 0033:0x7f4a1938d169 [ 121.295835][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.295845][T10168] RSP: 002b:00007f4a1a1ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.295854][T10168] RAX: ffffffffffffffda RBX: 00007f4a195a5fa0 RCX: 00007f4a1938d169 [ 121.295860][T10168] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000003 [ 121.295866][T10168] RBP: 00007f4a1a1ba090 R08: 0000000000000000 R09: 0000000000000000 [ 121.295872][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.295878][T10168] R13: 0000000000000000 R14: 00007f4a195a5fa0 R15: 00007ffc022a4548 [ 121.295891][T10168] [ 121.295894][T10168] Mem-Info: [ 121.443394][T10168] active_anon:22584 inactive_anon:0 isolated_anon:0 [ 121.443394][T10168] active_file:16933 inactive_file:38489 isolated_file:0 [ 121.443394][T10168] unevictable:1897 dirty:54 writeback:0 [ 121.443394][T10168] slab_reclaimable:11818 slab_unreclaimable:77694 [ 121.443394][T10168] mapped:24762 shmem:17769 pagetables:1416 [ 121.443394][T10168] sec_pagetables:305 bounce:0 [ 121.443394][T10168] kernel_misc_reclaimable:0 [ 121.443394][T10168] free:438037 free_pcp:2715 free_cma:0 [ 121.455939][T10168] Node 0 active_anon:90336kB inactive_anon:0kB active_file:67708kB inactive_file:153880kB unevictable:4052kB isolated(anon):0kB isolated(file):0kB mapped:99028kB dirty:208kB writeback:0kB shmem:67540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12656kB pagetables:5664kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 121.465213][T10168] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.476066][T10168] Node 0 DMA free:12896kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:416kB local_pcp:104kB free_cma:0kB [ 121.486264][T10168] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 121.487902][T10168] Node 0 DMA32 free:151976kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB active_anon:90060kB inactive_anon:0kB active_file:67708kB inactive_file:153880kB unevictable:4052kB writepending:208kB present:2080628kB managed:1265896kB mlocked:0kB bounce:0kB free_pcp:9192kB local_pcp:1124kB free_cma:0kB [ 121.502806][T10168] lowmem_reserve[]: 0 0 0 0 0 [ 121.504400][T10168] Node 1 Normal free:1587116kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:76kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:1504kB local_pcp:0kB free_cma:0kB [ 121.513866][T10168] lowmem_reserve[]: 0 0 0 0 0 [ 121.515296][T10168] Node 0 DMA: 4*4kB (U) 6*8kB (U) 2*16kB (U) 0*32kB 2*64kB (U) 5*128kB (U) 3*256kB (U) 4*512kB (U) 5*1024kB (U) 2*2048kB (U) 0*4096kB = 12896kB [ 121.519490][T10168] Node 0 DMA32: 0*4kB 98*8kB (UME) 112*16kB (UME) 52*32kB (UME) 218*64kB (UME) 115*128kB (UME) 103*256kB (UME) 71*512kB (UME) 39*1024kB (UM) 8*2048kB (UM) 0*4096kB = 151952kB [ 121.524743][T10168] Node 1 Normal: 5*4kB (UME) 5*8kB (ME) 8*16kB (UME) 119*32kB (UME) 74*64kB (UME) 25*128kB (UME) 7*256kB (UE) 5*512kB (UME) 2*1024kB (UE) 4*2048kB (UM) 381*4096kB (UM) = 1587100kB [ 121.529770][T10168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.532432][T10168] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 121.535422][T10168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.538131][T10168] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.540730][T10168] 73196 total pagecache pages [ 121.542107][T10168] 0 pages in swap cache [ 121.543394][T10168] Free swap = 124996kB [ 121.544567][T10168] Total swap = 124996kB [ 121.545818][T10168] 1048443 pages RAM [ 121.546889][T10168] 0 pages HighMem/MovableOnly [ 121.548198][T10168] 282638 pages reserved [ 121.549371][T10168] 0 pages cma reserved [ 121.675123][T10214] 9pnet_fd: p9_fd_create_tcp (10214): problem binding to privport [ 121.754671][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1213'. [ 121.830238][T10235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1218'. [ 121.832118][T10234] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1218'. [ 121.917057][T10245] SELinux: policydb magic number 0x64697262 does not match expected magic number 0xf97cff8c [ 121.920088][T10245] SELinux: failed to load policy [ 122.004219][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 122.006760][T10256] netlink: 'syz.3.1222': attribute type 30 has an invalid length. [ 122.071061][T10260] could not allocate digest TFM handle cmac-aes-ce [ 122.217981][T10277] SELinux: failed to load policy [ 122.352645][ T6006] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 122.517071][ T6006] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 122.519871][ T6006] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.522064][ T6006] usb 9-1: Product: syz [ 122.523369][ T6006] usb 9-1: Manufacturer: syz [ 122.524687][ T6006] usb 9-1: SerialNumber: syz [ 122.530334][ T6006] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 122.542561][ T1020] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 122.656974][T10283] /dev/nbd0: Can't lookup blockdev [ 122.851257][T10301] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 122.892809][T10305] SELinux: ebitmap start bit (402654016) is beyond the end of the bitmap (1472) [ 122.898230][T10305] SELinux: failed to load policy [ 122.941932][T10309] netlink: 'syz.0.1241': attribute type 11 has an invalid length. [ 122.951197][ T7462] usb 9-1: USB disconnect, device number 3 [ 122.979385][T10317] netlink: zone id is out of range [ 122.981413][T10317] netlink: zone id is out of range [ 122.983572][T10317] netlink: get zone limit has 8 unknown bytes [ 123.149539][T10335] SELinux: failed to load policy [ 123.581389][T10382] tipc: Started in network mode [ 123.585062][T10382] tipc: Node identity 5e78c6921bc9, cluster identity 4711 [ 123.587198][T10382] tipc: Enabled bearer , priority 0 [ 123.604262][T10382] SELinux: ebitmap start bit (67108864) is beyond the end of the bitmap (1472) [ 123.611643][T10382] SELinux: failed to load policy [ 123.614755][T10381] tipc: Resetting bearer [ 123.792610][ T1020] usb 9-1: Service connection timeout for: 256 [ 123.794556][ T1020] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 123.797702][ T1020] ath9k_htc: Failed to initialize the device [ 123.799985][ T7462] usb 9-1: ath9k_htc: USB layer deinitialized [ 124.411797][T10389] NILFS (nullb0): couldn't find nilfs on the device [ 124.540673][T10381] tipc: Disabling bearer [ 124.708307][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 124.708319][ T40] audit: type=1326 audit(1744652700.558:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10420 comm="syz.2.1270" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0bb58d169 code=0x0 [ 125.093892][ T1020] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 125.255771][ T1020] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.258421][ T1020] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.261007][ T1020] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.264624][ T1020] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 125.267403][ T1020] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 125.269659][ T1020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.274133][T10427] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.276813][ T1020] hub 9-1:1.0: bad descriptor, ignoring hub [ 125.278300][ T1020] hub 9-1:1.0: probe with driver hub failed with error -5 [ 125.280313][ T1020] cdc_wdm 9-1:1.0: skipping garbage [ 125.281653][ T1020] cdc_wdm 9-1:1.0: skipping garbage [ 125.284073][ T1020] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 125.285532][ T1020] cdc_wdm 9-1:1.0: Unknown control protocol [ 125.557686][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 125.560088][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 125.591277][ T40] audit: type=1400 audit(1744652701.438:760): avc: denied { name_bind } for pid=10439 comm="syz.2.1275" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 125.597845][ T40] audit: type=1400 audit(1744652701.438:761): avc: denied { name_connect } for pid=10439 comm="syz.2.1275" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 125.651048][T10440] __nla_validate_parse: 8 callbacks suppressed [ 125.651061][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 125.664750][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 125.666998][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 125.669150][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 125.670896][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 125.672775][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 125.793768][ T24] usb 9-1: USB disconnect, device number 4 [ 125.947355][T10443] SELinux: failed to load policy [ 126.054821][T10448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1277'. [ 126.061549][T10451] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 126.262255][T10463] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.292007][ T40] audit: type=1326 audit(1744652702.138:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10467 comm="syz.2.1282" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0bb58d169 code=0x0 [ 126.536112][ T40] audit: type=1400 audit(1744652702.388:763): avc: denied { getopt } for pid=10475 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 126.587251][T10479] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 126.589914][T10479] SELinux: failed to load policy [ 126.845631][ T40] audit: type=1400 audit(1744652702.688:764): avc: denied { setattr } for pid=10496 comm="syz.4.1289" name="/" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.861314][ T40] audit: type=1400 audit(1744652702.708:765): avc: denied { unmount } for pid=8643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 126.881549][ T40] audit: type=1400 audit(1744652702.728:766): avc: denied { read } for pid=10498 comm="syz.4.1290" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 126.888874][ T40] audit: type=1400 audit(1744652702.728:767): avc: denied { open } for pid=10498 comm="syz.4.1290" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.135510][ T40] audit: type=1400 audit(1744652702.988:768): avc: denied { name_bind } for pid=10508 comm="syz.0.1294" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 127.158260][T10513] SELinux: failed to load policy [ 127.166738][T10515] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 127.228509][T10525] veth0_vlan: entered allmulticast mode [ 127.270724][T10541] wg1: entered promiscuous mode [ 127.272143][T10541] wg1: entered allmulticast mode [ 127.302798][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 127.385517][T10553] SELinux: failed to load policy [ 127.483782][T10561] netlink: 'syz.2.1310': attribute type 10 has an invalid length. [ 127.488067][T10561] bond0: (slave wlan1): Opening slave failed [ 127.491403][T10560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.556090][T10565] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1312'. [ 127.750758][T10567] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 127.809220][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.866289][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1316'. [ 127.921886][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1317'. [ 127.934166][T10578] IPVS: set_ctl: invalid protocol: 65420 8.0.0.0:21317 [ 127.936973][T10578] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 127.939736][T10578] SELinux: failed to load policy [ 128.029848][T10587] geneve2: entered promiscuous mode [ 128.031340][T10587] geneve2: entered allmulticast mode [ 129.000372][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1331'. [ 129.174643][T10632] wg1 speed is unknown, defaulting to 1000 [ 129.383612][T10632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1333'. [ 129.586654][T10648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1337'. [ 129.634999][T10651] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1338'. [ 129.720308][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 129.720318][ T40] audit: type=1400 audit(1744652705.568:777): avc: denied { setopt } for pid=10665 comm="syz.3.1343" lport=34745 faddr=::ffff:100.1.1.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 129.720445][T10666] sctp: [Deprecated]: syz.3.1343 (pid 10666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.720445][T10666] Use struct sctp_sack_info instead [ 130.079184][T10683] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 130.085215][T10683] SELinux: failed to load policy [ 130.198943][ T40] audit: type=1326 audit(1744652706.048:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10694 comm="syz.0.1352" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0678d169 code=0x0 [ 130.361730][T10700] SELinux: Context is not valid (left unmapped). [ 130.387735][ T40] audit: type=1400 audit(1744652706.238:779): avc: denied { map } for pid=10701 comm="syz.2.1354" path="socket:[37372]" dev="sockfs" ino=37372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 130.387934][T10702] xt_l2tp: missing protocol rule (udp|l2tpip) [ 130.395925][ T40] audit: type=1400 audit(1744652706.238:780): avc: denied { accept } for pid=10701 comm="syz.2.1354" path="socket:[37372]" dev="sockfs" ino=37372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 130.571992][T10706] vivid-007: ================= START STATUS ================= [ 130.576190][T10706] vivid-007: Enable Output Cropping: true grabbed [ 130.579214][T10706] vivid-007: Enable Output Composing: true grabbed [ 130.581630][T10706] vivid-007: Enable Output Scaler: true grabbed [ 130.584046][T10706] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 130.586698][T10706] vivid-007: Transmit Mode: HDMI grabbed [ 130.588743][T10706] vivid-007: Hotplug Present: 0x00000000 [ 130.590812][T10706] vivid-007: RxSense Present: 0x00000000 [ 130.594906][T10706] vivid-007: EDID Present: 0x00000000 [ 130.596892][T10706] vivid-007: ================== END STATUS ================== [ 130.612582][T10706] (syz.2.1356,10706,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 130.615215][T10706] (syz.2.1356,10706,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 130.622711][T10706] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 130.624728][T10706] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.627831][T10706] vhci_hcd vhci_hcd.0: Device attached [ 130.631736][T10710] vhci_hcd: connection closed [ 130.635061][ T75] vhci_hcd: stop threads [ 130.638745][ T75] vhci_hcd: release socket [ 130.640099][ T75] vhci_hcd: disconnect device [ 130.763181][T10716] SELinux: ebitmap start bit (67108864) is beyond the end of the bitmap (1472) [ 130.768574][T10716] SELinux: failed to load policy [ 130.807907][T10719] wg1 speed is unknown, defaulting to 1000 [ 130.812232][T10718] wg1 speed is unknown, defaulting to 1000 [ 131.096436][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 131.099849][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 131.111024][T10744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.113099][T10744] IPv6: NLM_F_CREATE should be set when creating new route [ 131.144787][T10748] bridge0: left allmulticast mode [ 131.215130][T10758] sctp: [Deprecated]: syz.0.1371 (pid 10758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.215130][T10758] Use struct sctp_sack_info instead [ 131.261565][T10763] SELinux: policydb magic number 0x43504954 does not match expected magic number 0xf97cff8c [ 131.265544][T10763] SELinux: failed to load policy [ 131.268478][ T40] audit: type=1326 audit(1744652707.118:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.1373" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0bb58d169 code=0x0 [ 131.807093][ T40] audit: type=1400 audit(1744652707.658:782): avc: denied { connect } for pid=10766 comm="syz.4.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.965671][T10774] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1377'. [ 132.000346][ T40] audit: type=1400 audit(1744652707.848:783): avc: denied { setopt } for pid=10775 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.078419][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.080549][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.082858][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.084927][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.086958][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.089506][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.091591][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.094129][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.097317][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.099406][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.101511][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.104346][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.106607][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.109263][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.112026][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.114690][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.116712][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.118725][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.120747][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.123325][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.125339][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.127350][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.129902][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.132075][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.134444][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.136460][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.138643][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.141178][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.144027][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.146082][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.148274][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.150716][ T58] hid-generic 0004:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 132.155729][ T58] hid-generic 0004:FFFFFFFF:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz0 [ 132.371463][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 132.401753][ T40] audit: type=1800 audit(1744652708.248:784): pid=10808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1388" name="bus" dev="tmpfs" ino=2129 res=0 errno=0 [ 132.439089][T10814] overlayfs: failed to clone upperpath [ 132.446754][T10814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1390'. [ 132.478005][T10816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.480559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.486104][ T40] audit: type=1326 audit(1744652708.338:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10815 comm="syz.0.1391" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0678d169 code=0x0 [ 132.498689][T10817] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 132.505412][T10817] syzkaller0: entered promiscuous mode [ 132.506886][T10817] syzkaller0: entered allmulticast mode [ 132.512826][T10812] SELinux: failed to load policy [ 132.528933][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.530671][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.005552][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.071120][T10821] netlink: 'syz.4.1392': attribute type 30 has an invalid length. [ 133.472548][ T40] audit: type=1326 audit(1744652709.318:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10828 comm="syz.4.1394" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a1938d169 code=0x0 [ 133.593587][T10839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.599400][T10845] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 133.602844][T10845] x_tables: ip6_tables: TCPOPTSTRIP.0 target: invalid size 32 (kernel) != (user) 22 [ 134.851396][T10863] netlink: 'syz.0.1405': attribute type 4 has an invalid length. [ 134.915191][T10867] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 134.917030][T10867] PKCS7: Only support pkcs7_signedData type [ 134.931576][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1407'. [ 134.992891][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.054144][T10879] tmpfs: Bad value for 'mpol' [ 135.057209][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 135.060469][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'. [ 135.067928][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.070157][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.075476][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 135.075488][ T40] audit: type=1326 audit(1744652710.928:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.0.1412" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0678d169 code=0x0 [ 135.146770][T10890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.169546][T10896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1417'. [ 135.199960][ T40] audit: type=1400 audit(1744652711.048:789): avc: denied { bind } for pid=10899 comm="syz.3.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 135.215786][T10901] ip6gretap1: entered promiscuous mode [ 135.242682][T10907] input: syz1 as /devices/virtual/input/input12 [ 135.310675][T10915] program syz.3.1422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.350768][ T40] audit: type=1400 audit(1744652711.198:790): avc: denied { write } for pid=10916 comm="syz.3.1424" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 135.353717][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.358441][ T40] audit: type=1400 audit(1744652711.208:791): avc: denied { map } for pid=10916 comm="syz.3.1424" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 135.366380][ T40] audit: type=1400 audit(1744652711.208:792): avc: denied { execute } for pid=10916 comm="syz.3.1424" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 135.371895][T10919] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.375145][T10919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.699259][T10926] could not allocate digest TFM handle cryptd(blake2b-160) [ 136.015960][T10953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.018475][T10953] IPv6: NLM_F_CREATE should be set when creating new route [ 136.180487][ T40] audit: type=1326 audit(1744652712.028:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10962 comm="syz.2.1437" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0bb58d169 code=0x0 [ 136.538923][T10966] overlayfs: failed to clone upperpath [ 136.571124][T10969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.573584][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.605030][T10969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1439'. [ 136.701327][ T40] audit: type=1400 audit(1744652712.548:794): avc: denied { create } for pid=10985 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 136.708489][ T40] audit: type=1400 audit(1744652712.558:795): avc: denied { write } for pid=10985 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 136.868079][T11001] overlayfs: conflicting options: userxattr,metacopy=on [ 136.962509][T11013] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1453'. [ 136.968916][T11013] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1453'. [ 136.971448][T11013] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1453'. [ 136.974654][T11013] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1453'. [ 136.977187][T11013] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1453'. [ 136.979981][T11013] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1453'. [ 136.982656][T11013] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1453'. [ 136.985431][T11013] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1453'. [ 137.099215][T11025] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1457'. [ 137.144011][T11032] netlink: 'syz.0.1460': attribute type 3 has an invalid length. [ 137.150488][T11030] SELinux: failed to load policy [ 137.226475][T11042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.228740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.231644][ T40] audit: type=1326 audit(1744652713.078:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11041 comm="syz.0.1465" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0678d169 code=0x0 [ 137.834913][ T40] audit: type=1400 audit(1744652713.688:797): avc: denied { getopt } for pid=11045 comm="syz.4.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.032738][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.088023][T11068] netlink: 'syz.0.1475': attribute type 7 has an invalid length. [ 138.090831][T11068] netlink: 'syz.0.1475': attribute type 8 has an invalid length. [ 138.096229][T11068] aaaaaaaaa: renamed from lo (while UP) [ 138.158761][T11081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.241714][T11095] wg1 speed is unknown, defaulting to 1000 [ 138.535448][T11132] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 138.700249][T11145] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 138.922858][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.076473][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.174475][T11212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=11212 comm=syz.0.1523 [ 139.236016][T11220] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 139.295700][T11230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11230 comm=syz.4.1529 [ 139.425967][T11247] netlink: 'syz.0.1535': attribute type 4 has an invalid length. [ 139.429766][T11247] netlink: 'syz.0.1535': attribute type 4 has an invalid length. [ 139.715188][T11285] virtio-fs: tag <(null)> not found [ 139.909720][T11311] tipc: Started in network mode [ 139.911472][T11311] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 139.915312][T11311] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 139.918269][T11311] tipc: Enabled bearer , priority 10 [ 140.104688][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 140.104699][ T40] audit: type=1400 audit(1744652716.019:806): avc: denied { bind } for pid=11336 comm="syz.4.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.111777][ T40] audit: type=1400 audit(1744652716.019:807): avc: denied { write } for pid=11336 comm="syz.4.1563" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.117767][ T40] audit: type=1400 audit(1744652716.019:808): avc: denied { connect } for pid=11336 comm="syz.4.1563" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.119835][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.157798][ T40] audit: type=1400 audit(1744652716.069:809): avc: denied { shutdown } for pid=11336 comm="syz.4.1563" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.167395][ T40] audit: type=1400 audit(1744652716.079:810): avc: denied { mount } for pid=11336 comm="syz.4.1563" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 140.172035][T11337] overlayfs: failed to clone upperpath [ 140.461407][ T40] audit: type=1326 audit(1744652716.369:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.4.1570" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a1938d169 code=0x0 [ 140.524242][ T65] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 140.672619][ T65] usb 7-1: Using ep0 maxpacket: 8 [ 140.676687][ T65] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 140.679208][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.681407][ T65] usb 7-1: Product: syz [ 140.682909][ T65] usb 7-1: Manufacturer: syz [ 140.684232][ T65] usb 7-1: SerialNumber: syz [ 140.687317][ T65] usb 7-1: config 0 descriptor?? [ 140.772091][ T40] audit: type=1326 audit(1744652716.679:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11364 comm="syz.0.1572" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0678d169 code=0x0 [ 140.843333][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.847639][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.850657][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.891325][ T65] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.892265][T11335] netlink: 'syz.2.1562': attribute type 18 has an invalid length. [ 140.900166][ T40] audit: type=1400 audit(1744652716.809:813): avc: denied { create } for pid=11373 comm="syz.3.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.900216][ T65] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 140.905923][ T40] audit: type=1400 audit(1744652716.809:814): avc: denied { setopt } for pid=11373 comm="syz.3.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.909908][ T65] usb 7-1: USB disconnect, device number 6 [ 140.922932][ T833] tipc: Node number set to 1 [ 141.109665][T11377] netlink: 'syz.3.1575': attribute type 15 has an invalid length. [ 141.112170][T11377] i2c i2c-1: Invalid block write size 34 [ 141.154986][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.413467][ T40] audit: type=1400 audit(1744652717.329:815): avc: denied { listen } for pid=11387 comm="syz.4.1577" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.434173][T11391] xt_hashlimit: size too large, truncated to 1048576 [ 141.622971][T11400] netlink: 'syz.0.1581': attribute type 10 has an invalid length. [ 141.634396][T11400] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 141.636502][T11400] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 141.639959][T11400] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 141.675357][T11406] autofs: Unknown parameter 'pI҂̃ 7vH 3Mڽ"W8ɑx)*婔SY2Dٴzo m|cXEjj`H8hj0Ӕ:'9kHl' [ 141.680143][T11406] cgroup: Unknown subsys name 'func' [ 141.686586][T11409] __nla_validate_parse: 22 callbacks suppressed [ 141.686596][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 141.734959][T11413] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 141.736912][T11413] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 142.361258][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'. [ 142.370459][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 142.499496][T11460] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1602'. [ 142.550155][T11470] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1606'. [ 142.578557][T11477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1609'. [ 142.635191][T11490] veth0_macvtap: left promiscuous mode [ 142.651689][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'. [ 142.675632][T11501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1618'. [ 142.728334][T11507] nfs4: Bad value for 'source' [ 142.961448][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 142.983835][T11528] bond0: entered promiscuous mode [ 142.985474][T11528] bond_slave_0: entered promiscuous mode [ 142.987361][T11528] bond_slave_1: entered promiscuous mode [ 142.989235][T11528] bridge0: entered promiscuous mode [ 142.991314][T11528] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.995323][T11528] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 143.077582][T11536] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1631'. [ 143.175105][T11542] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 143.176818][T11542] PKCS7: Only support pkcs7_signedData type [ 143.178979][T11542] overlayfs: failed to clone lowerpath [ 143.209962][T11496] syz.3.1615 (11496): drop_caches: 2 [ 143.211937][T11496] syz.3.1615 (11496): drop_caches: 2 [ 143.237109][ T34] net_ratelimit: 2 callbacks suppressed [ 143.237121][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.546973][T11563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=11563 comm=syz.2.1639 [ 143.628651][T11569] fuseblk: Bad value for 'fd' [ 143.730779][T11581] xt_CT: No such helper "pptp" [ 143.776455][T11586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.779594][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.876907][ T5998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.089413][T11594] validate_nla: 8 callbacks suppressed [ 144.089429][T11594] netlink: 'syz.2.1650': attribute type 4 has an invalid length. [ 144.226423][T11602] tc_dump_action: action bad kind [ 144.248752][T11612] netlink: 'syz.4.1657': attribute type 2 has an invalid length. [ 144.282733][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.362736][T11623] SET target dimension over the limit! [ 144.440687][T11628] netlink: 'syz.2.1662': attribute type 4 has an invalid length. [ 144.666995][T11644] tipc: Enabling of bearer rejected, failed to enable media [ 144.669796][T11643] tipc: Enabling of bearer rejected, failed to enable media [ 144.737731][T11649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.781862][T11651] netlink: 'syz.0.1669': attribute type 32 has an invalid length. [ 145.142009][ T40] kauditd_printk_skb: 124 callbacks suppressed [ 145.142027][ T40] audit: type=1400 audit(1744652721.049:940): avc: denied { create } for pid=11658 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.153146][ T40] audit: type=1400 audit(1744652721.049:941): avc: denied { connect } for pid=11658 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.154637][T11661] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 145.160924][ T40] audit: type=1400 audit(1744652721.049:942): avc: denied { getopt } for pid=11658 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.166469][ T1142] Bluetooth: hci3: Frame reassembly failed (-84) [ 145.326835][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.371903][ T40] audit: type=1400 audit(1744652721.279:943): avc: denied { create } for pid=11662 comm="syz.4.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.379789][ T40] audit: type=1400 audit(1744652721.279:944): avc: denied { getopt } for pid=11662 comm="syz.4.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.956189][ T40] audit: type=1326 audit(1744652721.869:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.4.1675" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a1938d169 code=0x0 [ 146.067313][ T40] audit: type=1400 audit(1744652721.979:946): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 146.101811][T11680] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 146.112182][ T40] audit: type=1400 audit(1744652722.019:947): avc: denied { create } for pid=11679 comm="syz.0.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.119442][ T40] audit: type=1400 audit(1744652722.019:948): avc: denied { bind } for pid=11679 comm="syz.0.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 146.120872][T11682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.126342][ T40] audit: type=1400 audit(1744652722.019:949): avc: denied { execmem } for pid=11679 comm="syz.0.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.355773][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.355951][T11702] overlayfs: failed to clone upperpath [ 146.360084][T11702] overlayfs: failed to clone upperpath [ 146.362164][T11702] overlayfs: failed to clone upperpath [ 146.364732][T11702] overlayfs: failed to clone upperpath [ 146.366817][T11702] overlayfs: failed to clone upperpath [ 146.368765][T11702] overlayfs: failed to clone upperpath [ 146.371359][T11702] overlayfs: failed to clone upperpath [ 146.374317][T11702] overlayfs: failed to clone upperpath [ 146.376713][T11702] overlayfs: failed to clone upperpath [ 146.378968][T11702] overlayfs: failed to clone upperpath [ 146.380967][T11702] overlayfs: failed to clone upperpath [ 146.384214][T11702] overlayfs: failed to clone upperpath [ 146.387127][T11702] overlayfs: failed to clone upperpath [ 146.389093][T11702] overlayfs: failed to clone upperpath [ 146.391048][T11702] overlayfs: failed to clone upperpath [ 146.393522][T11702] overlayfs: failed to clone upperpath [ 146.396281][T11702] overlayfs: failed to clone upperpath [ 146.398916][T11702] overlayfs: failed to clone upperpath [ 146.401005][T11702] overlayfs: failed to clone upperpath [ 146.404655][T11702] overlayfs: failed to clone upperpath [ 146.406650][T11702] overlayfs: failed to resolve './bus': -2 [ 146.924171][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.956787][T11721] fuse: Unknown parameter 'O' [ 147.057993][T11728] tmpfs: Bad value for 'mpol' [ 147.061313][T11730] __nla_validate_parse: 12 callbacks suppressed [ 147.061323][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'. [ 147.068986][T11730] macsec0: entered promiscuous mode [ 147.146468][T11742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1699'. [ 147.146810][T11740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1698'. [ 147.153349][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 147.232662][ T5952] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 147.232973][ T67] Bluetooth: hci3: command 0x1003 tx timeout [ 147.258634][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 147.258736][T11749] vxcan1: tx address claim with dest, not broadcast [ 147.261660][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 147.295671][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1704'. [ 147.399944][T11772] /dev/nbd0: Can't lookup blockdev [ 147.586521][T11785] overlayfs: failed to resolve './file0': -2 [ 147.959473][T11789] /dev/sr0: Can't lookup blockdev [ 148.020530][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1717'. [ 148.023594][T11795] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 148.160059][T11806] tun0: tun_chr_ioctl cmd 1074025672 [ 148.161648][T11806] tun0: ignored: set checksum disabled [ 148.315662][T11814] net_ratelimit: 1 callbacks suppressed [ 148.315678][T11814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.321130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.404701][T11818] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1724'. [ 148.434459][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.235322][T11868] netlink: 'syz.0.1743': attribute type 21 has an invalid length. [ 149.238242][T11868] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1743'. [ 149.320662][T11876] overlayfs: failed to clone upperpath [ 149.324166][T11878] openvswitch: netlink: Key type 16144 is out of range max 32 [ 149.328583][T11878] openvswitch: netlink: Key type 16144 is out of range max 32 [ 149.424761][T11890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.428085][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.476678][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.952700][T11921] could not allocate digest TFM handle cryptd(blake2b-160) [ 149.952944][ T7462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.082632][ T6006] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 150.235212][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.238479][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.241284][ T6006] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.244998][ T6006] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.247589][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.251971][ T6006] usb 7-1: config 0 descriptor?? [ 150.305478][T11948] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 150.309310][ T40] kauditd_printk_skb: 141 callbacks suppressed [ 150.309323][ T40] audit: type=1400 audit(1744652726.219:1091): avc: denied { relabelto } for pid=11947 comm="syz.0.1769" name="526" dev="tmpfs" ino=2792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 150.321786][ T40] audit: type=1400 audit(1744652726.219:1092): avc: denied { associate } for pid=11947 comm="syz.0.1769" name="526" dev="tmpfs" ino=2792 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 150.330254][ T40] audit: type=1400 audit(1744652726.239:1093): avc: denied { write } for pid=5945 comm="syz-executor" name="526" dev="tmpfs" ino=2792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 150.339260][ T40] audit: type=1400 audit(1744652726.239:1094): avc: denied { remove_name } for pid=5945 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 150.348249][ T40] audit: type=1400 audit(1744652726.239:1095): avc: denied { rmdir } for pid=5945 comm="syz-executor" name="526" dev="tmpfs" ino=2792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 150.357119][ T40] audit: type=1400 audit(1744652726.259:1096): avc: denied { mount } for pid=11949 comm="syz.0.1770" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 150.360928][T11950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.363229][ T40] audit: type=1400 audit(1744652726.269:1097): avc: denied { getopt } for pid=11949 comm="syz.0.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.363253][ T40] audit: type=1400 audit(1744652726.269:1098): avc: denied { connect } for pid=11949 comm="syz.0.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.385191][ T40] audit: type=1400 audit(1744652726.299:1099): avc: denied { setopt } for pid=11949 comm="syz.0.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.385579][T11950] [ 150.391477][ T40] audit: type=1400 audit(1744652726.299:1100): avc: denied { setopt } for pid=11949 comm="syz.0.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.392086][T11950] ====================================================== [ 150.392094][T11950] WARNING: possible circular locking dependency detected [ 150.392098][T11950] 6.15.0-rc2-syzkaller #0 Not tainted [ 150.392104][T11950] ------------------------------------------------------ [ 150.392108][T11950] syz.0.1770/11950 is trying to acquire lock: [ 150.392114][T11950] ffffffff9012c968 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x2042/0x4420 [ 150.410928][T11950] [ 150.410928][T11950] but task is already holding lock: [ 150.412944][T11950] ffff888059649628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 150.415697][T11950] [ 150.415697][T11950] which lock already depends on the new lock. [ 150.415697][T11950] [ 150.418530][T11950] [ 150.418530][T11950] the existing dependency chain (in reverse order) is: [ 150.420990][T11950] [ 150.420990][T11950] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 150.423365][T11950] __mutex_lock+0x199/0xb90 [ 150.424914][T11950] smc_switch_to_fallback+0x2d/0x9f0 [ 150.426525][T11950] smc_sendmsg+0x13d/0x520 [ 150.427902][T11950] __sys_sendto+0x495/0x510 [ 150.429660][T11950] __x64_sys_sendto+0xe0/0x1c0 [ 150.431126][T11950] do_syscall_64+0xcd/0x260 [ 150.432532][T11950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.434332][T11950] [ 150.434332][T11950] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 150.436447][T11950] lock_sock_nested+0x41/0xf0 [ 150.437923][T11950] sockopt_lock_sock+0x54/0x70 [ 150.439395][T11950] do_ipv6_setsockopt+0x204a/0x4420 [ 150.440984][T11950] ipv6_setsockopt+0xcb/0x170 [ 150.442425][T11950] udpv6_setsockopt+0x7d/0xd0 [ 150.443900][T11950] do_sock_setsockopt+0x221/0x470 [ 150.445455][T11950] __sys_setsockopt+0x1a0/0x230 [ 150.446943][T11950] __x64_sys_setsockopt+0xbd/0x160 [ 150.448501][T11950] do_syscall_64+0xcd/0x260 [ 150.449920][T11950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.451687][T11950] [ 150.451687][T11950] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 150.453685][T11950] __lock_acquire+0x1173/0x1ba0 [ 150.455159][T11950] lock_acquire+0x179/0x350 [ 150.456553][T11950] __mutex_lock+0x199/0xb90 [ 150.457977][T11950] do_ipv6_setsockopt+0x2042/0x4420 [ 150.459555][T11950] ipv6_setsockopt+0xcb/0x170 [ 150.461007][T11950] tcp_setsockopt+0xa4/0x100 [ 150.462434][T11950] smc_setsockopt+0x1b3/0xa00 [ 150.463892][T11950] do_sock_setsockopt+0x221/0x470 [ 150.465434][T11950] __sys_setsockopt+0x1a0/0x230 [ 150.466966][T11950] __x64_sys_setsockopt+0xbd/0x160 [ 150.468523][T11950] do_syscall_64+0xcd/0x260 [ 150.469940][T11950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.471709][T11950] [ 150.471709][T11950] other info that might help us debug this: [ 150.471709][T11950] [ 150.474502][T11950] Chain exists of: [ 150.474502][T11950] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 150.474502][T11950] [ 150.478214][T11950] Possible unsafe locking scenario: [ 150.478214][T11950] [ 150.480200][T11950] CPU0 CPU1 [ 150.481722][T11950] ---- ---- [ 150.483216][T11950] lock(&smc->clcsock_release_lock); [ 150.484706][T11950] lock(sk_lock-AF_INET6); [ 150.486633][T11950] lock(&smc->clcsock_release_lock); [ 150.488791][T11950] lock(rtnl_mutex); [ 150.490050][T11950] [ 150.490050][T11950] *** DEADLOCK *** [ 150.490050][T11950] [ 150.492268][T11950] 1 lock held by syz.0.1770/11950: [ 150.493707][T11950] #0: ffff888059649628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 150.496577][T11950] [ 150.496577][T11950] stack backtrace: [ 150.498252][T11950] CPU: 2 UID: 0 PID: 11950 Comm: syz.0.1770 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 150.498265][T11950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.498272][T11950] Call Trace: [ 150.498276][T11950] [ 150.498281][T11950] dump_stack_lvl+0x116/0x1f0 [ 150.498296][T11950] print_circular_bug+0x275/0x350 [ 150.498314][T11950] check_noncircular+0x14c/0x170 [ 150.498331][T11950] __lock_acquire+0x1173/0x1ba0 [ 150.498342][T11950] ? __sys_setsockopt+0x1a0/0x230 [ 150.498355][T11950] lock_acquire+0x179/0x350 [ 150.498365][T11950] ? do_ipv6_setsockopt+0x2042/0x4420 [ 150.498379][T11950] ? __pfx___might_resched+0x10/0x10 [ 150.498395][T11950] __mutex_lock+0x199/0xb90 [ 150.498409][T11950] ? do_ipv6_setsockopt+0x2042/0x4420 [ 150.498424][T11950] ? do_ipv6_setsockopt+0x2042/0x4420 [ 150.498438][T11950] ? __pfx___mutex_lock+0x10/0x10 [ 150.498452][T11950] ? rcu_is_watching+0x12/0xc0 [ 150.498467][T11950] ? kmem_cache_free+0x2d4/0x4d0 [ 150.498476][T11950] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.498491][T11950] ? do_ipv6_setsockopt+0x2042/0x4420 [ 150.498506][T11950] ? rtnl_lock+0x9/0x20 [ 150.498514][T11950] do_ipv6_setsockopt+0x2042/0x4420 [ 150.498530][T11950] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 150.498545][T11950] ? __lock_acquire+0xaa4/0x1ba0 [ 150.498554][T11950] ? slow_avc_audit+0x18b/0x210 [ 150.498573][T11950] ? __pfx_slow_avc_audit+0x10/0x10 [ 150.498583][T11950] ? __mutex_trylock_common+0xe9/0x250 [ 150.498593][T11950] ? __pfx___mutex_trylock_common+0x10/0x10 [ 150.498604][T11950] ? __pfx___might_resched+0x10/0x10 [ 150.498618][T11950] ? rcu_is_watching+0x12/0xc0 [ 150.498630][T11950] ? trace_contention_end+0xdd/0x130 [ 150.498640][T11950] ? __mutex_lock+0x1ca/0xb90 [ 150.498654][T11950] ? avc_has_perm+0x11a/0x1c0 [ 150.498663][T11950] ? __pfx_avc_has_perm+0x10/0x10 [ 150.498672][T11950] ? smc_setsockopt+0x100/0xa00 [ 150.498681][T11950] ? __pfx___mutex_lock+0x10/0x10 [ 150.498696][T11950] ? ipv6_setsockopt+0xcb/0x170 [ 150.498710][T11950] ipv6_setsockopt+0xcb/0x170 [ 150.498724][T11950] tcp_setsockopt+0xa4/0x100 [ 150.498737][T11950] smc_setsockopt+0x1b3/0xa00 [ 150.498746][T11950] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 150.498762][T11950] ? __pfx_smc_setsockopt+0x10/0x10 [ 150.498772][T11950] ? selinux_socket_setsockopt+0x6a/0x80 [ 150.498785][T11950] ? __pfx_smc_setsockopt+0x10/0x10 [ 150.498795][T11950] do_sock_setsockopt+0x221/0x470 [ 150.498810][T11950] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 150.498828][T11950] __sys_setsockopt+0x1a0/0x230 [ 150.498841][T11950] __x64_sys_setsockopt+0xbd/0x160 [ 150.498852][T11950] ? do_syscall_64+0x91/0x260 [ 150.498866][T11950] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.498879][T11950] do_syscall_64+0xcd/0x260 [ 150.498894][T11950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.498904][T11950] RIP: 0033:0x7faf0678d169 [ 150.498913][T11950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.498923][T11950] RSP: 002b:00007faf07665038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.498933][T11950] RAX: ffffffffffffffda RBX: 00007faf069a5fa0 RCX: 00007faf0678d169 [ 150.498940][T11950] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000007 [ 150.498946][T11950] RBP: 00007faf0680e990 R08: 0000000000000000 R09: 0000000000000000 [ 150.498952][T11950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.498958][T11950] R13: 0000000000000000 R14: 00007faf069a5fa0 R15: 00007ffdf4409018 [ 150.498967][T11950] [ 150.656478][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.658581][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.660685][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.663051][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.665371][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.667496][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.669585][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.671670][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.673790][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.675931][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.678059][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.680145][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.682372][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.684487][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.686612][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.688631][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.690653][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.692878][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.695202][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.698141][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.700928][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.703903][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.706723][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.709779][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.713042][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.715861][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.718719][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.721106][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.723213][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.725285][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.727304][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.729361][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.731458][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.733581][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.735630][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.737684][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.739710][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.741787][ T6006] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.744075][ T6006] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 150.747462][ T6006] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 150.917647][ T7462] usb 7-1: USB disconnect, device number 7 [ 153.713349][ T65] net_ratelimit: 5 callbacks suppressed [ 153.713360][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.753290][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.793369][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.033155][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.834308][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.884150][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.913338][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.072687][ T7462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.952975][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog VM DIAGNOSIS: 17:45:26 Registers: info registers vcpu 0 CPU#0 RAX=000000000013454c RBX=0000000000000000 RCX=ffffffff8b727439 RDX=ffffed100d4865be RSI=ffffffff8bf46280 RDI=ffffffff8191a751 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90865f10 R15=0000000000000000 RIP=ffffffff8b725ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a1f37b7908 CR3=0000000024676000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=facb0f70facb0f70 facb0f70facb0f70 facb0f70facb0f70 facb0f70facb0f70 facb0f70facb0f70 facb0f70facb0f70 facb0f70facb0f70 facb0f70facb0f70 ZMM22=324b4431324b4431 324b4431324b4431 324b4431324b4431 324b4431324b4431 324b4431324b4431 324b4431324b4431 324b4431324b4431 324b4431324b4431 ZMM23=a2dbc4afa2dbc4af a2dbc4afa2dbc4af a2dbc4afa2dbc4af a2dbc4afa2dbc4af a2dbc4afa2dbc4af a2dbc4afa2dbc4af a2dbc4afa2dbc4af a2dbc4afa2dbc4af ZMM24=a69c0b95a69c0b95 a69c0b95a69c0b95 a69c0b95a69c0b95 a69c0b95a69c0b95 a69c0b95a69c0b95 a69c0b95a69c0b95 a69c0b95a69c0b95 a69c0b95a69c0b95 ZMM25=ce912508ce912508 ce912508ce912508 ce912508ce912508 ce912508ce912508 ce912508ce912508 ce912508ce912508 ce912508ce912508 ce912508ce912508 ZMM26=a1316f67a1316f67 a1316f67a1316f67 a1316f67a1316f67 a1316f67a1316f67 a1316f67a1316f67 a1316f67a1316f67 a1316f67a1316f67 a1316f67a1316f67 ZMM27=2e208b4d2e208b4d 2e208b4d2e208b4d 2e208b4d2e208b4d 2e208b4d2e208b4d 2e208b4d2e208b4d 2e208b4d2e208b4d 2e208b4d2e208b4d 2e208b4d2e208b4d ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4f0800004f080000 4f0800004f080000 4f0800004f080000 4f0800004f080000 4f0800004f080000 4f0800004f080000 4f0800004f080000 4f0800004f080000 info registers vcpu 1 CPU#1 RAX=00000000000fc42c RBX=0000000000000001 RCX=ffffffff8b727439 RDX=ffffed100d4a65be RSI=ffffffff8bf46280 RDI=ffffffff8191a751 RBP=ffffed1003ad0488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d682440 R14=ffffffff90865f10 R15=0000000000000000 RIP=ffffffff8b725ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2ee1fffc CR3=0000000065e7a000 CR4=00352ef0 DR0=0000000000000007 DR1=ffffffffffffffff DR2=0000000000000008 DR3=1000000100000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f729560f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f729560f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f729560f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f729560f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f729560fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f729560faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5219f37e8f98f30a 0a2f249a669b954a 339b0ae7c6f80a9b 87e0900803633530 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0070692c74726f70 2c70693a68736168 0003001400000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 400600088007000c 00000000317a7973 0002000900000000 0004000500000006 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e10e5 RDI=ffffffff9ae26460 RBP=ffffffff9ae26420 RSP=ffffc90007e17110 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9ae26420 R15=ffffffff854e1080 RIP=ffffffff854e110f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007faf076656c0 ffffffff 00c00000 GS =0000 ffff8880d6bb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001fc8 CR3=0000000065e76000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0697d488 00007faf0697d480 00007faf0697d478 00007faf0697d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf074dd100 00007faf0697d440 00007faf0697d458 00007faf0697d4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0697d498 00007faf0697d490 00007faf0697d488 00007faf0697d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000e9194 RBX=0000000000000003 RCX=ffffffff8b727439 RDX=ffffed100d4e65be RSI=ffffffff8bf46280 RDI=ffffffff8191a751 RBP=ffffed1003bd3000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801de98000 R14=ffffffff90865f10 R15=0000000000000000 RIP=ffffffff8b725ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c25ca5f CR3=0000000065e76000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0680faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0697d488 00007faf0697d480 00007faf0697d478 00007faf0697d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf074dd100 00007faf0697d440 00007faf0697d458 00007faf0697d4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf0697d498 00007faf0697d490 00007faf0697d488 00007faf0697d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000