last executing test programs: 17.998152583s ago: executing program 0 (id=1): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@null, 0xa, 'lo\x00'}) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 17.893007994s ago: executing program 0 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) r2 = fcntl$dupfd(r0, 0x0, r0) copy_file_range(r2, &(0x7f0000000540)=0x80000001, r1, &(0x7f0000000580)=0x5, 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x842, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)="b82ca87fbf4ddfc9253795f9139cb364f7ab4483630f1b7e37d7d2dcb8e65f3c5003654435b055e458ebf622badce086c6fed3f09ef56fa6df8d8c745acb91d5f1966285012cc805480eb6db1dcbdcdc702ec4b32c4ee913e1c4fef13877063ea4ed839ed4be37eb6ea86e8cb1900709bc811426ea02cf06f1c6c2cdb879ea19d0c9703397f221a7e77a3809a3738576c3cffe99293d4dfe5370c4d5eda2f0aad1295a28f58a8725774a1838a5c661518d7691b2", 0xb4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x2, 0x100) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000340)=0x8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000080)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe896}, 0x1c) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x12, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 17.76911165s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x800, 0x0) chdir(&(0x7f0000000000)='./proc/net/rpc/auth.unix.gid/channel\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x1003}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) lstat(&(0x7f0000000340)='./proc/net/rpc/auth.unix.gid/channel\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./proc\x00', r1, r2) 16.439849409s ago: executing program 0 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x820) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d07, &(0x7f0000000000)=0x27) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) 16.364504898s ago: executing program 32 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x820) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d07, &(0x7f0000000000)=0x27) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) 5.629808938s ago: executing program 2 (id=172): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="7e77aae00bbe8c92694e247b0dcffa2cdfad24023c2684ca8a1275037caafe835d50711d9ab3f9658f187256c81396031daee3f50478e3e2e28a2d4c2551573bdae29b2c557a9d8fd713e9cfc01f57045c7bc19dd1d323927b581b52c8ef39cf367cab91310137e8ae0bf9b7cab9", 0x6e) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x10, 0x1, @thr={&(0x7f00000000c0)="1fb3cdc585c62f434a452cf84f15e73d744704ba59f2b112e8f26119a5d46eb65a862c098a11eda457706c02a9fe47fdfe6953c7cd66b3c9300aaffd187ee613367ae4bcd2cc12440bb4f7cd1741e01d01335f8ed51881779a10f383e151d63a37ecca1823e712cb1160162d90c5a0227eef341622b08affb57e7635e96df0693268268761057f344b9400c5aaf5e6731d1f824e9a0fd17636a53565aab5c6f91d7cffcbced50d91240d9cd53a7f6b68589e532e44fcec651ae66e2c4018e08a138f4b3a7394c86ecee79a10268d261c0d418723fa62d32c820ead75f5dd", &(0x7f00000001c0)="6e99b155bfc92f1212da293184b487e6147eaa046e7de0a38686a7746c75b047a92839454027ad97daf89840cd6d8c06625d8f122fda3ed5387386c4ed060ec75d8b39cc155abb027ed61cf6325178d7616945330c6e0c9c087c5b5d8cf4f913f046ef8b3b73702003518508537a99eebfea770ff5a5fc1d1b3513f95abf2b4d4e850052055d0e3e7fae55ca32ba5730cb5bb80aaa2d23ac5dc34610285878f6e9490a34744a4577340a15bb5e59895f0d058f46c46717b661151eedcb050fa06791317e2ea53e5e64e5cc8df0a61d4ae78d0715cb393c7b109bb77ce1f90bfed2a6c3cf3b13f61945c80b7068679caa"}}, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000380)={{r1, r2+60000000}, {0x77359400}}, &(0x7f00000003c0)) r3 = syz_open_dev$radio(&(0x7f0000000400), 0x2, 0x2) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000440)={0x386, 0x3035, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000005900)={0x7, 0x8, 0x0, 0xb, 0x5, 0x0, [{0x10000, 0xa, 0xff}, {0x7, 0x8, 0x7fff, '\x00', 0x202}, {0xffffffff, 0x4, 0x7, '\x00', 0x180}, {0x81, 0x7, 0x101, '\x00', 0x2000}, {0x0, 0x10, 0x5, '\x00', 0x2c87}]}) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000005a40)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005b40)={'tunl0\x00', &(0x7f0000005ac0)={'gretap0\x00', 0x0, 0x10, 0x700, 0x7, 0x6f, {{0x15, 0x4, 0x1, 0x36, 0x54, 0x65, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @loopback, {[@noop, @timestamp={0x44, 0xc, 0xe4, 0x0, 0xb, [0xa2, 0x3]}, @timestamp={0x44, 0x18, 0xd3, 0x0, 0x9, [0x5327, 0x7fffffff, 0x1ff, 0x7f, 0x0]}, @ssrr={0x89, 0xf, 0xa9, [@broadcast, @local, @multicast2]}, @lsrr={0x83, 0xb, 0xb1, [@empty, @rand_addr=0x64010102]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000005c00)={'ip6_vti0\x00', &(0x7f0000005b80)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x1, 0x10, 0x1a, @local, @empty, 0x1, 0x21, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005cc0)={'ip6tnl0\x00', &(0x7f0000005c40)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x9, 0x8, 0x22, @local, @remote, 0x700, 0x20, 0x9, 0x2}}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000005dc0)={&(0x7f0000005a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005d80)={&(0x7f0000005d00)={0x50, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040050}, 0x40) r8 = syz_clone(0x14280, &(0x7f0000005e00), 0x0, &(0x7f0000005e40), &(0x7f0000005e80), &(0x7f0000005ec0)="139f4912cb93676e33c2b4700babde4d23a81554c532392d63205ea86fa487be1f26408396d379c793464a705f219492c1b4b9e4d799866bc82e7187a0feafab90c13592099617175c097aecea478807b3aa5d108213c6850aea469892eb3098f8a8d2e9d892435d411aaefc9460b035023c944ba2b0c9d085030e98bfa14ad7d9d1c7064f7c2849bdb1aa29cf10e25077fb97d6c16e67483d183d26d8dc54b9f2eaa9b87fda5c1922327060d2666a2d17dff5ddee67b9231d3980bbcf9b1faaaa39b7934edac8f070288bc9433d276389ab3b3399fa6d5f3901ca7a9f29cd7d824313c43d") ptrace$ARCH_SHSTK_DISABLE(0x1e, r8, 0x1, 0x5002) r9 = signalfd(0xffffffffffffffff, &(0x7f0000005fc0)={[0xffffffff8542e153]}, 0x8) ioctl$sock_inet_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000006000)) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006080), r9) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000006240)={&(0x7f0000006040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006200)={&(0x7f00000060c0)={0x114, r10, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000006280)={0x1, "c5489fb0282b17e1e282d83d29414409d328579647b0cad79d25d3f9930cafad", 0x40, 0x4800, 0x9, 0x4, 0x3433da1af15263cb}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000006300)={0x1, [0x0]}, &(0x7f0000006340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000006380)={r11, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000063c0)={r11, 0xf6, "93130ff1ec9e63ef90b406bde30fe5248d1e91ae86398e72f342870c9c6c05f3dba4b422cc6fc484313f4597d97f76c57f3e39c16abfcada885be8215ed51aaf663ac4dfd0c57fb42a177392c961ec786636132c1e5beeb87007280a01b87dd0c1d9c29ec26d792fc2a2018d2b7ad04d591061f5521d084ab8ecca504b35df9ce875b1cc13d38c5377499ea8ba3ac10588a4f3315f5da3ae3ed1f99f102c0c490f7dfec08c98fbfd625815e85abff4566666c24d781724f7c26857ffe368b29c2710b23f02c60cea7e4d04cca88a284d735d53c6f9eeefdaa374e110741b6077efc2032d4cd80bc6a077b93c349e2f5c55397ae52af9"}, &(0x7f00000064c0)=0xfe) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000006500)={r12, 0x7fff}, &(0x7f0000006540)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000006580)={r12, 0x80000000}, 0x8) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000006600)=@o_path={&(0x7f00000065c0)='.\x00', 0x0, 0x4008, r4}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000006740)={@ifindex=r5, 0x1d, 0x1, 0x7, &(0x7f0000006640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000006680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000066c0)=[0x0], &(0x7f0000006700)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000006780)={@fallback=r9, r13, 0xc, 0x8, r9, @void, @value=r3, @void, @void, r14}, 0x20) read$FUSE(r9, &(0x7f00000067c0)={0x2020}, 0x2020) 4.758846645s ago: executing program 2 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x702, 0xe, 0x2100, &(0x7f0000000140)="e460334470d8d400eb00c15286dd", 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000005c0)="0f2096660f5f000f013166ba420066b87aa966ef8fe828edf400b991020000b800000100ba000000000f30640f381c3e0f20e035020000000f22e00f01d1b9010100c0b80d000000ba010000000f30", 0x4f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x702, 0xe, 0x2100, &(0x7f0000000140)="e460334470d8d400eb00c15286dd", 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000005c0)="0f2096660f5f000f013166ba420066b87aa966ef8fe828edf400b991020000b800000100ba000000000f30640f381c3e0f20e035020000000f22e00f01d1b9010100c0b80d000000ba010000000f30", 0x4f}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 4.31226318s ago: executing program 2 (id=181): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='prefer-crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x488, 0x0, 0x200}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x2f) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8400, 0x42) r6 = openat(r5, &(0x7f0000000180)='./file0/file0\x00', 0x4ce80, 0x3) ioctl$TIOCGPTPEER(r6, 0x40140921, 0xffffffffffffffff) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000080)) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000680)={&(0x7f0000000640)=[{&(0x7f0000000540)="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", 0xfd}], 0x1, 0x3, 0x0, 0x7, 0x2, 0x7, 0x8, 0x5}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x6}]}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000005200000229bd70000f0000000a08000600190000000808000000000000000005000f0000000800020003000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.378532638s ago: executing program 4 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x04', 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x41c002, 0x0) write(r1, &(0x7f00000003c0)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x6}, {0xffbd, 0xff46, [0x7]}}}}, 0x13) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='2', 0x1) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) 2.196748893s ago: executing program 4 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x0, 0x4, 0x20000, 0x1, 0x6, 0x4000000000a, 0x3, 0x4}) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000240)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000007c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x40000001, 0x7fff, 0x1, 0x31237648, 0x10006, 0xfffffffe, 0x4}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x4}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r10, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000084, 0x3e}}], 0x20}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.907263995s ago: executing program 4 (id=201): syz_emit_ethernet(0x787, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x779, 0x1234, 0x4000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x765, 0x0, @opaque="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000"/1885}}}}}, 0x0) 1.778572536s ago: executing program 4 (id=202): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$mtd(0x0, 0x1ff, 0x200601) r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB="b23d"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0xbc) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x2, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xc0, 0x7, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0xb3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0xe, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x7f, 0x8}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x100, 0x2, 0x6, 0x90, 0xff, 0x7}, 0x13, &(0x7f0000000100)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0xd, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x7, 0x1a5c}]}, 0x9, [{0xf4, &(0x7f0000000140)=@string={0xf4, 0x3, "3f8d56a39188ee7e8c500dec83addb039f905355c88309b0261efa389cba102ad672b9375e4d013300fbba8883ca07ae360dd02bf1611341d516355af870b79fd5e3d98b57af16e2fd6f285bd44ea779c65609c32f731b990974de92efcb8a0df1aa833dd5ca9eb7ce013709f67e7c43fd2c48abab01c07b9c3e552fea4aa85f0547555a9216ae22ff8c02960d6e7cce78afcbc7b3d4a5ae042dfedd2a5632c48e902e5846b40fefddfc0b72ebf8495747fdedf8362aaf78598668c0d91b3869a4a96d59e39e6f463186be2c350a60659741d28dadc8df2b9bef0362087e47636265bd366d0f8ea68a2a9c5a900288ead0f8"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc01}}, {0x34, &(0x7f0000000340)=@string={0x34, 0x3, "0d24e57ddae6ad174e6767902001c4f4ae2b06cd898b81222420aa42d799b1af3496b944a3f4c13668986ac77a59d6f13a9a"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3409}}, {0x45, &(0x7f00000006c0)=@string={0x45, 0x3, "4bb51083da0f5daf0301b722fb75f31b9201a8d2c1851b356ebf2c6088331ce31a919b598d688b1e4bcc4a3ce68c178ed5b7e778bd8d1878d12809fc6a1f681df8dc37"}}, {0x1f, &(0x7f0000000740)=@string={0x1f, 0x3, "a0a140af2bf4fbe1ba0507591d944b791f5baeef695ccccba0ef5beb72"}}]}) 1.349541875s ago: executing program 1 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x2, 0x70bd29, 0x9, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x55}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7e}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x10, r2, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PDEATHSIG(0x35, 0x2) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x7) socket(0x1d, 0x2, 0x6) (async) r5 = socket(0x1d, 0x2, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0xfffffefe) r6 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x10b000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.199829513s ago: executing program 1 (id=204): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xc}]}}]}, 0x38}}, 0x4048000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}}, 0x24000004) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000001000/0x1000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000004000)={0x1, 0x0}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x10b, 0x0, 0x78e3cd4d}]}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000200)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r9, 0x7a6, &(0x7f0000000880)={0x1, 0x5, 0x7fffffffffffffff, 0x400, 0xfff, 0x5}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0e020000", @ANYRES16=r8, @ANYBLOB="01002cbd7000001000000100000004000780"], 0x18}}, 0x4) 1.117559413s ago: executing program 2 (id=205): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80000, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0xffffffffffffff84, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=r3, @ANYBLOB="000000929a7ad60b8a22b100", @ANYRES32=r3, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40800) shutdown(r0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) madvise(&(0x7f000063f000/0x3000)=nil, 0x3000, 0xf) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x6, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x28d1045, 0x0) mq_unlink(&(0x7f0000000280)='fdinfo/3\x00') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$unix(0x1, 0x1, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r10, @ANYRES32=r8, @ANYRESOCT=r1, @ANYRES16=r5, @ANYRES16=r6, @ANYBLOB="08fe94d248edd7219f3e21970a535b628b032c8f76603307683cd59b4052dd53d34c28a881363f225bc636f197973c6ab3", @ANYRESOCT=r9, @ANYRES64=r9, @ANYBLOB="8df443240622720baa74f7470e4539163710fc3ada2775fb264e00388ba9f224d3f7b94d56e4cc6e9e11b45f7ac5ec8a16e169444bd32b07f49f102b2e0df84a15b7c1ba43b554e421d7c05fee095ad2475d1efd63a75d41d77d6f23b449216e6f3b31757c2c8aaee574132145c00cb3e5df6e2ce7e24b6868369e24f5f50be4a5805e7e95"], 0x50) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)=ANY=[@ANYRES32=r11, @ANYBLOB="071c31bbd9cf63000000006d6578"]) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000080)={0x28, 0x3, r12, 0x0, &(0x7f00004cf000/0x2000)=nil, 0x2000, 0xd}) 977.673969ms ago: executing program 2 (id=206): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) (async) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000600)='./file0\x00', 0x102) (rerun: 64) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) (async) fstat(r3, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f00000fd000/0x2000)=nil, 0x2000, 0x2, 0x28012, r2, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) (async) ioprio_get$uid(0x3, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) (rerun: 32) write(r5, &(0x7f0000001800)='d', 0x1) (async) close_range(r4, 0xffffffffffffffff, 0x0) 895.538796ms ago: executing program 1 (id=207): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) connect(r2, &(0x7f0000000280)=@phonet={0x23, 0x1, 0x7, 0x7}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x25, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0xffffffff, 0x0, 0xce024d}, 0x9c) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x5c0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x1}, {0x5, 0x5, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200410d1}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000500)={0x50, 0x6, 0x1d, {0x1000, 0x2}, {0x8000, 0x7}, @period={0x5c, 0x0, 0x1, 0xff80, 0xfff7, {0x3, 0x9, 0xd8c, 0x389}, 0x0, 0x0}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f00000003c0)=@in6={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0x12}, 0x1}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000400)="21331c28dea87e3e3efb790bdb012ac5d7e26f1ee5c4192c2d20752e8e68c52ef9", 0x21}, {&(0x7f0000000440)="c9267fa8b358aa5e5a0554d5b525c497d0cae16ecccc11f41812462bd7504bad19a69fc4d044c58851d42a1755293243b57d792ba90ef4911c70248a44cc6751f0e1b80a5c5bc93d4be8da76af4debf018aad1a14c4c6f1b50593a77c0fc1c5d56e2d59cd3865945e0e030796aeb766d1342d62bb35d8d0b616dc2afb6504a40afb00785cd627c9bab", 0x89}, {&(0x7f0000000500)="b6c96b276a204040ed884d8c305cb197d6c5a16db956ac3ae751b49ab8a5cad75d3899ceb4d140eb01f4dff915eac17a4a32e19eb4b6cc3ee9792f0b09ae783277eca52a6b292c6c2f073b9f2768bb8cb45398ab45186e7665ed120eccb41da1a61bad00644fbd5e0a9fc4e784701106ae26e25e4f7dccea82b143cbd5cce74f90676d4682d17d84cd4e87e35a4b2692e8e809fb3c07abe5cfab6140cfb9f56e55e4eaa5eff6e1eac3594bc78ec4062e54cb4b4a6e9a32c6bd26a857c9ecec989dfe654c4fd908f4e66b354dfaf0", 0xce}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000005000000300000000300000018000000000000008400000005000008100000000200000018000000b700000000840000000500000020000000a97c000020000000000000008400000008000000fe8000000000000000000000000000aa20000000000000008400000008000000fc0000000000000000000000000000001800000000000000840000dd67000000100000000900000018000000000000008400000000000000f8ff07000900ff"], 0xb8, 0x84}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000740)={0x1, 0xd, 0x85e1, 0x2}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r12 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONERANGE(r12, 0x4020940d, &(0x7f0000000880)={{r12}, 0xb, 0x1000, 0x5}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001300010000ff0f000000000007000000", @ANYRES32=r1, @ANYBLOB="80010000091004000c001a800800058004"], 0x2c}}, 0x0) bind$packet(r5, &(0x7f0000000180)={0x11, 0x1c, r1, 0x1, 0x3, 0x6, @multicast}, 0x14) 857.545837ms ago: executing program 3 (id=208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x81}]}}}]}, 0x3c}}, 0x0) 738.522954ms ago: executing program 3 (id=209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0000000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa00000000200000000200000062000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c000000000000140000000000000000000000000200000000000000001000000000000000000000000000003e0000000000000000000000000000000000000000000000e4000000000000100000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff0000000001040000030000000000000000000000020001060000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x242, 0x19) write$vga_arbiter(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0xfffffffffffffff5, 0x7}}, 0x30) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r3 = dup(r1) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x68) read$FUSE(r2, &(0x7f0000002880)={0x2020}, 0x2020) 656.729516ms ago: executing program 3 (id=210): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) (async) setns(0xc9, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'pcmda12\x00', [0x100, 0x5, 0x1, 0x101, 0x6, 0x100, 0x3, 0x1ffffffe, 0xf1e, 0x8, 0x2, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x9, 0xc, 0xfe9, 0x401, 0x10001, 0x2, 0x200007, 0x9, 0x48, 0xb, 0x7, 0x6a74, 0x400, 0x6b, 0x2000008]}) (async) ioctl$COMEDI_SETRSUBD(r0, 0x6410) 568.247409ms ago: executing program 2 (id=211): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1211000342b1d540da0b8401986f0102030109021b0001017fa2250609050affffff7f04f097b0e32fbd9918740751c2e975c4d9c238da3c044b36b6b4e160e71b87978c8388b34c8e3d5993210f5a"], &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) 537.657538ms ago: executing program 33 (id=211): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1211000342b1d540da0b8401986f0102030109021b0001017fa2250609050affffff7f04f097b0e32fbd9918740751c2e975c4d9c238da3c044b36b6b4e160e71b87978c8388b34c8e3d5993210f5a"], &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) 489.723108ms ago: executing program 1 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x24, r1, 0x711, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='e:my_read_msr1 -sr/', 0x13) (async) rt_sigprocmask(0x1, &(0x7f0000000040)={[0x7fff]}, 0x0, 0x8) 477.750661ms ago: executing program 4 (id=213): keyctl$set_reqkey_keyring(0xe, 0x4) (async, rerun: 64) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) (rerun: 64) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) (async) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) (async, rerun: 32) ppoll(&(0x7f00000001c0)=[{r0, 0x8a6b6feb38288eb0}], 0x1, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xc5ccb58937ea70e7, 0x2, 0x1, 0x8000}, 0x30, 0x2) landlock_restrict_self(r1, 0x4) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000000)='\xc9\x8d\n$\x11J\x06\xb5\x88\x9967\xd1\xe6zy\xb1\xc7\xcbB-\xacbe\xad\xc4\xc4o\x1f\xae\x1d\x82v\xe6\x8e\x9eAT\xe4=!\x85hfr\xca\x03\xcf\x00\x00\x00\x00\x00\x00', 0x0) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) 409.327773ms ago: executing program 1 (id=214): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000000)=0x1) r3 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0xb, 0x32315258, 0x9, 0xe, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x5}}) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "8bb2dc5c"}, 0xf) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0xfffffc01) syz_emit_ethernet(0x130, &(0x7f0000000500)={@random, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xfa, 0x3c, 0xff, @private2={0xfc, 0x2, '\x00', 0x10}, @local, {[@dstopts={0x16, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x40}, @pad1, @enc_lim={0x4, 0x1, 0xf2}]}], "4af9966c8f431147d164dd7bb041f26b557ba53e4dd1aead382f086384e46fe1020c70acd06519e5d92a80117f141968130c6e7b017617f91c8b5b9416ca4396aa3effe2d7f0373cade117d0dcd534a6ed4e28aeac52825c0000000027253d22552066a4452433132750add7c13a45369d62214275d521ccec415f7a3cbe573a73502a0722d3acb823b7ff5bf2ac65e4440029278f354dc2ca2e40f6ba7454b850cf8c7661721cc4514a6008b5118f224441f17009e78b0d8fd32b6abcc67ff917139b1fade100"/210}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000000)=0x1) (async) syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) (async) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0xb, 0x32315258, 0x9, 0xe, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x5}}) (async) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "8bb2dc5c"}, 0xf) (async) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') (async) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0xfffffc01) (async) syz_emit_ethernet(0x130, &(0x7f0000000500)={@random, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xfa, 0x3c, 0xff, @private2={0xfc, 0x2, '\x00', 0x10}, @local, {[@dstopts={0x16, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x40}, @pad1, @enc_lim={0x4, 0x1, 0xf2}]}], "4af9966c8f431147d164dd7bb041f26b557ba53e4dd1aead382f086384e46fe1020c70acd06519e5d92a80117f141968130c6e7b017617f91c8b5b9416ca4396aa3effe2d7f0373cade117d0dcd534a6ed4e28aeac52825c0000000027253d22552066a4452433132750add7c13a45369d62214275d521ccec415f7a3cbe573a73502a0722d3acb823b7ff5bf2ac65e4440029278f354dc2ca2e40f6ba7454b850cf8c7661721cc4514a6008b5118f224441f17009e78b0d8fd32b6abcc67ff917139b1fade100"/210}}}}}, 0x0) (async) 285.458833ms ago: executing program 1 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf2503000000143786000600fe80000000000000000000000000002808000700ac14143a06000b00110355f57f4335000000080002000300000008000800ac14141306000b001a000000080001007d3a"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) (async) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/flowlabel_consistency\x00', 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYRESDEC=r2], 0x98}}, 0x0) (async) write(r1, &(0x7f00000000c0)='0', 0x1) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44894}, 0x200000c0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) ftruncate(r3, 0x1) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) (async) faccessat2(r4, &(0x7f0000000180)='./mysys\x00', 0x142, 0x1300) 227.820247ms ago: executing program 3 (id=216): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x5b) keyctl$revoke(0x3, r0) read$watch_queue(r1, &(0x7f0000000280)=""/97, 0x61) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r6, 0xc02064a5, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@bridge_newneigh={0x5c, 0x1c, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x40, 0x0, 0x2}, [@NDA_FLAGS_EXT={0x8}, @NDA_FLAGS_EXT={0x8}, @NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_IFINDEX={0x0, 0x8, r4}, @NDA_MASTER={0x8, 0x9, 0x1}, @NDA_DST_IPV6={0xff72, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 227.429964ms ago: executing program 4 (id=217): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x9, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e24, 0x6, @private2, 0x9}}}, 0x84) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x4, 0xaad8}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000580)="66b8000000000f23d80f21f86635c00000000f23f8660f388034e700f3ab66b91303000066b80040000066ba000000000f300f01df0f1c950800ba6100ed0f23f90f91fb", 0x44}], 0x1, 0x67, &(0x7f0000000640)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket(0x10, 0x803, 0x2) fsetxattr$trusted_overlay_opaque(r5, &(0x7f00000002c0), &(0x7f0000000380), 0x2, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 99.915916ms ago: executing program 3 (id=219): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x4, @vbi={0xb1, 0xf21, 0x5, 0x32314d4e, [0x7, 0x1], [0x1, 0x5], 0x13a}}) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 0s ago: executing program 3 (id=220): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) (async) listen(r1, 0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfs_mnt\x00', 0x1ff) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) mount(&(0x7f0000000080)=@filename='127.0.0.1:/export\x00', &(0x7f00000000c0)='./nfs_mnt\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=3,vers=3,clientaddr=127.0.0.1\x00') (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r2, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000007e0100003801") (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x7, 0x2, 0x0, @loopback, @remote, 0x700, 0x700, 0x1, 0x5}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x6, 0x1, 0x2, 0x80, r2, 0x0, '\x00', r3, r4, 0x3, 0x1, 0x4}, 0x50) (async) accept(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:6259' (ED25519) to the list of known hosts. [ 47.836746][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 47.836760][ T42] audit: type=1400 audit(1785948544.289:141): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.847389][ T42] audit: type=1400 audit(1785948544.299:142): avc: denied { mount } for pid=5724 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.849392][ T5724] cgroup: Unknown subsys name 'net' [ 47.857293][ T42] audit: type=1400 audit(1785948544.309:143): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.011350][ T5724] cgroup: Unknown subsys name 'cpuset' [ 48.016863][ T5724] cgroup: Unknown subsys name 'rlimit' [ 48.218806][ T42] audit: type=1400 audit(1785948544.669:144): avc: denied { setattr } for pid=5724 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.227765][ T42] audit: type=1400 audit(1785948544.679:145): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.236044][ T42] audit: type=1400 audit(1785948544.679:146): avc: denied { write } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.244474][ T42] audit: type=1400 audit(1785948544.679:147): avc: denied { read } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.252444][ T42] audit: type=1400 audit(1785948544.699:148): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.262921][ T42] audit: type=1400 audit(1785948544.699:149): avc: denied { mount } for pid=5724 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.272188][ T42] audit: type=1400 audit(1785948544.699:150): avc: denied { read } for pid=5452 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.286336][ T5731] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.251911][ T5724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.626097][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 53.626109][ T42] audit: type=1400 audit(1785948550.079:158): avc: denied { execmem } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.874601][ T42] audit: type=1400 audit(1785948550.329:159): avc: denied { create } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.888169][ T42] audit: type=1400 audit(1785948550.329:160): avc: denied { read write } for pid=5742 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.896841][ T42] audit: type=1400 audit(1785948550.329:161): avc: denied { open } for pid=5742 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.905171][ T42] audit: type=1400 audit(1785948550.339:162): avc: denied { ioctl } for pid=5742 comm="syz-executor" path="socket:[3029]" dev="sockfs" ino=3029 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.917391][ T5755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.919251][ T5752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.921399][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.922830][ T5757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.922957][ T5757] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.924617][ T5757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.925716][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.926216][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.926885][ T5755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.927871][ T5758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.928415][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.929312][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.930773][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.931028][ T5757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.933034][ T5755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.934924][ T5758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.937489][ T5755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.940176][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.941794][ T42] audit: type=1400 audit(1785948550.399:163): avc: denied { read } for pid=5747 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.947461][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.949415][ T42] audit: type=1400 audit(1785948550.399:164): avc: denied { open } for pid=5747 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.953463][ T5758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.954390][ T42] audit: type=1400 audit(1785948550.409:165): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.959675][ T42] audit: type=1400 audit(1785948550.419:166): avc: denied { module_request } for pid=5747 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.999463][ T42] audit: type=1400 audit(1785948550.459:167): avc: denied { sys_module } for pid=5747 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.698269][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.701951][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.704677][ T5747] bridge_slave_0: entered allmulticast mode [ 54.707747][ T5747] bridge_slave_0: entered promiscuous mode [ 54.730360][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.733491][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.736217][ T5747] bridge_slave_1: entered allmulticast mode [ 54.740316][ T5747] bridge_slave_1: entered promiscuous mode [ 54.817905][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.820598][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.823144][ T5751] bridge_slave_0: entered allmulticast mode [ 54.826715][ T5751] bridge_slave_0: entered promiscuous mode [ 54.830378][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.832626][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.834733][ T5751] bridge_slave_1: entered allmulticast mode [ 54.837411][ T5751] bridge_slave_1: entered promiscuous mode [ 54.842284][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.847578][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.928209][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.930925][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.933438][ T5742] bridge_slave_0: entered allmulticast mode [ 54.936128][ T5742] bridge_slave_0: entered promiscuous mode [ 54.940485][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.942754][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.945191][ T5742] bridge_slave_1: entered allmulticast mode [ 54.948036][ T5742] bridge_slave_1: entered promiscuous mode [ 54.952547][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.963023][ T5747] team0: Port device team_slave_0 added [ 54.967783][ T5747] team0: Port device team_slave_1 added [ 54.978988][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.982195][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.984925][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.987849][ T5743] bridge_slave_0: entered allmulticast mode [ 54.992240][ T5743] bridge_slave_0: entered promiscuous mode [ 54.997296][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.001179][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.003954][ T5743] bridge_slave_1: entered allmulticast mode [ 55.007616][ T5743] bridge_slave_1: entered promiscuous mode [ 55.035852][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.049077][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.090027][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.093797][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.096150][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.105917][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.112994][ T5751] team0: Port device team_slave_0 added [ 55.129181][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.133525][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.136346][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.146443][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.152715][ T5751] team0: Port device team_slave_1 added [ 55.156475][ T5742] team0: Port device team_slave_0 added [ 55.184531][ T5742] team0: Port device team_slave_1 added [ 55.217074][ T5743] team0: Port device team_slave_0 added [ 55.226613][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.229475][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.239056][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.244694][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.247546][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.257161][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.263272][ T5743] team0: Port device team_slave_1 added [ 55.289756][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.293015][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.303102][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.308395][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.311236][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.321963][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.340064][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.343236][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.353983][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.365802][ T5747] hsr_slave_0: entered promiscuous mode [ 55.369443][ T5747] hsr_slave_1: entered promiscuous mode [ 55.388846][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.391824][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.402047][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.486815][ T5742] hsr_slave_0: entered promiscuous mode [ 55.489559][ T5742] hsr_slave_1: entered promiscuous mode [ 55.492009][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 55.494034][ T5742] Cannot create hsr debugfs directory [ 55.553484][ T5751] hsr_slave_0: entered promiscuous mode [ 55.555845][ T5751] hsr_slave_1: entered promiscuous mode [ 55.558011][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 55.559988][ T5751] Cannot create hsr debugfs directory [ 55.566096][ T5743] hsr_slave_0: entered promiscuous mode [ 55.569316][ T5743] hsr_slave_1: entered promiscuous mode [ 55.571935][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 55.573687][ T5743] Cannot create hsr debugfs directory [ 55.866280][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.876442][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.880514][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.886556][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.892052][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.898065][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.901125][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.905298][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.973351][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.980751][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.984169][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.990515][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.993697][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.999925][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.004521][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.009317][ T64] Bluetooth: hci2: command tx timeout [ 56.009638][ T5753] Bluetooth: hci3: command tx timeout [ 56.009671][ T5752] Bluetooth: hci0: command tx timeout [ 56.009946][ T5758] Bluetooth: hci1: command tx timeout [ 56.011063][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.088743][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.092835][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.096217][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.100368][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.103553][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.107852][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.118889][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.123686][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.189512][ T5751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.196636][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.204563][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.209722][ T5751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.215760][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.219825][ T5751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.226016][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.236069][ T5751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.242751][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.273722][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.302667][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.306208][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.315124][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.318149][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.355119][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.403552][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.413201][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.420093][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.422487][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.435952][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.438447][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.477856][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.503083][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.506034][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.517882][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.532182][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.535036][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.558429][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.582661][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.585505][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.601341][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.603661][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.808370][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.843691][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.868396][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.872859][ T5747] veth0_vlan: entered promiscuous mode [ 56.887194][ T5747] veth1_vlan: entered promiscuous mode [ 56.941943][ T5742] veth0_vlan: entered promiscuous mode [ 56.965928][ T5747] veth0_macvtap: entered promiscuous mode [ 56.970255][ T5743] veth0_vlan: entered promiscuous mode [ 56.976242][ T5742] veth1_vlan: entered promiscuous mode [ 56.984360][ T5747] veth1_macvtap: entered promiscuous mode [ 56.993674][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.006402][ T5743] veth1_vlan: entered promiscuous mode [ 57.023526][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.043949][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.076698][ T5742] veth0_macvtap: entered promiscuous mode [ 57.092559][ T5742] veth1_macvtap: entered promiscuous mode [ 57.099645][ T5743] veth0_macvtap: entered promiscuous mode [ 57.127013][ T5751] veth0_vlan: entered promiscuous mode [ 57.138179][ T5743] veth1_macvtap: entered promiscuous mode [ 57.145569][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.163298][ T5751] veth1_vlan: entered promiscuous mode [ 57.175869][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.195918][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.198461][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.210479][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.239194][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.250903][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.254487][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.269849][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.296217][ T5751] veth0_macvtap: entered promiscuous mode [ 57.303782][ T5751] veth1_macvtap: entered promiscuous mode [ 57.318307][ T5747] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.325894][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.331797][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.365138][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.367743][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.369071][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.402291][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.419827][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.425765][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.428948][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.449026][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.483616][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.487714][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.510418][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.514332][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.530009][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.533654][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.547223][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.551512][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.595841][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.600646][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.617505][ T5899] block2mtd: parameter too long [ 57.619031][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.623757][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.626874][ T5899] ======================================================= [ 57.626874][ T5899] WARNING: The mand mount option has been deprecated and [ 57.626874][ T5899] and is ignored by this kernel. Remove the mand [ 57.626874][ T5899] option from the mount to silence this warning. [ 57.626874][ T5899] ======================================================= [ 57.639230][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.645949][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.669646][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.674918][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.684322][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.688021][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.695065][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.698876][ T24] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 57.850028][ T5912] anx7411 0-002c: fail to probe typec property. [ 57.858264][ T5912] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 57.870361][ T5912] (NULL device *): [drm] The number of encoders must be between 1 and 31 [ 57.893699][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 57.899834][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.905240][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 57.909787][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.099296][ T5752] Bluetooth: hci2: command tx timeout [ 58.099320][ T64] Bluetooth: hci1: command tx timeout [ 58.123399][ T24] usb 8-1: GET_CAPABILITIES returned 0 [ 58.128978][ T24] usbtmc 8-1:16.0: can't read capabilities [ 58.451910][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 58.570689][ T5933] syzkaller0: entered promiscuous mode [ 58.572950][ T5933] syzkaller0: entered allmulticast mode [ 58.577128][ T5932] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 58.586321][ C2] vcan0: j1939_tp_rxtimer: 0xffff888056ef8c00: rx timeout, send abort [ 58.612786][ T5937] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 58.657285][ T5939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20'. [ 58.671237][ T5939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20'. [ 58.701001][ T5945] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 58.705450][ T5945] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.22'. [ 58.711447][ T5945] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 58.911304][ T5953] syzkaller0: entered promiscuous mode [ 58.913088][ T5953] syzkaller0: entered allmulticast mode [ 58.916584][ T42] kauditd_printk_skb: 103 callbacks suppressed [ 58.916594][ T42] audit: type=1400 audit(1785948555.369:271): avc: denied { create } for pid=5952 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.924497][ T42] audit: type=1400 audit(1785948555.369:272): avc: denied { write } for pid=5952 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.924997][ T5953] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 59.001016][ T5848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.086631][ C2] vcan0: j1939_tp_rxtimer: 0xffff888056ef8800: rx timeout, send abort [ 59.090784][ C2] vcan0: j1939_tp_rxtimer: 0xffff888056ef8c00: abort rx timeout. Force session deactivation [ 59.100457][ T24] usb 8-1: USB disconnect, device number 2 [ 59.104916][ T42] audit: type=1400 audit(1785948555.559:273): avc: denied { execute } for pid=5954 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.114444][ T42] audit: type=1400 audit(1785948555.559:274): avc: denied { execute_no_trans } for pid=5954 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.183216][ T42] audit: type=1400 audit(1785948555.639:275): avc: denied { read write } for pid=5957 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.190895][ T42] audit: type=1400 audit(1785948555.639:276): avc: denied { open } for pid=5957 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.201152][ T5752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.205343][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.209647][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.215233][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.218069][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.239830][ T42] audit: type=1400 audit(1785948555.699:277): avc: denied { ioctl } for pid=5961 comm="syz.1.28" path="socket:[9741]" dev="sockfs" ino=9741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.262431][ T42] audit: type=1400 audit(1785948555.719:278): avc: denied { sys_module } for pid=5957 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.296385][ T42] audit: type=1400 audit(1785948555.749:279): avc: denied { ioctl } for pid=5968 comm="syz.1.29" path="socket:[9029]" dev="sockfs" ino=9029 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.349227][ T5975] Zero length message leads to an empty skb [ 59.353037][ T42] audit: type=1400 audit(1785948555.809:280): avc: denied { open } for pid=5968 comm="syz.1.29" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 59.590008][ C2] vcan0: j1939_tp_rxtimer: 0xffff888056ef8800: abort rx timeout. Force session deactivation [ 59.648020][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.650440][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.653282][ T5957] bridge_slave_0: entered allmulticast mode [ 59.659971][ T5957] bridge_slave_0: entered promiscuous mode [ 59.665661][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.672064][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.673210][ T5998] i2c i2c-0: Failed to register i2c client anx7411 at 0x2c (-16) [ 59.675311][ T5957] bridge_slave_1: entered allmulticast mode [ 59.676769][ T5957] bridge_slave_1: entered promiscuous mode [ 59.685736][ T5998] (NULL device *): [drm] The number of encoders must be between 1 and 31 [ 59.715788][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.724657][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.751845][ T5957] team0: Port device team_slave_0 added [ 59.757534][ T5957] team0: Port device team_slave_1 added [ 59.773335][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.775725][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.785223][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.789617][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.792222][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.801229][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.840082][ T5957] hsr_slave_0: entered promiscuous mode [ 59.842378][ T5957] hsr_slave_1: entered promiscuous mode [ 59.844533][ T5957] debugfs: 'hsr0' already exists in 'hsr' [ 59.846468][ T5957] Cannot create hsr debugfs directory [ 59.848705][ T64] Bluetooth: hci3: command tx timeout [ 59.970547][ T5957] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.977887][ T5957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.982494][ T5957] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.989972][ T5957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.994023][ T5957] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.001012][ T5957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.004843][ T5957] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.011926][ T5957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.038445][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.041545][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.045090][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.047875][ T5957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.085088][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.094609][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.097143][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.105770][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.113465][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.116271][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.124005][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.126355][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.179790][ T64] Bluetooth: hci1: command tx timeout [ 60.285074][ T6034] macvtap0: entered allmulticast mode [ 60.287465][ T6034] veth0_macvtap: entered allmulticast mode [ 60.294719][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 60.327661][ T5848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.431666][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.473423][ T5848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.482179][ T6052] CacheFiles: Failed to register: -95 [ 60.560334][ T5848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.564473][ T36] nvmet: connect request for invalid subsystem testnqn! [ 60.565392][ T6061] kernel read not supported for file /sg0 (pid: 6061 comm: syz.1.48) [ 60.569855][ T6056] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 60.595711][ T6064] No such timeout policy "syz1" [ 60.645106][ T5957] veth0_vlan: entered promiscuous mode [ 60.655062][ T5957] veth1_vlan: entered promiscuous mode [ 60.723024][ T75] nvmet: connect request for invalid subsystem testnqn! [ 60.726855][ T6057] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 60.752513][ T5848] bridge_slave_1: left allmulticast mode [ 60.754392][ T5848] bridge_slave_1: left promiscuous mode [ 60.757254][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.765922][ T5848] bridge_slave_0: left allmulticast mode [ 60.767726][ T5848] bridge_slave_0: left promiscuous mode [ 60.770465][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.873023][ T6078] netlink: 40 bytes leftover after parsing attributes in process `syz.3.53'. [ 60.900546][ T5848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.909332][ T5848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.913480][ T5848] bond0 (unregistering): Released all slaves [ 60.924866][ T6081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.53'. [ 60.939331][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 60.942237][ T6078] bond_slave_0: entered allmulticast mode [ 60.944634][ T5957] veth0_macvtap: entered promiscuous mode [ 60.953428][ T5957] veth1_macvtap: entered promiscuous mode [ 60.973750][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.988861][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.059311][ T5798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.063325][ T5798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.138377][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.143936][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.159962][ T5798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.167198][ T5798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.179278][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.187292][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 61.188619][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.271174][ T6097] xt_hashlimit: size too large, truncated to 1048576 [ 61.289958][ T64] Bluetooth: hci0: command tx timeout [ 61.357034][ T5848] hsr_slave_0: left promiscuous mode [ 61.362483][ T5848] hsr_slave_1: left promiscuous mode [ 61.365317][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.373665][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.390599][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.398370][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.452173][ T5848] veth1_macvtap: left promiscuous mode [ 61.467266][ T5848] veth0_macvtap: left promiscuous mode [ 61.475074][ T5848] veth1_vlan: left promiscuous mode [ 61.479718][ T5848] veth0_vlan: left promiscuous mode [ 61.523882][ T6120] afs: Unknown parameter '`' [ 61.536123][ T6118] IPVS: Scheduler module ip_vs_sip not found [ 61.689541][ T64] Bluetooth: hci2: command tx timeout [ 61.694286][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 61.694289][ T6126] netlink: 'syz.2.63': attribute type 1 has an invalid length. [ 61.694322][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 61.745620][ T5848] team0 (unregistering): Port device team_slave_1 removed [ 61.758360][ T5848] team0 (unregistering): Port device team_slave_0 removed [ 61.844112][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 61.916310][ T6133] netlink: 'syz.1.64': attribute type 39 has an invalid length. [ 61.938704][ T64] Bluetooth: hci3: command tx timeout [ 62.164447][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 62.185477][ T6155] Invalid source name [ 62.191357][ T6155] UBIFS error (pid: 6155): cannot open "/dev/sg0", error -22 [ 62.206082][ T6153] capability: warning: `syz.4.70' uses 32-bit capabilities (legacy support in use) [ 62.249595][ T64] Bluetooth: hci1: command tx timeout [ 62.361239][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 62.366262][ T6186] process 'syz.2.77' launched './file0' with NULL argv: empty string added [ 62.370729][ T6186] Invalid argument reading file caps for ./file0 [ 62.535682][ T6207] syz.3.84 uses obsolete (PF_INET,SOCK_PACKET) [ 62.699097][ T6218] overlayfs: failed to resolve './file1': -2 [ 62.777024][ T6225] Cannot find add_set index 0 as target [ 62.807701][ T6225] xt_CT: No such helper "pptp" [ 62.891088][ T6231] smpboot: CPU 1 is now offline [ 62.971868][ T6237] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 63.031685][ T6239] 9pnet_virtio: no channels available for device syz [ 63.169330][ T6247] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 63.171508][ T6245] IPVS: stopping backup sync thread 6247 ... [ 63.191421][ T6245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.234737][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.298906][ T64] Bluetooth: hci0: command tx timeout [ 63.408182][ T6259] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 63.666647][ T6270] __nla_validate_parse: 8 callbacks suppressed [ 63.666660][ T6270] netlink: 68 bytes leftover after parsing attributes in process `syz.2.102'. [ 63.717098][ T6272] netlink: 'syz.2.103': attribute type 21 has an invalid length. [ 63.736106][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 63.757081][ T6272] netlink: 'syz.2.103': attribute type 21 has an invalid length. [ 63.761616][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 63.768714][ T5798] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.776191][ T5798] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.808653][ T5848] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.817217][ T5848] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.833547][ T6276] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=63513 sclass=netlink_xfrm_socket pid=6276 comm=syz.2.106 [ 63.942868][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 63.957868][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 64.220880][ T42] kauditd_printk_skb: 128 callbacks suppressed [ 64.220898][ T42] audit: type=1400 audit(1785948560.679:409): avc: denied { create } for pid=6288 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.273765][ T42] audit: type=1400 audit(1785948560.729:410): avc: denied { setopt } for pid=6291 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.290325][ T42] audit: type=1400 audit(1785948560.729:411): avc: denied { unmount } for pid=6288 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.299641][ T42] audit: type=1400 audit(1785948560.739:412): avc: denied { getopt } for pid=6291 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.314015][ T42] audit: type=1400 audit(1785948560.739:413): avc: denied { ioctl } for pid=6291 comm="syz.1.110" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11880 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.341083][ T41] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 64.374950][ T42] audit: type=1400 audit(1785948560.829:414): avc: denied { create } for pid=6288 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.375948][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.109'. [ 64.508621][ T41] usb 9-1: Using ep0 maxpacket: 16 [ 64.513830][ T41] usb 9-1: config 0 has no interfaces? [ 64.517269][ T41] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.521030][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.523642][ T41] usb 9-1: Product: syz [ 64.525097][ T41] usb 9-1: Manufacturer: syz [ 64.526711][ T41] usb 9-1: SerialNumber: syz [ 64.531143][ T41] usb 9-1: config 0 descriptor?? [ 64.631574][ T42] audit: type=1400 audit(1785948561.089:415): avc: denied { allowed } for pid=6300 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.639483][ T6303] binder: 6301:6303 ioctl 80026f48 2000000000c0 returned -22 [ 64.639549][ T42] audit: type=1400 audit(1785948561.089:416): avc: denied { set_context_mgr } for pid=6301 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.663374][ T42] audit: type=1400 audit(1785948561.119:417): avc: denied { create } for pid=6301 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 64.671601][ T42] audit: type=1400 audit(1785948561.119:418): avc: denied { setopt } for pid=6301 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 64.777064][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 64.781330][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/u34:0 Not tainted syzkaller #0 PREEMPT(full) [ 64.781364][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.781385][ T64] Workqueue: hci1 hci_rx_work [ 64.781412][ T64] Call Trace: [ 64.781427][ T64] [ 64.781446][ T64] dump_stack_lvl+0x100/0x190 [ 64.781471][ T64] sysfs_warn_dup.cold+0x1c/0x28 [ 64.781502][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 64.781520][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 64.781537][ T64] ? find_held_lock+0x2b/0x80 [ 64.781559][ T64] ? kobject_add_internal+0x25f/0x930 [ 64.781585][ T64] ? kobject_add_internal+0x25f/0x930 [ 64.781616][ T64] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.781647][ T64] kobject_add_internal+0x2c8/0x930 [ 64.781676][ T64] kobject_add+0x16a/0x1e0 [ 64.781734][ T64] ? __pfx_kobject_add+0x10/0x10 [ 64.781767][ T64] ? class_to_subsys+0x10f/0x150 [ 64.781805][ T64] ? kobject_put+0xb9/0x640 [ 64.781828][ T64] ? _raw_spin_unlock+0x28/0x50 [ 64.781862][ T64] device_add+0x294/0x1970 [ 64.781888][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 64.781913][ T64] ? __pfx_device_add+0x10/0x10 [ 64.781938][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 64.781972][ T64] hci_conn_add_sysfs+0x1a3/0x260 [ 64.781998][ T64] le_conn_complete_evt+0x11eb/0x1f60 [ 64.782030][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 64.782049][ T64] ? hci_event_packet+0x186/0xcd0 [ 64.782076][ T64] ? hci_event_packet+0x186/0xcd0 [ 64.782102][ T64] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 64.782134][ T64] ? skb_pull_data+0x15f/0x1e0 [ 64.782172][ T64] hci_le_meta_evt+0x34a/0x5f0 [ 64.782194][ T64] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 64.782224][ T64] hci_event_packet+0x51c/0xcd0 [ 64.782243][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 64.782273][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 64.782296][ T64] ? kcov_remote_start+0x384/0x670 [ 64.782323][ T64] ? lockdep_hardirqs_on+0x78/0x100 [ 64.782352][ T64] hci_rx_work+0x451/0xfc0 [ 64.782382][ T64] process_one_work+0xa23/0x1940 [ 64.782412][ T64] ? __pfx_process_one_work+0x10/0x10 [ 64.782451][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 64.782474][ T64] worker_thread+0x5ef/0xe50 [ 64.782511][ T64] ? kthread+0x13a/0x450 [ 64.782528][ T64] ? __pfx_worker_thread+0x10/0x10 [ 64.782546][ T64] kthread+0x370/0x450 [ 64.782570][ T64] ? __pfx_kthread+0x10/0x10 [ 64.782589][ T64] ret_from_fork+0x72b/0xd50 [ 64.782622][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 64.782648][ T64] ? __switch_to+0x800/0x10f0 [ 64.782673][ T64] ? __pfx_kthread+0x10/0x10 [ 64.782693][ T64] ret_from_fork_asm+0x1a/0x30 [ 64.782738][ T64] [ 64.783733][ T64] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 64.787470][ T64] Bluetooth: hci1: failed to register connection device [ 64.822734][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.116'. [ 64.823673][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 65.095053][ T6326] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 65.202613][ T6334] netlink: 156 bytes leftover after parsing attributes in process `syz.3.122'. [ 65.273110][ T6335] tipc: Started in network mode [ 65.276077][ T6335] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 65.279424][ T6335] tipc: Enabled bearer , priority 0 [ 65.328660][ T1357] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.492383][ T1357] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.496546][ T1357] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 65.500241][ T1357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.520751][ T1357] as10x_usb: device has been detected [ 65.523065][ T1357] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 65.533633][ T1357] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 65.553659][ T1357] as10x_usb: error during firmware upload part1 [ 65.556154][ T1357] Registered device Abilis Systems DVB-Titan [ 65.666326][ T6346] netlink: 84 bytes leftover after parsing attributes in process `syz.2.126'. [ 65.736370][ T6350] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 65.975795][ T5752] Bluetooth: Unexpected start frame (len 16) [ 66.084283][ T6364] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 66.114909][ T6364] program syz.3.130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.290494][ T1357] tipc: Node number set to 43690 [ 66.352872][ T6380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.355344][ T6380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.358674][ T6380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.361060][ T6380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.460956][ T6386] syzkaller0: entered promiscuous mode [ 66.462934][ T6386] syzkaller0: entered allmulticast mode [ 66.815039][ T6283] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 67.354028][ T60] usb 6-1: USB disconnect, device number 2 [ 67.382479][ T60] Unregistered device Abilis Systems DVB-Titan [ 67.383562][ T60] as10x_usb: device has been disconnected [ 67.577171][ T1357] usb 9-1: USB disconnect, device number 2 [ 68.733352][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.739466][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.948212][ T6465] __nla_validate_parse: 2 callbacks suppressed [ 68.948262][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 68.954700][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.961322][ T6471] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 68.966690][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.004143][ T6478] 9pnet_virtio: no channels available for device syz [ 69.043467][ T6484] fuse: Unknown parameter 'fowner<00000000000000000000' [ 69.204457][ T6502] cgroup: Need name or subsystem set [ 69.309726][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 69.309774][ T42] audit: type=1400 audit(1785948565.759:459): avc: denied { setopt } for pid=6505 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.343888][ T6514] netlink: 'syz.4.161': attribute type 1 has an invalid length. [ 69.348346][ T42] audit: type=1400 audit(1785948565.799:460): avc: denied { write } for pid=6509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.413220][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 69.427393][ T42] audit: type=1400 audit(1785948565.879:461): avc: denied { write } for pid=6516 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.534455][ T42] audit: type=1400 audit(1785948565.979:462): avc: denied { write } for pid=6520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.576557][ T42] audit: type=1400 audit(1785948566.029:463): avc: denied { getopt } for pid=6525 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.644347][ T42] audit: type=1400 audit(1785948566.099:464): avc: denied { write } for pid=6532 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.667150][ T42] audit: type=1400 audit(1785948566.119:465): avc: denied { connect } for pid=6534 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.685371][ T42] audit: type=1400 audit(1785948566.119:466): avc: denied { setopt } for pid=6534 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.711543][ T6536] syzkaller1: entered promiscuous mode [ 69.713967][ T6536] syzkaller1: entered allmulticast mode [ 69.724142][ T6536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.168'. [ 69.734565][ T42] audit: type=1400 audit(1785948566.189:467): avc: denied { create } for pid=6541 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.757163][ T42] audit: type=1400 audit(1785948566.199:468): avc: denied { shutdown } for pid=6541 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.869117][ T1366] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 70.006636][ T6549] "syz.3.173" (6549) uses obsolete ecb(arc4) skcipher [ 70.048654][ T1366] usb 9-1: Using ep0 maxpacket: 8 [ 70.055926][ T1366] usb 9-1: config 137 has an invalid interface number: 25 but max is 2 [ 70.059747][ T1366] usb 9-1: config 137 has an invalid interface number: 141 but max is 2 [ 70.063743][ T1366] usb 9-1: config 137 contains an unexpected descriptor of type 0x2, skipping [ 70.067543][ T1366] usb 9-1: config 137 has an invalid interface number: 89 but max is 2 [ 70.071515][ T1366] usb 9-1: config 137 contains an unexpected descriptor of type 0x1, skipping [ 70.075255][ T1366] usb 9-1: config 137 has an invalid interface number: 60 but max is 2 [ 70.080015][ T1366] usb 9-1: config 137 has an invalid interface number: 118 but max is 2 [ 70.087296][ T1366] usb 9-1: config 137 has 5 interfaces, different from the descriptor's value: 3 [ 70.091191][ T1366] usb 9-1: config 137 has no interface number 0 [ 70.093881][ T1366] usb 9-1: config 137 has no interface number 1 [ 70.096512][ T1366] usb 9-1: config 137 has no interface number 2 [ 70.099574][ T1366] usb 9-1: config 137 has no interface number 3 [ 70.102178][ T1366] usb 9-1: config 137 has no interface number 4 [ 70.104728][ T1366] usb 9-1: config 137 interface 25 altsetting 13 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 70.109659][ T1366] usb 9-1: config 137 interface 25 altsetting 13 has a duplicate endpoint with address 0xC, skipping [ 70.113978][ T1366] usb 9-1: config 137 interface 25 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 70.118263][ T1366] usb 9-1: config 137 interface 25 altsetting 13 has 4 endpoint descriptors, different from the interface descriptor's value: 11 [ 70.124459][ T1366] usb 9-1: too many endpoints for config 137 interface 141 altsetting 247: 33, using maximum allowed: 30 [ 70.129359][ T1366] usb 9-1: config 137 interface 141 altsetting 247 endpoint 0xE has invalid maxpacket 38641, setting to 64 [ 70.134170][ T1366] usb 9-1: config 137 interface 141 altsetting 247 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 70.143754][ T1366] usb 9-1: config 137 interface 141 altsetting 247 has a duplicate endpoint with address 0xC, skipping [ 70.148431][ T1366] usb 9-1: config 137 interface 141 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 70.153466][ T6556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.174'. [ 70.153507][ T1366] usb 9-1: config 137 interface 141 altsetting 247 has a duplicate endpoint with address 0xF, skipping [ 70.161229][ T1366] usb 9-1: config 137 interface 141 altsetting 247 has a duplicate endpoint with address 0x4, skipping [ 70.165876][ T1366] usb 9-1: config 137 interface 141 altsetting 247 has 7 endpoint descriptors, different from the interface descriptor's value: 33 [ 70.171815][ T1366] usb 9-1: config 137 interface 89 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 70.176403][ T1366] usb 9-1: config 137 interface 89 altsetting 3 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 70.181043][ T1366] usb 9-1: config 137 interface 89 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 70.182422][ T6556] xt_ecn: cannot match TCP bits for non-tcp packets [ 70.185383][ T1366] usb 9-1: config 137 interface 89 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 70.189853][ T6556] warning: `syz.3.174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.192517][ T1366] usb 9-1: config 137 interface 89 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 70.201381][ T1366] usb 9-1: config 137 interface 89 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 70.205995][ T1366] usb 9-1: config 137 interface 89 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 70.211019][ T1366] usb 9-1: config 137 interface 89 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 70.215558][ T1366] usb 9-1: config 137 interface 89 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 70.220331][ T1366] usb 9-1: config 137 interface 89 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 70.224675][ T1366] usb 9-1: config 137 interface 89 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 70.229644][ T1366] usb 9-1: config 137 interface 89 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 70.234013][ T1366] usb 9-1: config 137 interface 89 altsetting 3 bulk endpoint 0xD has invalid maxpacket 1024 [ 70.238152][ T1366] usb 9-1: config 137 interface 60 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 70.243025][ T1366] usb 9-1: config 137 interface 60 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 70.251202][ T1366] usb 9-1: config 137 interface 60 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 70.256464][ T1366] usb 9-1: config 137 interface 60 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 70.265421][ T1366] usb 9-1: config 137 interface 25 has no altsetting 0 [ 70.268276][ T1366] usb 9-1: config 137 interface 141 has no altsetting 0 [ 70.271488][ T1366] usb 9-1: config 137 interface 89 has no altsetting 0 [ 70.274332][ T1366] usb 9-1: config 137 interface 60 has no altsetting 0 [ 70.277181][ T1366] usb 9-1: config 137 interface 118 has no altsetting 0 [ 70.282673][ T1366] usb 9-1: New USB device found, idVendor=7392, idProduct=c822, bcdDevice=35.64 [ 70.286427][ T1366] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.290063][ T1366] usb 9-1: Product: я [ 70.291984][ T1366] usb 9-1: Manufacturer: 糹浺㡚灳潅㮞릎뵉畿蓦ꐏ乪嫹≨縑穗⸨앶₮뫶ጀ懺鍸꒵퀫L鍮Ⲟ⥜溙ឰϊ㟡⫥غ椀薆똆扖폘쀈䟓舫킬鰞ﵴ习₴㬨⌼팾厏癯ⱀ톼䱯鍈릹蠤 [ 70.300445][ T1366] usb 9-1: SerialNumber: ఄ [ 70.310542][ T6531] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 70.383162][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 70.536408][ T6531] tc_dump_action: action bad kind [ 70.572690][ T1366] cdc_ether 9-1:137.89: skipping garbage [ 70.574555][ T1366] usb 9-1: No union descriptors [ 70.585557][ T1366] usb 9-1: USB disconnect, device number 3 [ 71.183812][ T60] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 71.193788][ T60] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 71.247492][ T6585] "syz.4.182" (6585) uses obsolete ecb(arc4) skcipher [ 71.318745][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 71.460761][ T1357] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 71.470676][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 71.474897][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 71.483188][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 71.486988][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.506867][ T9] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 71.525017][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 71.526813][ T9] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 72.332396][ T6603] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 72.400783][ T6606] ip6gre0: Master is either lo or non-ether device [ 72.404579][ T6607] ip6gre0: Master is either lo or non-ether device [ 72.437533][ T6607] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 72.443148][ T6607] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 72.447044][ T6606] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 72.559779][ T6622] capability: warning: `syz.3.191' uses deprecated v2 capabilities in a way that may be insecure [ 72.600622][ T1357] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 72.785700][ T6624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.448713][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.620341][ T24] usb 5-1: Dual-Role OTG device on HNP port [ 73.627568][ T24] usb 5-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 7.02 [ 73.633234][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.693494][ T5828] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 73.773106][ T6672] netlink: 'syz.3.200': attribute type 4 has an invalid length. [ 73.918669][ T1357] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 74.048199][ T24] usb 6-1: USB disconnect, device number 3 [ 74.073650][ T1357] usb 9-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 74.080037][ T24] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 74.084151][ T1357] usb 9-1: config 0 interface 0 has no altsetting 0 [ 74.087190][ T24] spcp8x5 6-1:1.0: device disconnected [ 74.099181][ T1357] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 74.107158][ T1357] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 74.118584][ T1357] usb 9-1: Product: syz [ 74.121467][ T1357] usb 9-1: Manufacturer: syz [ 74.123312][ T1357] usb 9-1: SerialNumber: syz [ 74.126762][ T6579] ceph: No mds server is up or the cluster is laggy [ 74.139984][ T1357] usb 9-1: config 0 descriptor?? [ 74.155812][ T6667] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 74.168193][ T6681] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 74.176862][ T1357] usb 9-1: selecting invalid altsetting 0 [ 74.337641][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 74.361829][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 74.361858][ T42] audit: type=1400 audit(1785948570.819:513): avc: denied { shutdown } for pid=6685 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.411439][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.426783][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.433777][ T5828] usb 9-1: USB disconnect, device number 4 [ 74.531035][ T42] audit: type=1400 audit(1785948570.979:514): avc: denied { write } for pid=6689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.620250][ T42] audit: type=1400 audit(1785948571.069:515): avc: denied { read append } for pid=6692 comm="syz.1.207" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.628138][ T6693] input: syz0 as /devices/virtual/input/input5 [ 74.635666][ T42] audit: type=1400 audit(1785948571.079:516): avc: denied { ioctl open } for pid=6692 comm="syz.1.207" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.656559][ T42] audit: type=1400 audit(1785948571.089:517): avc: denied { read } for pid=5134 comm="acpid" name="event4" dev="devtmpfs" ino=2928 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.676215][ T42] audit: type=1400 audit(1785948571.089:518): avc: denied { open } for pid=5134 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2928 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.698714][ T42] audit: type=1400 audit(1785948571.089:519): avc: denied { ioctl } for pid=5134 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2928 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.713529][ T42] audit: type=1400 audit(1785948571.169:520): avc: denied { write } for pid=6696 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.784606][ T42] audit: type=1400 audit(1785948571.239:521): avc: denied { write } for pid=6703 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.861027][ T5848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.866759][ T5848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.888155][ T6704] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 74.894574][ T6704] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 74.902884][ T6704] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 74.912847][ T6704] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 74.923170][ T6704] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 74.981848][ T42] audit: type=1400 audit(1785948571.429:522): avc: denied { write } for pid=6708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.011716][ T5848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.022200][ T5848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.100640][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.115312][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.121774][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.128333][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.134679][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.207038][ T5848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.214931][ T6734] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 75.227549][ T5848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.234222][ T6733] dummy_hcd dummy_hcd.0: remove, state 1 [ 75.249393][ T6733] usb usb5: USB disconnect, device number 1 [ 75.252760][ T6733] usb 5-1: USB disconnect, device number 2 [ 75.265926][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 75.341307][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 75.365408][ T5848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.370124][ T5848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.472561][ T6733] ================================================================== [ 75.475848][ T6733] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x52d/0x670 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 75.479216][ T6733] Write of size 8 at addr ffff8880276dc350 by task syz.1.215/6733 [ 75.484047][ T6733] [ 75.485100][ T6733] CPU: 2 UID: 0 PID: 6733 Comm: syz.1.215 Not tainted syzkaller #0 PREEMPT(full) [ 75.485124][ T6733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.485146][ T6733] Call Trace: [ 75.485163][ T6733] [ 75.485171][ T6733] dump_stack_lvl+0x100/0x190 [ 75.485231][ T6733] print_report+0x13d/0x4b0 [ 75.485268][ T6733] ? __virt_addr_valid+0x239/0x430 [ 75.485313][ T6733] ? snd_usb_midi_v2_free+0x52d/0x670 [ 75.485334][ T6733] kasan_report+0xdf/0x1c0 [ 75.485368][ T6733] ? snd_usb_midi_v2_free+0x52d/0x670 [ 75.485387][ T6733] snd_usb_midi_v2_free+0x52d/0x670 [ 75.485407][ T6733] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 75.485430][ T6733] snd_usb_midi_v2_free_all+0x85/0xe0 [ 75.485449][ T6733] snd_usb_audio_free+0x4e/0x120 [ 75.485474][ T6733] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 75.485495][ T6733] release_card_device+0xb2/0x1a0 [ 75.485512][ T6733] ? __pfx_release_card_device+0x10/0x10 [ 75.485530][ T6733] device_release+0xd2/0x270 [ 75.485592][ T6733] kobject_put+0x1f7/0x640 [ 75.485657][ T6733] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 75.485677][ T6733] put_device+0x1f/0x30 [ 75.485693][ T6733] snd_card_free_when_closed+0x2b/0x40 [ 75.485711][ T6733] usb_audio_disconnect+0x210/0x680 [ 75.485736][ T6733] usb_unbind_interface+0x1dd/0x9e0 [ 75.485779][ T6733] ? __pfx_usb_unbind_interface+0x10/0x10 [ 75.485810][ T6733] device_remove+0x12a/0x180 [ 75.485832][ T6733] device_release_driver_internal+0x44e/0x620 [ 75.485858][ T6733] bus_remove_device+0x2bc/0x560 [ 75.485880][ T6733] ? __pfx_bus_remove_device+0x10/0x10 [ 75.485900][ T6733] ? __pfx_device_remove_attrs+0x10/0x10 [ 75.485922][ T6733] device_del+0x376/0x9b0 [ 75.485943][ T6733] ? __pfx_device_del+0x10/0x10 [ 75.485964][ T6733] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 75.485991][ T6733] usb_disable_device+0x367/0x810 [ 75.486011][ T6733] ? mark_held_locks+0x40/0x70 [ 75.486037][ T6733] usb_disconnect+0x2e2/0x9a0 [ 75.486058][ T6733] ? _raw_spin_unlock_irq+0x23/0x50 [ 75.486081][ T6733] usb_disconnect+0x28e/0x9a0 [ 75.486102][ T6733] usb_remove_hcd.cold+0x1ae/0x401 [ 75.486128][ T6733] ? __pfx_usb_remove_hcd+0x10/0x10 [ 75.486152][ T6733] dummy_hcd_remove+0x109/0x1e0 [ 75.486176][ T6733] ? __pfx_dummy_hcd_remove+0x10/0x10 [ 75.486197][ T6733] platform_remove+0x5f/0x80 [ 75.486212][ T6733] ? __pfx_platform_remove+0x10/0x10 [ 75.486226][ T6733] device_remove+0xcb/0x180 [ 75.486247][ T6733] device_release_driver_internal+0x44e/0x620 [ 75.486275][ T6733] unbind_store+0xf8/0x110 [ 75.486293][ T6733] ? __pfx_unbind_store+0x10/0x10 [ 75.486312][ T6733] drv_attr_store+0x74/0xb0 [ 75.486337][ T6733] ? __pfx_drv_attr_store+0x10/0x10 [ 75.486363][ T6733] sysfs_kf_write+0xf2/0x150 [ 75.486401][ T6733] kernfs_fop_write_iter+0x3e0/0x5f0 [ 75.486426][ T6733] ? __pfx_sysfs_kf_write+0x10/0x10 [ 75.486452][ T6733] vfs_write+0x6ac/0x1050 [ 75.486480][ T6733] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 75.486505][ T6733] ? __pfx_vfs_write+0x10/0x10 [ 75.486536][ T6733] ksys_write+0x12a/0x250 [ 75.486552][ T6733] ? __pfx_ksys_write+0x10/0x10 [ 75.486571][ T6733] do_syscall_64+0x115/0x870 [ 75.486593][ T6733] ? clear_bhb_loop+0x40/0x90 [ 75.486615][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.486634][ T6733] RIP: 0033:0x7f024b99e0d9 [ 75.486650][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.486667][ T6733] RSP: 002b:00007f024c7e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.486688][ T6733] RAX: ffffffffffffffda RBX: 00007f024bc26090 RCX: 00007f024b99e0d9 [ 75.486699][ T6733] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000006 [ 75.486709][ T6733] RBP: 00007f024ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 75.486720][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.486731][ T6733] R13: 00007f024bc26128 R14: 00007f024bc26090 R15: 00007ffebf3e6308 [ 75.486751][ T6733] [ 75.486757][ T6733] [ 75.646098][ T6733] Allocated by task 24: [ 75.647910][ T6733] kasan_save_stack+0x30/0x50 [ 75.649931][ T6733] kasan_save_track+0x14/0x30 [ 75.651971][ T6733] __kasan_kmalloc+0xaa/0xb0 [ 75.653823][ T6733] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 75.655987][ T6733] snd_ump_endpoint_new+0x93/0x470 [ 75.658019][ T6733] create_midi2_ump+0x2dd/0x920 [ 75.660113][ T6733] snd_usb_midi_v2_create+0x11fa/0x4070 [ 75.662463][ T6733] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 75.664857][ T6733] usb_audio_probe+0xf05/0x3b10 [ 75.666896][ T6733] usb_probe_interface+0x303/0x8f0 [ 75.669042][ T6733] really_probe+0x241/0xa60 [ 75.670908][ T6733] __driver_probe_device+0x20e/0x450 [ 75.673048][ T6733] driver_probe_device+0x4a/0x140 [ 75.675089][ T6733] __device_attach_driver+0x1df/0x320 [ 75.677217][ T6733] bus_for_each_drv+0x159/0x1e0 [ 75.679209][ T6733] __device_attach+0x1e4/0x4d0 [ 75.681187][ T6733] device_initial_probe+0xaf/0xd0 [ 75.683355][ T6733] bus_probe_device+0x64/0x160 [ 75.685386][ T6733] device_add+0x121d/0x1970 [ 75.687226][ T6733] usb_set_configuration+0xd97/0x1c60 [ 75.689407][ T6733] usb_generic_driver_probe+0xa1/0xe0 [ 75.691634][ T6733] usb_probe_device+0xef/0x400 [ 75.693641][ T6733] really_probe+0x241/0xa60 [ 75.695441][ T6733] __driver_probe_device+0x20e/0x450 [ 75.697521][ T6733] driver_probe_device+0x4a/0x140 [ 75.699574][ T6733] __device_attach_driver+0x1df/0x320 [ 75.701752][ T6733] bus_for_each_drv+0x159/0x1e0 [ 75.703771][ T6733] __device_attach+0x1e4/0x4d0 [ 75.705744][ T6733] device_initial_probe+0xaf/0xd0 [ 75.707773][ T6733] bus_probe_device+0x64/0x160 [ 75.709781][ T6733] device_add+0x121d/0x1970 [ 75.711734][ T6733] usb_new_device.cold+0x685/0x115c [ 75.713852][ T6733] hub_event+0x30a3/0x4a60 [ 75.715751][ T6733] process_one_work+0xa23/0x1940 [ 75.717804][ T6733] worker_thread+0x5ef/0xe50 [ 75.719725][ T6733] kthread+0x370/0x450 [ 75.721385][ T6733] ret_from_fork+0x72b/0xd50 [ 75.723314][ T6733] ret_from_fork_asm+0x1a/0x30 [ 75.725321][ T6733] [ 75.726305][ T6733] Freed by task 6733: [ 75.727967][ T6733] kasan_save_stack+0x30/0x50 [ 75.729866][ T6733] kasan_save_track+0x14/0x30 [ 75.731868][ T6733] kasan_save_free_info+0x3b/0x70 [ 75.733905][ T6733] __kasan_slab_free+0x5f/0x80 [ 75.735835][ T6733] kfree+0x22b/0x6c0 [ 75.737412][ T6733] snd_rawmidi_dev_free+0x3e/0x60 [ 75.739495][ T6733] __snd_device_free+0x1a3/0x300 [ 75.741590][ T6733] snd_device_free_all+0xf3/0x220 [ 75.743604][ T6733] release_card_device+0x77/0x1a0 [ 75.745656][ T6733] device_release+0xd2/0x270 [ 75.747609][ T6733] kobject_put+0x1f7/0x640 [ 75.749504][ T6733] put_device+0x1f/0x30 [ 75.751237][ T6733] snd_card_free_when_closed+0x2b/0x40 [ 75.753464][ T6733] usb_audio_disconnect+0x210/0x680 [ 75.755540][ T6733] usb_unbind_interface+0x1dd/0x9e0 [ 75.757615][ T6733] device_remove+0x12a/0x180 [ 75.759513][ T6733] device_release_driver_internal+0x44e/0x620 [ 75.762054][ T6733] bus_remove_device+0x2bc/0x560 [ 75.764132][ T6733] device_del+0x376/0x9b0 [ 75.765938][ T6733] usb_disable_device+0x367/0x810 [ 75.768109][ T6733] usb_disconnect+0x2e2/0x9a0 [ 75.770047][ T6733] usb_disconnect+0x28e/0x9a0 [ 75.772096][ T6733] usb_remove_hcd.cold+0x1ae/0x401 [ 75.774288][ T6733] dummy_hcd_remove+0x109/0x1e0 [ 75.776395][ T6733] platform_remove+0x5f/0x80 [ 75.778210][ T6733] device_remove+0xcb/0x180 [ 75.780112][ T6733] device_release_driver_internal+0x44e/0x620 [ 75.782650][ T6733] unbind_store+0xf8/0x110 [ 75.784577][ T6733] drv_attr_store+0x74/0xb0 [ 75.786533][ T6733] sysfs_kf_write+0xf2/0x150 [ 75.788425][ T6733] kernfs_fop_write_iter+0x3e0/0x5f0 [ 75.790576][ T6733] vfs_write+0x6ac/0x1050 [ 75.792418][ T6733] ksys_write+0x12a/0x250 [ 75.794246][ T6733] do_syscall_64+0x115/0x870 [ 75.796217][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.798674][ T6733] [ 75.799811][ T6733] The buggy address belongs to the object at ffff8880276dc000 [ 75.799811][ T6733] which belongs to the cache kmalloc-4k of size 4096 [ 75.805561][ T6733] The buggy address is located 848 bytes inside of [ 75.805561][ T6733] freed 4096-byte region [ffff8880276dc000, ffff8880276dd000) [ 75.811116][ T6733] [ 75.812136][ T6733] The buggy address belongs to the physical page: [ 75.814790][ T6733] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x276d8 [ 75.818244][ T6733] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 75.821794][ T6733] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 75.824832][ T6733] page_type: f5(slab) [ 75.826423][ T6733] raw: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 75.829871][ T6733] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 75.833425][ T6733] head: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 75.837017][ T6733] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 75.840545][ T6733] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 75.844079][ T6733] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 75.847525][ T6733] page dumped because: kasan: bad access detected [ 75.850079][ T6733] page_owner tracks the page as allocated [ 75.852402][ T6733] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17877668830, free_ts 17812958259 [ 75.859608][ T6733] post_alloc_hook+0xfd/0x120 [ 75.861072][ T6733] get_page_from_freelist+0xf48/0x3530 [ 75.862736][ T6733] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 75.864616][ T6733] new_slab+0xa2/0x640 [ 75.866139][ T6733] refill_objects+0xe3/0x410 [ 75.867893][ T6733] __pcs_replace_empty_main+0x376/0x680 [ 75.869942][ T6733] __kmalloc_cache_noprof+0x479/0x6c0 [ 75.872066][ T6733] kobject_uevent_env+0x263/0x18b0 [ 75.874065][ T6733] param_sysfs_builtin_init+0x378/0x3f0 [ 75.876301][ T6733] do_one_initcall+0x11d/0x700 [ 75.878176][ T6733] kernel_init_freeable+0x6ea/0x7b0 [ 75.880136][ T6733] kernel_init+0x1f/0x1e0 [ 75.881787][ T6733] ret_from_fork+0x72b/0xd50 [ 75.883580][ T6733] ret_from_fork_asm+0x1a/0x30 [ 75.885413][ T6733] page last free pid 1 tgid 1 stack trace: [ 75.887555][ T6733] __free_frozen_pages+0x79f/0x1090 [ 75.889570][ T6733] qlist_free_all+0x47/0xf0 [ 75.891384][ T6733] kasan_quarantine_reduce+0x1a0/0x1f0 [ 75.893505][ T6733] __kasan_slab_alloc+0x69/0x90 [ 75.895425][ T6733] __kmalloc_cache_noprof+0x265/0x6c0 [ 75.897479][ T6733] kobject_uevent_env+0x263/0x18b0 [ 75.899490][ T6733] param_sysfs_builtin_init+0x378/0x3f0 [ 75.901690][ T6733] do_one_initcall+0x11d/0x700 [ 75.903583][ T6733] kernel_init_freeable+0x6ea/0x7b0 [ 75.905616][ T6733] kernel_init+0x1f/0x1e0 [ 75.907321][ T6733] ret_from_fork+0x72b/0xd50 [ 75.909103][ T6733] ret_from_fork_asm+0x1a/0x30 [ 75.910897][ T6733] [ 75.911685][ T6733] Memory state around the buggy address: [ 75.913433][ T6733] ffff8880276dc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.915942][ T6733] ffff8880276dc280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.918509][ T6733] >ffff8880276dc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.921436][ T6733] ^ [ 75.924033][ T6733] ffff8880276dc380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.927054][ T6733] ffff8880276dc400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.929821][ T6733] ================================================================== [ 75.934673][ T6733] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.937468][ T6733] CPU: 3 UID: 0 PID: 6733 Comm: syz.1.215 Not tainted syzkaller #0 PREEMPT(full) [ 75.940844][ T6733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.944377][ T6733] Call Trace: [ 75.945576][ T6733] [ 75.946623][ T6733] dump_stack_lvl+0x100/0x190 [ 75.948267][ T6733] vpanic+0x552/0x970 [ 75.949660][ T6733] ? __pfx_vpanic+0x10/0x10 [ 75.951412][ T6733] ? mark_held_locks+0x40/0x70 [ 75.953261][ T6733] ? snd_usb_midi_v2_free+0x52d/0x670 [ 75.955302][ T6733] panic+0xd1/0xe0 [ 75.956698][ T6733] ? __pfx_panic+0x10/0x10 [ 75.958346][ T6733] ? snd_usb_midi_v2_free+0x52d/0x670 [ 75.960318][ T6733] ? preempt_schedule_common+0x42/0xc0 [ 75.962347][ T6733] ? check_panic_on_warn+0x1f/0x90 [ 75.964262][ T6733] check_panic_on_warn.cold+0x19/0x34 [ 75.966293][ T6733] end_report.part.0+0x3a/0x90 [ 75.968174][ T6733] kasan_report.cold+0xe/0x18 [ 75.970024][ T6733] ? snd_usb_midi_v2_free+0x52d/0x670 [ 75.972098][ T6733] snd_usb_midi_v2_free+0x52d/0x670 [ 75.974089][ T6733] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 75.976128][ T6733] snd_usb_midi_v2_free_all+0x85/0xe0 [ 75.978195][ T6733] snd_usb_audio_free+0x4e/0x120 [ 75.980018][ T6733] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 75.982110][ T6733] release_card_device+0xb2/0x1a0 [ 75.983961][ T6733] ? __pfx_release_card_device+0x10/0x10 [ 75.986027][ T6733] device_release+0xd2/0x270 [ 75.987830][ T6733] kobject_put+0x1f7/0x640 [ 75.989551][ T6733] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 75.991809][ T6733] put_device+0x1f/0x30 [ 75.993428][ T6733] snd_card_free_when_closed+0x2b/0x40 [ 75.995434][ T6733] usb_audio_disconnect+0x210/0x680 [ 75.997342][ T6733] usb_unbind_interface+0x1dd/0x9e0 [ 75.999363][ T6733] ? __pfx_usb_unbind_interface+0x10/0x10 [ 76.001440][ T6733] device_remove+0x12a/0x180 [ 76.003218][ T6733] device_release_driver_internal+0x44e/0x620 [ 76.005572][ T6733] bus_remove_device+0x2bc/0x560 [ 76.007380][ T6733] ? __pfx_bus_remove_device+0x10/0x10 [ 76.009416][ T6733] ? __pfx_device_remove_attrs+0x10/0x10 [ 76.011602][ T6733] device_del+0x376/0x9b0 [ 76.013232][ T6733] ? __pfx_device_del+0x10/0x10 [ 76.015004][ T6733] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 76.017106][ T6733] usb_disable_device+0x367/0x810 [ 76.018920][ T6733] ? mark_held_locks+0x40/0x70 [ 76.020744][ T6733] usb_disconnect+0x2e2/0x9a0 [ 76.022587][ T6733] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.024524][ T6733] usb_disconnect+0x28e/0x9a0 [ 76.026276][ T6733] usb_remove_hcd.cold+0x1ae/0x401 [ 76.028274][ T6733] ? __pfx_usb_remove_hcd+0x10/0x10 [ 76.030223][ T6733] dummy_hcd_remove+0x109/0x1e0 [ 76.032087][ T6733] ? __pfx_dummy_hcd_remove+0x10/0x10 [ 76.034199][ T6733] platform_remove+0x5f/0x80 [ 76.035993][ T6733] ? __pfx_platform_remove+0x10/0x10 [ 76.038024][ T6733] device_remove+0xcb/0x180 [ 76.039744][ T6733] device_release_driver_internal+0x44e/0x620 [ 76.042128][ T6733] unbind_store+0xf8/0x110 [ 76.043906][ T6733] ? __pfx_unbind_store+0x10/0x10 [ 76.045852][ T6733] drv_attr_store+0x74/0xb0 [ 76.047613][ T6733] ? __pfx_drv_attr_store+0x10/0x10 [ 76.049603][ T6733] sysfs_kf_write+0xf2/0x150 [ 76.051344][ T6733] kernfs_fop_write_iter+0x3e0/0x5f0 [ 76.053337][ T6733] ? __pfx_sysfs_kf_write+0x10/0x10 [ 76.055374][ T6733] vfs_write+0x6ac/0x1050 [ 76.056991][ T6733] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 76.059173][ T6733] ? __pfx_vfs_write+0x10/0x10 [ 76.060930][ T6733] ksys_write+0x12a/0x250 [ 76.062500][ T6733] ? __pfx_ksys_write+0x10/0x10 [ 76.064309][ T6733] do_syscall_64+0x115/0x870 [ 76.066030][ T6733] ? clear_bhb_loop+0x40/0x90 [ 76.067882][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.070091][ T6733] RIP: 0033:0x7f024b99e0d9 [ 76.071743][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.078682][ T6733] RSP: 002b:00007f024c7e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.081774][ T6733] RAX: ffffffffffffffda RBX: 00007f024bc26090 RCX: 00007f024b99e0d9 [ 76.084784][ T6733] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000006 [ 76.087779][ T6733] RBP: 00007f024ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 76.090798][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.093674][ T6733] R13: 00007f024bc26128 R14: 00007f024bc26090 R15: 00007ffebf3e6308 [ 76.096693][ T6733] [ 76.098536][ T6733] Kernel Offset: disabled [ 76.100157][ T6733] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:49:32 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000007 RCX=ffffffff8286fd6e RDX=ffff888024614a80 RSI=ffffffff8286fdd2 RDI=ffff888024614a80 RBP=ffff88806fe52000 RSP=ffffc90003c073d8 R8 =0000000000000006 R9 =0000000000001000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff820a650a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2b53f4d000 CR3=0000000052130000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7864696f6972702e 6f6972705f74656e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd75d49886 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd75d49886 00007ffd75d4988c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f059f635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f059f635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f059f6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f059f635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000b80 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000b80 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801eaea540 RSI=ffffffff81b57ece RDI=ffff88801eaea540 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f05a0457ff8 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd75d49886 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd75d49886 00007ffd75d4988c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f059f635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f059f635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f059f6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f059f635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f059f7f25f8 00007f059f7f25c8 00007f059f7f2600 00007f059f7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a306b5 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc90004126fd8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b6fe228 R15=ffffffff85a30650 RIP=ffffffff85a306df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f024c7e16c0 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f05a0436ff8 CR3=000000002a6c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000e0080000 Opmask01=0000000000008211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 000055bbadd13140 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a85f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326c8dea35483 737326cd85650059 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e3f1e6698670fe3 7373737628c9ae7e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002736376e69 3230706900393632 2f68637461772f76 6564752f6e75722f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 000055bbadd13140 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bbadcfcc40 000055bbadd0f6f0 000055bbadd1a810 000055bbadd8b3b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bbadd03c50 000055bbadd06690 000055bbadd07f40 000055bbadd10c80 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bbadd18eb0 000055bbadd17500 000055bbadd0d8f0 000055bbadd0fe70 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bbadcfe7b0 000055bbadd00f60 000055bbade31dc0 000055bbadd1d140 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000000e3 RBX=ffffc90006b23818 RCX=ffffffff86f80b1d RDX=1ffff110054c1523 RSI=ffffffff86f80b2a RDI=ffff88802a60a92a RBP=00000000000000e3 RSP=ffffc90003a66e68 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc900000a9e20 R13=dffffc0000000000 R14=00000000ab10007c R15=ffff88802b184000 RIP=ffffffff86f80bcc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fea4a155300 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcac5c6cdc CR3=000000002611f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=3011581a85dc2a81 d21a12ef5d2919cb 3011581a85dc2a81 d21a12ef5d2919cb 3011581a85dc2a81 d21a12ef5d2919cb 3011581a85dc2a81 d21a12ef5d2919cb ZMM18=dc47a63da1ebdf1c d5a4eccc679c3ba7 dc47a63da1ebdf1c d5a4eccc679c3ba7 dc47a63da1ebdf1c d5a4eccc679c3ba7 dc47a63da1ebdf1c d5a4eccc679c3ba7 ZMM19=c004000000000000 0000000000000005 c004000000000000 0000000000000004 c004000000000000 0000000000000003 c004000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806060101f03810 000004028e080004 9e08000100000208 060a0172f4020800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3003208208002803 059ccc0800200302 8208001803020800 1003060800080303 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e0a6080000030008 000810003c100006 0273fe01a010000b 8004001000060002 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff0401a0 0300080001980300 0800019003000800 0188030100000408 ZMM25=7f011d4d7f011d4d 7f011d4d7f011d4d 7f011d4d7f011d4d 7f011d4d7f011d4d 7f011d4d7f011d4d 7f011d4d7f011d4d 7f011d4d7f011d4d 7f011d4d7f011d4d ZMM26=8fc4bd7c8fc4bd7c 8fc4bd7c8fc4bd7c 8fc4bd7c8fc4bd7c 8fc4bd7c8fc4bd7c 8fc4bd7c8fc4bd7c 8fc4bd7c8fc4bd7c 8fc4bd7c8fc4bd7c 8fc4bd7c8fc4bd7c ZMM27=9e3505199e350519 9e3505199e350519 9e3505199e350519 9e3505199e350519 9e3505199e350519 9e3505199e350519 9e3505199e350519 9e3505199e350519 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4902000049020000 4902000049020000 4902000049020000 4902000049020000 4902000049020000 4902000049020000 4902000049020000 4902000049020000