last executing test programs: 4.820192927s ago: executing program 0 (id=268): syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @loopback, @multicast1}, "000022eb00000000"}}}}}, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@empty}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) 4.819526854s ago: executing program 0 (id=269): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20002, 0x2}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xb3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000280)) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x8402, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) 4.727970901s ago: executing program 0 (id=270): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x80c0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffff, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 4.27703223s ago: executing program 0 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8080, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x9, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x9, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x280, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x7fd}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x80000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x7}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x400}, {0x8, 0x15, 0x401}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0xfffffffe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x8eb}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x88}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4800}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xfffffffa}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xe}}]}, 0x280}, 0x1, 0x0, 0x0, 0x4}, 0x58) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x76) (async) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x76) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) (async) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 3.889656205s ago: executing program 1 (id=280): r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/38) 3.788486379s ago: executing program 1 (id=281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000206010800000000000000000700000805000100060000000900020073797a3000000000180007800c00018008000140ac1e0001080008"], 0x40}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xe3, 0x8}, 0xc) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fremovexattr(r4, &(0x7f0000000100)=@known='security.selinux\x00') syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xf, 0x800, 0x4, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x40, 0xfa, 0x200}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x200, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r6, 0x0) socket$packet(0x11, 0x5, 0x300) r7 = socket(0x1e, 0x805, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x1e8, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7}}]}}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @qdisc_kind_options=@q_red={{0x8}, {0xfffffd66, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3, 0x80000000, 0xca, 0x1e, 0x3f, 0x9, 0x7}}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x8}}, @TCA_RED_PARMS={0x14, 0x1, {0x10001, 0x8, 0x4, 0x5, 0x1f, 0x0, 0x2}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x1}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7, 0xcffa, 0x7fff, 0x0, 0x7, 0x8, 0x2}}, {0x8, 0x2, [0x3ff, 0x400]}}]}]}, 0x1e8}}, 0x0) accept4$tipc(r6, 0x0, 0x0, 0x80800) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) write(r5, &(0x7f00000001c0)='0 1 4\x00', 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r10, &(0x7f0000000340)={0x0, 0xfffffffffffffedc, &(0x7f00000006c0)={&(0x7f0000000600)={0x3c, r11, 0x603, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x10) close(r5) 2.920059173s ago: executing program 1 (id=292): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000069000001000000000000000000000000000000000800010002000000457b326f0cb5126c153bf19adb40d8f131184af5412f59de63de8e49e27a7226c676685776ff3d46c93993da52975ea31697d1e1123b46bbd1727057a97f6b3ac043795b4196e3d2b0364083d8939242c44ddd17f037c0e11fe70396ddef2d1d70e93303adccaeeb971fd3277346629f5d25004b5fedc0c4f739f68af8a753e99c25689e0dac6779b788327524208d6212daa24c949f4eaafa21d8ccebc1e5dffbb11202526dc028ce6ddcc74006000000000000000507bb5133e92f5bec4db5bc01fc24ef6c5977a3d3d22750d3817bce54"], 0x20}}, 0x0) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f00000003c0)={0xcc, 0x0, 0x1}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000100)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.820338575s ago: executing program 1 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09000000000000002c0012800e000400000000000000746170000000000000000000000000000500000d000600002000"/60], 0x54}}, 0x0) 2.76617713s ago: executing program 1 (id=296): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)={'filter\x00', 0x278, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/632}, &(0x7f0000000300)=0x2a0) 2.710212552s ago: executing program 1 (id=297): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`\xcd4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000580)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.489861504s ago: executing program 2 (id=308): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0xb, 0x4) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000001080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x101, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000007060500000000000000000001000002050001000700000007e7acc598b886f8e4160d84460cf25784c1e7f9c7c84cebb7f12aa508b9a5e0e1bbd546aeb4e3466ffe15332317ba847cc876297a11356a7c5813ec33f2a7e8d285379c18e1d9f9fb0258110c5e2ce946bd598de85706cdbbb069690ba96de8f7e759b2df85ea419abf99431d06a782489c3cf6802ab2c1e17ee89941473eb6953fc56d9f1dfc05157e79f2fe8cb88a812db6468d462816890f161b300c7a541d39ab8c964c4dc89e50a7a999c32c4d3419baee0d40b86745ca4322b9"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.050093312s ago: executing program 2 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='sys_link/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='sys_link/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) lseek(r1, 0x40, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc041}, 0xc, &(0x7f0000001280)={&(0x7f0000001000)={0x254, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x240, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xed, 0x5, "bc8d26c389b4868842c2f40b859c83bb88e8a6ac74ef7fdbf21695995f4ff5cf58518e14ec3fc02d82409bdc9a12380afff0dec5400dafd8affefedd1768c61cfceec0ba7df1e719f425c64bb7274b994ef697a85dfbb0f57e352de3d62b4603c01ad56578d523584c2afd52733c5a29a4bd15db6822e391084333e4ed00602f30cf85828c8fffab5b3b95617c877fb13669165bb2f9b45b5db53cbb4543e5899a53c4b4a6b97cd68a02e0f31e0a24a5b047999ce3ef8a0f8a78fa0d8cf278c93694335c847391aef46ad5a1e1875c842f7c308da98d132fac7caacbb9240e986b80acdde396ceaa38"}, @ETHTOOL_A_BITSET_VALUE={0xae, 0x4, "d3547bee1205e3db6cacb3d2ba3d1de0af514608865acf7865fb52916f97e0de8677f1501a457cf22aaa2b43f5f54d9644e2968e9990e36413a2196aa52aab6ab4bb3d917efd7a39dc857602c9faa0e7e96c9ea5bda090794501860ce7a0c3d2a077343507447dbdbe9ca043b9398f880bd8051a854d226ee7cce3317765c6842c199abac0c80fd8fd9bb4aff7af3c41ece26d488af53d135e7fae80f8b4629e99bf0c55043f52ea1a18"}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "903e3d6486eddb966067c3337ce2a203f041201ed98895a172fefcaa9d11e33ff213801f1af9a66c355a0062d24fa9343affe7d86ef276499939b978e885c8f8e209a7f5cd342e6c6be55f254a61d15de032c89fc43ca95f9f43a75659f6e5ce4a8f9ef466ef8960e108c75d54fba1873f65ee5acaab3de3bbb06f4c51e34682345d35ced5a9c3e7aca90296ba8b3857be9c4261fa9b07a6"}]}]}, 0x254}}, 0x40d0) write(r1, &(0x7f0000000640)="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", 0x109) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0xf4240) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, 0x0, 0x0}) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000400000)={0x0, &(0x7f0000400040)=[@code={0xa, 0x1e, {"b80f000000bfe80300000f01c1"}}], 0x1e}) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000fc0)={0x0, &(0x7f0000000e00)=[@nested_amd_vmsave={0x183, 0x18, 0x21}, @rdmsr={0x66, 0x18, {0x9b0}}, @nested_load_syzos={0x136, 0x50, {0x2, 0xfd, [@enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}]}}, @wr_crn={0x67, 0x20, {0x2, 0xf0}}, @nested_vmresume={0x130, 0x18}, @code={0xa, 0x78, {"c74424005cdbdfcec744240200000000c7442406000000000f011424c4c2e18e58f0f2470f5dfd660f38f5b02d5cec20b9800000c00f3235004000000f3066bad004ecb805000000b9005000000f01c166ba420066b8fd1866ef460fc71b660f38818d6d1a9e3e"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6822, 0x400, 0x80000001, 0x40}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x190}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys_link/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000100)) write(r5, &(0x7f0000000900)='dwc2-pci\x00', 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x4000000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_link/bus/pci/drivers/dwc2-pci/bind\x00', 0x2, 0x98) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x4, &(0x7f0000000a80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) read(r8, &(0x7f0000000b40)=""/255, 0xff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000580)="ddb6d048e9c35688177609b4ebd1", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write(r7, &(0x7f0000000080)='4', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='sys_link/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0) write(r9, &(0x7f0000000b00)='0000:00:02.0\x00', 0xd) 687.828031ms ago: executing program 3 (id=316): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4c, 0x8, 0x17, 0x1b, 0xfe, 0xb, 0x4, 0x1, 0xd, 0x4, [0x4000000c, 0x10083, 0x1000000, 0x2, 0x2eea0afb, 0xb, 0x4000004d, 0xb9ad]}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f00000000c0)) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "a9d2bef95a4d26c618abe6c962b582cf72b7b4e665b9f2e35a455c315dc31664a7f666e087997bbc7c595538e71494ebf8926f58ae3e07675b41af9fe1b3a7bec8"}}]}, 0x17c}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000040)=@id, 0x10) shutdown(r6, 0x2) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0xa, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbff250600e80008000a001100000025837850574a910b9a75a1fff7c341eeedb7d090c25dcd8210cbd3700014ce8af810051d1e89758955fab98601d9a60636608a9a93645aaf014e42e4be9be54e0b64f67e6a1f1cf10d660aee4ba59ae0a95a4d597e707dcbb615"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={'\x00', 0xff, 0x7, 0x3, 0x40008, 0x1, "ff0000c8e29b15e5a8c8c7ffff00", "0400", "1000", "0001ffff", ["50d5c2a7c5ae5cade40000b6", "808e88e2e9ffffffffff0200", "030a0038fdff000000ed00", "001bf0ffffff000000000008"]}) acct(&(0x7f0000000040)='./file0\x00') 579.954161ms ago: executing program 3 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28079}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0xa03}, @IFLA_ADDRESS={0xa, 0x1, @random="087934e9cff9"}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000) 579.646013ms ago: executing program 3 (id=318): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x10, 0x2, 0x2, 0x20, @private2, @loopback, 0x20, 0x40, 0x1, 0x4}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x615e8d2882184ded}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x78, '\x00', r3, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd5ce, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 499.955118ms ago: executing program 3 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) (async) close(0x3) open_by_handle_at(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) (async) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) 499.643634ms ago: executing program 2 (id=320): r0 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000740)='C^\xfa\xffn\xa1\xc1\xb4\xb8127.0.aM1,:/export\x18\xde\x16\xbe\xa4\x92\xff\xbd\x9d\xb4\xe3\xbe\xcd\x90\xbe\t4\xa1_\xc9\x06\xe4G\xa5\xce0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) write$P9_RAUTH(r4, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x89, 0x3, 0x8}}, 0x14) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r3}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='addr\x00', &(0x7f0000000300)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 410.292906ms ago: executing program 2 (id=321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) (rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000800)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x4f}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x2a, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000100)={r2, 0x0, r5, 0x4, 0x4007, 0x9, 0x7, 0x5, 0x4, 0xe3}) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x40000, 0x111) read$watch_queue(r6, &(0x7f0000000340)=""/155, 0x9b) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x40010, r6, 0x9) (async) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=[{}], 0x0, 0x0, '\x00', 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7, 0x9, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x2, 0x4}) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r12 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r12, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000840)=[0x0, 0x0], 0x0, 0x2b, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f00000006c0)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r11, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r8], 0x1, r15, r16, 0x3e, 0x0, 0x2, 0x1, {0xac79, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x4b, 0x412f, 0xe154, 0x20, 0x7, 0xa2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000780)={&(0x7f0000000880)=[0x0, 0x0, 0x0, r9, 0x0, r14, r17, r7], 0x8, r10, r5, 0x6, 0xffff6524, 0x7ff, 0x0, {0x29, 0xefd0, 0x7b20, 0xd4, 0x7fff, 0x9, 0x7, 0x7, 0x3ff, 0xb9d0, 0x8, 0x3, 0x8, 0xe6, "3029dbe0a097d6eb112bf4d42be5c774b91300"}}) 340.031488ms ago: executing program 2 (id=322): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 278.209786ms ago: executing program 3 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="d6d4384b386066b101c0fbcefc2488650d65e6f94644bd189c5fdeb0a361ad17f00cb6f794f22ee11fe69efec58f316d78e928a5a15523a666e9fee73041dd9da56e87d89c6418958207658012aede90b443469b995ce53d4cf497473bade389cb709a303641332a7fc74e48b2b478c55158adf7f9cb5e061a4211c10a5ff036e7ed74563722975306d03753af5c5d6d5b696850a8a95327fbcf1a708cc8dc9478980b7f42", @ANYRESDEC=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x8000) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 229.027852ms ago: executing program 3 (id=324): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x0, 0x0, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004011}, 0x40000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004011}, 0x40000) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c", 0x5b}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa4"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c", 0xf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12e", 0x63}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c", 0x5b}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa4"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c", 0xf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12e", 0x63}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r6 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r6, 0x0, 0x0, 0x800) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 169.960861ms ago: executing program 2 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) syz_usb_disconnect(r2) r4 = dup2(r3, r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r5, r4, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000100)={"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"}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r7, 0x9000aecf, &(0x7f0000ffd000/0x1000)=nil) ioctl$KVM_RUN(r6, 0xae80, 0x0) 100.011381ms ago: executing program 0 (id=326): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e20, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={r6}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c01000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000003000000000000000000000000000000ffffffffffffffff000000000000002000000000000000000100000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000008400050000000000000000000000000000000000000004d36c0000000200000000000000000000000000000000000000073500000103f900050000000c00000000000000007c0101000000000000000000000000000004d36c000100000a00000000000000000000000000ffffac2914aa033500000200000009000000470200000f000000"], 0x13c}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) r9 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r9, 0x40084146, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x20044000}, 0x10000040) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x40, 0x0) 0s ago: executing program 0 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) (async, rerun: 64) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) write(r0, &(0x7f0000000140)='1', 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (rerun: 64) kernel console output (not intermixed with test programs): [ 38.001905][ T42] audit: type=1400 audit(1785279524.216:114): avc: denied { rlimitinh } for pid=5638 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.007858][ T42] audit: type=1400 audit(1785279524.216:115): avc: denied { siginh } for pid=5638 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:47484' (ED25519) to the list of known hosts. [ 38.870920][ T42] audit: type=1400 audit(1785279525.106:116): avc: denied { name_bind } for pid=5645 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.904012][ T42] audit: type=1400 audit(1785279525.136:117): avc: denied { execute } for pid=5646 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 38.910798][ T42] audit: type=1400 audit(1785279525.136:118): avc: denied { execute_no_trans } for pid=5646 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.665040][ T42] audit: type=1400 audit(1785279525.896:119): avc: denied { write } for pid=5647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.719966][ T42] audit: type=1400 audit(1785279525.956:120): avc: denied { write } for pid=5650 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.266316][ T5646] cgroup: Unknown subsys name 'net' [ 41.381453][ T5646] cgroup: Unknown subsys name 'cpuset' [ 41.387711][ T5646] cgroup: Unknown subsys name 'rlimit' [ 41.638085][ T5714] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.469897][ T5646] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.208325][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 46.208338][ T42] audit: type=1400 audit(1785279532.446:162): avc: denied { execmem } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.394612][ T42] audit: type=1400 audit(1785279532.626:163): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.414615][ T42] audit: type=1400 audit(1785279532.626:164): avc: denied { read write } for pid=5732 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.415339][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.425097][ T42] audit: type=1400 audit(1785279532.626:165): avc: denied { open } for pid=5732 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.429908][ T5734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.437266][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.439470][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.440334][ T42] audit: type=1400 audit(1785279532.636:166): avc: denied { ioctl } for pid=5732 comm="syz-executor" path="socket:[6743]" dev="sockfs" ino=6743 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.443209][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.445231][ T5734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.447906][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.448556][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.449164][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.449425][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.454906][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.457160][ T42] audit: type=1400 audit(1785279532.686:167): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.458361][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.459659][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.460637][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.462549][ T42] audit: type=1400 audit(1785279532.686:168): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.463262][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.463776][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.465390][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.467853][ T42] audit: type=1400 audit(1785279532.696:169): avc: denied { mounton } for pid=5733 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.471120][ T5734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.478163][ T42] audit: type=1400 audit(1785279532.696:170): avc: denied { module_request } for pid=5733 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.488309][ T5734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.495785][ T42] audit: type=1400 audit(1785279532.716:171): avc: denied { sys_module } for pid=5733 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.502833][ T5734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.116641][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.119678][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.122789][ T5732] bridge_slave_0: entered allmulticast mode [ 47.126316][ T5732] bridge_slave_0: entered promiscuous mode [ 47.131104][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.133978][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.136881][ T5732] bridge_slave_1: entered allmulticast mode [ 47.140933][ T5732] bridge_slave_1: entered promiscuous mode [ 47.206502][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.210001][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.212340][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.214670][ T5733] bridge_slave_0: entered allmulticast mode [ 47.217380][ T5733] bridge_slave_0: entered promiscuous mode [ 47.232072][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.241325][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.244109][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.247103][ T5733] bridge_slave_1: entered allmulticast mode [ 47.250860][ T5733] bridge_slave_1: entered promiscuous mode [ 47.283874][ T5732] team0: Port device team_slave_0 added [ 47.310213][ T5732] team0: Port device team_slave_1 added [ 47.320358][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.323164][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.325607][ T5735] bridge_slave_0: entered allmulticast mode [ 47.328845][ T5735] bridge_slave_0: entered promiscuous mode [ 47.334415][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.364740][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.368312][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.371434][ T5735] bridge_slave_1: entered allmulticast mode [ 47.374379][ T5735] bridge_slave_1: entered promiscuous mode [ 47.378478][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.382027][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.384350][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.392724][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.423777][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.426247][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.434546][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.448437][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.450895][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.453248][ T5747] bridge_slave_0: entered allmulticast mode [ 47.456011][ T5747] bridge_slave_0: entered promiscuous mode [ 47.477219][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.479681][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.482046][ T5747] bridge_slave_1: entered allmulticast mode [ 47.485131][ T5747] bridge_slave_1: entered promiscuous mode [ 47.490051][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.494142][ T5733] team0: Port device team_slave_0 added [ 47.497740][ T5733] team0: Port device team_slave_1 added [ 47.525222][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.538727][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.541545][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.552287][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.580629][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.583461][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.593170][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.600755][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.612480][ T5735] team0: Port device team_slave_0 added [ 47.620551][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.629341][ T5732] hsr_slave_0: entered promiscuous mode [ 47.632326][ T5732] hsr_slave_1: entered promiscuous mode [ 47.637216][ T5735] team0: Port device team_slave_1 added [ 47.679359][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.682024][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.691771][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.702625][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.705334][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.714830][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.722203][ T5747] team0: Port device team_slave_0 added [ 47.726891][ T5747] team0: Port device team_slave_1 added [ 47.765330][ T5733] hsr_slave_0: entered promiscuous mode [ 47.768429][ T5733] hsr_slave_1: entered promiscuous mode [ 47.770476][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 47.772308][ T5733] Cannot create hsr debugfs directory [ 47.780616][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.782906][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.790947][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.815204][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.817400][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.824896][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.854106][ T5735] hsr_slave_0: entered promiscuous mode [ 47.857564][ T5735] hsr_slave_1: entered promiscuous mode [ 47.860361][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 47.862627][ T5735] Cannot create hsr debugfs directory [ 47.989311][ T5747] hsr_slave_0: entered promiscuous mode [ 47.991763][ T5747] hsr_slave_1: entered promiscuous mode [ 47.993857][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 47.995674][ T5747] Cannot create hsr debugfs directory [ 48.150465][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.156889][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.159816][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.163456][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.177761][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.182555][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.199168][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.205015][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.256195][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.260953][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.263710][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.267970][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.270740][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.275093][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.281914][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.289001][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.346997][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.352364][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.358117][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.363393][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.368065][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.373230][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.376644][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.382023][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.439419][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.445950][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.453959][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.460264][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.464009][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.471496][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.476327][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.480526][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.510699][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.517690][ T5734] Bluetooth: hci0: command tx timeout [ 48.517726][ T5743] Bluetooth: hci2: command tx timeout [ 48.520379][ T5734] Bluetooth: hci1: command tx timeout [ 48.556087][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.569732][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.580384][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.583030][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.597423][ T5734] Bluetooth: hci3: command tx timeout [ 48.600373][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.602708][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.610555][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.614523][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.630836][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.633744][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.650365][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.652714][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.665934][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.680494][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.682822][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.697128][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.700222][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.705329][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.750033][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.768583][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.771451][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.784106][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.786372][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.035714][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.089692][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.092325][ T5732] veth0_vlan: entered promiscuous mode [ 49.103076][ T5732] veth1_vlan: entered promiscuous mode [ 49.118297][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.135815][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.170989][ T5732] veth0_macvtap: entered promiscuous mode [ 49.192231][ T5732] veth1_macvtap: entered promiscuous mode [ 49.198867][ T5747] veth0_vlan: entered promiscuous mode [ 49.205840][ T5735] veth0_vlan: entered promiscuous mode [ 49.228716][ T5733] veth0_vlan: entered promiscuous mode [ 49.232714][ T5747] veth1_vlan: entered promiscuous mode [ 49.241240][ T5735] veth1_vlan: entered promiscuous mode [ 49.250143][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.262061][ T5733] veth1_vlan: entered promiscuous mode [ 49.271031][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.295208][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.299475][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.306101][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.311020][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.349534][ T5735] veth0_macvtap: entered promiscuous mode [ 49.353229][ T5747] veth0_macvtap: entered promiscuous mode [ 49.369748][ T5733] veth0_macvtap: entered promiscuous mode [ 49.373865][ T5735] veth1_macvtap: entered promiscuous mode [ 49.379704][ T5747] veth1_macvtap: entered promiscuous mode [ 49.410240][ T5733] veth1_macvtap: entered promiscuous mode [ 49.430643][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.434847][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.444654][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.466645][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.475360][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.484614][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.489757][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.495384][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.498816][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.499055][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.502979][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.508284][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.518788][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.524097][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.533701][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.544030][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.548512][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.564347][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.568893][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.572236][ T5732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.578069][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.582113][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.593576][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.650942][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.655714][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.688728][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.694586][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.720685][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.725223][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.744866][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.748152][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.781154][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.785703][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.821464][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.826733][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.972492][ T5902] lo speed is unknown, defaulting to 1000 [ 49.974955][ T5902] lo speed is unknown, defaulting to 1000 [ 49.979109][ T5902] lo speed is unknown, defaulting to 1000 [ 49.981752][ T5902] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 49.987660][ T5902] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 49.994403][ T5902] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 50.002431][ T5902] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.012811][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 50.016365][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 50.023016][ T5902] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 50.073993][ T5902] lo speed is unknown, defaulting to 1000 [ 50.079523][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 50.095277][ T5913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10'. [ 50.104932][ T5902] lo speed is unknown, defaulting to 1000 [ 50.109134][ T5902] lo speed is unknown, defaulting to 1000 [ 50.113561][ T5902] lo speed is unknown, defaulting to 1000 [ 50.270648][ T5939] affs: No valid root block on device nullb0 [ 50.276923][ T5939] warning: `syz.0.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.279470][ T5935] raw_sendmsg: syz.2.16 forgot to set AF_INET. Fix it! [ 50.309488][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 50.350737][ T5814] IPVS: starting estimator thread 0... [ 50.353858][ T5945] udc usbip-vudc.0: soft-connect without a gadget driver [ 50.384143][ T5958] FAULT_INJECTION: forcing a failure. [ 50.384143][ T5958] name failslab, interval 1, probability 0, space 0, times 1 [ 50.390976][ T5958] CPU: 3 UID: 0 PID: 5958 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 50.391001][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.391012][ T5958] Call Trace: [ 50.391018][ T5958] [ 50.391026][ T5958] dump_stack_lvl+0x100/0x190 [ 50.391055][ T5958] should_fail_ex.cold+0x5/0xa [ 50.391078][ T5958] should_failslab+0xc2/0x120 [ 50.391104][ T5958] __kmalloc_noprof+0xfc/0x820 [ 50.391126][ T5958] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 50.391154][ T5958] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 50.391181][ T5958] genl_family_rcv_msg_doit+0xc7/0x300 [ 50.391204][ T5958] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 50.391233][ T5958] ? bpf_lsm_capable+0x9/0x10 [ 50.391271][ T5958] ? security_capable+0x80/0x260 [ 50.391297][ T5958] ? ns_capable+0xd2/0xf0 [ 50.391321][ T5958] genl_rcv_msg+0x560/0x800 [ 50.391345][ T5958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.391365][ T5958] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 50.391386][ T5958] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 50.391411][ T5958] ? __pfx_nl80211_post_doit+0x10/0x10 [ 50.391441][ T5958] netlink_rcv_skb+0x159/0x420 [ 50.391459][ T5958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.391480][ T5958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 50.391507][ T5958] ? netlink_deliver_tap+0x1ae/0xcc0 [ 50.391563][ T5958] genl_rcv+0x28/0x40 [ 50.391583][ T5958] netlink_unicast+0x585/0x850 [ 50.391604][ T5958] ? __pfx_netlink_unicast+0x10/0x10 [ 50.391622][ T5958] ? __pfx_sock_has_perm+0x10/0x10 [ 50.391651][ T5958] netlink_sendmsg+0x8b0/0xda0 [ 50.391673][ T5958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.391694][ T5958] ? selinux_socket_sendmsg+0x198/0x2f0 [ 50.391724][ T5958] ____sys_sendmsg+0xa4d/0xbe0 [ 50.391751][ T5958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.391771][ T5958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.391809][ T5958] ___sys_sendmsg+0x190/0x1e0 [ 50.391846][ T5958] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.391885][ T5958] ? __lock_acquire+0x49f/0x1a40 [ 50.391910][ T5958] ? get_pid_task+0x106/0x250 [ 50.391965][ T5958] __sys_sendmsg+0x160/0x210 [ 50.391988][ T5958] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.392024][ T5958] do_syscall_64+0x115/0x870 [ 50.392044][ T5958] ? clear_bhb_loop+0x40/0x90 [ 50.392066][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.392084][ T5958] RIP: 0033:0x7fd99c79de99 [ 50.392100][ T5958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.392117][ T5958] RSP: 002b:00007fd99d667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.392146][ T5958] RAX: ffffffffffffffda RBX: 00007fd99ca25fa0 RCX: 00007fd99c79de99 [ 50.392157][ T5958] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000004 [ 50.392168][ T5958] RBP: 00007fd99d667090 R08: 0000000000000000 R09: 0000000000000000 [ 50.392179][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.392189][ T5958] R13: 00007fd99ca26038 R14: 00007fd99ca25fa0 R15: 00007ffd54bf8a88 [ 50.392212][ T5958] [ 50.413277][ T5960] netlink: 'syz.1.26': attribute type 5 has an invalid length. [ 50.467448][ T5952] IPVS: using max 43 ests per chain, 103200 per kthread [ 50.475106][ T5960] ip6erspan0: entered promiscuous mode [ 50.597414][ T5734] Bluetooth: hci1: command tx timeout [ 50.600467][ T5734] Bluetooth: hci2: command tx timeout [ 50.602770][ T5734] Bluetooth: hci0: command tx timeout [ 50.650850][ T5990] ======================================================= [ 50.650850][ T5990] WARNING: The mand mount option has been deprecated and [ 50.650850][ T5990] and is ignored by this kernel. Remove the mand [ 50.650850][ T5990] option from the mount to silence this warning. [ 50.650850][ T5990] ======================================================= [ 50.678052][ T5734] Bluetooth: hci3: command tx timeout [ 50.776836][ T6003] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 50.846194][ T6008] tc_dump_action: action bad kind [ 50.885336][ T6010] FAULT_INJECTION: forcing a failure. [ 50.885336][ T6010] name failslab, interval 1, probability 0, space 0, times 0 [ 50.891714][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 50.891731][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.891738][ T6010] Call Trace: [ 50.891742][ T6010] [ 50.891746][ T6010] dump_stack_lvl+0x100/0x190 [ 50.891765][ T6010] should_fail_ex.cold+0x5/0xa [ 50.891780][ T6010] should_failslab+0xc2/0x120 [ 50.891795][ T6010] __kmalloc_noprof+0xfc/0x820 [ 50.891809][ T6010] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 50.891827][ T6010] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 50.891844][ T6010] genl_family_rcv_msg_doit+0xc7/0x300 [ 50.891858][ T6010] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 50.891875][ T6010] ? bpf_lsm_capable+0x9/0x10 [ 50.891887][ T6010] ? security_capable+0x80/0x260 [ 50.891903][ T6010] ? ns_capable+0xd2/0xf0 [ 50.891918][ T6010] genl_rcv_msg+0x560/0x800 [ 50.891932][ T6010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.891945][ T6010] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 50.891958][ T6010] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 50.891975][ T6010] ? __pfx_nl80211_post_doit+0x10/0x10 [ 50.891993][ T6010] netlink_rcv_skb+0x159/0x420 [ 50.892004][ T6010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.892018][ T6010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 50.892034][ T6010] ? netlink_deliver_tap+0x1ae/0xcc0 [ 50.892053][ T6010] genl_rcv+0x28/0x40 [ 50.892064][ T6010] netlink_unicast+0x585/0x850 [ 50.892077][ T6010] ? __pfx_netlink_unicast+0x10/0x10 [ 50.892088][ T6010] ? __pfx_sock_has_perm+0x10/0x10 [ 50.892106][ T6010] netlink_sendmsg+0x8b0/0xda0 [ 50.892119][ T6010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.892132][ T6010] ? selinux_socket_sendmsg+0x198/0x2f0 [ 50.892150][ T6010] ____sys_sendmsg+0xa4d/0xbe0 [ 50.892167][ T6010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.892179][ T6010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 50.892202][ T6010] ___sys_sendmsg+0x190/0x1e0 [ 50.892221][ T6010] ? __pfx____sys_sendmsg+0x10/0x10 [ 50.892238][ T6010] ? __lock_acquire+0x49f/0x1a40 [ 50.892252][ T6010] ? get_pid_task+0x106/0x250 [ 50.892284][ T6010] __sys_sendmsg+0x160/0x210 [ 50.892298][ T6010] ? __pfx___sys_sendmsg+0x10/0x10 [ 50.892319][ T6010] do_syscall_64+0x115/0x870 [ 50.892331][ T6010] ? clear_bhb_loop+0x40/0x90 [ 50.892345][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.892357][ T6010] RIP: 0033:0x7fd99c79de99 [ 50.892372][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.892382][ T6010] RSP: 002b:00007fd99d667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.892394][ T6010] RAX: ffffffffffffffda RBX: 00007fd99ca25fa0 RCX: 00007fd99c79de99 [ 50.892401][ T6010] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000004 [ 50.892408][ T6010] RBP: 00007fd99d667090 R08: 0000000000000000 R09: 0000000000000000 [ 50.892414][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.892421][ T6010] R13: 00007fd99ca26038 R14: 00007fd99ca25fa0 R15: 00007ffd54bf8a88 [ 50.892434][ T6010] [ 51.032014][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.035695][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.039174][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.042259][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.046026][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.051202][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.053910][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.056346][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.059263][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.062115][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.064777][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.068189][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.071013][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.074001][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.076769][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.080562][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.083626][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.086472][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.089814][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.092820][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.095797][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.099221][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.103388][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.105839][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.108797][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.111994][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.114437][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.116850][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.120188][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.122598][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.124893][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.128155][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.131099][ T6013] qnx4: no qnx4 filesystem (no root dir). [ 51.209807][ T6024] Bluetooth: MGMT ver 1.23 [ 51.223972][ T42] kauditd_printk_skb: 122 callbacks suppressed [ 51.223989][ T42] audit: type=1400 audit(1785279537.456:294): avc: denied { read write } for pid=6025 comm="syz.3.40" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.241475][ T42] audit: type=1400 audit(1785279537.456:295): avc: denied { open } for pid=6025 comm="syz.3.40" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.273065][ T42] audit: type=1400 audit(1785279537.506:296): avc: denied { ioctl } for pid=6027 comm="syz.0.41" path="socket:[7976]" dev="sockfs" ino=7976 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.284818][ T42] audit: type=1400 audit(1785279537.506:297): avc: denied { read } for pid=6027 comm="syz.0.41" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.290043][ T6031] Zero length message leads to an empty skb [ 51.294489][ T42] audit: type=1400 audit(1785279537.506:298): avc: denied { open } for pid=6027 comm="syz.0.41" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.306126][ T42] audit: type=1400 audit(1785279537.506:299): avc: denied { ioctl } for pid=6027 comm="syz.0.41" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.317973][ T42] audit: type=1400 audit(1785279537.506:300): avc: denied { create } for pid=6027 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 51.321565][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.44'. [ 51.326627][ T42] audit: type=1400 audit(1785279537.506:301): avc: denied { write } for pid=6027 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 51.336596][ T42] audit: type=1400 audit(1785279537.546:302): avc: denied { create } for pid=6030 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.381578][ T42] audit: type=1400 audit(1785279537.616:303): avc: denied { bind } for pid=6037 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.558210][ T5884] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.560798][ T5821] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 51.561717][ T6042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6042 comm=syz.2.46 [ 51.570330][ T6042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.46'. [ 51.687247][ T5884] usb 6-1: device descriptor read/64, error -71 [ 51.712929][ T5821] usb 8-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 51.716708][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.720408][ T5821] usb 8-1: Product: syz [ 51.722159][ T5821] usb 8-1: Manufacturer: syz [ 51.724170][ T5821] usb 8-1: SerialNumber: syz [ 51.731637][ T5821] usb 8-1: config 0 descriptor?? [ 51.738443][ T5821] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 51.944121][ T5821] gspca_m5602: Failed to find a sensor [ 51.946121][ T5821] ALi m5602 8-1:0.0: ALi m5602 webcam failed [ 51.948266][ T5884] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 51.954228][ T5821] usb 8-1: USB disconnect, device number 2 [ 52.077274][ T5884] usb 6-1: device descriptor read/64, error -71 [ 52.188350][ T5884] usb usb6-port1: attempt power cycle [ 52.378331][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 52.423000][ T6050] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 52.423790][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.48'. [ 52.471261][ T6053] nfs4: Unknown parameter 'syz' [ 52.537063][ T5884] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 52.567956][ T5884] usb 6-1: device descriptor read/8, error -71 [ 52.587099][ T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 52.677277][ T5734] Bluetooth: hci0: command tx timeout [ 52.677337][ T5740] Bluetooth: hci2: command tx timeout [ 52.679483][ T5743] Bluetooth: hci1: command tx timeout [ 52.702863][ T6061] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 52.705421][ T6061] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.708852][ T6061] vhci_hcd vhci_hcd.0: Device attached [ 52.711864][ T6062] vhci_hcd: unknown pdu 2 [ 52.715144][ T5842] vhci_hcd vhci_hcd.2: stop threads [ 52.717049][ T5842] vhci_hcd vhci_hcd.2: release socket [ 52.720095][ T5842] vhci_hcd vhci_hcd.2: disconnect device [ 52.742910][ T10] usb 8-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 52.746619][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.750168][ T10] usb 8-1: Product: syz [ 52.751934][ T10] usb 8-1: Manufacturer: syz [ 52.753906][ T10] usb 8-1: SerialNumber: syz [ 52.757179][ T5734] Bluetooth: hci3: command tx timeout [ 52.760455][ T10] usb 8-1: config 0 descriptor?? [ 52.766541][ T10] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 52.817061][ T5884] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 52.838502][ T5884] usb 6-1: device descriptor read/8, error -71 [ 52.948391][ T5884] usb usb6-port1: unable to enumerate USB device [ 52.967253][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 52.970181][ T6033] netlink: 'syz.3.43': attribute type 11 has an invalid length. [ 52.972644][ T6033] netlink: 'syz.3.43': attribute type 7 has an invalid length. [ 52.984353][ T10] gspca_m5602: Failed to find a sensor [ 52.989483][ T10] ALi m5602 8-1:0.0: ALi m5602 webcam failed [ 52.996148][ T10] usb 8-1: USB disconnect, device number 3 [ 53.546156][ T6072] process 'syz.0.54' launched './file0' with NULL argv: empty string added [ 53.642942][ T6083] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 53.646117][ T6083] netlink: 'syz.2.57': attribute type 2 has an invalid length. [ 53.967389][ T56] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 54.118447][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 54.121849][ T56] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 54.124459][ T56] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 54.127746][ T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 54.133876][ T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.138223][ T56] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.143932][ T56] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 54.147880][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.307392][ T6111] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 54.323092][ T6114] clocksource: Switched to clocksource acpi_pm [ 54.330677][ T6114] clocksource: Switched to clocksource tsc [ 54.359859][ T56] usb 8-1: usb_control_msg returned -32 [ 54.364718][ T56] usbtmc 8-1:16.0: can't read capabilities [ 54.408175][ T6119] (syz.1.66,6119,1):ocfs2_get_sector:1713 ERROR: status = -5 [ 54.411075][ T6119] (syz.1.66,6119,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 54.413327][ T6119] (syz.1.66,6119,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 54.415964][ T6119] (syz.1.66,6119,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 54.446110][ T6125] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 54.602253][ T6143] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 54.757248][ T5734] Bluetooth: hci2: command tx timeout [ 54.757362][ T5743] Bluetooth: hci0: command tx timeout [ 54.759729][ T5740] Bluetooth: hci1: command tx timeout [ 54.876488][ T6167] capability: warning: `syz.1.79' uses 32-bit capabilities (legacy support in use) [ 54.967700][ T6181] fuse: Bad value for 'fd' [ 55.070890][ T6192] usbtmc 8-1:16.0: usb_clear_halt returned -32 [ 55.107101][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.193193][ T6202] i2c i2c-0: delete_device: Can't parse I2C address [ 55.257221][ T56] usb 7-1: Using ep0 maxpacket: 32 [ 55.260591][ T56] usb 7-1: config 0 has no interfaces? [ 55.263035][ T56] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 55.266522][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.276140][ T5821] usb 8-1: USB disconnect, device number 4 [ 55.287422][ T56] usb 7-1: config 0 descriptor?? [ 55.496702][ T5821] usb 7-1: USB disconnect, device number 2 [ 55.766508][ T6222] gfs2: error -5 reading superblock [ 55.870905][ T6233] syz.3.95 uses obsolete (PF_INET,SOCK_PACKET) [ 55.876224][ T6230] udc usbip-vudc.0: soft-connect without a gadget driver [ 55.906299][ T6237] netlink: 'syz.0.96': attribute type 5 has an invalid length. [ 56.008563][ T6239] afs: Unknown parameter 'Åq¥ÿk' [ 56.096214][ T6249] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.164868][ T6260] __nla_validate_parse: 7 callbacks suppressed [ 56.164887][ T6260] netlink: 60 bytes leftover after parsing attributes in process `syz.1.103'. [ 56.231036][ T42] kauditd_printk_skb: 95 callbacks suppressed [ 56.231047][ T42] audit: type=1400 audit(1785279542.467:399): avc: denied { map_create } for pid=6262 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.239225][ T42] audit: type=1400 audit(1785279542.467:400): avc: denied { prog_load } for pid=6262 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.265455][ T42] audit: type=1400 audit(1785279542.497:401): avc: denied { read } for pid=6264 comm="syz.1.105" name="event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.272855][ T42] audit: type=1400 audit(1785279542.497:402): avc: denied { open } for pid=6264 comm="syz.1.105" path="/dev/input/event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.281758][ T42] audit: type=1400 audit(1785279542.507:403): avc: denied { ioctl } for pid=6264 comm="syz.1.105" path="/dev/input/event1" dev="devtmpfs" ino=943 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.355443][ T6257] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.367330][ T42] audit: type=1400 audit(1785279542.597:404): avc: denied { read } for pid=6272 comm="syz.0.107" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.391343][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 56.395135][ T42] audit: type=1400 audit(1785279542.597:405): avc: denied { open } for pid=6272 comm="syz.0.107" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.402858][ T42] audit: type=1400 audit(1785279542.607:406): avc: denied { ioctl } for pid=6272 comm="syz.0.107" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.451836][ T6257] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.459116][ T42] audit: type=1400 audit(1785279542.697:407): avc: denied { read } for pid=6285 comm="syz.0.111" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.467093][ T42] audit: type=1400 audit(1785279542.697:408): avc: denied { open } for pid=6285 comm="syz.0.111" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.580411][ T6257] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.618101][ T6301] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 56.686072][ T6301] bridge1: entered promiscuous mode [ 56.702049][ T6301] bond1: (slave bridge1): making interface the new active one [ 56.705268][ T6301] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 56.731074][ T6301] bridge2: entered promiscuous mode [ 56.737328][ T6301] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 56.797877][ T5842] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.813128][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 56.871978][ T6333] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 56.875561][ T6333] CPU: 3 UID: 0 PID: 6333 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(full) [ 56.875577][ T6333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.875584][ T6333] Call Trace: [ 56.875590][ T6333] [ 56.875595][ T6333] dump_stack_lvl+0x100/0x190 [ 56.875625][ T6333] sysfs_warn_dup.cold+0x1c/0x28 [ 56.875642][ T6333] sysfs_create_dir_ns+0x24b/0x2b0 [ 56.875670][ T6333] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 56.875688][ T6333] ? find_held_lock+0x2b/0x80 [ 56.875706][ T6333] ? kobject_add_internal+0x25f/0x930 [ 56.875776][ T6333] ? kobject_add_internal+0x25f/0x930 [ 56.875793][ T6333] ? class_dir_child_ns_type+0xd/0x60 [ 56.875817][ T6333] kobject_add_internal+0x2c8/0x930 [ 56.875836][ T6333] kobject_add+0x16a/0x1e0 [ 56.875852][ T6333] ? __pfx_kobject_add+0x10/0x10 [ 56.875869][ T6333] ? get_device_parent+0x1b3/0x4c0 [ 56.875884][ T6333] ? kobject_put+0xb9/0x640 [ 56.875900][ T6333] ? device_add+0xc4d/0x1970 [ 56.875917][ T6333] device_add+0x294/0x1970 [ 56.875933][ T6333] ? lockdep_init_map_type+0x5c/0x250 [ 56.875948][ T6333] ? __pfx_device_add+0x10/0x10 [ 56.875963][ T6333] ? lockdep_init_map_type+0x5c/0x250 [ 56.875978][ T6333] ? __init_waitqueue_head+0xca/0x150 [ 56.875997][ T6333] tty_register_device_attr+0x388/0x7f0 [ 56.876017][ T6333] ? lockdep_init_map_type+0x5c/0x250 [ 56.876032][ T6333] ? __pfx_tty_register_device_attr+0x10/0x10 [ 56.876057][ T6333] ? tty_port_init+0x156/0x1c0 [ 56.876073][ T6333] gsm_activate_mux+0x155/0x2a0 [ 56.876088][ T6333] gsmld_ioctl+0xbbc/0x15c0 [ 56.876108][ T6333] ? __pfx_gsmld_ioctl+0x10/0x10 [ 56.876125][ T6333] ? __ldsem_down_read_nested+0xf3/0x890 [ 56.876144][ T6333] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 56.876164][ T6333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.876179][ T6333] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 56.876191][ T6333] ? __pfx_gsmld_ioctl+0x10/0x10 [ 56.876206][ T6333] tty_ioctl+0x11b4/0x1640 [ 56.876220][ T6333] ? __pfx_tty_ioctl+0x10/0x10 [ 56.876234][ T6333] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 56.876282][ T6333] ? __fget_files+0x215/0x3d0 [ 56.876298][ T6333] ? hook_file_ioctl_common+0x140/0x440 [ 56.876321][ T6333] ? selinux_file_ioctl+0x13b/0x290 [ 56.876338][ T6333] ? selinux_file_ioctl+0xb6/0x290 [ 56.876356][ T6333] ? __pfx_tty_ioctl+0x10/0x10 [ 56.876370][ T6333] __x64_sys_ioctl+0x18e/0x210 [ 56.876388][ T6333] do_syscall_64+0x115/0x870 [ 56.876400][ T6333] ? clear_bhb_loop+0x40/0x90 [ 56.876413][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.876425][ T6333] RIP: 0033:0x7fc11f59de99 [ 56.876436][ T6333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.876460][ T6333] RSP: 002b:00007fc120526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.876479][ T6333] RAX: ffffffffffffffda RBX: 00007fc11f826090 RCX: 00007fc11f59de99 [ 56.876486][ T6333] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000004 [ 56.876493][ T6333] RBP: 00007fc11f633eaf R08: 0000000000000000 R09: 0000000000000000 [ 56.876499][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.876505][ T6333] R13: 00007fc11f826128 R14: 00007fc11f826090 R15: 00007fffc77f2a18 [ 56.876519][ T6333] [ 56.876607][ T6333] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 56.999051][ T6343] program syz.0.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.047158][ T5842] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.056524][ T5842] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.068699][ T5785] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.167130][ T5740] Bluetooth: hci3: command tx timeout [ 57.380372][ T6377] lo speed is unknown, defaulting to 1000 [ 57.494192][ T6391] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 57.528937][ T6391] bond3: entered promiscuous mode [ 57.531102][ T6391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 57.535364][ T6396] netlink: 7 bytes leftover after parsing attributes in process `syz.2.141'. [ 57.540617][ T6396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6396 comm=syz.2.141 [ 57.546692][ T6396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6396 comm=syz.2.141 [ 57.553977][ T6396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6396 comm=syz.2.141 [ 57.561513][ T6391] ipvlan0: entered allmulticast mode [ 57.565736][ T6391] bond3: entered allmulticast mode [ 57.596146][ T6391] bond3: (slave bridge3): making interface the new active one [ 57.598734][ T6391] bridge3: entered promiscuous mode [ 57.600621][ T6391] bridge3: entered allmulticast mode [ 57.603560][ T6391] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 57.645673][ T6400] netlink: 344 bytes leftover after parsing attributes in process `syz.1.143'. [ 57.662434][ T6402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.144'. [ 57.700356][ T6406] sysfs: Unknown parameter '' [ 57.707178][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 57.741692][ T6411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=6411 comm=syz.0.148 [ 57.810729][ T6415] udc usbip-vudc.0: soft-connect without a gadget driver [ 57.859305][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 57.864453][ T10] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 57.868014][ T10] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 57.871427][ T10] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 57.875363][ T10] usb 8-1: config 250 has no interface number 0 [ 57.878083][ T10] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 57.882712][ T10] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 57.886835][ T10] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 57.891780][ T10] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 57.896040][ T10] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 57.901659][ T10] usb 8-1: config 250 interface 228 has no altsetting 0 [ 57.906012][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 57.910276][ T10] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 57.913463][ T10] usb 8-1: Product: syz [ 57.914823][ T10] usb 8-1: SerialNumber: syz [ 57.925775][ T10] hub 8-1:250.228: bad descriptor, ignoring hub [ 57.928169][ T10] hub 8-1:250.228: probe with driver hub failed with error -5 [ 58.379414][ T6431] syzkaller0: entered promiscuous mode [ 58.381290][ T6431] syzkaller0: entered allmulticast mode [ 58.389028][ T6431] netlink: 'syz.1.153': attribute type 10 has an invalid length. [ 58.438662][ T34] cfg80211: failed to load regulatory.db [ 58.519974][ T6438] netlink: 'syz.2.155': attribute type 1 has an invalid length. [ 58.522339][ T6438] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.155'. [ 58.609401][ T6449] tmpfs: Bad value for 'mpol' [ 58.713812][ T6456] FAULT_INJECTION: forcing a failure. [ 58.713812][ T6456] name failslab, interval 1, probability 0, space 0, times 0 [ 58.719177][ T6456] CPU: 2 UID: 0 PID: 6456 Comm: syz.0.161 Not tainted syzkaller #0 PREEMPT(full) [ 58.719200][ T6456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.719210][ T6456] Call Trace: [ 58.719216][ T6456] [ 58.719224][ T6456] dump_stack_lvl+0x100/0x190 [ 58.719269][ T6456] should_fail_ex.cold+0x5/0xa [ 58.719291][ T6456] should_failslab+0xc2/0x120 [ 58.719312][ T6456] __kvmalloc_node_noprof+0x116/0x970 [ 58.719335][ T6456] ? seq_read_iter+0x819/0x1270 [ 58.719368][ T6456] seq_read_iter+0x819/0x1270 [ 58.719393][ T6456] kernfs_fop_read_iter+0x46c/0x610 [ 58.719422][ T6456] ? rw_verify_area+0xce/0x6d0 [ 58.719443][ T6456] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 58.719465][ T6456] vfs_read+0x82e/0xb40 [ 58.719493][ T6456] ? __pfx_vfs_read+0x10/0x10 [ 58.719542][ T6456] ? find_held_lock+0x2b/0x80 [ 58.719585][ T6456] __x64_sys_pread64+0x1eb/0x250 [ 58.719604][ T6456] ? __pfx___x64_sys_pread64+0x10/0x10 [ 58.719628][ T6456] do_syscall_64+0x115/0x870 [ 58.719654][ T6456] ? clear_bhb_loop+0x40/0x90 [ 58.719676][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.719695][ T6456] RIP: 0033:0x7fd99c79de99 [ 58.719721][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.719737][ T6456] RSP: 002b:00007fd99d667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 58.719765][ T6456] RAX: ffffffffffffffda RBX: 00007fd99ca25fa0 RCX: 00007fd99c79de99 [ 58.719777][ T6456] RDX: 0000000000000006 RSI: 00002000000023c0 RDI: 0000000000000003 [ 58.719788][ T6456] RBP: 00007fd99d667090 R08: 0000000000000000 R09: 0000000000000000 [ 58.719798][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.719808][ T6456] R13: 00007fd99ca26038 R14: 00007fd99ca25fa0 R15: 00007ffd54bf8a88 [ 58.719832][ T6456] [ 58.884081][ T6463] udc usbip-vudc.0: soft-connect without a gadget driver [ 58.931847][ T6470] misc userio: The device must be registered before sending interrupts [ 59.025052][ T6476] random: crng reseeded on system resumption [ 59.152162][ T6481] netlink: 68 bytes leftover after parsing attributes in process `syz.0.168'. [ 59.325721][ T6484] vcan1: entered allmulticast mode [ 59.379460][ T6488] netlink: 92 bytes leftover after parsing attributes in process `syz.0.171'. [ 59.418490][ T6490] FAULT_INJECTION: forcing a failure. [ 59.418490][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.425337][ T6490] CPU: 1 UID: 0 PID: 6490 Comm: syz.2.172 Not tainted syzkaller #0 PREEMPT(full) [ 59.425359][ T6490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.425367][ T6490] Call Trace: [ 59.425373][ T6490] [ 59.425378][ T6490] dump_stack_lvl+0x100/0x190 [ 59.425406][ T6490] should_fail_ex.cold+0x5/0xa [ 59.425429][ T6490] _copy_to_iter+0x1f3/0x1720 [ 59.425469][ T6490] ? __mutex_unlock_slowpath+0x35d/0x930 [ 59.425492][ T6490] ? __pfx__copy_to_iter+0x10/0x10 [ 59.425512][ T6490] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 59.425532][ T6490] ? kernfs_put_active+0x93/0xe0 [ 59.425551][ T6490] seq_read_iter+0xdab/0x1270 [ 59.425574][ T6490] kernfs_fop_read_iter+0x46c/0x610 [ 59.425594][ T6490] ? rw_verify_area+0xce/0x6d0 [ 59.425613][ T6490] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 59.425637][ T6490] vfs_read+0x82e/0xb40 [ 59.425667][ T6490] ? __pfx_vfs_read+0x10/0x10 [ 59.425691][ T6490] ? find_held_lock+0x2b/0x80 [ 59.425739][ T6490] __x64_sys_pread64+0x1eb/0x250 [ 59.425756][ T6490] ? __pfx___x64_sys_pread64+0x10/0x10 [ 59.425780][ T6490] do_syscall_64+0x115/0x870 [ 59.425798][ T6490] ? clear_bhb_loop+0x40/0x90 [ 59.425820][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.425837][ T6490] RIP: 0033:0x7fe44d59de99 [ 59.425850][ T6490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.425862][ T6490] RSP: 002b:00007fe44e4ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 59.425877][ T6490] RAX: ffffffffffffffda RBX: 00007fe44d825fa0 RCX: 00007fe44d59de99 [ 59.425888][ T6490] RDX: 0000000000000006 RSI: 00002000000023c0 RDI: 0000000000000003 [ 59.425898][ T6490] RBP: 00007fe44e4ea090 R08: 0000000000000000 R09: 0000000000000000 [ 59.425908][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.425918][ T6490] R13: 00007fe44d826038 R14: 00007fe44d825fa0 R15: 00007ffd08caa6e8 [ 59.425942][ T6490] [ 59.516483][ T6495] netlink: 'syz.0.174': attribute type 21 has an invalid length. [ 59.540233][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 59.570287][ T6501] UDC core: g1: couldn't find an available UDC or it's busy [ 59.584521][ T6495] bond1: option downdelay: invalid value (18446744073709551615) [ 59.588095][ T6495] bond1: option downdelay: allowed values 0 - 2147483647 [ 59.593521][ T6495] bond1 (unregistering): Released all slaves [ 59.736743][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.742105][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.756804][ T6512] anx7411 0-0002: unable to get SPI slave [ 59.759288][ T6512] anx7411 0-0002: fail to reserve I2C bus [ 59.762178][ T6512] anx7411 0-0002: probe with driver anx7411 failed with error -12 [ 59.766362][ T6512] i2c i2c-0: new_device: Instantiated device anx7411 at 0x02 [ 59.875370][ T6521] block device autoloading is deprecated and will be removed. [ 59.925204][ T6529] FAULT_INJECTION: forcing a failure. [ 59.925204][ T6529] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.930133][ T6529] CPU: 2 UID: 0 PID: 6529 Comm: syz.2.184 Not tainted syzkaller #0 PREEMPT(full) [ 59.930149][ T6529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.930155][ T6529] Call Trace: [ 59.930159][ T6529] [ 59.930164][ T6529] dump_stack_lvl+0x100/0x190 [ 59.930183][ T6529] should_fail_ex.cold+0x5/0xa [ 59.930195][ T6529] ? prepare_alloc_pages+0x16d/0x5f0 [ 59.930212][ T6529] should_fail_alloc_page+0xeb/0x140 [ 59.930228][ T6529] prepare_alloc_pages+0x1f0/0x5f0 [ 59.930246][ T6529] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 59.930260][ T6529] ? is_bpf_text_address+0x8a/0x1a0 [ 59.930276][ T6529] ? bpf_ksym_find+0x128/0x1c0 [ 59.930293][ T6529] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 59.930307][ T6529] ? is_bpf_text_address+0x94/0x1a0 [ 59.930327][ T6529] ? kernel_text_address+0x8d/0x100 [ 59.930340][ T6529] ? __kernel_text_address+0xd/0x30 [ 59.930353][ T6529] ? unwind_get_return_address+0x59/0xa0 [ 59.930365][ T6529] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 59.930379][ T6529] ? __lock_acquire+0x49f/0x1a40 [ 59.930394][ T6529] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 59.930427][ T6529] ? register_lock_class+0x40/0x560 [ 59.930440][ T6529] ? find_held_lock+0x2b/0x80 [ 59.930457][ T6529] ? ima_match_policy+0x8b8/0x2340 [ 59.930472][ T6529] ? ima_match_policy+0x8b8/0x2340 [ 59.930487][ T6529] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.930502][ T6529] ? policy_nodemask+0xed/0x4f0 [ 59.930518][ T6529] alloc_pages_mpol+0x1fb/0x540 [ 59.930535][ T6529] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 59.930554][ T6529] folio_alloc_mpol_noprof+0x36/0x260 [ 59.930573][ T6529] vma_alloc_folio_noprof+0xed/0x1d0 [ 59.930590][ T6529] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 59.930612][ T6529] do_anonymous_page+0xb2b/0x2080 [ 59.930631][ T6529] ? rcu_read_unlock+0x2d/0xb0 [ 59.930645][ T6529] __handle_mm_fault+0x1d2c/0x2a00 [ 59.930665][ T6529] ? mt_find+0x45e/0x8e0 [ 59.930684][ T6529] ? __pfx___handle_mm_fault+0x10/0x10 [ 59.930707][ T6529] ? __pfx_mt_find+0x10/0x10 [ 59.930740][ T6529] ? find_vma+0xbf/0x140 [ 59.930759][ T6529] ? __pfx_find_vma+0x10/0x10 [ 59.930784][ T6529] handle_mm_fault+0x37b/0xa30 [ 59.930815][ T6529] do_user_addr_fault+0x74c/0x12f0 [ 59.930841][ T6529] exc_page_fault+0x6f/0xd0 [ 59.930854][ T6529] asm_exc_page_fault+0x26/0x30 [ 59.930865][ T6529] RIP: 0010:_copy_to_iter+0x38c/0x1720 [ 59.930880][ T6529] Code: 00 00 00 00 e9 4d ff ff ff e8 90 8f ee fc 4c 8b 74 24 18 44 89 fe 4c 89 f7 e8 b0 1d 5f fd 0f 01 cb 4c 89 f9 48 89 df 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 4c 89 f8 48 29 c8 48 89 44 24 08 [ 59.930891][ T6529] RSP: 0018:ffffc9000df67ae8 EFLAGS: 00050246 [ 59.930901][ T6529] RAX: 0000000000000001 RBX: 00002000000023c0 RCX: 0000000000000002 [ 59.930908][ T6529] RDX: 0000000000000001 RSI: ffff8880585d4000 RDI: 00002000000023c0 [ 59.930914][ T6529] RBP: ffffc9000df67d78 R08: 0000000000000000 R09: ffffed100b0ba800 [ 59.930921][ T6529] R10: ffff8880585d4001 R11: 0000000000000000 R12: 00002000000023c2 [ 59.930927][ T6529] R13: 00007ffffffff000 R14: ffff8880585d4000 R15: 0000000000000002 [ 59.930940][ T6529] ? _copy_to_iter+0x380/0x1720 [ 59.930956][ T6529] ? __mutex_unlock_slowpath+0x35d/0x930 [ 59.930970][ T6529] ? __pfx__copy_to_iter+0x10/0x10 [ 59.930985][ T6529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 59.931000][ T6529] ? kernfs_put_active+0x93/0xe0 [ 59.931015][ T6529] seq_read_iter+0xdab/0x1270 [ 59.931032][ T6529] kernfs_fop_read_iter+0x46c/0x610 [ 59.931048][ T6529] ? rw_verify_area+0xce/0x6d0 [ 59.931064][ T6529] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 59.931080][ T6529] vfs_read+0x82e/0xb40 [ 59.931099][ T6529] ? __pfx_vfs_read+0x10/0x10 [ 59.931115][ T6529] ? find_held_lock+0x2b/0x80 [ 59.931140][ T6529] __x64_sys_pread64+0x1eb/0x250 [ 59.931151][ T6529] ? __pfx___x64_sys_pread64+0x10/0x10 [ 59.931166][ T6529] do_syscall_64+0x115/0x870 [ 59.931178][ T6529] ? clear_bhb_loop+0x40/0x90 [ 59.931191][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.931202][ T6529] RIP: 0033:0x7fe44d59de99 [ 59.931213][ T6529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.931222][ T6529] RSP: 002b:00007fe44e4ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 59.931232][ T6529] RAX: ffffffffffffffda RBX: 00007fe44d825fa0 RCX: 00007fe44d59de99 [ 59.931238][ T6529] RDX: 0000000000000006 RSI: 00002000000023c0 RDI: 0000000000000003 [ 59.931244][ T6529] RBP: 00007fe44e4ea090 R08: 0000000000000000 R09: 0000000000000000 [ 59.931250][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.931256][ T6529] R13: 00007fe44d826038 R14: 00007fe44d825fa0 R15: 00007ffd08caa6e8 [ 59.931270][ T6529] [ 59.939656][ T6523] udc usbip-vudc.0: soft-connect without a gadget driver [ 60.143515][ T6532] overlay: ./file1 is not a directory [ 60.423670][ T6546] befs: (sr0): invalid magic header [ 60.480864][ T6553] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 60.483680][ T6553] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 60.486630][ T6553] vhci_hcd vhci_hcd.0: Device attached [ 60.489599][ T6554] usbip_core: unknown command [ 60.491307][ T6554] vhci_hcd: unknown pdu 0 [ 60.492834][ T6554] usbip_core: unknown command [ 60.496810][ T5842] vhci_hcd vhci_hcd.3: stop threads [ 60.500733][ T5842] vhci_hcd vhci_hcd.3: release socket [ 60.503223][ T5842] vhci_hcd vhci_hcd.3: disconnect device [ 60.567665][ T848] usb 8-1: USB disconnect, device number 5 [ 60.667166][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.797143][ T29] usb 7-1: device descriptor read/64, error -71 [ 60.908842][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.913040][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.930079][ T6577] ufs: You didn't specify the type of your ufs filesystem [ 60.930079][ T6577] [ 60.930079][ T6577] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 60.930079][ T6577] [ 60.930079][ T6577] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 60.941614][ T6577] ufs: failed to set blocksize [ 61.037200][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 61.167397][ T29] usb 7-1: device descriptor read/64, error -71 [ 61.249798][ T42] kauditd_printk_skb: 96 callbacks suppressed [ 61.249816][ T42] audit: type=1400 audit(1785279547.487:505): avc: denied { bind } for pid=6592 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.277712][ T29] usb usb7-port1: attempt power cycle [ 61.420347][ T42] audit: type=1400 audit(1785279547.657:506): avc: denied { create } for pid=6604 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.488637][ T42] audit: type=1400 audit(1785279547.727:507): avc: denied { bind } for pid=6604 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.518629][ T6610] __nla_validate_parse: 2 callbacks suppressed [ 61.518642][ T6610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.213'. [ 61.611027][ T6613] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 61.617123][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 61.617217][ T6613] bond1 (unregistering): Released all slaves [ 61.640237][ T29] usb 7-1: device descriptor read/8, error -71 [ 61.804024][ T6629] i2c i2c-0: delete_device: Can't parse I2C address [ 61.810265][ T6629] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 61.811854][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.817560][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.869437][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.874558][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.878748][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 61.897525][ T29] usb 7-1: device descriptor read/8, error -71 [ 61.968569][ T6618] erspan1: entered allmulticast mode [ 61.999337][ T6641] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 62.006413][ T5842] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.009189][ T29] usb usb7-port1: unable to enumerate USB device [ 62.012340][ T42] audit: type=1400 audit(1785279548.247:508): avc: denied { mount } for pid=6643 comm="syz.3.220" name="/" dev="overlay" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.015059][ T5842] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.018520][ T6645] overlayfs: failed lookup in lower (newroot/31, name='file1', err=-40): overlapping layers [ 62.018637][ T6644] overlayfs: failed lookup in lower (newroot/31, name='bus', err=-40): overlapping layers [ 62.019329][ T6644] overlayfs: failed lookup in lower (newroot/31, name='bus', err=-40): overlapping layers [ 62.020683][ T6645] overlayfs: failed lookup in lower (newroot/31, name='bus', err=-40): overlapping layers [ 62.023208][ T5842] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.043818][ T5842] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.053659][ T42] audit: type=1400 audit(1785279548.287:509): avc: denied { read } for pid=6648 comm="syz.1.221" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.061140][ T42] audit: type=1400 audit(1785279548.287:510): avc: denied { open } for pid=6648 comm="syz.1.221" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.071447][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.221'. [ 62.074380][ T42] audit: type=1400 audit(1785279548.307:511): avc: denied { ioctl } for pid=6648 comm="syz.1.221" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.088080][ T6653] netlink: 168 bytes leftover after parsing attributes in process `syz.3.222'. [ 62.092378][ T6653] hsr0: entered promiscuous mode [ 62.095074][ T6654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52766 sclass=netlink_route_socket pid=6654 comm=syz.3.222 [ 62.099608][ T6653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52766 sclass=netlink_route_socket pid=6653 comm=syz.3.222 [ 62.108336][ T6652] hsr0: left promiscuous mode [ 62.200032][ T42] audit: type=1400 audit(1785279548.437:512): avc: denied { connect } for pid=6662 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.208198][ T5738] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 62.208440][ T42] audit: type=1400 audit(1785279548.437:513): avc: denied { write } for pid=6662 comm="syz.3.226" lport=8460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.220354][ T42] audit: type=1326 audit(1785279548.457:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.0.225" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd99c79de99 code=0x0 [ 62.312408][ T6669] lo speed is unknown, defaulting to 1000 [ 62.347107][ T5738] usb 7-1: device descriptor read/64, error -71 [ 62.467170][ T55] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 62.597164][ T5738] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 62.628971][ T55] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 62.631582][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 62.634953][ T55] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.638887][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 62.642596][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 62.648672][ T55] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 62.651393][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 62.655071][ T55] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.660247][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 62.663858][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 62.668557][ T55] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 62.670909][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 62.674756][ T55] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.678725][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 62.682529][ T55] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 62.688789][ T55] usb 8-1: string descriptor 0 read error: -22 [ 62.690863][ T55] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 62.693724][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.705800][ T55] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 62.738146][ T5738] usb 7-1: device descriptor read/64, error -71 [ 62.847814][ T5738] usb usb7-port1: attempt power cycle [ 62.906109][ T56] usb 8-1: USB disconnect, device number 6 [ 62.948926][ T6687] No source specified [ 62.964838][ T6689] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 62.998717][ T6689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.999661][ T6692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6692 comm=syz.3.234 [ 63.018994][ T6689] bond1: (slave geneve2): making interface the new active one [ 63.023785][ T6689] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 63.121069][ T6694] "syz.0.235" (6694) uses obsolete ecb(arc4) skcipher [ 63.123042][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 63.187107][ T5738] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 63.207763][ T5738] usb 7-1: device descriptor read/8, error -71 [ 63.447875][ T5738] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 63.657091][ T5738] usb 7-1: device not accepting address 10, error -71 [ 63.659669][ T5738] usb usb7-port1: unable to enumerate USB device [ 63.744735][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.750683][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.755404][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.760697][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.766066][ T6714] bad cache= option: looseb0/queue/rotational [ 63.766066][ T6714] [ 63.769348][ T6714] CIFS: VFS: bad cache= option: looseb0/queue/rotational [ 63.772787][ T6714] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.240'. [ 63.851000][ T6716] input: syz1 as /devices/virtual/input/input9 [ 63.873020][ T6716] ehci-pci 0000:00:1d.7: remove, state 1 [ 63.878498][ T6716] usb usb1: USB disconnect, device number 1 [ 63.881764][ T6716] usb 1-1: USB disconnect, device number 2 [ 63.977315][ T6716] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 64.042598][ T6719] uhci_hcd 0000:00:1d.0: remove, state 1 [ 64.107264][ T848] hub 2-0:1.0: activate --> -108 [ 64.116918][ T6719] usb usb2: USB disconnect, device number 1 [ 64.148453][ T6719] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 64.284609][ T6722] Bluetooth: MGMT ver 1.23 [ 64.699580][ T6734] tmpfs: Cannot change global quota limit on remount [ 64.739544][ T6738] mmap: syz.0.248 (6738) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.074503][ T6757] size and base must be multiples of 4 kiB [ 65.076471][ T6757] CPU: 0 UID: 0 PID: 6757 Comm: syz.0.254 Not tainted syzkaller #0 PREEMPT(full) [ 65.076486][ T6757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.076493][ T6757] Call Trace: [ 65.076498][ T6757] [ 65.076503][ T6757] dump_stack_lvl+0x100/0x190 [ 65.076522][ T6757] mtrr_del.cold+0x72/0x85 [ 65.076534][ T6757] mtrr_ioctl+0xbc8/0xcf0 [ 65.076551][ T6757] ? __pfx_mtrr_ioctl+0x10/0x10 [ 65.076577][ T6757] ? __pfx_mtrr_ioctl+0x10/0x10 [ 65.076593][ T6757] proc_reg_unlocked_ioctl+0x229/0x320 [ 65.076608][ T6757] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 65.076623][ T6757] __x64_sys_ioctl+0x18e/0x210 [ 65.076641][ T6757] do_syscall_64+0x115/0x870 [ 65.076653][ T6757] ? clear_bhb_loop+0x40/0x90 [ 65.076680][ T6757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.076695][ T6757] RIP: 0033:0x7fd99c79de99 [ 65.076706][ T6757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.076719][ T6757] RSP: 002b:00007fd99d667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.076730][ T6757] RAX: ffffffffffffffda RBX: 00007fd99ca25fa0 RCX: 00007fd99c79de99 [ 65.076737][ T6757] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000004 [ 65.076744][ T6757] RBP: 00007fd99c833eaf R08: 0000000000000000 R09: 0000000000000000 [ 65.076750][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.076757][ T6757] R13: 00007fd99ca26038 R14: 00007fd99ca25fa0 R15: 00007ffd54bf8a88 [ 65.076771][ T6757] [ 65.089104][ T5821] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 65.249548][ T6763] evm: overlay not supported [ 65.322473][ T5821] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 65.332587][ T5821] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 65.336313][ T5821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 65.344335][ T5821] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 65.348448][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 65.351649][ T5821] usb 6-1: Product: syz [ 65.352045][ T6770] 9p: Bad value for 'rfdno' [ 65.353232][ T5821] usb 6-1: Manufacturer: syz [ 65.356496][ T5821] usb 6-1: SerialNumber: syz [ 65.367530][ T5821] usb 6-1: config 0 descriptor?? [ 65.371149][ T5821] hub 6-1:0.0: bad descriptor, ignoring hub [ 65.373151][ T5821] hub 6-1:0.0: probe with driver hub failed with error -5 [ 65.381730][ T5821] usb 6-1: selecting invalid altsetting 0 [ 65.499720][ T6778] lo speed is unknown, defaulting to 1000 [ 65.506482][ T6777] lo speed is unknown, defaulting to 1000 [ 65.697329][ T5821] usb 6-1: USB disconnect, device number 6 [ 65.977556][ T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 66.137121][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 66.149029][ T56] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 66.157752][ T56] usb 8-1: config 179 has no interface number 0 [ 66.159774][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 66.166082][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 66.169895][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 66.173515][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 66.177307][ T56] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 66.182401][ T56] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 66.186087][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.192690][ T6777] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.216634][ T6785] netlink: 'syz.1.263': attribute type 4 has an invalid length. [ 66.263877][ T848] lo speed is unknown, defaulting to 1000 [ 66.265837][ T848] syz0: Port: 1 Link DOWN [ 66.419660][ T56] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input10 [ 66.514462][ T6802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=6802 comm=syz.1.267 [ 66.603757][ T848] usb 8-1: USB disconnect, device number 7 [ 66.603886][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 66.609155][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 66.638072][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 66.638090][ T42] audit: type=1400 audit(1785279552.867:549): avc: denied { create } for pid=6806 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.663099][ T42] audit: type=1400 audit(1785279552.877:550): avc: denied { setopt } for pid=6806 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.678725][ T42] audit: type=1400 audit(1785279552.877:551): avc: denied { write } for pid=6806 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.131365][ T6823] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.301370][ T6823] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.314734][ T6829] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 67.366306][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.370676][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.373877][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.378418][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.382576][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.385874][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.389703][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.392598][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.444281][ T6823] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.481720][ T42] audit: type=1400 audit(1785279553.717:552): avc: denied { getopt } for pid=6839 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.538020][ T6823] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.546154][ T42] audit: type=1400 audit(1785279553.777:553): avc: denied { listen } for pid=6841 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.554454][ T6842] netlink: 376 bytes leftover after parsing attributes in process `syz.1.281'. [ 67.559364][ T6842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.281'. [ 67.564463][ T42] audit: type=1400 audit(1785279553.797:554): avc: denied { accept } for pid=6841 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.612767][ T5785] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.628206][ T5785] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.638960][ T5842] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.646575][ T5842] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.655198][ T6822] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.706883][ T6822] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.873127][ T6822] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.928475][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 67.931404][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 67.934340][ T6845] netlink: 'syz.3.282': attribute type 12 has an invalid length. [ 67.935341][ T6822] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.946590][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 67.949716][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 67.952624][ T6845] netlink: 'syz.3.282': attribute type 12 has an invalid length. [ 67.982360][ T42] audit: type=1400 audit(1785279554.217:555): avc: denied { read write } for pid=6846 comm="syz.3.283" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 67.990963][ T42] audit: type=1400 audit(1785279554.217:556): avc: denied { open } for pid=6846 comm="syz.3.283" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 68.019534][ T42] audit: type=1400 audit(1785279554.257:557): avc: denied { write } for pid=6848 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.026337][ T6849] binder: 6848:6849 ioctl c0306201 200000000080 returned -14 [ 68.031789][ T6849] binder: 6848:6849 ioctl c0306201 2000000003c0 returned -14 [ 68.034699][ T42] audit: type=1400 audit(1785279554.267:558): avc: denied { transfer } for pid=6848 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 68.035396][ T6849] binder: 6848:6849 ioctl c00c642e 2000000002c0 returned -22 [ 68.062928][ T6849] bond1: entered promiscuous mode [ 68.064868][ T6849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.309014][ T6866] hfs: unable to load iocharset "io#harset" [ 68.376394][ T5740] Bluetooth: hci2: Dropping invalid advertising data [ 68.379650][ T5740] Bluetooth: hci2: Malformed LE Event: 0x02 [ 68.511238][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 68.514003][ T6874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.293'. [ 68.552004][ T6876] program syz.2.294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.779750][ T6886] netlink: 'syz.2.298': attribute type 3 has an invalid length. [ 68.855095][ T6890] input: syz0 as /devices/virtual/input/input11 [ 68.914823][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 68.917126][ T848] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 69.057197][ T848] usb 6-1: device descriptor read/64, error -71 [ 69.318809][ T848] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 69.447116][ T848] usb 6-1: device descriptor read/64, error -71 [ 69.567585][ T848] usb usb6-port1: attempt power cycle [ 69.917104][ T848] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 69.934976][ T6919] 9pnet_virtio: no channels available for device syz [ 69.947899][ T848] usb 6-1: device descriptor read/8, error -71 [ 70.187108][ T848] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 70.217769][ T848] usb 6-1: device descriptor read/8, error -71 [ 70.278487][ T6923] e1000e 0000:00:02.0 eth1: removed PHC [ 70.337380][ T848] usb usb6-port1: unable to enumerate USB device [ 70.350780][ T6926] kvm: user requested TSC rate below hardware speed [ 70.360020][ T6926] kvm: user requested TSC rate below hardware speed [ 70.393556][ T6923] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 70.521801][ T6945] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.651323][ T6926] usb_phy_generic usb_phy_generic.2.auto: dummy supplies not allowed for exclusive requests (id=vbus) [ 70.681987][ T6926] dwc2 dwc2.3.auto: supply vusb_d not found, using dummy regulator [ 70.701261][ T6926] dwc2 dwc2.3.auto: supply vusb_a not found, using dummy regulator [ 70.706457][ T6926] dwc2 dwc2.3.auto: Configuration mismatch. dr_mode forced to host [ 70.710382][ T6926] dwc2 dwc2.3.auto: Bad value for GSNPSID: 0x52540012 [ 70.843528][ T6975] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.043963][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'. [ 71.055908][ T6993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.061642][ T6993] netlink: 'syz.3.323': attribute type 12 has an invalid length. [ 71.107049][ T5785] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.130020][ T5785] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.185043][ T6999] lo speed is unknown, defaulting to 1000 [ 71.185076][ T5785] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.192517][ T5785] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.410591][ T55] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 71.471728][ T7019] ================================================================== [ 71.474921][ T7019] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 71.478088][ T7019] Read of size 8 at addr ffff88805bbb6a38 by task syz.0.327/7019 [ 71.482223][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.482867][ T7019] [ 71.482899][ T7019] CPU: 2 UID: 0 PID: 7019 Comm: syz.0.327 Not tainted syzkaller #0 PREEMPT(full) [ 71.482916][ T7019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.482925][ T7019] Call Trace: [ 71.482931][ T7019] [ 71.482937][ T7019] dump_stack_lvl+0x100/0x190 [ 71.482959][ T7019] print_report+0x13d/0x4b0 [ 71.482979][ T7019] ? __virt_addr_valid+0x239/0x430 [ 71.482998][ T7019] ? __release_resource+0x276/0x2c0 [ 71.483017][ T7019] kasan_report+0xdf/0x1c0 [ 71.483035][ T7019] ? __release_resource+0x276/0x2c0 [ 71.483060][ T7019] __release_resource+0x276/0x2c0 [ 71.483086][ T7019] release_resource+0x26/0x40 [ 71.483110][ T7019] pci_remove_bus_device+0x2d3/0x3b0 [ 71.483143][ T7019] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 71.483161][ T7019] remove_store+0x123/0x140 [ 71.483179][ T7019] ? __pfx_remove_store+0x10/0x10 [ 71.483195][ T7019] ? find_held_lock+0x2b/0x80 [ 71.483218][ T7019] ? sysfs_file_kobj+0xe4/0x290 [ 71.483254][ T7019] ? sysfs_file_kobj+0xe4/0x290 [ 71.483274][ T7019] ? __pfx_remove_store+0x10/0x10 [ 71.483290][ T7019] dev_attr_store+0x58/0x80 [ 71.483317][ T7019] ? __pfx_dev_attr_store+0x10/0x10 [ 71.483335][ T7019] sysfs_kf_write+0xf2/0x150 [ 71.483355][ T7019] kernfs_fop_write_iter+0x3e0/0x5f0 [ 71.483376][ T7019] ? __pfx_sysfs_kf_write+0x10/0x10 [ 71.483402][ T7019] vfs_write+0x6ac/0x1050 [ 71.483430][ T7019] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 71.483478][ T7019] ? __pfx_vfs_write+0x10/0x10 [ 71.483508][ T7019] ksys_write+0x12a/0x250 [ 71.483529][ T7019] ? __pfx_ksys_write+0x10/0x10 [ 71.483552][ T7019] do_syscall_64+0x115/0x870 [ 71.483579][ T7019] ? clear_bhb_loop+0x40/0x90 [ 71.483598][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.483612][ T7019] RIP: 0033:0x7fd99c79de99 [ 71.483629][ T7019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.483646][ T7019] RSP: 002b:00007fd99d667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.483675][ T7019] RAX: ffffffffffffffda RBX: 00007fd99ca25fa0 RCX: 00007fd99c79de99 [ 71.483688][ T7019] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 71.483698][ T7019] RBP: 00007fd99c833eaf R08: 0000000000000000 R09: 0000000000000000 [ 71.483708][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.483716][ T7019] R13: 00007fd99ca26038 R14: 00007fd99ca25fa0 R15: 00007ffd54bf8a88 [ 71.483733][ T7019] [ 71.483741][ T7019] [ 71.485660][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.486585][ T7019] Allocated by task 6926: [ 71.587420][ T7019] kasan_save_stack+0x30/0x50 [ 71.589322][ T7019] kasan_save_track+0x14/0x30 [ 71.591100][ T7019] __kasan_kmalloc+0xaa/0xb0 [ 71.592845][ T7019] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 71.595190][ T7019] kmemdup_noprof+0x29/0x60 [ 71.596968][ T7019] platform_device_add_resources+0x37/0x100 [ 71.599304][ T7019] dwc2_pci_probe+0x1d3/0x360 [ 71.601163][ T7019] local_pci_probe+0xdd/0x1b0 [ 71.602924][ T7019] pci_call_probe+0x176/0x800 [ 71.604740][ T7019] pci_device_probe+0x1cd/0x370 [ 71.606656][ T7019] really_probe+0x241/0xa60 [ 71.608483][ T7019] __driver_probe_device+0x20e/0x450 [ 71.610563][ T7019] device_driver_attach+0xd1/0x220 [ 71.612582][ T7019] bind_store+0xf4/0x190 [ 71.614252][ T7019] drv_attr_store+0x74/0xb0 [ 71.616085][ T7019] sysfs_kf_write+0xf2/0x150 [ 71.617919][ T7019] kernfs_fop_write_iter+0x3e0/0x5f0 [ 71.620085][ T7019] vfs_write+0x6ac/0x1050 [ 71.621795][ T7019] ksys_write+0x12a/0x250 [ 71.623512][ T7019] do_syscall_64+0x115/0x870 [ 71.625329][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.627638][ T7019] [ 71.628587][ T7019] Freed by task 7019: [ 71.630176][ T7019] kasan_save_stack+0x30/0x50 [ 71.632037][ T7019] kasan_save_track+0x14/0x30 [ 71.633904][ T7019] kasan_save_free_info+0x3b/0x70 [ 71.635881][ T7019] __kasan_slab_free+0x5f/0x80 [ 71.637788][ T7019] kfree+0x22b/0x6c0 [ 71.639374][ T7019] platform_device_release+0x8a/0xb0 [ 71.641447][ T7019] device_release+0xd2/0x270 [ 71.643276][ T7019] kobject_put+0x1f7/0x640 [ 71.645054][ T7019] put_device+0x1f/0x30 [ 71.646696][ T7019] platform_device_unregister+0x45/0x50 [ 71.648872][ T7019] dwc2_pci_remove+0x55/0xd0 [ 71.650731][ T7019] pci_device_remove+0xb2/0x1d0 [ 71.652660][ T7019] device_remove+0xcb/0x180 [ 71.654473][ T7019] device_release_driver_internal+0x44e/0x620 [ 71.656854][ T7019] pci_stop_bus_device+0x120/0x160 [ 71.658854][ T7019] pci_stop_and_remove_bus_device+0x58/0xa0 [ 71.661222][ T7019] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 71.663740][ T7019] remove_store+0x123/0x140 [ 71.665523][ T7019] dev_attr_store+0x58/0x80 [ 71.667324][ T7019] sysfs_kf_write+0xf2/0x150 [ 71.669151][ T7019] kernfs_fop_write_iter+0x3e0/0x5f0 [ 71.671251][ T7019] vfs_write+0x6ac/0x1050 [ 71.672963][ T7019] ksys_write+0x12a/0x250 [ 71.674675][ T7019] do_syscall_64+0x115/0x870 [ 71.676524][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.678901][ T7019] [ 71.679929][ T7019] The buggy address belongs to the object at ffff88805bbb6a00 [ 71.679929][ T7019] which belongs to the cache kmalloc-128 of size 128 [ 71.685333][ T7019] The buggy address is located 56 bytes inside of [ 71.685333][ T7019] freed 128-byte region [ffff88805bbb6a00, ffff88805bbb6a80) [ 71.690267][ T7019] [ 71.691237][ T7019] The buggy address belongs to the physical page: [ 71.693792][ T7019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805bbb6900 pfn:0x5bbb6 [ 71.697693][ T7019] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 71.700856][ T7019] page_type: f5(slab) [ 71.702445][ T7019] raw: 00fff00000000200 ffff88801bc42a00 ffffea0000b9c590 ffffea00016259d0 [ 71.705339][ T7019] raw: ffff88805bbb6900 000000080010000f 00000000f5000000 0000000000000000 [ 71.708589][ T7019] page dumped because: kasan: bad access detected [ 71.711148][ T7019] page_owner tracks the page as allocated [ 71.713048][ T7019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 52702376245, free_ts 52700013866 [ 71.720045][ T7019] post_alloc_hook+0xfd/0x120 [ 71.721864][ T7019] get_page_from_freelist+0xf48/0x3530 [ 71.724033][ T7019] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 71.725969][ T7019] new_slab+0xa2/0x640 [ 71.727426][ T7019] refill_objects+0xe3/0x410 [ 71.729317][ T7019] __pcs_replace_empty_main+0x376/0x680 [ 71.731371][ T7019] __kmalloc_noprof+0x66d/0x820 [ 71.732919][ T7019] lsm_blob_alloc+0x68/0x90 [ 71.734718][ T7019] security_task_alloc+0x2a/0x260 [ 71.736756][ T7019] copy_process+0x2b94/0x8030 [ 71.738405][ T7019] kernel_clone+0x176/0x9d0 [ 71.739908][ T7019] kernel_thread+0xdb/0x120 [ 71.741736][ T7019] kthreadd+0x498/0x7a0 [ 71.743409][ T7019] ret_from_fork+0x72b/0xd50 [ 71.745278][ T7019] ret_from_fork_asm+0x1a/0x30 [ 71.746799][ T7019] page last free pid 6061 tgid 6060 stack trace: [ 71.749119][ T7019] __free_frozen_pages+0x79f/0x1090 [ 71.751135][ T7019] inode_doinit_with_dentry+0x99d/0x1320 [ 71.752908][ T7019] selinux_d_instantiate+0x26/0x40 [ 71.754910][ T7019] security_d_instantiate+0x14c/0x1b0 [ 71.756966][ T7019] d_splice_alias_ops+0xd7/0x15c0 [ 71.758576][ T7019] kernfs_iop_lookup+0x23f/0x2d0 [ 71.760487][ T7019] path_openat+0x241f/0x4280 [ 71.762357][ T7019] do_file_open+0x20e/0x430 [ 71.764109][ T7019] do_sys_openat2+0x10f/0x1e0 [ 71.765977][ T7019] __x64_sys_openat+0x12d/0x210 [ 71.767928][ T7019] do_syscall_64+0x115/0x870 [ 71.769775][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.771689][ T7019] [ 71.772457][ T7019] Memory state around the buggy address: [ 71.774688][ T7019] ffff88805bbb6900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.777787][ T7019] ffff88805bbb6980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.780415][ T7019] >ffff88805bbb6a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.783531][ T7019] ^ [ 71.785671][ T7019] ffff88805bbb6a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.788410][ T7019] ffff88805bbb6b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.791571][ T7019] ================================================================== [ 71.794790][ T7019] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.797697][ T7019] CPU: 2 UID: 0 PID: 7019 Comm: syz.0.327 Not tainted syzkaller #0 PREEMPT(full) [ 71.800759][ T7019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.804650][ T7019] Call Trace: [ 71.805897][ T7019] [ 71.806843][ T7019] dump_stack_lvl+0x100/0x190 [ 71.808496][ T7019] vpanic+0x552/0x970 [ 71.810122][ T7019] ? __pfx_vpanic+0x10/0x10 [ 71.811954][ T7019] ? mark_held_locks+0x40/0x70 [ 71.813533][ T7019] ? irqentry_exit+0x24d/0xa00 [ 71.815165][ T7019] ? __release_resource+0x276/0x2c0 [ 71.817257][ T7019] panic+0xd1/0xe0 [ 71.818774][ T7019] ? __pfx_panic+0x10/0x10 [ 71.820368][ T7019] ? check_panic_on_warn+0x1f/0x90 [ 71.822037][ T7019] check_panic_on_warn.cold+0x19/0x34 [ 71.824186][ T7019] end_report.part.0+0x3a/0x90 [ 71.826089][ T7019] kasan_report.cold+0xe/0x18 [ 71.827636][ T7019] ? __release_resource+0x276/0x2c0 [ 71.829572][ T7019] __release_resource+0x276/0x2c0 [ 71.831618][ T7019] release_resource+0x26/0x40 [ 71.833409][ T7019] pci_remove_bus_device+0x2d3/0x3b0 [ 71.835067][ T7019] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 71.837590][ T7019] remove_store+0x123/0x140 [ 71.839459][ T7019] ? __pfx_remove_store+0x10/0x10 [ 71.841100][ T7019] ? find_held_lock+0x2b/0x80 [ 71.842764][ T7019] ? sysfs_file_kobj+0xe4/0x290 [ 71.844747][ T7019] ? sysfs_file_kobj+0xe4/0x290 [ 71.846638][ T7019] ? __pfx_remove_store+0x10/0x10 [ 71.848255][ T7019] dev_attr_store+0x58/0x80 [ 71.850011][ T7019] ? __pfx_dev_attr_store+0x10/0x10 [ 71.852099][ T7019] sysfs_kf_write+0xf2/0x150 [ 71.853783][ T7019] kernfs_fop_write_iter+0x3e0/0x5f0 [ 71.855513][ T7019] ? __pfx_sysfs_kf_write+0x10/0x10 [ 71.857601][ T7019] vfs_write+0x6ac/0x1050 [ 71.859379][ T7019] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 71.861525][ T7019] ? __pfx_vfs_write+0x10/0x10 [ 71.863048][ T7019] ksys_write+0x12a/0x250 [ 71.864804][ T7019] ? __pfx_ksys_write+0x10/0x10 [ 71.866773][ T7019] do_syscall_64+0x115/0x870 [ 71.868646][ T7019] ? clear_bhb_loop+0x40/0x90 [ 71.870161][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.872340][ T7019] RIP: 0033:0x7fd99c79de99 [ 71.874145][ T7019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.881085][ T7019] RSP: 002b:00007fd99d667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.884199][ T7019] RAX: ffffffffffffffda RBX: 00007fd99ca25fa0 RCX: 00007fd99c79de99 [ 71.886899][ T7019] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 71.890058][ T7019] RBP: 00007fd99c833eaf R08: 0000000000000000 R09: 0000000000000000 [ 71.892610][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.895620][ T7019] R13: 00007fd99ca26038 R14: 00007fd99ca25fa0 R15: 00007ffd54bf8a88 [ 71.898557][ T7019] [ 71.900344][ T7019] Kernel Offset: disabled [ 71.902073][ T7019] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:59:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff888057a41760 RCX=ffffffff81e64419 RDX=0000000000000001 RSI=0000000000000004 RDI=ffffc900000079b8 RBP=ffff888057a41768 RSP=ffffc90000007988 R8 =0000000000000001 R9 =ffffed100af482ec R10=ffff888057a41763 R11=0000000000000000 R12=1ffff92000000f33 R13=ffff888057a41770 R14=ffffc90000007c28 R15=ffff888057a43238 RIP=ffffffff827aeea0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555574e584e8 CR3=00000000511a7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73746e6576652e70 6177732e79726f6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc77f2f06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc77f2f06 00007fffc77f2f0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11f634492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11f6344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11f634636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc11f6344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=000000000000017c RCX=0000000000000008 RDX=ffffffff96726590 RSI=ffffc900006a05e0 RDI=ffffffff980ba1e8 RBP=0000000000000030 RSP=ffffc900006a0530 R8 =ffffffff966b84d0 R9 =0000000000000002 R10=ffffc900006a06d0 R11=0000000000000000 R12=ffffffff81e57ce0 R13=ffffc900006a05e0 R14=ffffffff81e58af0 R15=ffffffff980ba1e8 RIP=ffffffff81e57cef RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562b33a82da8 CR3=000000004f5cf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000002 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737570635f657669 7463656666652e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe43dad326 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe43dad326 00007ffe43dad32c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5348234492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53482344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5348234636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53482344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc90005697548 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b6fa22b R15=ffffffff85a38b00 RIP=ffffffff85a38b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd99d6676c0 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd99d603ff8 CR3=000000003c96c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fc02fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd54bf8f76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd54bf8f76 00007ffd54bf8f7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd99c834492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd99c8344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd99c834636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd99c8344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=000000000000002d RCX=ffffffff81e8b0ce RDX=ffff88802b060000 RSI=ffffffff81e8b0bc RDI=ffff88802b060000 RBP=0000000000000001 RSP=ffffc90006e0f578 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000dc1eb1 R13=0000000000000200 R14=ffff88802b062540 R15=ffffc90006e0f738 RIP=ffffffff81e8b0be RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd54bf7f00 CR3=000000005b24a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000002 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=00000000fffdffbf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561255fdc9c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d8c9f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d8c9f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732561268ec483 73732564478c1759 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 130c0dd0de87db34 7373737612562c95 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e32303a30303a 303030302f30303a 303030306963702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 607f7ea3adf4a847 0000561734ff69f6 0000000000000021 0000000000327075 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 000056121a335cdc 0000000000000000 0000000000000075 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a5f393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33515f4350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000